$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: UB06gXOLAOgKeg4Gj7SF8RkdEmulIFQLUzNYcxGUtuI= Subject key identifier: 5F:8E:50:6E:CF:B6:51:8F:F0:FF:39:5F:61:9D:87:EE:D2:76:E1:90 Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: 42 Signing time: Sun 19 May 2024 08:08:00 +0000 Manifest this update: Sun 19 May 2024 08:08:00 +0000 Manifest next update: Sun 26 May 2024 08:08:00 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: u6l/mJ7PrOyLPbDqxFyUJAAf8vocBP7VICODADSTgOw=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: CRo8pDS3QFFaAXTL+9qZM9K187fka63VWkrPnljCSFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: May 19 08:08:00 2024 GMT Not After : May 26 08:08:00 2024 GMT Subject: CN=6649b360-c254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:5a:1d:ce:f4:0c:01:ad:b0:72:d1:c8:09: 01:c6:c3:48:21:95:a4:86:00:db:d4:cd:06:46:dd: 82:f8:0f:51:9e:26:20:a2:d9:48:95:8b:1a:c8:b5: 01:97:f6:75:e6:f1:fd:29:a8:98:03:50:ad:a1:9a: 0c:35:d5:0c:13:be:a5:fb:9d:7c:68:8e:a6:6c:cd: 4b:18:24:63:5b:1f:1d:76:d1:c6:ae:76:e7:ff:85: c1:5c:8c:28:6f:91:3b:1f:a8:f1:06:c3:57:5c:4d: 19:f5:f6:bd:7b:6f:61:75:e1:a9:84:2b:ec:58:0e: 40:7b:5e:db:11:54:66:5b:3f:92:05:c1:1d:a7:3c: 1c:f7:15:5b:3d:76:90:be:e8:ef:13:9c:4a:a5:e4: 3e:b4:a9:e1:e1:4c:e6:84:f9:b3:29:9a:ea:21:e7: 7d:44:93:55:c0:48:06:ae:74:2f:37:0b:74:70:20: 72:b5:08:f7:e2:eb:b5:ca:48:a3:98:8a:a7:ac:67: 3d:69:c1:f6:45:14:2c:e4:07:0a:33:0c:f9:61:a8: 2e:ae:b3:17:58:5f:de:26:39:56:36:0b:d8:23:29: 15:fa:95:3b:58:0c:51:02:30:d8:70:d0:b9:ee:15: 42:a0:2e:f9:36:8c:8f:c0:7b:bf:59:c1:a3:57:ef: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8E:50:6E:CF:B6:51:8F:F0:FF:39:5F:61:9D:87:EE:D2:76:E1:90 X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:f8:f3:41:77:40:ae:6c:07:2b:d2:34:fb:7d:0c:58:0f: e3:aa:7e:26:00:a5:ef:5b:0c:91:94:ae:56:14:88:4b:05:7e: 5b:c7:f3:c4:b7:05:51:ac:b9:47:0b:2e:3a:35:b3:fb:ed:72: 49:b6:c0:fd:be:4f:4f:7d:75:12:eb:53:74:1c:b5:48:04:58: 77:9b:d4:c2:2d:38:31:24:fa:02:e2:46:5e:08:33:ad:23:08: c7:46:f8:dd:d2:54:a4:e4:1e:43:c0:a6:f0:19:ae:0e:4f:69: dc:87:cb:4e:30:fa:0f:91:56:0f:22:be:98:6a:25:a9:3f:12: f4:64:47:99:16:6c:21:02:51:81:b6:da:4a:b9:d0:3e:55:79: f7:52:d4:05:59:8d:1a:df:04:c0:9e:4b:52:25:f8:b5:0b:27: d5:83:5a:fe:8f:1d:ec:d2:71:2c:46:f8:1b:2d:07:b9:ff:38: 4f:27:4d:bc:f1:03:e3:af:39:78:27:8b:62:34:89:7f:8e:2a: 71:bc:52:5e:ca:18:e0:11:a2:19:ac:d2:9c:d9:74:54:8a:20: a2:66:7c:bc:e8:67:d7:2f:93:ca:c5:28:a3:e6:6e:fa:1f:c5: 6c:ff:cc:13:f6:48:fb:dd:b1:61:2d:88:7f:59:e7:7e:eb:c6: ac:d4:da:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qjg1QjExMC8GA1UEBRMoQzI3NUY3QjhBRUNDMjk0OEQ0QjRCQTk5OUZBOUMwRTJB RDU0RUE1OTAeFw0yNDA1MTkwODA4MDBaFw0yNDA1MjYwODA4MDBaMBgxFjAUBgNV BAMTDTY2NDliMzYwLWMyNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/p1odzvQMAa2wctHICQHGw0ghlaSGANvUzQZG3YL4D1GeJiCi2UiVixrItQGX 9nXm8f0pqJgDUK2hmgw11QwTvqX7nXxojqZszUsYJGNbHx120cauduf/hcFcjChv kTsfqPEGw1dcTRn19r17b2F14amEK+xYDkB7XtsRVGZbP5IFwR2nPBz3FVs9dpC+ 6O8TnEql5D60qeHhTOaE+bMpmuoh531Ek1XASAaudC83C3RwIHK1CPfi67XKSKOY iqesZz1pwfZFFCzkBwozDPlhqC6usxdYX94mOVY2C9gjKRX6lTtYDFECMNhw0Lnu FUKgLvk2jI/Ae79ZwaNX716HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX45Qbs+2 UY/w/zlfYZ2H7tJ24ZAwHwYDVR0jBBgwFoAUwnX3uK7MKUjUtLqZn6nA4q1U6lkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCODVCLzIwNDdENzQ2QjRC QzExRUU4RDAzQTUxOEM0RjlBRTAyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd25YM3VLN01LVWpVdExxWm42bkE0cTFVNmxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC ODVCLzIwNDdENzQ2QjRCQzExRUU4RDAzQTUxOEM0RjlBRTAyL3duWDN1SzdNS1Vq VXRMcVpuNm5BNHExVTZsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYq+PNBd0CubAcr0jT7fQxYD+OqfiYApe9bDJGUrlYUiEsFflvH88S3 BVGsuUcLLjo1s/vtckm2wP2+T099dRLrU3QctUgEWHeb1MItODEk+gLiRl4IM60j CMdG+N3SVKTkHkPApvAZrg5PadyHy04w+g+RVg8ivphqJak/EvRkR5kWbCECUYG2 2kq50D5VefdS1AVZjRrfBMCeS1Il+LULJ9WDWv6PHezScSxG+BstB7n/OE8nTbzx A+OvOXgni2I0iX+OKnG8Ul7KGOARohms0pzZdFSKIKJmfLzoZ9cvk8rFKKPmbvof xWz/zBP2SPvdsWEtiH9Z537rxqzU2ic= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org