$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: eKRy4jCvwJLAYwwkxLtrdnSpKUU4W7rqh4/+pbVA7uc= Subject key identifier: 3E:D9:ED:CE:9A:D6:C4:41:41:FC:07:5D:A6:4E:05:DC:14:5A:C7:3B Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 055C Signing time: Sun 19 May 2024 00:48:59 +0000 Manifest this update: Sun 19 May 2024 00:48:59 +0000 Manifest next update: Sun 26 May 2024 00:48:59 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: YUFMx8n1soPuxbkX17oFWqlhTWnv1PaGQAoK2kZIqJ0=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: jL7K2qXUesFefhj101lXMUxYFQ6RdxwGwPai4xu50AQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: May 19 00:48:59 2024 GMT Not After : May 26 00:48:59 2024 GMT Subject: CN=66494c7b-4431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:1d:67:64:65:94:c3:6c:bd:62:12:06:64: 20:5c:4e:41:23:3b:66:7a:3c:23:fe:9c:31:0d:49: fe:56:0e:d7:1c:72:30:b8:b7:94:a3:13:dd:47:82: d7:0d:88:dc:6d:92:96:36:f5:c9:6c:41:61:17:51: 51:a9:55:ef:16:d8:ba:f7:26:34:33:2f:8e:c2:b2: 1f:05:0b:df:ed:7b:a1:0f:26:01:b3:d0:7e:c6:46: 09:f2:68:d0:3a:72:d1:e3:dd:3e:d7:04:81:78:48: 1b:d2:1f:bb:d8:45:d4:bd:af:e8:7e:a7:09:68:31: 6b:4d:c1:a5:26:87:5c:8b:64:30:d4:d2:ca:d8:c9: 99:94:2a:91:50:0d:53:b3:a1:ab:33:f4:aa:6b:e6: eb:89:b4:1b:a4:23:87:57:65:91:d7:1c:d0:54:84: 35:49:3f:74:a9:39:2d:c8:fa:16:b2:4e:8b:eb:80: 9c:e3:28:ac:b8:51:c9:bf:8b:ba:9c:35:9c:55:a9: 01:75:b1:69:7d:3b:3d:f2:d6:22:bb:8d:47:27:d1: c7:65:e6:dd:67:5d:0c:c9:7d:5a:2f:bb:78:19:09: b8:50:4d:47:90:6b:a8:ba:40:04:25:81:9c:ed:56: 3e:4f:fe:83:e8:5e:e7:5a:8a:03:84:96:9b:06:19: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:ED:CE:9A:D6:C4:41:41:FC:07:5D:A6:4E:05:DC:14:5A:C7:3B X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:19:75:d4:b4:04:10:d9:8a:f9:25:ef:2d:33:6d:f1:f8:9a: 38:91:09:ed:69:ac:05:e8:be:db:54:e7:68:d1:b4:42:52:2c: c4:4d:73:2f:00:0b:85:14:91:93:72:a4:1c:b8:fc:14:99:21: 78:0d:11:77:ec:da:05:6f:89:da:98:51:0c:28:e0:28:e5:65: bd:cf:fd:9b:7c:10:3c:a4:2f:6e:55:e0:c9:89:b9:f0:4d:16: 92:fb:bd:1c:bb:ac:f7:7d:9c:ff:e3:47:84:46:3a:67:ef:69: 95:8a:ca:9a:85:ea:2d:bc:b3:fc:fd:c1:f5:be:e4:21:eb:a2: c0:95:7d:70:c8:81:7a:26:71:0d:a8:1d:ba:ed:91:f2:b4:46: a4:ec:a6:ed:ac:7d:92:19:90:fc:ef:21:6b:7f:f8:e3:18:9a: f5:96:c0:1b:2a:fc:3e:de:dd:26:a7:d7:90:7e:bf:4d:80:83: bd:a0:90:5c:e2:ea:61:3f:72:f5:39:10:21:78:39:eb:09:79: 25:39:86:e3:a3:80:79:66:d1:c9:b8:49:b3:37:81:34:50:01: 8a:0e:8e:e4:f3:7f:97:36:6d:aa:2a:26:91:d5:e8:8a:3d:99: 4b:43:4c:5f:88:f4:4b:53:46:65:72:92:4b:99:cf:c0:ef:55: a8:ef:7b:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjQwNTE5MDA0ODU5WhcNMjQwNTI2MDA0ODU5WjAYMRYwFAYD VQQDEw02NjQ5NGM3Yi00NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8wdZ2RllMNsvWISBmQgXE5BIztmejwj/pwxDUn+Vg7XHHIwuLeUoxPdR4LX DYjcbZKWNvXJbEFhF1FRqVXvFti69yY0My+OwrIfBQvf7XuhDyYBs9B+xkYJ8mjQ OnLR490+1wSBeEgb0h+72EXUva/ofqcJaDFrTcGlJodci2Qw1NLK2MmZlCqRUA1T s6GrM/Sqa+bribQbpCOHV2WR1xzQVIQ1ST90qTktyPoWsk6L64Cc4yisuFHJv4u6 nDWcVakBdbFpfTs98tYiu41HJ9HHZebdZ10MyX1aL7t4GQm4UE1HkGuoukAEJYGc 7VY+T/6D6F7nWooDhJabBhlBUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7Z7c6a 1sRBQfwHXaZOBdwUWsc7MB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTGXXUtAQQ2Yr5Je8tM23x+Jo4kQntaawF6L7bVOdo0bRCUizETXMv AAuFFJGTcqQcuPwUmSF4DRF37NoFb4namFEMKOAo5WW9z/2bfBA8pC9uVeDJibnw TRaS+70cu6z3fZz/40eERjpn72mVisqaheotvLP8/cH1vuQh66LAlX1wyIF6JnEN qB267ZHytEak7KbtrH2SGZD87yFrf/jjGJr1lsAbKvw+3t0mp9eQfr9NgIO9oJBc 4uphP3L1ORAheDnrCXklOYbjo4B5ZtHJuEmzN4E0UAGKDo7k83+XNm2qKiaR1eiK PZlLQ0xfiPRLU0ZlcpJLmc/A71Wo73sR -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org