$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft File: WH54lgJQA6zQwpt_PymgcI9rKGo.mft (raw, json) Hash identifier: wh6HSusmrrhR2x8L3vYI++6fWqOqCRBWEVgGVIZN20g= Subject key identifier: 26:86:E9:65:BE:D0:B7:DC:8B:E8:A6:92:DC:19:4E:5A:B2:C8:1E:AB Authority key identifier: 58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A Certificate issuer: /CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft Manifest number: 071E Signing time: Sat 18 May 2024 22:33:22 +0000 Manifest this update: Sat 18 May 2024 22:33:22 +0000 Manifest next update: Sat 25 May 2024 22:33:22 +0000 Files and hashes: 1: WH54lgJQA6zQwpt_PymgcI9rKGo.crl (hash: ZzKtgNfJEQB35qs2dlUdNzCkzg+4vzyRdzpvUZIqDwA=) 2: 909B1B4AF08211EA87323C3AC4F9AE02.roa (hash: Vl48E2A8JFjSptMCx9DeWZuXsFkH1UyVDV9qvLb1iC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A Validity Not Before: May 18 22:33:22 2024 GMT Not After : May 25 22:33:22 2024 GMT Subject: CN=66492cb2-a5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:5b:bd:8b:08:18:67:51:ac:c4:f5:6d:65: c9:f4:86:fe:e6:1f:be:2f:a9:24:a0:10:60:ab:cb: 37:7e:5d:d7:83:df:cb:4d:87:b9:fa:e1:59:2b:0a: c5:e0:a6:a2:fc:2b:7e:b9:ec:b8:b6:f4:b6:87:5a: b0:45:d9:bc:ed:ab:ba:06:97:a2:52:f6:3a:4a:8d: 09:10:6a:85:49:6a:39:01:3d:26:83:7d:e0:d9:8e: 78:85:82:a9:0d:b5:7a:2e:51:e3:4c:63:6a:f9:51: f4:ef:92:f4:64:a6:dc:cb:2c:53:9f:ff:0d:6d:03: 1d:e0:e4:2d:a7:c5:f3:1e:c2:39:1b:e5:8b:a5:f7: c1:74:21:73:9d:a1:95:ea:89:8d:35:f1:00:bb:c6: e8:c8:10:59:4d:01:72:f0:4c:7c:09:11:8d:ce:db: 68:09:f9:fc:ae:d9:14:4e:fc:48:c9:e3:95:50:ca: 88:6f:8e:07:fe:c6:56:50:b3:13:07:3e:28:64:23: 5f:6d:fc:67:0d:55:f2:53:24:1b:eb:52:d6:8f:82: e7:6e:cd:c4:64:f5:e7:0f:92:39:d1:f2:29:31:a4: a4:0d:c2:66:64:cf:5f:59:98:28:a0:ec:77:79:7d: 51:30:d4:b0:5f:17:33:a0:eb:5f:7b:4d:db:fe:b0: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:E9:65:BE:D0:B7:DC:8B:E8:A6:92:DC:19:4E:5A:B2:C8:1E:AB X509v3 Authority Key Identifier: keyid:58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ad:52:2d:b3:e7:c1:6f:c5:ee:07:b0:c8:17:64:4e:fd:73: ff:3b:2f:b0:73:51:ae:7c:98:9f:af:3c:04:d2:7c:9a:fc:a4: ee:00:8f:d1:07:14:94:1e:87:de:98:aa:1d:7f:89:8b:fa:5c: ee:ee:c9:28:c2:3d:7f:75:38:b0:16:3d:9c:e3:80:e5:5d:47: e1:2e:99:b3:60:12:9d:90:de:9e:d3:8c:b0:46:d8:ff:fd:8f: 32:8b:e6:f8:da:f5:de:48:e6:e6:6d:16:98:a8:f0:61:9d:6a: f9:41:d2:e2:44:ad:02:79:e2:04:89:9b:29:69:b1:38:0e:29: c1:61:70:32:6c:12:b3:ca:87:8c:de:72:e2:f5:00:8f:8c:6c: 1d:e2:2d:20:8a:96:f4:8e:2f:21:58:9e:4b:af:5e:3d:34:a1: fd:b3:d1:04:0b:1c:89:0f:4a:38:29:20:d2:66:04:10:46:1f: 44:5e:c6:90:f7:ad:80:83:3f:33:ae:f7:c5:ed:2a:35:ca:39: 05:b5:63:39:a8:52:03:4c:a7:36:02:8d:76:02:26:1f:1a:e3: 31:ee:d4:72:ee:e6:5a:d4:7c:b8:fb:1c:39:90:a4:4b:76:6a: a9:79:15:40:99:06:95:b3:bd:3a:d7:65:a4:70:c5:34:f6:6d: 3c:7c:49:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDMTYxMTAvBgNVBAUTKDU4N0U3ODk2MDI1MDAzQUNEMEMyOUI3RjNGMjlBMDcw OEY2QjI4NkEwHhcNMjQwNTE4MjIzMzIyWhcNMjQwNTI1MjIzMzIyWjAYMRYwFAYD VQQDEw02NjQ5MmNiMi1hNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qZbvYsIGGdRrMT1bWXJ9Ib+5h++L6kkoBBgq8s3fl3Xg9/LTYe5+uFZKwrF 4Kai/Ct+uey4tvS2h1qwRdm87au6BpeiUvY6So0JEGqFSWo5AT0mg33g2Y54hYKp DbV6LlHjTGNq+VH075L0ZKbcyyxTn/8NbQMd4OQtp8XzHsI5G+WLpffBdCFznaGV 6omNNfEAu8boyBBZTQFy8Ex8CRGNzttoCfn8rtkUTvxIyeOVUMqIb44H/sZWULMT Bz4oZCNfbfxnDVXyUyQb61LWj4Lnbs3EZPXnD5I50fIpMaSkDcJmZM9fWZgooOx3 eX1RMNSwXxczoOtfe03b/rDQjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaG6WW+ 0Lfci+imktwZTlqyyB6rMB8GA1UdIwQYMBaAFFh+eJYCUAOs0MKbfz8poHCPayhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0MxNi8yNEQzOUQ2MkYw ODAxMUVBQjVCQjEwMzdDNEY5QUUwMi9XSDU0bGdKUUE2elF3cHRfUHltZ2NJOXJL R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dINTRsZ0pRQTZ6UXdwdF9QeW1nY0k5cktHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0MxNi8yNEQzOUQ2MkYwODAxMUVBQjVCQjEwMzdDNEY5QUUwMi9XSDU0bGdKUUE2 elF3cHRfUHltZ2NJOXJLR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDrVIts+fBb8XuB7DIF2RO/XP/Oy+wc1GufJifrzwE0nya/KTuAI/R BxSUHofemKodf4mL+lzu7skowj1/dTiwFj2c44DlXUfhLpmzYBKdkN6e04ywRtj/ /Y8yi+b42vXeSObmbRaYqPBhnWr5QdLiRK0CeeIEiZspabE4DinBYXAybBKzyoeM 3nLi9QCPjGwd4i0gipb0ji8hWJ5Lr149NKH9s9EECxyJD0o4KSDSZgQQRh9EXsaQ 962Agz8zrvfF7So1yjkFtWM5qFIDTKc2Ao12AiYfGuMx7tRy7uZa1Hy4+xw5kKRL dmqpeRVAmQaVs70612WkcMU09m08fEkJ -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org