$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: eA1b5G0xmsO5PQ0AvnRCtr62ROah06moQI8JLG6/oQ8= Subject key identifier: 2F:D6:68:31:6C:5A:E6:64:30:2F:77:CD:38:C9:48:8C:02:45:06:82 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 2542 Signing time: Sat 18 May 2024 16:01:54 +0000 Manifest this update: Sat 18 May 2024 16:01:53 +0000 Manifest next update: Sat 25 May 2024 16:01:53 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: 6HlJLo5U5rFr58g3VuRP2KdxP82SbkUtb1Q1/gKrXXk=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: E5fRK4tWefT188aIUYNU5UCVMde5+DWGZ9E6YNxsBBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9573 (0x2565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: May 18 16:01:53 2024 GMT Not After : May 25 16:01:53 2024 GMT Subject: CN=6648d0f1-7025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0d:90:7f:c8:11:38:76:9f:28:24:39:67:97: 91:7c:5a:9c:4c:c3:6d:e6:e1:f7:18:d7:2e:6b:82: 9e:b4:70:59:80:98:1b:d7:2e:33:18:ea:db:25:4e: ee:18:f9:4b:a8:4d:37:28:3a:dd:d0:fe:0e:ee:b3: 5c:55:ed:bd:5d:fc:aa:48:37:e2:50:6b:81:dd:fb: 32:9c:bc:11:c0:09:78:a2:6d:ce:42:53:c7:4d:8a: fc:d7:2b:7b:b3:94:ba:f3:a1:b7:37:16:b3:9a:59: 22:2e:c5:fc:7a:4c:1b:26:91:ad:3a:90:d6:a8:5b: 2d:ca:17:67:d8:da:49:8b:9a:ad:62:6f:fe:4c:78: ec:47:89:68:22:a0:96:47:e7:a4:83:e6:4c:d1:00: 6c:fe:94:58:d6:d5:d2:a1:13:8f:0a:95:6a:4b:57: e4:c8:31:5f:dd:0d:89:81:b8:81:4d:47:e7:9d:df: 5b:44:5c:88:f6:1a:de:d5:ba:88:eb:3c:cb:a4:28: 36:e7:89:dd:08:a9:ff:b6:ef:36:de:e3:a7:49:3d: a8:c9:5b:84:8b:7a:f4:52:eb:5b:76:d6:f1:a2:62: 73:72:b0:d6:55:f3:6a:7e:15:43:3f:bb:65:24:52: 5d:68:3f:ea:ff:43:97:c9:a7:60:2a:24:a4:e8:45: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:68:31:6C:5A:E6:64:30:2F:77:CD:38:C9:48:8C:02:45:06:82 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:85:0b:63:9f:cf:4a:ac:c1:1c:43:e6:90:f0:2f:b1:82:67: df:00:62:e8:41:cf:8e:4b:cc:47:86:b4:05:06:ad:4d:a9:a6: b8:fe:3c:3d:62:e3:9c:b0:48:3d:bc:5a:27:a1:1e:a0:22:4f: 3b:01:3b:c2:03:a4:53:aa:fb:78:52:43:be:ae:67:8f:0f:e4: 7b:03:07:19:40:f2:25:cd:88:29:5f:67:3d:62:37:c7:28:ed: 7e:fa:96:64:0f:09:de:e8:59:21:3c:8f:c8:28:36:7b:15:04: c7:a8:9d:12:9a:d0:80:8c:9a:87:0e:f6:5a:74:74:4b:d2:d5: 95:a6:71:64:24:3b:58:f2:71:59:fc:2e:e0:e3:3f:d6:c6:e3: 05:f7:4c:12:eb:ac:9c:eb:27:b4:f9:48:cc:99:81:df:ab:dd: b0:fd:0e:68:db:d2:d2:41:df:ff:29:2d:25:db:43:19:20:f5: 5a:e3:48:69:13:2e:de:97:6e:f5:e9:78:a1:2f:b1:a0:58:9d: d2:47:9c:01:b7:9d:b8:32:13:18:7b:eb:e3:08:5a:3a:62:e7: 4e:9f:c1:84:a6:48:9c:10:1f:ac:38:51:ef:62:a0:38:80:eb: 57:6e:65:a3:02:10:da:05:5f:56:18:31:19:ba:26:28:7b:f2: 76:a7:de:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjQwNTE4MTYwMTUzWhcNMjQwNTI1MTYwMTUzWjAYMRYwFAYD VQQDEw02NjQ4ZDBmMS03MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Q2Qf8gROHafKCQ5Z5eRfFqcTMNt5uH3GNcua4KetHBZgJgb1y4zGOrbJU7u GPlLqE03KDrd0P4O7rNcVe29XfyqSDfiUGuB3fsynLwRwAl4om3OQlPHTYr81yt7 s5S686G3NxazmlkiLsX8ekwbJpGtOpDWqFstyhdn2NpJi5qtYm/+THjsR4loIqCW R+ekg+ZM0QBs/pRY1tXSoROPCpVqS1fkyDFf3Q2JgbiBTUfnnd9bRFyI9hre1bqI 6zzLpCg254ndCKn/tu823uOnST2oyVuEi3r0UutbdtbxomJzcrDWVfNqfhVDP7tl JFJdaD/q/0OXyadgKiSk6EVZiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/WaDFs WuZkMC93zTjJSIwCRQaCMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBShQtjn89KrMEcQ+aQ8C+xgmffAGLoQc+OS8xHhrQFBq1Nqaa4/jw9 YuOcsEg9vFonoR6gIk87ATvCA6RTqvt4UkO+rmePD+R7AwcZQPIlzYgpX2c9YjfH KO1++pZkDwne6FkhPI/IKDZ7FQTHqJ0SmtCAjJqHDvZadHRL0tWVpnFkJDtY8nFZ /C7g4z/WxuMF90wS66yc6ye0+UjMmYHfq92w/Q5o29LSQd//KS0l20MZIPVa40hp Ey7el2716XihL7GgWJ3SR5wBt524MhMYe+vjCFo6YudOn8GEpkicEB+sOFHvYqA4 gOtXbmWjAhDaBV9WGDEZuiYoe/J2p96H -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org