$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: efk5j22aIy86CbKR7Jh6QJGkijdnYLhi3HypwjLh9so= Subject key identifier: 1E:50:1F:D9:CC:B8:13:C6:EA:66:51:2E:ED:6D:B0:E9:DD:37:17:51 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 1245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 1234 Signing time: Sat 18 May 2024 17:41:15 +0000 Manifest this update: Sat 18 May 2024 17:41:14 +0000 Manifest next update: Sat 25 May 2024 17:41:14 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: A0eCGj8bt+bgqnlaNLg2VctitZKOo0FY6yRPANS/mOM=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: 8CJ6yQII/8J7jxW2ZzqRCJVn7LiOkIu7gPIIoix5e5Q=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: XrfTkWWxSRHzIDn40ycWMNLbdsfmTyqKfBxNaVztmaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4677 (0x1245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: May 18 17:41:14 2024 GMT Not After : May 25 17:41:14 2024 GMT Subject: CN=6648e83a-6a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:fd:ee:87:b3:05:23:5f:36:41:7b:99:58: 95:ad:50:5b:b9:69:44:d1:36:e4:d2:39:2d:f4:8d: e3:40:ba:a4:75:d5:7a:3e:67:77:ce:ef:f8:68:92: 3b:92:3d:b1:4a:30:ea:bd:72:27:56:4f:62:3a:19: 67:91:17:51:91:1b:6f:a1:f7:fb:6a:e4:a3:45:0c: 5b:bc:db:25:74:36:dd:e6:c0:4b:ea:e9:8e:6a:68: 3c:cd:6f:72:5a:43:1b:f5:98:8f:66:87:94:90:2e: e4:29:0b:93:18:fe:ca:68:e7:cd:b6:0d:49:64:f5: 40:4d:17:ca:11:a2:47:1d:b2:58:86:5b:bd:71:0e: 86:a1:e2:04:3e:5b:17:54:4f:3e:7b:07:e1:78:ba: de:f6:be:e8:c1:34:ad:cd:78:b7:ea:43:87:41:48: 31:4f:2f:a7:89:4f:4c:2a:43:7a:dd:f4:16:a0:ac: 56:36:32:ce:aa:fe:63:49:cc:34:ad:1d:de:ca:73: 78:a5:37:76:d1:e3:3f:f2:e5:9c:82:85:d6:8c:99: 5d:e4:ad:68:3a:79:ec:f6:aa:f8:24:61:aa:5e:1e: d0:b3:33:25:b0:cb:dc:4c:fa:a0:8d:d5:3d:46:65: 2b:82:51:1d:d0:1b:75:6e:e8:fc:55:31:9b:e4:56: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:1F:D9:CC:B8:13:C6:EA:66:51:2E:ED:6D:B0:E9:DD:37:17:51 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:69:67:32:56:c3:9b:bf:03:f6:3c:cb:fc:68:ef:dd:3d:da: f0:cc:1b:97:96:9c:78:dc:ae:c3:30:54:00:8c:a2:e1:be:b7: 29:f8:cc:31:18:36:1f:a2:99:3a:38:f5:49:65:0d:89:27:80: c7:26:72:f8:66:c8:b6:60:03:93:44:77:21:88:ac:d4:0e:88: 80:9f:62:f1:55:32:f4:bd:0d:f4:77:21:b5:1f:ac:29:da:42: 3f:58:b6:f0:43:6b:2d:92:8c:46:a9:3e:da:3b:f4:4e:b2:b3: 8e:33:dc:37:b6:44:e4:f5:0c:03:ea:d7:52:86:2b:14:ad:ea: 8b:77:2b:92:54:e6:dd:f6:1c:99:03:48:71:4c:63:c7:fe:9d: 24:ca:52:ff:9a:a0:24:c2:1f:d5:f8:93:1e:79:39:7e:29:78: 8b:89:2c:b1:89:51:60:51:70:7c:29:59:e1:65:e9:a2:76:76: ac:89:80:3d:56:73:a9:53:eb:1d:43:ef:fd:65:cd:40:7a:65: 9d:a3:53:fe:30:e7:51:21:d4:9b:86:ca:30:78:fb:ee:28:55: 9b:83:cd:5e:e3:ce:e8:b1:81:12:80:32:90:18:5f:6c:0a:6c: de:aa:e6:d9:2e:a2:b1:bd:92:15:71:fc:11:e0:a3:bd:74:76: d5:b9:3d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjQwNTE4MTc0MTE0WhcNMjQwNTI1MTc0MTE0WjAYMRYwFAYD VQQDEw02NjQ4ZTgzYS02YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2e397oezBSNfNkF7mViVrVBbuWlE0Tbk0jkt9I3jQLqkddV6Pmd3zu/4aJI7 kj2xSjDqvXInVk9iOhlnkRdRkRtvoff7auSjRQxbvNsldDbd5sBL6umOamg8zW9y WkMb9ZiPZoeUkC7kKQuTGP7KaOfNtg1JZPVATRfKEaJHHbJYhlu9cQ6GoeIEPlsX VE8+ewfheLre9r7owTStzXi36kOHQUgxTy+niU9MKkN63fQWoKxWNjLOqv5jScw0 rR3eynN4pTd20eM/8uWcgoXWjJld5K1oOnns9qr4JGGqXh7QszMlsMvcTPqgjdU9 RmUrglEd0Bt1buj8VTGb5FZeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5QH9nM uBPG6mZRLu1tsOndNxdRMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvaWcyVsObvwP2PMv8aO/dPdrwzBuXlpx43K7DMFQAjKLhvrcp+Mwx GDYfopk6OPVJZQ2JJ4DHJnL4Zsi2YAOTRHchiKzUDoiAn2LxVTL0vQ30dyG1H6wp 2kI/WLbwQ2stkoxGqT7aO/ROsrOOM9w3tkTk9QwD6tdShisUreqLdyuSVObd9hyZ A0hxTGPH/p0kylL/mqAkwh/V+JMeeTl+KXiLiSyxiVFgUXB8KVnhZemidnasiYA9 VnOpU+sdQ+/9Zc1AemWdo1P+MOdRIdSbhsowePvuKFWbg81e487osYESgDKQGF9s CmzequbZLqKxvZIVcfwR4KO9dHbVuT3z -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org