$ rpki-client -vvf rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft File: WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft (raw, json) Hash identifier: qFBIpxl9cYv0Mr5W1KPZcsCr+FnQeBDatndPlFlZkXo= Subject key identifier: 3E:9A:18:69:12:D4:38:09:FC:95:D2:25:D6:31:70:AD:0C:B6:C0:F3 Authority key identifier: 58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74 Certificate issuer: /CN=A91455BE/serialNumber=5839D445BA3B3F53E2D0A42023100B1875A96174 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft Manifest number: 79 Signing time: Fri 31 May 2024 08:14:17 +0000 Manifest this update: Fri 31 May 2024 08:14:17 +0000 Manifest next update: Fri 07 Jun 2024 08:14:17 +0000 Files and hashes: 1: WDnURbo7P1Pi0KQgIxALGHWpYXQ.crl (hash: NfVDovpxxoS+ijzaVTzXYmkH2wwxYK+iwvizpASB3Zw=) 2: 27DE3D4C675511EEAD204D46C4F9AE02.roa (hash: qHL4gu1EUj7Oyzpx7BrZuPQd3XpAvcpeIebqUwat6IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.crl rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91455BE/serialNumber=5839D445BA3B3F53E2D0A42023100B1875A96174 Validity Not Before: May 31 08:14:17 2024 GMT Not After : Jun 7 08:14:17 2024 GMT Subject: CN=665986d9-0ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:42:5b:de:10:5a:dc:c5:01:01:6c:b4:3d: ad:10:b4:ef:a4:6f:ea:5f:8a:a0:e1:63:49:1d:a5: 8e:7b:19:69:5d:79:04:5d:c2:fa:b6:86:c9:46:84: 95:44:08:35:fa:95:77:62:5b:91:43:fc:6e:7d:4d: df:93:e4:53:53:45:d2:7c:ea:31:1c:80:80:2d:94: 06:cc:2f:8f:df:b5:aa:81:45:16:2e:76:c9:07:4f: 65:32:bf:6e:55:75:42:bb:b8:54:1d:d9:83:5f:a7: da:71:72:1f:91:db:93:15:94:7a:1e:2a:31:0e:46: d0:c1:54:a6:71:d2:a0:6d:95:13:03:26:c8:15:e0: 87:ef:90:8d:03:57:20:7b:fd:05:04:6d:88:5a:c2: c5:ed:7e:69:b9:77:2f:bc:7e:19:a8:ee:4b:03:4c: 66:5a:52:3d:4e:7d:15:19:0f:2c:5d:0f:93:d9:7d: 3d:ae:e3:65:c9:b6:5d:ba:8a:04:52:d9:b5:52:7c: 12:70:e6:5d:ea:ff:73:70:d3:8b:f4:bb:96:4a:72: c0:d5:c6:8c:c8:5c:38:eb:eb:93:c4:0c:52:fa:2c: 56:9c:b8:6b:8a:3d:17:34:10:8b:67:e4:74:e4:02: 56:c1:fa:e1:de:57:43:b2:f0:53:74:62:09:bd:03: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9A:18:69:12:D4:38:09:FC:95:D2:25:D6:31:70:AD:0C:B6:C0:F3 X509v3 Authority Key Identifier: keyid:58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:55:6f:fb:81:12:e8:c2:40:83:03:2f:cd:7c:8e:e2:3f:ef: c9:d8:30:c0:fa:23:6a:c9:dd:fe:e1:07:82:39:ee:22:c9:af: 9f:8e:5e:f6:23:06:cc:fd:6a:96:ac:30:a3:fc:fd:ee:e5:dc: f9:5d:e9:37:8a:b1:21:23:de:ce:d0:6c:63:ea:29:df:d7:42: 16:b4:1d:f1:b2:3e:ce:18:3e:d7:8c:9a:83:22:26:f9:30:f4: 5f:ff:7b:00:a1:af:0e:25:66:a5:7e:64:69:5e:a6:08:9a:fb: c3:5b:18:7f:79:fe:de:46:51:77:79:7d:47:33:b0:e7:38:3e: 73:76:96:f4:d0:d8:9e:8f:e6:03:99:a8:aa:6b:c9:67:2d:88: f6:98:72:3c:41:c3:07:c4:58:16:0c:49:ed:db:5f:3e:94:71: f7:f7:ad:cc:ad:29:3c:23:a0:74:ad:a4:db:21:fa:50:52:50: 26:00:fb:97:6f:a3:1c:5b:c7:2f:70:df:8f:7c:ba:26:ea:a1: aa:a8:f0:53:72:f7:58:8c:3f:74:eb:c5:dd:01:7a:5c:a9:0b: de:4e:a5:53:33:09:53:5f:be:f3:a3:dd:3b:28:6e:f4:29:df: b1:34:a3:e6:50:dd:63:95:27:70:f6:dc:48:65:d0:33:ab:4f: 67:36:d8:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTVCRTExMC8GA1UEBRMoNTgzOUQ0NDVCQTNCM0Y1M0UyRDBBNDIwMjMxMDBCMTg3 NUE5NjE3NDAeFw0yNDA1MzEwODE0MTdaFw0yNDA2MDcwODE0MTdaMBgxFjAUBgNV BAMTDTY2NTk4NmQ5LTBjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8i0Jb3hBa3MUBAWy0Pa0QtO+kb+pfiqDhY0kdpY57GWldeQRdwvq2hslGhJVE CDX6lXdiW5FD/G59Td+T5FNTRdJ86jEcgIAtlAbML4/ftaqBRRYudskHT2Uyv25V dUK7uFQd2YNfp9pxch+R25MVlHoeKjEORtDBVKZx0qBtlRMDJsgV4IfvkI0DVyB7 /QUEbYhawsXtfmm5dy+8fhmo7ksDTGZaUj1OfRUZDyxdD5PZfT2u42XJtl26igRS 2bVSfBJw5l3q/3Nw04v0u5ZKcsDVxozIXDjr65PEDFL6LFacuGuKPRc0EItn5HTk AlbB+uHeV0Oy8FN0Ygm9A1VjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPpoYaRLU OAn8ldIl1jFwrQy2wPMwHwYDVR0jBBgwFoAUWDnURbo7P1Pi0KQgIxALGHWpYXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NUJFL0REREE3RUQ2Njc1 NDExRUU5REU3MDE0M0M0RjlBRTAyL1dEblVSYm83UDFQaTBLUWdJeEFMR0hXcFlY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0RuVVJibzdQMVBpMEtRZ0l4QUxHSFdwWVhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NUJFL0REREE3RUQ2Njc1NDExRUU5REU3MDE0M0M0RjlBRTAyL1dEblVSYm83UDFQ aTBLUWdJeEFMR0hXcFlYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdVb/uBEujCQIMDL818juI/78nYMMD6I2rJ3f7hB4I57iLJr5+OXvYj Bsz9apasMKP8/e7l3Pld6TeKsSEj3s7QbGPqKd/XQha0HfGyPs4YPteMmoMiJvkw 9F//ewChrw4lZqV+ZGlepgia+8NbGH95/t5GUXd5fUczsOc4PnN2lvTQ2J6P5gOZ qKpryWctiPaYcjxBwwfEWBYMSe3bXz6Ucff3rcytKTwjoHStpNsh+lBSUCYA+5dv oxxbxy9w3498uibqoaqo8FNy91iMP3Trxd0BelypC95OpVMzCVNfvvOj3TsobvQp 37E0o+ZQ3WOVJ3D23Ehl0DOrT2c22FM= -----END CERTIFICATE-----Generated at Fri May 31 10:42:20 2024 by rpki-client on console-fra.rpki-client.org