$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: JQgcSoW4C99xcN2kfvEXKkzTJX2esTl79K/ya2oihHk= Subject key identifier: 4E:29:7F:B7:E9:82:EE:10:FB:45:14:06:C9:55:43:06:6B:50:21:BF Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0B4E Signing time: Sat 18 May 2024 19:40:23 +0000 Manifest this update: Sat 18 May 2024 19:40:23 +0000 Manifest next update: Sat 25 May 2024 19:40:23 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: oaI3qKL02rV6B/eJVo48LgZ1cDSQKg+I36+Y61yZIMk=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: +NCb52PYVUsErKg5MPulMzGZXygaFiUI/Ze8fWrVTbQ=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: bjUzuk4oS+TTbZa2OemzXOUwcnZSsSOIB11AnNcEumw=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: Tso7toFNZViIitnOaza0nblvW70wtfOfbP6/rtA1ZuI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 33YWKCkd+q28/qlexqwhaZMF81ot789FXZXqEdaVWjk=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: 9GQLgtTM0CZ9c/TItLR6qiFz3Hc/CNcoUiu/uYw91VI=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: RAfuxCLxadJyM2jgh/vWy7QSPrv8CVZxF/58o1+dcJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: May 18 19:40:23 2024 GMT Not After : May 25 19:40:23 2024 GMT Subject: CN=66490427-dd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:66:f8:41:5b:4d:25:51:0a:51:82:6e:e7: e3:c2:01:56:53:b5:9a:ea:7d:60:a1:6b:b4:63:39: af:a5:2d:7a:da:34:16:0d:16:47:e3:fd:6e:93:ee: c9:d7:c2:65:c0:e6:cb:de:69:a3:15:c2:25:14:79: 7f:e1:76:a6:2b:a7:14:1d:35:46:2e:e9:5c:ed:58: 8c:89:63:e7:51:ac:db:e8:f7:88:61:91:8e:9b:d8: 42:8a:5b:b6:f8:ad:9a:da:cf:d6:a4:a1:7e:30:94: ed:24:ce:a1:35:bf:fa:b2:d7:b0:e2:c0:d6:85:c2: a1:48:44:e5:10:f5:30:e8:16:e0:f6:f7:eb:7b:ea: 67:f7:11:02:ba:7d:5e:31:8f:9a:b0:69:da:a3:ee: dd:37:ba:fc:54:32:b0:2d:4f:c5:30:60:9f:8d:c4: cb:20:4e:18:a6:4d:8d:81:65:40:9d:2f:69:b4:bc: 3b:83:37:9c:83:37:d1:78:e6:1c:b3:82:2a:4d:d0: ee:95:be:51:86:36:32:de:e0:e1:9c:3f:b1:a3:64: e3:73:eb:14:01:2b:bc:09:84:d8:55:e5:a9:d9:5b: f9:57:43:ef:ae:ab:ca:75:ac:f8:99:40:e8:51:88: 87:b0:55:8f:69:f9:a9:a6:19:10:5b:ac:e5:f4:f6: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:7F:B7:E9:82:EE:10:FB:45:14:06:C9:55:43:06:6B:50:21:BF X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d9:cc:d6:fd:48:ed:54:bc:bf:77:e5:41:f9:8d:6d:62:ee: 48:d6:ff:b8:02:1c:e5:dc:a3:31:fc:ff:aa:39:9c:73:3b:8a: 94:b0:10:be:ff:de:98:f6:96:e8:74:cf:77:b6:be:fa:5d:c4: e0:0a:c4:ab:af:3a:7a:6b:ab:ac:63:34:ae:00:4d:ca:5b:33: 35:76:6d:88:d0:ce:9e:f2:ee:f2:a7:24:24:1c:0f:f2:fb:a5: b3:ba:f6:33:33:67:36:aa:bb:9d:ca:bb:d7:f2:5e:5a:73:4b: 56:67:61:71:c5:9f:b3:28:0f:ce:33:17:27:74:cd:56:06:52: 4f:7f:98:35:83:9c:ca:51:c3:36:f6:88:1f:df:42:31:83:6d: 45:a6:b5:43:63:a0:07:04:40:bf:07:eb:5f:f9:06:f6:7c:ba: 5b:e4:4d:0d:4b:49:69:14:e0:8f:a5:29:13:05:1f:4f:0f:e1: 46:a9:ff:44:90:7f:6c:58:a0:6e:be:fc:27:ca:f8:a0:b5:15: 55:12:68:03:c0:df:f6:c3:32:76:94:2b:89:41:d1:09:99:d5: 4b:37:9e:41:ee:b4:10:07:09:ec:12:57:55:40:69:85:d1:55: 12:4a:1f:d1:68:8c:f6:25:f0:fc:60:68:f6:c2:44:36:33:22: a3:c1:0d:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjQwNTE4MTk0MDIzWhcNMjQwNTI1MTk0MDIzWjAYMRYwFAYD VQQDEw02NjQ5MDQyNy1kZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmH9m+EFbTSVRClGCbufjwgFWU7Wa6n1goWu0YzmvpS162jQWDRZH4/1uk+7J 18JlwObL3mmjFcIlFHl/4XamK6cUHTVGLulc7ViMiWPnUazb6PeIYZGOm9hCilu2 +K2a2s/WpKF+MJTtJM6hNb/6stew4sDWhcKhSETlEPUw6Bbg9vfre+pn9xECun1e MY+asGnao+7dN7r8VDKwLU/FMGCfjcTLIE4Ypk2NgWVAnS9ptLw7gzecgzfReOYc s4IqTdDulb5RhjYy3uDhnD+xo2Tjc+sUASu8CYTYVeWp2Vv5V0PvrqvKdaz4mUDo UYiHsFWPafmpphkQW6zl9PasjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4pf7fp gu4Q+0UUBslVQwZrUCG/MB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP2czW/UjtVLy/d+VB+Y1tYu5I1v+4Ahzl3KMx/P+qOZxzO4qUsBC+ /96Y9pbodM93tr76XcTgCsSrrzp6a6usYzSuAE3KWzM1dm2I0M6e8u7ypyQkHA/y +6WzuvYzM2c2qrudyrvX8l5ac0tWZ2FxxZ+zKA/OMxcndM1WBlJPf5g1g5zKUcM2 9ogf30Ixg21FprVDY6AHBEC/B+tf+Qb2fLpb5E0NS0lpFOCPpSkTBR9PD+FGqf9E kH9sWKBuvvwnyvigtRVVEmgDwN/2wzJ2lCuJQdEJmdVLN55B7rQQBwnsEldVQGmF 0VUSSh/RaIz2JfD8YGj2wkQ2MyKjwQ3Y -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org