$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: wgeoClYByanxFF/onXVwPyBFZNYSQgUbL7j96MCpld0= Subject key identifier: 3C:14:02:72:8B:1B:AE:E1:0B:0E:F0:C5:99:32:29:D6:A0:9B:03:7C Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 33E8 Signing time: Sat 18 May 2024 14:28:56 +0000 Manifest this update: Sat 18 May 2024 14:28:55 +0000 Manifest next update: Sat 25 May 2024 14:28:55 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 7OBBwsZEZDRVHqDCjx8pWPWzbnSNeS/HD3tnPJKrpmM=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: OhyFTZMkQ0Lsb0HJnA8vV6teBU6PIDkPYMH0Rk7064s=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: neNYJqIEz8xW2AoFgnO+vg+NOrfZM+OF1VhMZH+wkRk=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: A75OHSDWXW0WzjUXTIrXgGI8y9ggeXqBCTyyb2T7Ldw=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: JK8W6UaIKOwZbbLYWrHQgOdLnCofpXI6UdkvJKjgYgE=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: lzFmgFwlx+ysDvsRN+ouOm/eTsfD/xJ8/CNYdaKB1L8=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: atmIiyo4XPPU6AeHw1WXpgRnFa7jfd2pOHkWGew1+XE=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: VDYRnkXPM98d5RA7/NO91xO7Z9K49iVQHvJBdyHXoqM=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: uv4YHJGeHIKZEuFqJlGDqjwkBu45qN9VkY0Iz5VKmrM=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: InWU/AiONnrgo1wTkMsfQ5x6H98uvw9sacgEkC/ZGcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: May 18 14:28:55 2024 GMT Not After : May 25 14:28:55 2024 GMT Subject: CN=6648bb27-b560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:ef:7a:db:fc:34:a6:27:c1:e3:2a:7c:52: fe:23:6a:20:ad:1e:35:37:7c:06:77:2a:d4:75:68: be:08:e5:e2:67:c5:ca:5b:e4:b3:77:10:f5:68:72: 69:ee:6c:1d:1e:a7:5e:c5:c4:58:e8:9a:3f:ab:bc: 81:3c:38:7e:a6:d1:6a:d4:f6:2f:01:14:4d:1c:2a: 8e:df:8c:e1:d8:d2:86:79:4d:94:d0:67:a3:b5:8d: 08:14:35:b9:3c:6e:21:37:b7:b2:a4:71:ff:a0:d2: a9:5b:04:c8:c1:26:52:ea:de:e5:1e:10:e2:bf:58: ea:1b:69:f4:04:54:0e:74:92:af:15:49:5a:59:80: ba:27:01:28:09:95:eb:5f:5d:a6:50:be:f3:82:3e: fe:45:5c:20:d3:37:54:55:6e:3c:21:9f:64:c6:68: 3c:c5:72:59:6c:5b:01:c4:7d:55:b1:44:ee:38:4b: f5:ef:43:10:db:5b:5e:a4:29:98:8b:87:50:ea:c6: 8b:33:31:3b:c5:a3:49:d4:5c:76:55:2e:73:3e:1f: 6f:43:56:a1:c4:c2:a9:95:e9:4f:f6:5a:ac:ad:ca: 30:ed:4b:66:89:32:8d:b8:15:f5:36:c4:23:78:5a: 89:eb:31:47:97:ab:d3:1c:fc:d3:38:e6:32:52:2a: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:02:72:8B:1B:AE:E1:0B:0E:F0:C5:99:32:29:D6:A0:9B:03:7C X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d7:1b:46:4b:44:b8:ac:5a:c6:fa:40:b5:7c:a3:1b:68:16: 97:81:34:fa:c2:2b:67:af:c5:5a:d0:8b:84:18:1f:b0:20:4f: a7:df:eb:07:be:4d:b1:34:2c:92:c3:4e:81:e2:6e:bc:c6:30: 41:e4:10:68:13:38:7c:8f:eb:8d:ec:f8:26:d5:dd:09:88:05: 8a:4a:2b:08:27:be:b9:cc:06:1f:9b:95:55:55:28:8b:b8:06: f7:9a:a7:04:b4:af:07:bb:90:c5:fc:a1:9f:87:ce:a2:08:39: 4e:8b:0f:17:0b:3b:79:38:db:84:93:f3:63:7c:ec:0e:01:56: dd:55:b6:d6:2d:af:b5:5c:d6:3c:aa:08:a0:02:18:07:5a:cf: 11:f0:3c:a8:74:ac:02:67:50:ef:2e:98:7e:62:58:a8:e7:5c: 9f:b3:1d:8e:02:74:23:e4:95:0d:5b:d7:62:a9:bc:bb:8e:52: 1b:13:bd:ae:15:94:80:cc:9c:6f:12:c9:2b:37:b9:68:ce:94: 53:af:84:7f:2a:c3:1d:1e:9b:7c:13:7d:1b:4f:25:31:d9:57: fb:46:72:25:ed:3b:55:e1:bc:f2:e8:96:cd:aa:96:c8:93:75: c7:63:24:bd:03:f1:12:d7:27:9a:00:de:43:5b:3a:cd:04:4a: 33:3c:bd:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjQwNTE4MTQyODU1WhcNMjQwNTI1MTQyODU1WjAYMRYwFAYD VQQDEw02NjQ4YmIyNy1iNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBjvetv8NKYnweMqfFL+I2ogrR41N3wGdyrUdWi+COXiZ8XKW+SzdxD1aHJp 7mwdHqdexcRY6Jo/q7yBPDh+ptFq1PYvARRNHCqO34zh2NKGeU2U0GejtY0IFDW5 PG4hN7eypHH/oNKpWwTIwSZS6t7lHhDiv1jqG2n0BFQOdJKvFUlaWYC6JwEoCZXr X12mUL7zgj7+RVwg0zdUVW48IZ9kxmg8xXJZbFsBxH1VsUTuOEv170MQ21tepCmY i4dQ6saLMzE7xaNJ1Fx2VS5zPh9vQ1ahxMKplelP9lqsrcow7UtmiTKNuBX1NsQj eFqJ6zFHl6vTHPzTOOYyUipslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwUAnKL G67hCw7wxZkyKdagmwN8MB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB81xtGS0S4rFrG+kC1fKMbaBaXgTT6witnr8Va0IuEGB+wIE+n3+sH vk2xNCySw06B4m68xjBB5BBoEzh8j+uN7Pgm1d0JiAWKSisIJ765zAYfm5VVVSiL uAb3mqcEtK8Hu5DF/KGfh86iCDlOiw8XCzt5ONuEk/NjfOwOAVbdVbbWLa+1XNY8 qgigAhgHWs8R8DyodKwCZ1DvLph+Ylio51yfsx2OAnQj5JUNW9diqby7jlIbE72u FZSAzJxvEskrN7lozpRTr4R/KsMdHpt8E30bTyUx2Vf7RnIl7TtV4bzy6JbNqpbI k3XHYyS9A/ES1yeaAN5DWzrNBEozPL1f -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org