$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: Fr60hGy0mxrYNqaK1maGl7mbIXZJKl8QqzhDbV960Y4= Subject key identifier: 44:2C:00:F4:BB:5C:BB:34:CE:64:25:CE:2F:0B:EF:9A:EF:A6:C4:A4 Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: 27 Signing time: Sun 19 May 2024 08:29:24 +0000 Manifest this update: Sun 19 May 2024 08:29:24 +0000 Manifest next update: Sun 26 May 2024 08:29:24 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: yMnv2EE/VsVbu5JbSmOdVmFeSPcHvxCNBkTDGoFMkt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: May 19 08:29:24 2024 GMT Not After : May 26 08:29:24 2024 GMT Subject: CN=6649b864-edec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:10:a3:db:c9:5e:03:99:b0:8b:54:a7:80: 7d:1a:4b:cf:37:3d:a8:35:d2:5d:f6:35:8d:8c:91: 9d:2d:5b:82:8d:88:02:dd:ae:63:29:7b:46:64:d4: 11:5f:d3:2d:c3:3c:da:2e:43:64:a0:05:73:6d:f8: 77:7e:ba:2d:d2:d3:6a:56:8d:d4:48:76:bd:16:2d: 8a:5d:55:fb:e9:d9:be:8c:80:3c:0a:12:14:32:78: 5e:d2:1c:32:21:2d:fd:87:52:b2:ef:43:7b:1c:3a: 07:42:34:ab:99:ed:47:0f:05:48:5e:3c:c3:55:6d: f5:b6:29:17:9b:8f:6b:57:ae:90:6e:de:c7:a3:02: 25:ef:8a:1e:fa:7e:fc:cd:4c:44:0e:6e:f1:df:71: 19:92:2e:09:de:4d:a4:64:6e:05:4b:05:ef:3a:5c: b3:c9:e4:e3:ac:bc:f8:99:f0:d1:b9:a3:a6:65:9c: aa:f4:0f:da:02:52:ef:eb:7a:0b:25:d8:6a:e1:28: 66:8d:df:e3:52:10:92:c1:af:1c:d5:a5:b6:90:7b: 7e:51:2f:a9:2f:ae:11:bb:66:05:3f:cd:d3:95:38: 9b:9a:b9:51:33:13:65:22:6d:32:af:d2:47:70:2f: b8:d3:ee:e1:d2:d9:a9:be:19:51:1f:b8:03:65:ee: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2C:00:F4:BB:5C:BB:34:CE:64:25:CE:2F:0B:EF:9A:EF:A6:C4:A4 X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:cc:cb:66:04:94:80:d0:cc:25:41:34:e7:72:e7:5a:2c:bc: e9:79:46:c8:41:50:c9:be:f3:72:99:53:6e:2a:32:57:a3:9b: c5:92:0f:a7:c9:4d:93:ea:94:42:b6:84:89:8c:e8:55:f5:54: 6f:69:c4:3e:b6:b3:c5:40:e2:3c:59:7a:8c:d7:34:d1:21:23: a5:c0:ec:55:a3:49:3a:11:6a:de:be:1b:44:01:18:97:7b:a5: b1:1c:92:0b:e8:9e:4b:98:36:57:bc:6e:6d:48:21:51:8f:b9: 67:57:3b:e1:f0:22:af:14:84:07:aa:28:0f:93:53:77:3e:69: 4c:71:f7:75:fe:9b:69:8f:a0:73:f0:93:f6:51:19:1b:fd:41: 83:e0:f9:6c:7b:3c:3b:80:c9:07:c9:3a:13:db:d1:19:81:4f: ac:08:94:c1:f3:1d:83:89:27:d0:11:bf:f8:6b:96:bf:f7:6f: f5:59:df:57:25:aa:7e:b0:77:0c:69:44:cc:96:1b:49:28:80: 13:42:3b:7c:c3:50:e8:c1:e1:86:60:72:2a:ea:1d:1c:75:ac: 96:f6:07:2c:98:08:ff:97:f6:43:ca:02:01:cb:d7:9b:20:a8: 98:61:6b:0d:e5:76:a0:3d:19:1b:9a:52:1c:b7:c1:a2:54:98: 2d:b6:03:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDAwRTExMC8GA1UEBRMoQzE5RDZCNkRFQjNBMUY5QzM5ODQ3RTE0Q0FBNTU5OTdC QzlDRjI3NjAeFw0yNDA1MTkwODI5MjRaFw0yNDA1MjYwODI5MjRaMBgxFjAUBgNV BAMTDTY2NDliODY0LWVkZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmMRCj28leA5mwi1SngH0aS883Pag10l32NY2MkZ0tW4KNiALdrmMpe0Zk1BFf 0y3DPNouQ2SgBXNt+Hd+ui3S02pWjdRIdr0WLYpdVfvp2b6MgDwKEhQyeF7SHDIh Lf2HUrLvQ3scOgdCNKuZ7UcPBUhePMNVbfW2KRebj2tXrpBu3sejAiXvih76fvzN TEQObvHfcRmSLgneTaRkbgVLBe86XLPJ5OOsvPiZ8NG5o6ZlnKr0D9oCUu/regsl 2GrhKGaN3+NSEJLBrxzVpbaQe35RL6kvrhG7ZgU/zdOVOJuauVEzE2UibTKv0kdw L7jT7uHS2am+GVEfuANl7rOnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURCwA9Ltc uzTOZCXOLwvvmu+mxKQwHwYDVR0jBBgwFoAUwZ1rbes6H5w5hH4UyqVZl7yc8nYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MDBFL0NFREE1MkM0RDk0 ODExRUVCQTM0QjQ3QkM0RjlBRTAyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5Yzhu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1oxcmJlczZINXc1aEg0VXlxVlpsN3ljOG5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MDBFL0NFREE1MkM0RDk0ODExRUVCQTM0QjQ3QkM0RjlBRTAyL3daMXJiZXM2SDV3 NWhINFV5cVZabDd5YzhuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7My2YElIDQzCVBNOdy51osvOl5RshBUMm+83KZU24qMlejm8WSD6fJ TZPqlEK2hImM6FX1VG9pxD62s8VA4jxZeozXNNEhI6XA7FWjSToRat6+G0QBGJd7 pbEckgvonkuYNle8bm1IIVGPuWdXO+HwIq8UhAeqKA+TU3c+aUxx93X+m2mPoHPw k/ZRGRv9QYPg+Wx7PDuAyQfJOhPb0RmBT6wIlMHzHYOJJ9ARv/hrlr/3b/VZ31cl qn6wdwxpRMyWG0kogBNCO3zDUOjB4YZgcirqHRx1rJb2ByyYCP+X9kPKAgHL15sg qJhhaw3ldqA9GRuaUhy3waJUmC22Awk= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org