$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: jYoFKHOt7aGK6vwcRDTne3BwwG4HmZWkxOkbEOE7ONE= Subject key identifier: AE:D9:80:1E:9F:1B:F4:A4:FB:73:EB:D8:E9:67:F0:E3:C5:1F:26:DD Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 0248 Signing time: Sun 19 May 2024 04:08:09 +0000 Manifest this update: Sun 19 May 2024 04:08:08 +0000 Manifest next update: Sun 26 May 2024 04:08:08 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: kABVU8e/I3P6TJV5Pwu8PpmIu8ULrG3kO8NSurYIPl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: May 19 04:08:08 2024 GMT Not After : May 26 04:08:08 2024 GMT Subject: CN=66497b29-f8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:a2:bf:76:49:fe:4e:16:37:32:05:21:c7: 49:e1:09:08:11:7a:a4:0e:b6:e7:d0:b4:59:7b:31: 87:51:d1:6e:ee:d0:8a:6e:b0:25:dc:fe:c3:af:0d: ff:79:0a:47:04:a1:cd:13:5c:26:1c:d4:81:3c:1b: e8:30:f2:a0:9a:bc:b8:e8:17:e5:a6:09:0e:7f:30: a3:45:0e:3e:cc:c5:e6:4c:fa:75:d8:89:0b:db:6a: af:f3:6b:ed:fb:8c:01:b1:67:f8:d0:c8:f1:75:26: 98:e8:ef:5e:2a:3f:d4:f9:e4:bc:54:a5:74:49:41: 96:f5:0e:6d:8c:46:35:92:c8:ff:f8:c9:e9:13:cc: 27:24:48:7b:d2:13:b5:11:ab:ca:36:89:bb:c6:80: 2f:2c:ca:d3:f3:79:c4:e0:8f:3b:50:32:5b:f8:12: 9c:ea:5a:6e:40:c4:76:11:08:b0:48:6e:ef:75:20: 28:99:09:00:4d:8f:8e:e0:a6:07:91:08:63:13:5b: 6d:5b:d0:fe:d9:19:ac:ea:6b:3e:41:a0:e8:18:02: 1c:eb:46:4b:fc:56:6d:54:0d:99:18:6b:47:9f:9f: b5:04:f2:e5:8e:2e:e9:6d:7d:eb:fa:e4:e2:f8:a8: e7:a9:c9:96:26:35:a4:0a:7c:53:36:26:26:f0:58: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D9:80:1E:9F:1B:F4:A4:FB:73:EB:D8:E9:67:F0:E3:C5:1F:26:DD X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2e:9b:d5:56:d5:be:cd:c9:4f:e2:cc:51:a3:92:cc:e9:aa: 17:d2:f5:f4:62:f9:7e:29:f4:63:f5:5b:28:e6:55:8a:3e:2c: 97:b7:de:9d:d4:93:9f:ff:2c:cb:73:fb:5b:d6:a5:2e:8c:e8: 97:d5:75:ec:09:6c:8a:79:ed:4c:77:b2:c0:c4:f2:4a:f6:e2: 4f:db:94:ec:7c:91:a5:81:08:fd:41:7f:a8:12:1d:2a:d3:55: 3f:86:52:70:42:d8:48:96:8f:b0:e8:b0:68:f6:55:f3:73:cd: 75:04:0a:b7:e4:6b:d0:d0:25:c4:08:15:29:b1:c8:17:03:f5: a0:b7:63:7b:2c:0e:7f:93:4a:62:0a:7d:1c:f5:36:27:dd:d4: 13:ca:85:d2:b4:8e:63:a1:7e:51:55:ed:c4:d1:02:14:4f:2c: b2:6f:71:22:69:93:9a:2a:1a:be:c0:a8:2e:b2:1e:cc:f2:1e: 3d:c2:ed:85:95:ef:17:f2:b6:c5:77:08:0f:b3:95:1e:bc:82: 56:66:16:ff:27:fe:d5:bd:d5:d7:9f:fd:81:a5:10:b7:2f:8a: fe:a3:e4:ba:de:31:8f:57:9e:0a:ad:41:ad:c3:ae:c8:ff:0e: ea:84:bd:b9:b4:f9:dd:70:de:19:ae:24:fb:55:b5:ae:4d:b9: ae:73:aa:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjQwNTE5MDQwODA4WhcNMjQwNTI2MDQwODA4WjAYMRYwFAYD VQQDEw02NjQ5N2IyOS1mOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI2iv3ZJ/k4WNzIFIcdJ4QkIEXqkDrbn0LRZezGHUdFu7tCKbrAl3P7Drw3/ eQpHBKHNE1wmHNSBPBvoMPKgmry46BflpgkOfzCjRQ4+zMXmTPp12IkL22qv82vt +4wBsWf40MjxdSaY6O9eKj/U+eS8VKV0SUGW9Q5tjEY1ksj/+MnpE8wnJEh70hO1 EavKNom7xoAvLMrT83nE4I87UDJb+BKc6lpuQMR2EQiwSG7vdSAomQkATY+O4KYH kQhjE1ttW9D+2Rms6ms+QaDoGAIc60ZL/FZtVA2ZGGtHn5+1BPLlji7pbX3r+uTi +KjnqcmWJjWkCnxTNiYm8Fjl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7ZgB6f G/Sk+3Pr2Oln8OPFHybdMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXLpvVVtW+zclP4sxRo5LM6aoX0vX0Yvl+KfRj9Vso5lWKPiyXt96d 1JOf/yzLc/tb1qUujOiX1XXsCWyKee1Md7LAxPJK9uJP25TsfJGlgQj9QX+oEh0q 01U/hlJwQthIlo+w6LBo9lXzc811BAq35GvQ0CXECBUpscgXA/Wgt2N7LA5/k0pi Cn0c9TYn3dQTyoXStI5joX5RVe3E0QIUTyyyb3EiaZOaKhq+wKgush7M8h49wu2F le8X8rbFdwgPs5UevIJWZhb/J/7VvdXXn/2BpRC3L4r+o+S63jGPV54KrUGtw67I /w7qhL25tPndcN4ZriT7VbWuTbmuc6oR -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org