$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json) Hash identifier: 9V64dOJH5h1ZHt6IE8W+s36z6tnSo4JBerPf/eJU79A= Subject key identifier: CB:CA:28:BF:A3:5D:F3:2A:5E:1F:74:E7:01:2A:86:5A:09:16:C8:E6 Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 16C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft Manifest number: 1696 Signing time: Sat 18 May 2024 17:08:57 +0000 Manifest this update: Sat 18 May 2024 17:08:57 +0000 Manifest next update: Sat 25 May 2024 17:08:57 +0000 Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: +7caDX3LsBDxaK8opbIakkH4GfnasIVGiHRTC3Walqg=) 2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: VBATkXjYIVoH0C4iNeRjPySzIZVhyo2JDikcE+6Jvbs=) 3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: nGeKeTUPgYPuvBrf2CFwlKqYex4DQBySE4sY9K3KqjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5833 (0x16c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: May 18 17:08:57 2024 GMT Not After : May 25 17:08:57 2024 GMT Subject: CN=6648e0a9-2cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:20:ba:ef:52:95:c9:80:15:6a:96:52:9f: 93:56:b8:38:24:70:63:8e:db:71:d3:4b:ca:f6:0b: 4b:90:a5:0b:07:81:b5:b2:d7:b8:40:64:a4:41:2f: a3:c5:6d:c4:c7:a2:01:2e:61:3c:c2:c6:8c:0e:39: 69:2a:bf:4f:c0:4e:4c:86:46:0b:69:d4:46:a5:8d: e4:6f:e3:5d:a0:b6:a7:29:d2:ff:09:53:14:5a:c9: 0b:1c:37:c3:3f:23:d3:ce:16:33:ef:84:ec:ec:8f: e8:5a:06:31:5d:c5:cd:f7:38:0a:8a:3c:7a:a6:b0: a9:75:f8:42:b3:ea:f0:3a:b2:69:0d:b9:0f:ea:9c: 1a:47:f9:08:3a:2b:c5:23:77:79:c4:c9:bb:15:c5: 0c:48:4e:43:00:f5:98:f5:89:db:28:03:d2:9f:b3: f7:63:9d:e1:18:c7:40:9e:72:b9:ca:ed:a2:7a:d2: 8f:ab:31:40:e9:88:ab:e5:94:94:94:57:73:fb:1e: db:b3:ce:ee:df:57:14:b7:1d:0d:c5:eb:86:93:89: ed:ee:91:05:12:2c:6b:c2:1b:88:9c:bd:b4:a6:37: 94:52:e5:fe:1b:eb:e7:10:1b:ce:e3:3d:f0:f0:ae: dd:23:cb:e7:4a:8b:83:14:9a:e1:70:04:ff:c5:11: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CA:28:BF:A3:5D:F3:2A:5E:1F:74:E7:01:2A:86:5A:09:16:C8:E6 X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d9:b2:a7:78:40:c3:2f:07:2f:34:89:fc:a9:e3:61:1e:4d: bb:e6:5f:f1:4f:1b:57:68:7f:15:c3:39:d7:d7:f3:25:42:83: 53:dd:8a:e6:25:ac:56:e8:36:0e:97:5c:a2:e9:0e:d8:5d:3a: 05:ff:ca:28:ec:ec:17:f3:f8:7a:e2:44:f6:db:41:70:84:df: 61:50:2a:69:de:96:57:bc:77:3a:3f:cb:1a:67:3c:4c:60:f8: cd:fb:b4:34:34:96:89:c1:40:97:62:21:ed:ef:96:33:41:05: 75:f0:0e:b0:02:b5:96:f8:f9:eb:a9:7a:09:70:94:f9:5b:f7: ac:39:94:39:8b:3d:0c:10:d0:d4:d4:2f:f2:d0:ae:ed:45:0d: ee:a4:bb:8f:72:7e:1d:d5:78:26:9f:e3:c8:54:7c:40:33:13: 7c:fa:f7:cc:f9:4f:0b:66:60:33:8f:58:95:2e:8c:71:8b:ea: 32:d2:76:77:9e:6f:4d:8b:9b:f7:ab:25:e7:63:7e:e6:b5:dc: 39:23:80:2d:53:99:4d:d2:8f:15:83:5a:a8:e6:90:8e:b3:2b: f5:2e:f3:1c:b5:9f:85:38:2f:47:7e:e9:11:76:b6:f2:21:84: d1:b1:f9:ed:35:91:e9:92:a3:97:8e:da:31:8b:69:a1:0c:d2: 7c:00:5f:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjQwNTE4MTcwODU3WhcNMjQwNTI1MTcwODU3WjAYMRYwFAYD VQQDEw02NjQ4ZTBhOS0yY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsMguu9SlcmAFWqWUp+TVrg4JHBjjttx00vK9gtLkKULB4G1ste4QGSkQS+j xW3Ex6IBLmE8wsaMDjlpKr9PwE5MhkYLadRGpY3kb+NdoLanKdL/CVMUWskLHDfD PyPTzhYz74Ts7I/oWgYxXcXN9zgKijx6prCpdfhCs+rwOrJpDbkP6pwaR/kIOivF I3d5xMm7FcUMSE5DAPWY9YnbKAPSn7P3Y53hGMdAnnK5yu2ietKPqzFA6Yir5ZSU lFdz+x7bs87u31cUtx0NxeuGk4nt7pEFEixrwhuInL20pjeUUuX+G+vnEBvO4z3w 8K7dI8vnSouDFJrhcAT/xRFRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvKKL+j XfMqXh905wEqhloJFsjmMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ WklER00xSUhhVU84ZWJuOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC12bKneEDDLwcvNIn8qeNhHk275l/xTxtXaH8VwznX1/MlQoNT3Yrm JaxW6DYOl1yi6Q7YXToF/8oo7OwX8/h64kT220FwhN9hUCpp3pZXvHc6P8saZzxM YPjN+7Q0NJaJwUCXYiHt75YzQQV18A6wArWW+PnrqXoJcJT5W/esOZQ5iz0MENDU 1C/y0K7tRQ3upLuPcn4d1Xgmn+PIVHxAMxN8+vfM+U8LZmAzj1iVLoxxi+oy0nZ3 nm9Ni5v3qyXnY37mtdw5I4AtU5lN0o8Vg1qo5pCOsyv1LvMctZ+FOC9HfukRdrby IYTRsfntNZHpkqOXjtoxi2mhDNJ8AF9M -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org