$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft File: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json) Hash identifier: 4BPOmlZTEZ2/k+1m6tz3ysLpcEqIM2QpEOcabQOY81g= Subject key identifier: 31:A8:9B:06:1B:15:88:47:E2:6A:FA:FB:4A:18:E3:09:C0:70:CC:9B Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 Certificate issuer: /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft Manifest number: 062A Signing time: Fri 31 May 2024 00:14:54 +0000 Manifest this update: Fri 31 May 2024 00:14:54 +0000 Manifest next update: Fri 07 Jun 2024 00:14:53 +0000 Files and hashes: 1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: fDW59KRwWEo5Jw6AxvH/drAeGAoc+fiZRxiX86Dkm5g=) 2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: EKs1xdPVrs5Ls6XZ/AeL9J7xncMbJDq94JQuf2hg2Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Validity Not Before: May 31 00:14:54 2024 GMT Not After : Jun 7 00:14:53 2024 GMT Subject: CN=6659167e-276b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:5c:20:5d:07:87:66:ad:6b:d2:c3:8c:d7: 00:49:7f:01:b8:4c:b6:f6:2f:54:02:8a:0a:1e:eb: 7c:f4:6e:bf:71:47:85:3b:1d:cf:d3:e8:7a:83:e8: 48:7f:27:e4:63:ef:c0:73:8f:66:5c:64:f7:31:f1: 6e:5d:6f:68:d1:fd:98:b4:0b:ab:9d:1a:bd:97:5b: 29:2c:8d:3e:8e:df:21:23:30:d8:e5:d5:cf:26:71: 2f:e1:85:ec:f4:82:8f:b1:0f:fd:eb:29:1e:25:92: 47:a2:98:81:6b:4c:09:43:3e:55:ba:b8:0c:5f:8e: e7:c3:43:e5:2e:64:1d:17:78:ca:eb:c5:14:9c:24: 78:b3:a0:9f:ce:f0:19:eb:45:16:1f:eb:bb:43:e6: 94:bc:2f:fe:77:29:3b:9a:45:8d:8b:cb:38:09:82: 3e:ec:82:29:d8:c1:5a:5f:9b:87:9d:f3:af:d2:78: f9:49:77:10:f3:0a:00:e9:50:71:2f:ed:e9:fa:23: 28:77:f1:56:9b:62:f0:56:e0:e4:78:04:e6:a8:02: 45:b8:b2:5f:87:f8:d1:7f:11:86:7c:a3:b2:67:5a: 48:cf:97:9a:79:4f:8c:ba:a3:1e:cd:fc:a6:3c:8f: c7:6b:c7:63:c8:54:d0:3e:6e:2b:a7:5b:81:cc:a3: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:9B:06:1B:15:88:47:E2:6A:FA:FB:4A:18:E3:09:C0:70:CC:9B X509v3 Authority Key Identifier: keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:e8:40:7c:2d:c5:f6:56:3e:32:1b:32:9b:ac:29:00:33: ec:1c:b8:c8:20:3a:ab:37:f4:77:30:22:6a:5d:97:cd:9d:db: 09:af:f0:32:e7:4f:87:50:74:04:9f:30:d7:04:2d:cf:e6:41: 2a:2c:3a:36:81:1d:7b:a8:cc:ed:1b:02:2b:d7:d2:69:bf:b3: 16:83:e9:1b:7c:e0:58:77:f1:a6:51:91:87:6b:03:d1:9b:ec: 0a:8c:73:74:87:1a:90:ce:10:a3:02:6e:cd:b4:88:cc:40:d9: 4f:8b:29:f8:47:b0:1b:17:c4:e0:48:f4:9b:75:0b:86:86:b9: b8:89:4e:75:10:6c:2b:b7:cc:18:07:c7:69:e9:95:56:0b:ec: a3:be:a6:35:5f:32:f0:5a:d5:20:a5:22:63:13:55:c9:80:de: af:7e:50:98:54:0a:d8:07:90:b6:91:63:d8:e9:bf:5e:5c:8d: cc:e8:8e:19:0d:10:13:fe:0c:65:5b:11:62:45:7a:64:93:78: 53:bc:cb:b7:af:3b:29:79:de:28:5d:f3:fb:56:27:d7:e8:15: e9:d6:64:1e:30:5c:5b:fc:da:30:91:53:7b:c5:ba:92:8b:f8: d8:99:24:dc:4c:24:71:43:f8:ca:51:49:1c:e2:be:19:6f:cb: da:b6:77:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RDQxMTAvBgNVBAUTKDU5MEQyNzg1RjMwNkU4OTE0QTFERkU5QjI3RDU3QzZC ODlGQ0RBOTMwHhcNMjQwNTMxMDAxNDU0WhcNMjQwNjA3MDAxNDUzWjAYMRYwFAYD VQQDEw02NjU5MTY3ZS0yNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSBcIF0Hh2ata9LDjNcASX8BuEy29i9UAooKHut89G6/cUeFOx3P0+h6g+hI fyfkY+/Ac49mXGT3MfFuXW9o0f2YtAurnRq9l1spLI0+jt8hIzDY5dXPJnEv4YXs 9IKPsQ/96ykeJZJHopiBa0wJQz5VurgMX47nw0PlLmQdF3jK68UUnCR4s6CfzvAZ 60UWH+u7Q+aUvC/+dyk7mkWNi8s4CYI+7IIp2MFaX5uHnfOv0nj5SXcQ8woA6VBx L+3p+iMod/FWm2LwVuDkeATmqAJFuLJfh/jRfxGGfKOyZ1pIz5eaeU+MuqMezfym PI/Ha8djyFTQPm4rp1uBzKPSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGomwYb FYhH4mr6+0oY4wnAcMybMB8GA1UdIwQYMBaAFFkNJ4XzBuiRSh3+myfVfGuJ/NqT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZENC84RTMyNjgzQTRG MzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZKRktIZjZiSjlWOGE0bjgy cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRMG5oZk1HNkpGS0hmNmJKOVY4YTRuODJwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZENC84RTMyNjgzQTRGMzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZK RktIZjZiSjlWOGE0bjgycE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaJ+hAfC3F9lY+Mhsym6wpADPsHLjIIDqrN/R3MCJqXZfNndsJr/Ay 50+HUHQEnzDXBC3P5kEqLDo2gR17qMztGwIr19Jpv7MWg+kbfOBYd/GmUZGHawPR m+wKjHN0hxqQzhCjAm7NtIjMQNlPiyn4R7AbF8TgSPSbdQuGhrm4iU51EGwrt8wY B8dp6ZVWC+yjvqY1XzLwWtUgpSJjE1XJgN6vflCYVArYB5C2kWPY6b9eXI3M6I4Z DRAT/gxlWxFiRXpkk3hTvMu3rzsped4oXfP7VifX6BXp1mQeMFxb/NowkVN7xbqS i/jYmSTcTCRxQ/jKUUkc4r4Zb8vatnde -----END CERTIFICATE-----Generated at Fri May 31 01:36:42 2024 by rpki-client on console-fra.rpki-client.org