$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: QSEIYTX/UzZd+Iw57YtBN6NKF5OBpyeA+HWk4U8XaB0= Subject key identifier: EE:46:D7:B1:0D:ED:61:91:3C:38:D7:14:39:2C:A9:E6:1D:A4:4A:01 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0DA0 Signing time: Sat 18 May 2024 18:31:58 +0000 Manifest this update: Sat 18 May 2024 18:31:57 +0000 Manifest next update: Sat 25 May 2024 18:31:57 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: 1nDaUWo2HYGJvx087CyeAqf+GnCiMbUm/dGnO4e1m+I=) 2: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: YesHwJZCWFPfBbdSFgp9ld0nujs2PN6NAZJ4zB0nTXA=) 3: 0B4EDB88909511ED9E54B261C4F9AE02.roa (hash: 4emzRUgWsmixDjQld96dbj/Sp5QI5a2k3+noP5YSYhY=) 4: A2AEFF821C7611EDB39EDA39C4F9AE02.roa (hash: 6MJ8uUVRE2N2yND/odSCEhS/uzQVXd5eqk1j1PMQkOQ=) 5: 141F86F437EA11ECA7D1B309C4F9AE02.roa (hash: sqwRRmaJwuQFiN3xLvOQrdUvxWPfQqgc0sMkOZ08KEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: May 18 18:31:57 2024 GMT Not After : May 25 18:31:57 2024 GMT Subject: CN=6648f41e-4a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:f4:99:50:9e:65:37:40:0c:e4:25:cf:43: 08:54:0d:ed:e0:b0:01:2b:e1:08:c2:13:de:b1:0b: 91:9e:56:ba:5f:d0:52:99:f1:fe:bb:3c:2c:0b:d5: 7c:18:be:5f:39:b7:76:d2:8a:04:61:c2:4e:fc:a6: 8a:ef:a9:2d:3f:22:be:30:49:00:77:63:29:7c:b0: b9:ab:7e:dd:f1:f5:7d:d5:82:7b:f3:40:8d:a9:95: 60:aa:ee:31:16:24:78:9e:2d:dc:24:dc:2d:42:49: 26:60:9b:0d:aa:95:46:7a:10:18:2a:d5:75:c5:9a: 4a:5a:7b:69:d3:59:8b:43:6c:dd:b4:93:f6:f3:78: b5:e3:c6:b7:fc:97:d2:21:ba:ba:de:f8:7f:03:64: ba:44:9b:6d:d7:79:f2:9b:11:a0:ee:4b:3c:b5:aa: c3:88:5e:42:7b:41:cf:c0:9f:18:80:71:1b:9a:3a: 65:6d:bd:01:55:a2:d2:7b:38:53:f7:48:7e:a3:2b: 9e:09:1d:89:91:07:52:f2:78:8d:85:6f:28:e2:86: 1b:d8:66:62:26:07:d7:97:5e:71:94:19:90:a8:3e: 7f:79:3e:c0:80:e9:a0:ce:bf:3a:e8:4a:34:83:25: b3:0a:0f:c6:0e:13:aa:4c:72:91:dc:4c:ba:38:26: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:D7:B1:0D:ED:61:91:3C:38:D7:14:39:2C:A9:E6:1D:A4:4A:01 X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fb:d1:fa:93:97:c8:0c:05:a0:05:73:ad:13:4f:9e:4c:cd: 43:73:9c:5d:13:ec:80:98:da:e5:4b:6e:7b:78:2e:e4:3a:8d: 0e:29:fb:da:c6:16:d6:03:f2:53:a6:3d:87:a0:d0:91:b6:43: 28:b1:1b:e9:f2:52:66:02:f7:68:9f:54:b5:c7:c2:0b:4d:a3: c1:c3:65:49:9f:d6:99:36:28:9a:0b:48:ea:2e:21:a5:b5:f4: fa:84:59:c0:a8:96:60:98:3a:99:d9:2e:0c:1c:29:49:55:b2: 1e:05:1a:02:b5:0d:63:8e:00:a1:97:db:c6:58:8d:ff:ce:e6: d5:1f:2f:ee:ec:41:20:96:61:b7:6e:68:0e:d0:b0:c7:3c:cc: 03:00:78:9d:1e:2c:5e:1a:68:05:32:09:81:2c:bc:10:26:48: b5:ae:fb:a8:f4:16:89:30:b4:29:11:51:dd:fd:fa:d1:00:ee: 40:e0:8e:48:da:03:32:e1:fb:6d:bf:54:e9:8e:df:05:82:2b: 07:22:52:4c:ac:21:ba:97:a8:39:da:cd:50:47:d5:51:6c:52: 31:00:c2:09:92:a5:51:87:ec:3b:bb:7e:80:5f:ef:f1:ed:d5: 75:f2:1a:22:7a:85:d7:50:67:c2:35:ef:94:bb:4e:84:ea:5f: eb:b5:07:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjQwNTE4MTgzMTU3WhcNMjQwNTI1MTgzMTU3WjAYMRYwFAYD VQQDEw02NjQ4ZjQxZS00YTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumL0mVCeZTdADOQlz0MIVA3t4LABK+EIwhPesQuRnla6X9BSmfH+uzwsC9V8 GL5fObd20ooEYcJO/KaK76ktPyK+MEkAd2MpfLC5q37d8fV91YJ780CNqZVgqu4x FiR4ni3cJNwtQkkmYJsNqpVGehAYKtV1xZpKWntp01mLQ2zdtJP283i148a3/JfS Ibq63vh/A2S6RJtt13nymxGg7ks8tarDiF5Ce0HPwJ8YgHEbmjplbb0BVaLSezhT 90h+oyueCR2JkQdS8niNhW8o4oYb2GZiJgfXl15xlBmQqD5/eT7AgOmgzr866Eo0 gyWzCg/GDhOqTHKR3Ey6OCZhywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5G17EN 7WGRPDjXFDksqeYdpEoBMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4+9H6k5fIDAWgBXOtE0+eTM1Dc5xdE+yAmNrlS257eC7kOo0OKfva xhbWA/JTpj2HoNCRtkMosRvp8lJmAvdon1S1x8ILTaPBw2VJn9aZNiiaC0jqLiGl tfT6hFnAqJZgmDqZ2S4MHClJVbIeBRoCtQ1jjgChl9vGWI3/zubVHy/u7EEglmG3 bmgO0LDHPMwDAHidHixeGmgFMgmBLLwQJki1rvuo9BaJMLQpEVHd/frRAO5A4I5I 2gMy4fttv1Tpjt8FgisHIlJMrCG6l6g52s1QR9VRbFIxAMIJkqVRh+w7u36AX+/x 7dV18hoieoXXUGfCNe+Uu06E6l/rtQd9 -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org