$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: w65Co7HjTdjon+BDyTdnUy1tDcLX3hgEnCHOniBP1Zc= Subject key identifier: E2:1D:8E:3A:B9:B0:91:50:7A:1D:D8:CF:AD:2F:9B:F4:3B:C9:33:E6 Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: F9 Signing time: Sun 19 May 2024 05:43:20 +0000 Manifest this update: Sun 19 May 2024 05:43:20 +0000 Manifest next update: Sun 26 May 2024 05:43:20 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: EWpTMG1t2VJB/bJkGF94uTGH7F/gz49rqYmTTLJSJ2Q=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: OEKv7P5lgSyN95lexkYQQPDBgSrO0jMtbC3pa2USD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: May 19 05:43:20 2024 GMT Not After : May 26 05:43:20 2024 GMT Subject: CN=66499178-b537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:62:3e:5f:fa:6c:bf:5c:55:39:68:6d:c9: 15:0a:40:00:c7:7c:bf:3c:08:fc:9b:fa:b5:d1:8a: b8:61:a7:58:79:dd:f0:d7:ad:ca:b4:91:cf:79:68: 07:4d:20:35:15:61:83:c7:1d:17:a4:6a:bd:4d:fa: 31:60:bd:7c:ba:97:bc:38:2a:8d:bd:4f:5f:c4:72: 21:c5:60:d3:9a:9a:55:10:f4:39:90:e3:63:00:35: cf:33:86:ab:5d:70:cd:ae:30:2b:bc:ca:ca:df:a9: d9:f9:f5:3e:e2:e0:58:92:d2:5c:3c:07:70:5f:90: f4:f9:87:2b:f5:02:2c:f1:6e:19:09:ac:8c:d5:5a: 2a:90:e5:3b:28:76:31:be:23:50:a4:fc:bb:73:3f: 96:bb:f9:4a:3c:46:1a:c7:4c:8d:67:9f:d5:0b:39: fd:c4:f7:b9:1e:18:16:bf:e0:58:a3:90:8b:1a:a1: 72:7f:b9:3c:5a:25:b2:c9:34:9d:82:fc:16:3e:5c: 8e:f5:7e:1c:1c:74:dc:3e:c2:72:0c:2a:f3:bc:8a: 3f:e6:8f:1c:c1:7b:c8:1a:5d:f3:8a:61:4a:79:24: bb:da:81:c0:9c:85:34:50:45:5a:32:cd:d3:c5:13: 10:52:f0:89:ea:fd:fb:21:81:89:73:7d:25:e9:e8: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:8E:3A:B9:B0:91:50:7A:1D:D8:CF:AD:2F:9B:F4:3B:C9:33:E6 X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:89:a4:46:ff:15:f1:e6:4a:cf:df:d3:04:81:98:95:6c:db: 89:32:7a:74:76:ae:10:a0:64:c2:a9:7c:7c:ed:f0:98:6f:19: 8b:d0:b8:2c:64:05:c1:dd:2b:b0:e1:8c:8f:bd:4a:cb:60:3e: 5f:0d:49:a9:cf:bf:8b:3f:ee:94:99:0b:cc:d7:ad:f7:75:d0: 6f:5b:36:69:5a:2f:c4:71:b2:bf:ff:37:d0:8b:1f:03:f6:fc: 40:5c:b4:fd:c8:db:98:9f:e7:a0:4c:75:28:a8:26:65:22:25: f4:25:ad:d5:f2:91:b6:c3:ac:6a:18:38:b0:4e:23:fc:46:6d: 50:0a:d4:27:6a:48:8c:8f:97:17:68:11:23:27:1c:f7:59:e1: 18:e4:49:00:65:6e:fa:7b:9b:e5:30:58:d4:01:87:f4:ef:29: 82:4c:16:88:94:a4:ac:94:16:29:e8:62:41:d0:a5:0e:e1:3b: fc:50:cc:26:60:d9:06:cb:5c:c0:73:4b:b4:84:3b:29:d8:e1: c1:cf:6f:85:aa:40:1f:c5:e6:58:1b:79:1a:5d:c9:4b:12:9e: d7:bd:22:14:58:ea:1c:a7:03:fb:a4:a9:6c:76:2c:b8:fe:04: 77:83:b4:4b:93:1f:13:69:5e:42:d0:a6:29:a7:3b:a6:63:d3: 6b:b6:af:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjQwNTE5MDU0MzIwWhcNMjQwNTI2MDU0MzIwWjAYMRYwFAYD VQQDEw02NjQ5OTE3OC1iNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRBiPl/6bL9cVTlobckVCkAAx3y/PAj8m/q10Yq4YadYed3w163KtJHPeWgH TSA1FWGDxx0XpGq9TfoxYL18upe8OCqNvU9fxHIhxWDTmppVEPQ5kONjADXPM4ar XXDNrjArvMrK36nZ+fU+4uBYktJcPAdwX5D0+Ycr9QIs8W4ZCayM1VoqkOU7KHYx viNQpPy7cz+Wu/lKPEYax0yNZ5/VCzn9xPe5HhgWv+BYo5CLGqFyf7k8WiWyyTSd gvwWPlyO9X4cHHTcPsJyDCrzvIo/5o8cwXvIGl3zimFKeSS72oHAnIU0UEVaMs3T xRMQUvCJ6v37IYGJc30l6ej8kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIdjjq5 sJFQeh3Yz60vm/Q7yTPmMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNiaRG/xXx5krP39MEgZiVbNuJMnp0dq4QoGTCqXx87fCYbxmL0Lgs ZAXB3Suw4YyPvUrLYD5fDUmpz7+LP+6UmQvM1633ddBvWzZpWi/EcbK//zfQix8D 9vxAXLT9yNuYn+egTHUoqCZlIiX0Ja3V8pG2w6xqGDiwTiP8Rm1QCtQnakiMj5cX aBEjJxz3WeEY5EkAZW76e5vlMFjUAYf07ymCTBaIlKSslBYp6GJB0KUO4Tv8UMwm YNkGy1zAc0u0hDsp2OHBz2+FqkAfxeZYG3kaXclLEp7XvSIUWOocpwP7pKlsdiy4 /gR3g7RLkx8TaV5C0KYppzumY9Nrtq9s -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org