$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: yU0kTNO94OwJT8/VTxAFnNj9eWbIeed1o2dIpYvWUos= Subject key identifier: 00:09:48:97:76:A7:9F:29:19:F1:AF:B6:8F:B2:15:74:A7:B3:43:BD Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0ADD Signing time: Sat 18 May 2024 20:03:50 +0000 Manifest this update: Sat 18 May 2024 20:03:50 +0000 Manifest next update: Sat 25 May 2024 20:03:50 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: xvaTqtt22V0WzAar9+cx7cXGTrVFzKwBWOqCHgaUS48=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: +JUSMu0C/kOLfZkdFWfDm5VHGngMhJgPT+7RyVNnJzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: May 18 20:03:50 2024 GMT Not After : May 25 20:03:50 2024 GMT Subject: CN=664909a6-4b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:cb:27:6e:f5:d4:2d:4f:db:4a:c3:75:3e: 5d:1c:d5:05:77:b1:71:c2:d2:03:8b:cd:0d:a6:a5: 21:a3:59:0f:de:a8:8c:c4:22:ac:d7:5d:d1:38:17: a6:64:87:16:8a:80:0f:af:57:e6:c6:b8:58:7c:f3: 1e:b7:56:3a:f4:39:d2:ad:5a:b2:57:43:35:2b:eb: 25:88:18:20:9a:5c:c7:a2:1d:71:80:ec:aa:72:60: 48:e7:ff:2c:f1:ad:af:45:e4:a1:56:d3:92:9e:be: 35:49:84:8e:4b:d4:ba:88:ba:2c:3f:ac:c7:ef:62: c6:c3:3d:e6:b6:2c:05:83:e1:88:d0:8c:86:56:c6: 9c:41:01:ca:01:68:36:d0:1c:a1:a2:bd:e5:ca:b4: c3:57:d8:fe:19:2e:c9:7a:48:82:93:8f:2d:c3:51: df:76:7c:55:3b:eb:6c:49:78:60:db:ea:52:7f:38: 49:d7:e8:3d:72:e8:9f:ef:ca:b7:52:e3:b5:75:77: 1f:05:a5:34:34:5d:99:ea:ec:8e:5f:f3:df:f2:f2: 36:73:77:d7:00:aa:56:4a:35:95:f6:b6:26:e3:d8: 6f:f7:97:85:ff:a5:ac:2e:55:07:6e:55:5a:e3:04: 8b:c3:cf:7f:bb:80:39:91:97:9a:a6:ba:a5:65:42: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:09:48:97:76:A7:9F:29:19:F1:AF:B6:8F:B2:15:74:A7:B3:43:BD X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e6:b2:16:55:36:8b:ac:a0:2e:8d:67:92:ee:9a:b0:a7:dc: 74:16:81:18:0d:af:a7:b2:33:e8:6d:8f:e5:94:b5:c9:f5:90: 8d:88:31:06:47:0b:58:b0:dd:bc:f8:b1:ab:89:2e:c9:3e:09: 25:2d:33:fe:70:9d:37:93:dc:4c:6f:b4:85:0e:37:ea:28:38: 50:31:d7:50:ff:9c:92:54:a9:23:42:09:d1:ce:4a:59:73:5f: 2b:f9:75:7a:a5:94:96:ad:62:bb:56:25:f6:56:2b:2b:0f:5e: 4e:8d:19:7c:3d:d2:b5:cb:6b:6b:22:2a:37:9c:b6:b0:63:ba: f0:d4:98:8d:04:82:13:27:25:85:60:88:0d:93:b6:66:2b:f7: ba:fa:07:59:a3:21:1c:49:ca:02:7b:a6:2c:5f:bb:6c:0a:80: e0:61:a8:a6:09:4e:48:2d:33:95:c9:17:dd:70:02:3b:78:0f: 80:1c:ff:1f:8d:52:d3:ee:7d:91:db:6a:4b:8e:b1:9e:aa:09: 24:ad:44:e9:12:55:84:0d:58:cc:84:9f:5d:0e:df:84:38:2b: fc:a7:29:95:b5:bb:f2:43:56:3e:c9:8f:54:79:bc:35:85:68: 8f:0e:58:90:e2:82:7e:8c:75:70:5f:2a:64:bf:e8:75:1d:11: 3e:f3:c5:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjQwNTE4MjAwMzUwWhcNMjQwNTI1MjAwMzUwWjAYMRYwFAYD VQQDEw02NjQ5MDlhNi00YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlLLJ2711C1P20rDdT5dHNUFd7FxwtIDi80NpqUho1kP3qiMxCKs113ROBem ZIcWioAPr1fmxrhYfPMet1Y69DnSrVqyV0M1K+sliBggmlzHoh1xgOyqcmBI5/8s 8a2vReShVtOSnr41SYSOS9S6iLosP6zH72LGwz3mtiwFg+GI0IyGVsacQQHKAWg2 0Byhor3lyrTDV9j+GS7JekiCk48tw1HfdnxVO+tsSXhg2+pSfzhJ1+g9cuif78q3 UuO1dXcfBaU0NF2Z6uyOX/Pf8vI2c3fXAKpWSjWV9rYm49hv95eF/6WsLlUHblVa 4wSLw89/u4A5kZeaprqlZULRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAJSJd2 p58pGfGvto+yFXSns0O9MB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB95rIWVTaLrKAujWeS7pqwp9x0FoEYDa+nsjPobY/llLXJ9ZCNiDEG RwtYsN28+LGriS7JPgklLTP+cJ03k9xMb7SFDjfqKDhQMddQ/5ySVKkjQgnRzkpZ c18r+XV6pZSWrWK7ViX2VisrD15OjRl8PdK1y2trIio3nLawY7rw1JiNBIITJyWF YIgNk7ZmK/e6+gdZoyEcScoCe6YsX7tsCoDgYaimCU5ILTOVyRfdcAI7eA+AHP8f jVLT7n2R22pLjrGeqgkkrUTpElWEDVjMhJ9dDt+EOCv8pymVtbvyQ1Y+yY9Uebw1 hWiPDliQ4oJ+jHVwXypkv+h1HRE+88Xc -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org