$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft File: wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft (raw, json) Hash identifier: r4U+UfOM9OqJvk+y2WxrtcH9eFy3wyv8f/vbRQuKymQ= Subject key identifier: 7D:E6:E1:B5:46:FF:4D:40:F3:57:58:1F:F5:FE:CF:37:C2:77:1C:32 Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94 Certificate issuer: /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94 Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft Manifest number: 0893 Signing time: Sat 18 May 2024 21:32:33 +0000 Manifest this update: Sat 18 May 2024 21:32:33 +0000 Manifest next update: Sat 25 May 2024 21:32:33 +0000 Files and hashes: 1: wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl (hash: A/iNiXHbH4ePDjJlfas0DFScEEqbG1rCbLtXBYJj24A=) 2: 170BFAA6995211EA9CF98C52C4F9AE02.roa (hash: qEEAO2yPs18fmAWAmDBwv1g1+GvFxLo2Y1XMguxhllg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94 Validity Not Before: May 18 21:32:33 2024 GMT Not After : May 25 21:32:33 2024 GMT Subject: CN=66491e71-f6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:b7:92:c1:d9:e6:e7:c0:dd:29:01:62:cb: 76:6d:c0:cc:25:83:23:54:34:1c:59:84:f4:47:7c: 0f:26:c4:eb:ae:42:ad:ab:81:3b:68:92:eb:11:ae: 4e:c5:25:9a:c2:9a:01:14:70:96:d2:e2:e1:00:7f: 13:ef:a3:45:1e:21:9c:6d:16:e4:95:cf:ef:3b:23: 50:f5:c1:1e:65:92:85:07:71:6b:07:c1:7d:41:0e: ac:81:4e:77:52:56:35:a8:fc:96:d6:fc:d8:b9:ab: 5a:7d:15:b7:76:5c:74:78:d9:c2:da:ff:50:41:66: 44:74:a3:f6:a0:04:62:1d:eb:55:b3:68:33:95:ad: 89:1c:40:07:a2:86:b6:d0:eb:20:85:b0:46:2f:ba: 7e:23:48:2f:8d:0c:37:30:9d:9e:39:04:57:e9:ea: 5b:96:6b:fa:5f:0d:f6:ed:50:c3:3b:78:0f:92:c5: ab:b4:15:a2:71:8d:0e:cf:df:9c:bf:38:a2:c1:01: 1f:aa:5c:0a:bd:69:52:40:59:83:d5:84:2d:25:53: b6:e3:66:66:1c:64:79:11:73:ef:76:7c:90:91:2f: c0:e5:46:73:fe:ba:45:d4:35:70:f9:82:39:96:e0: 12:29:18:07:83:66:0f:18:7b:b0:5b:44:67:5e:50: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:E1:B5:46:FF:4D:40:F3:57:58:1F:F5:FE:CF:37:C2:77:1C:32 X509v3 Authority Key Identifier: keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3e:e1:32:90:85:bb:e9:4a:e6:6f:78:7f:e2:4e:a7:61:cd: 40:98:f5:12:62:77:86:eb:c5:cb:dc:98:04:22:58:a0:f1:50: 52:0e:fc:97:fa:02:fe:7f:08:f3:1d:b1:96:7e:1a:4b:c5:df: 82:aa:aa:0a:e9:79:52:cf:86:e4:65:90:a2:4c:e8:20:3f:c5: 35:0d:74:14:a5:af:37:d9:5e:43:28:32:e8:b0:91:6d:66:77: 7a:89:bb:d2:ff:ca:c1:6e:40:0f:03:8a:01:21:92:5b:4b:56: 73:b2:84:c5:2b:c1:9f:cb:ac:af:d7:60:e3:11:25:6e:02:04: b0:98:95:e2:2a:2d:d9:a2:09:78:ae:c6:42:26:50:cd:4d:4e: 13:74:10:b8:11:ea:bd:da:cc:68:0f:05:f6:eb:e8:82:82:d4: be:f0:7d:96:03:e8:64:2b:90:18:4d:28:97:4d:a1:28:11:ea: b9:d3:c5:c9:04:e5:72:84:6a:30:5d:f3:97:0b:90:95:9f:96: 52:fb:6d:9b:ee:03:c9:48:b6:6c:cb:c0:60:e0:38:41:4b:cb: 1c:0b:dc:35:04:b5:6c:df:95:78:fd:40:04:07:13:88:e4:68: b6:74:0c:58:6c:8c:fa:23:d6:24:61:ee:4d:86:97:af:30:72: d9:f3:77:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKEMwQkExREZCMzU5OTZGQ0U5QTdFNDg1OUU4QUY4Nzkx RkFGMEVDOTQwHhcNMjQwNTE4MjEzMjMzWhcNMjQwNTI1MjEzMjMzWjAYMRYwFAYD VQQDEw02NjQ5MWU3MS1mNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYq3ksHZ5ufA3SkBYst2bcDMJYMjVDQcWYT0R3wPJsTrrkKtq4E7aJLrEa5O xSWawpoBFHCW0uLhAH8T76NFHiGcbRbklc/vOyNQ9cEeZZKFB3FrB8F9QQ6sgU53 UlY1qPyW1vzYuatafRW3dlx0eNnC2v9QQWZEdKP2oARiHetVs2gzla2JHEAHooa2 0OsghbBGL7p+I0gvjQw3MJ2eOQRX6epblmv6Xw327VDDO3gPksWrtBWicY0Oz9+c vziiwQEfqlwKvWlSQFmD1YQtJVO242ZmHGR5EXPvdnyQkS/A5UZz/rpF1DVw+YI5 luASKRgHg2YPGHuwW0RnXlDipwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3m4bVG /01A81dYH/X+zzfCdxwyMB8GA1UdIwQYMBaAFMC6Hfs1mW/Omn5IWeivh5H68OyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi8zNEY2Nzk4Qzk2 NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4NmFma2haNkstSGtmcnc3 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMb2QteldaYjg2YWZraFo2Sy1Ia2ZydzdKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi8zNEY2Nzk4Qzk2NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4 NmFma2haNkstSGtmcnc3SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASPuEykIW76Urmb3h/4k6nYc1AmPUSYneG68XL3JgEIlig8VBSDvyX +gL+fwjzHbGWfhpLxd+CqqoK6XlSz4bkZZCiTOggP8U1DXQUpa832V5DKDLosJFt Znd6ibvS/8rBbkAPA4oBIZJbS1ZzsoTFK8Gfy6yv12DjESVuAgSwmJXiKi3Zogl4 rsZCJlDNTU4TdBC4Eeq92sxoDwX26+iCgtS+8H2WA+hkK5AYTSiXTaEoEeq508XJ BOVyhGowXfOXC5CVn5ZS+22b7gPJSLZsy8Bg4DhBS8scC9w1BLVs35V4/UAEBxOI 5Gi2dAxYbIz6I9YkYe5NhpevMHLZ83dt -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org