$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: VewVfIwzZk6/rIiHknc8Gy4GqeZZog/AgHV1My2LGPg= Subject key identifier: 9A:50:B2:94:B6:3D:02:21:64:99:63:53:2C:74:7C:91:EF:0D:53:C3 Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 7A Signing time: Sun 19 May 2024 07:17:09 +0000 Manifest this update: Sun 19 May 2024 07:17:08 +0000 Manifest next update: Sun 26 May 2024 07:17:08 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: 9fCOG1IJ7ojWUIRa+eHHIoTxJSOvhGn0+fz/0UsdVOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: May 19 07:17:08 2024 GMT Not After : May 26 07:17:08 2024 GMT Subject: CN=6649a775-5fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:be:9d:87:ee:e8:f8:53:83:6d:24:7b:12: 9c:06:a8:7e:e1:be:73:a1:a1:61:2c:ed:69:54:ea: f4:f3:8f:3b:6c:c5:06:ac:0e:20:4f:31:3b:db:b3: dc:21:a9:d1:15:99:e2:3e:92:96:e9:69:d0:2c:e0: f4:aa:46:c6:94:26:25:0a:cb:a0:7d:d2:6f:f6:43: 5e:26:28:25:05:81:db:64:69:66:9b:4f:d7:05:1d: 1f:89:d9:c6:b6:c1:7a:a0:6e:db:c3:35:3c:86:16: be:c6:66:c4:c9:18:7e:24:dc:7b:49:35:46:9f:fd: 9c:36:3f:7b:15:3b:68:1d:28:dc:63:3a:1a:51:43: da:26:48:8b:0c:f3:cd:a1:b7:0a:27:76:58:63:1d: 8d:fb:8a:43:80:97:45:a5:8f:5f:e8:1e:0b:a6:6a: 65:22:38:64:14:c9:9f:90:c3:fc:e6:04:97:9b:87: 27:71:8e:ec:77:74:db:59:f5:a9:d3:c5:31:c3:01: 45:f8:20:de:3f:82:23:03:f1:38:89:97:4f:3c:00: 21:15:ba:0a:da:93:f1:44:52:96:65:e9:b2:f8:3e: 45:0b:2d:41:89:79:f6:7d:0c:0a:0c:74:34:75:cc: ea:10:c9:4b:3b:43:9c:d2:57:2e:33:1e:3d:a8:56: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:50:B2:94:B6:3D:02:21:64:99:63:53:2C:74:7C:91:EF:0D:53:C3 X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cf:32:31:1f:97:10:97:64:a5:e4:2f:27:54:1d:ef:e5:4f: 05:9a:06:7d:31:32:36:a6:b7:fe:26:9b:ab:0f:9f:15:2a:a1: 0a:0e:85:54:50:c9:b0:b5:a7:af:28:49:69:ea:17:a8:90:19: 11:b9:99:8b:b6:ce:b3:7d:97:b0:6b:f4:c9:54:f6:a5:3b:57: 42:7d:65:b0:61:1a:86:b0:db:ae:13:5b:5c:d5:26:85:75:f3: 45:5e:06:9c:27:fa:a3:a2:72:0a:79:51:b9:bf:39:74:b5:c4: 7f:75:1a:3d:a7:a0:0a:01:ac:89:f6:e8:40:97:c2:44:0e:71: 21:09:2f:d2:b7:1b:26:de:59:2c:04:81:dc:7f:f7:bb:08:9c: f6:57:7a:89:57:ff:c8:df:a5:7d:38:71:79:aa:27:a4:65:7b: e6:49:74:28:4e:1b:34:10:8a:f1:52:91:09:4d:3f:25:24:22: 0d:54:4e:96:d4:41:ed:78:e8:b4:b4:3c:dd:5a:80:7d:9e:0d: 3d:b8:5b:d1:5f:b9:34:0c:c2:21:2f:39:50:1b:08:88:1f:11: 78:ec:02:67:90:2f:49:83:5f:e0:71:90:4e:b2:a2:84:f8:70: 67:82:ba:75:0c:86:e0:36:85:b1:4e:08:0c:cf:86:ba:05:0b: 8e:95:d9:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RjkzNzExMC8GA1UEBRMoQzAwRjA1QUUwRkE5QjY4MEE5MUI1NkYwRDMyMUM1MTg4 QzFFNzEyQzAeFw0yNDA1MTkwNzE3MDhaFw0yNDA1MjYwNzE3MDhaMBgxFjAUBgNV BAMTDTY2NDlhNzc1LTVmYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXOL6dh+7o+FODbSR7EpwGqH7hvnOhoWEs7WlU6vTzjztsxQasDiBPMTvbs9wh qdEVmeI+kpbpadAs4PSqRsaUJiUKy6B90m/2Q14mKCUFgdtkaWabT9cFHR+J2ca2 wXqgbtvDNTyGFr7GZsTJGH4k3HtJNUaf/Zw2P3sVO2gdKNxjOhpRQ9omSIsM882h twondlhjHY37ikOAl0Wlj1/oHgumamUiOGQUyZ+Qw/zmBJebhydxjux3dNtZ9anT xTHDAUX4IN4/giMD8TiJl088ACEVugrak/FEUpZl6bL4PkULLUGJefZ9DAoMdDR1 zOoQyUs7Q5zSVy4zHj2oVkkXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmlCylLY9 AiFkmWNTLHR8ke8NU8MwHwYDVR0jBBgwFoAUwA8Frg+ptoCpG1bw0yHFGIwecSww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGOTM3LzJGMkIzRjIwNUIy MzExRUVCODc3M0Y3MEM0RjlBRTAyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNT dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0E4RnJnLXB0b0NwRzFidzB5SEZHSXdlY1N3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG OTM3LzJGMkIzRjIwNUIyMzExRUVCODc3M0Y3MEM0RjlBRTAyL3dBOEZyZy1wdG9D cEcxYncweUhGR0l3ZWNTdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3PMjEflxCXZKXkLydUHe/lTwWaBn0xMjamt/4mm6sPnxUqoQoOhVRQ ybC1p68oSWnqF6iQGRG5mYu2zrN9l7Br9MlU9qU7V0J9ZbBhGoaw264TW1zVJoV1 80VeBpwn+qOicgp5Ubm/OXS1xH91Gj2noAoBrIn26ECXwkQOcSEJL9K3GybeWSwE gdx/97sInPZXeolX/8jfpX04cXmqJ6Rle+ZJdChOGzQQivFSkQlNPyUkIg1UTpbU Qe146LS0PN1agH2eDT24W9FfuTQMwiEvOVAbCIgfEXjsAmeQL0mDX+BxkE6yooT4 cGeCunUMhuA2hbFOCAzPhroFC46V2ZA= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org