$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json) Hash identifier: SHDX5t2bPhXqSP4WsQQHQoOyDhSHbVaJxqP7AlqB8cA= Subject key identifier: F1:96:42:A5:1A:DD:9F:91:65:0D:1A:79:32:12:F4:77:E9:AA:FB:8A Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft Manifest number: 0AD5 Signing time: Sat 18 May 2024 20:10:36 +0000 Manifest this update: Sat 18 May 2024 20:10:36 +0000 Manifest next update: Sat 25 May 2024 20:10:36 +0000 Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: D9MJC0Npt8UDR+jxD/il9i6mMAzv3Wo3bteckNdFeYw=) 2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: m42HDFD2tjvJKt1qbdInXHf/CperCHyXJXL1siITHsM=) 3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 8ylyU2u6O91u6Kwgbu0niGIDIglLUsHPVcHeUP1oNtk=) 4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: D6hZ82kqI3gEDbK8exfuc/x28TmMvw1CFOZGzNulQ38=) 5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: JROSBOqjpFrd40FqIvgk1oON7l8TK+ebj1lBnb9r6UY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Validity Not Before: May 18 20:10:36 2024 GMT Not After : May 25 20:10:36 2024 GMT Subject: CN=66490b3c-9ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:67:f3:42:5f:1f:df:2b:b1:d0:b0:fb:e4: 9d:4b:f7:23:28:01:87:09:27:ba:4c:82:ef:8c:d2: d6:58:ea:a3:76:f4:5f:bd:f2:7b:67:f9:52:57:a7: 40:e4:b0:9f:a7:4a:69:37:eb:ad:57:8e:ac:51:49: 70:15:c0:53:66:b4:26:0c:3f:9e:aa:2f:f2:d9:14: 0b:95:ee:0e:2c:9f:84:dd:46:7e:d4:68:48:89:33: be:3a:e1:7a:d6:32:ce:53:dc:83:66:6a:62:f4:72: de:78:46:8a:ce:52:84:55:97:dc:02:ac:0b:1e:1c: 33:b0:eb:07:fe:f2:d6:3c:73:3b:b5:64:f5:ea:22: fb:d7:7e:02:49:61:05:4c:2c:97:0f:ec:9c:f5:18: 18:0a:87:dd:81:8c:e7:31:c2:6a:64:1c:02:25:21: ef:ff:c1:32:82:1d:6a:e0:16:96:37:6b:d7:c1:d2: b2:b1:4e:bd:c4:ca:a1:a1:44:f5:bd:ae:1e:ec:71: 95:4a:38:88:77:d9:ee:3f:b3:67:93:09:00:cd:e7: 72:86:88:70:ce:2e:be:7d:74:8b:d8:35:21:2b:2a: 74:62:b7:ce:ca:bc:f8:9e:fb:24:f1:29:79:40:52: c4:2a:7d:6d:36:42:4c:ba:dd:bc:4a:3f:a6:84:55: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:96:42:A5:1A:DD:9F:91:65:0D:1A:79:32:12:F4:77:E9:AA:FB:8A X509v3 Authority Key Identifier: keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:53:58:b7:75:4e:2b:f9:d0:5e:3d:5d:3d:18:97:56:d5: 16:84:a2:4e:60:5b:cd:b4:fe:b9:1a:f9:9b:37:c3:5a:5e:a1: df:84:56:33:2c:ae:eb:1c:85:2d:07:3b:ea:fe:c4:d2:f3:f9: 9e:3e:ce:38:46:f1:73:72:1e:c4:25:16:04:1f:61:50:28:59: d5:d0:01:a6:70:85:52:a2:e6:1c:84:a1:a6:b2:15:08:90:76: be:4b:26:0f:08:7a:a8:83:a0:0f:44:ff:aa:a6:06:e1:52:a4: 8e:9f:12:59:ef:ff:40:2c:f1:0e:a0:9b:4f:ae:25:ea:7a:3f: 3b:b8:a7:5c:37:d5:4c:34:c6:d0:c7:4c:d5:2a:9a:f7:66:aa: 3e:18:8c:e2:c3:8b:e6:23:5d:04:f3:c7:fe:71:56:d8:96:cc: 24:77:1c:22:5b:8a:5b:95:92:be:1a:02:16:93:ad:07:27:a3: eb:c4:92:bb:05:93:90:90:5d:1d:2e:5a:71:e6:4f:dc:bc:1c: 87:3d:fd:19:fc:7e:66:a1:c3:82:19:4a:9d:47:62:7b:45:4d: 2d:ea:48:8b:57:94:d9:e1:6e:17:1d:94:f4:10:fd:67:ab:9a: 1c:a4:54:2a:7b:4e:2d:34:50:23:47:f4:cc:08:db:d5:fa:56: d5:5e:ac:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy NDRFNjBDQTUwHhcNMjQwNTE4MjAxMDM2WhcNMjQwNTI1MjAxMDM2WjAYMRYwFAYD VQQDEw02NjQ5MGIzYy05YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5pn80JfH98rsdCw++SdS/cjKAGHCSe6TILvjNLWWOqjdvRfvfJ7Z/lSV6dA 5LCfp0ppN+utV46sUUlwFcBTZrQmDD+eqi/y2RQLle4OLJ+E3UZ+1GhIiTO+OuF6 1jLOU9yDZmpi9HLeeEaKzlKEVZfcAqwLHhwzsOsH/vLWPHM7tWT16iL7134CSWEF TCyXD+yc9RgYCofdgYznMcJqZBwCJSHv/8Eygh1q4BaWN2vXwdKysU69xMqhoUT1 va4e7HGVSjiId9nuP7NnkwkAzedyhohwzi6+fXSL2DUhKyp0YrfOyrz4nvsk8Sl5 QFLEKn1tNkJMut28Sj+mhFX5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGWQqUa 3Z+RZQ0aeTIS9HfpqvuKMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVI YzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk3FNYt3VOK/nQXj1dPRiXVtUWhKJOYFvNtP65GvmbN8NaXqHfhFYz LK7rHIUtBzvq/sTS8/mePs44RvFzch7EJRYEH2FQKFnV0AGmcIVSouYchKGmshUI kHa+SyYPCHqog6APRP+qpgbhUqSOnxJZ7/9ALPEOoJtPriXqej87uKdcN9VMNMbQ x0zVKpr3Zqo+GIziw4vmI10E88f+cVbYlswkdxwiW4pblZK+GgIWk60HJ6PrxJK7 BZOQkF0dLlpx5k/cvByHPf0Z/H5mocOCGUqdR2J7RU0t6kiLV5TZ4W4XHZT0EP1n q5ocpFQqe04tNFAjR/TMCNvV+lbVXqwU -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org