$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: wVsqy3uzoU1uCeId1CCWj69/rJjDKY2AIQ3U+P2L13Y= Subject key identifier: 01:8F:83:51:8E:AC:9C:F1:07:16:AC:9C:D8:80:24:64:5B:92:1E:3B Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 0498 Signing time: Sun 19 May 2024 01:34:40 +0000 Manifest this update: Sun 19 May 2024 01:34:39 +0000 Manifest next update: Sun 26 May 2024 01:34:39 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: fZ49RjAx2zLVu/tQJcyot87Sz4hA3qktx89WldqaHp0=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: sbkQxmyHF5zPQR/UDBWCWEbbyoVFQKNcg9AzuA7dWNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: May 19 01:34:39 2024 GMT Not After : May 26 01:34:39 2024 GMT Subject: CN=6649572f-fc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:6a:d9:ff:69:be:39:7a:4a:be:7b:a0:d6: 0e:85:c9:18:b9:84:c0:06:0d:59:09:d1:48:86:4d: 89:ae:79:ce:4e:a8:8c:8d:65:27:f2:53:1b:36:53: a3:5b:66:48:33:ac:91:fb:1f:71:45:22:d1:d7:7e: 24:69:98:f4:f8:41:3e:10:ea:a7:d1:5c:72:96:dd: c3:43:b8:09:97:1a:d2:3c:90:d9:f5:d8:3f:e2:4f: 47:50:1b:2a:de:c2:19:68:92:68:18:c5:f9:d1:eb: a1:77:91:be:99:c3:73:d0:fd:58:bf:43:c6:45:c3: dc:79:96:2c:82:5c:e6:fc:f8:21:83:51:1a:c8:5c: 2b:e2:e8:f2:ab:44:2b:b8:22:39:63:63:88:10:03: 5a:dd:ae:25:11:b2:e1:da:49:98:a4:53:74:ef:1e: 83:43:c4:5b:1d:9f:fb:50:f8:db:1a:14:ed:15:0a: 57:67:37:b6:5b:17:ba:40:9d:44:c3:30:1a:b9:9c: df:b1:f2:c2:7c:04:39:0b:10:e6:e4:b9:f3:b6:11: c3:4f:1e:b1:34:84:ed:0b:9a:ad:a3:3c:2e:f8:fc: ce:a3:30:ef:fc:9a:d0:2a:b6:5b:39:de:7d:da:a9: d8:96:e3:99:e7:7c:45:c1:69:af:82:c9:11:f9:73: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:83:51:8E:AC:9C:F1:07:16:AC:9C:D8:80:24:64:5B:92:1E:3B X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b3:59:d8:e0:b5:f2:6b:b1:d5:2b:fa:48:48:4f:ec:02:f4: 97:b5:ae:a5:52:41:2a:6d:b6:32:62:5a:ea:4e:38:64:02:c7: f0:10:51:55:e0:37:02:53:0c:62:07:f9:9c:20:b2:c6:9c:f7: 1d:4f:ca:5f:94:84:0c:e2:ac:e8:6d:0a:fd:20:a6:b3:2a:17: 46:f3:22:4e:00:c7:b7:ae:c7:90:41:95:e4:2d:55:13:dc:d9: 3f:b4:ac:89:88:bb:96:53:6e:fe:4d:a1:00:fd:8d:a1:6f:b0: 18:58:a6:e5:31:5f:ff:54:68:0e:02:cf:3b:53:83:2f:84:c9: bf:d9:26:d6:16:b7:94:57:bc:1a:66:0f:a2:bb:62:33:7d:f5: 46:2a:ce:5f:35:09:28:cc:6f:3f:32:c0:dc:45:a7:28:28:76: e4:75:ad:5c:f2:cf:0c:02:ce:fd:40:ba:2a:d5:96:b7:d6:16: 79:62:0e:a2:b2:5d:39:f6:cc:1f:7b:65:74:65:bb:45:5e:64: 4c:f2:e7:ab:b5:ea:74:a7:7c:e2:18:e2:41:28:94:a7:58:7e: 9b:9e:72:74:94:1d:27:a8:8f:97:f1:d7:5d:46:00:2e:8d:fd: f7:72:58:89:a8:c4:7b:cf:d1:ce:92:6a:f4:25:22:bb:01:64: c1:62:2e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjQwNTE5MDEzNDM5WhcNMjQwNTI2MDEzNDM5WjAYMRYwFAYD VQQDEw02NjQ5NTcyZi1mYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KBq2f9pvjl6Sr57oNYOhckYuYTABg1ZCdFIhk2JrnnOTqiMjWUn8lMbNlOj W2ZIM6yR+x9xRSLR134kaZj0+EE+EOqn0Vxylt3DQ7gJlxrSPJDZ9dg/4k9HUBsq 3sIZaJJoGMX50euhd5G+mcNz0P1Yv0PGRcPceZYsglzm/Pghg1EayFwr4ujyq0Qr uCI5Y2OIEANa3a4lEbLh2kmYpFN07x6DQ8RbHZ/7UPjbGhTtFQpXZze2Wxe6QJ1E wzAauZzfsfLCfAQ5CxDm5LnzthHDTx6xNITtC5qtozwu+PzOozDv/JrQKrZbOd59 2qnYluOZ53xFwWmvgskR+XM2/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGPg1GO rJzxBxasnNiAJGRbkh47MB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5s1nY4LXya7HVK/pISE/sAvSXta6lUkEqbbYyYlrqTjhkAsfwEFFV 4DcCUwxiB/mcILLGnPcdT8pflIQM4qzobQr9IKazKhdG8yJOAMe3rseQQZXkLVUT 3Nk/tKyJiLuWU27+TaEA/Y2hb7AYWKblMV//VGgOAs87U4MvhMm/2SbWFreUV7wa Zg+iu2IzffVGKs5fNQkozG8/MsDcRacoKHbkda1c8s8MAs79QLoq1Za31hZ5Yg6i sl059swfe2V0ZbtFXmRM8uertep0p3ziGOJBKJSnWH6bnnJ0lB0nqI+X8dddRgAu jf33cliJqMR7z9HOkmr0JSK7AWTBYi4q -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org