$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: qqouxX1roGWO/bQ+NYYkdNPkme01qd+rbo0fbbdQyCM= Subject key identifier: CB:EE:FC:53:6D:AB:48:4A:73:08:70:8E:6F:83:A4:B5:D9:78:FB:C3 Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 03F4 Signing time: Sun 19 May 2024 02:13:02 +0000 Manifest this update: Sun 19 May 2024 02:13:01 +0000 Manifest next update: Sun 26 May 2024 02:13:01 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: dmdHrhKpuDuOo01qq8Tb3CDZL6dvN36v8pN/UJBxTgY=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: Z/jSnIWWW2Yo0xK6PM0++m6EnLurEB4z2omEfGREcsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: May 19 02:13:01 2024 GMT Not After : May 26 02:13:01 2024 GMT Subject: CN=6649602d-cb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3b:9e:da:e6:01:27:9f:16:a3:07:d6:e2:12: e0:b2:80:ab:80:83:cc:d0:d8:bf:15:42:67:75:00: 5a:9b:0d:ce:23:19:71:12:ab:47:2d:3b:af:e4:f6: 85:73:ee:a8:3a:68:b8:5d:9a:a0:e4:62:86:67:ba: 39:bd:5c:a8:56:35:39:76:56:f3:78:40:05:19:e8: 8e:3e:fb:4e:ee:5d:f4:c8:ec:b4:c5:a9:ce:6a:c5: 0d:87:98:ec:a9:96:40:83:8e:a1:1d:f4:0b:e5:43: 78:10:8c:75:1b:9f:80:07:e7:80:4b:19:e9:d9:4e: 05:76:30:80:0a:6d:97:2e:6d:56:cb:7e:f4:45:b2: 7c:2c:74:82:ea:1c:40:5d:f1:b6:52:38:54:3d:25: 7e:12:d7:5d:b2:26:96:4d:5a:a0:16:74:7f:1b:9e: 24:c2:83:a1:51:91:6f:c6:dd:52:69:29:7f:1d:5d: 5c:c4:8e:0e:bf:ec:13:ac:23:ee:f5:3d:28:b3:ce: c5:a4:93:13:4e:c9:f0:42:d9:28:1f:d2:17:3d:67: 0c:67:72:c8:29:71:ea:8a:cc:e2:9d:67:0e:a6:09: 4e:24:87:e8:1e:a0:7e:86:75:8c:91:70:80:48:00: e8:82:d7:f2:97:0d:89:61:51:05:8a:fb:9d:f4:6e: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:FC:53:6D:AB:48:4A:73:08:70:8E:6F:83:A4:B5:D9:78:FB:C3 X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7a:ad:0f:0d:bf:6b:38:64:e7:c4:df:e1:26:72:58:f4:de: 62:cb:9d:7f:9c:a6:f6:4c:da:6f:a5:80:f2:0c:46:a0:9f:e3: ad:e4:3d:2a:0a:8e:74:bf:4c:52:f0:40:7c:ef:31:08:6c:f1: 8c:41:72:9c:51:f5:9f:e0:eb:34:fc:15:f7:37:99:c7:9b:20: 3b:92:10:30:8a:b5:de:eb:e2:ad:1d:81:b9:6c:ab:71:4c:75: cb:fa:73:b3:9d:72:de:17:53:ba:31:47:4a:7a:09:9f:70:06: 53:7e:8b:58:e3:17:ed:b6:3d:ac:e5:43:ca:84:36:cc:b4:c1: 7d:51:c9:c1:03:c0:f0:e1:8a:40:d4:16:d5:9a:a8:d1:e7:37: fe:de:8a:f4:0d:0f:96:43:41:10:ed:6d:d6:49:55:5e:a7:e7: 60:19:71:e8:90:45:b4:f0:67:81:58:28:f6:0c:13:98:1d:90: da:f2:46:30:bd:b9:52:02:0e:9c:39:4b:df:fc:5f:16:24:af: 39:51:9f:ac:9e:0b:9f:ca:5d:c5:fa:9a:35:8e:fc:cf:7b:c6: 1f:05:11:31:bf:f2:9b:41:40:39:c4:e3:18:64:49:cf:fd:6f: b3:49:9e:66:ef:69:18:4e:76:ee:a1:a7:3e:e8:52:5c:30:1e: 3b:93:39:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjQwNTE5MDIxMzAxWhcNMjQwNTI2MDIxMzAxWjAYMRYwFAYD VQQDEw02NjQ5NjAyZC1jYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Due2uYBJ58WowfW4hLgsoCrgIPM0Ni/FUJndQBamw3OIxlxEqtHLTuv5PaF c+6oOmi4XZqg5GKGZ7o5vVyoVjU5dlbzeEAFGeiOPvtO7l30yOy0xanOasUNh5js qZZAg46hHfQL5UN4EIx1G5+AB+eASxnp2U4FdjCACm2XLm1Wy370RbJ8LHSC6hxA XfG2UjhUPSV+EtddsiaWTVqgFnR/G54kwoOhUZFvxt1SaSl/HV1cxI4Ov+wTrCPu 9T0os87FpJMTTsnwQtkoH9IXPWcMZ3LIKXHqiszinWcOpglOJIfoHqB+hnWMkXCA SADogtfylw2JYVEFivud9G7ZlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvu/FNt q0hKcwhwjm+DpLXZePvDMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7eq0PDb9rOGTnxN/hJnJY9N5iy51/nKb2TNpvpYDyDEagn+Ot5D0q Co50v0xS8EB87zEIbPGMQXKcUfWf4Os0/BX3N5nHmyA7khAwirXe6+KtHYG5bKtx THXL+nOznXLeF1O6MUdKegmfcAZTfotY4xfttj2s5UPKhDbMtMF9UcnBA8Dw4YpA 1BbVmqjR5zf+3or0DQ+WQ0EQ7W3WSVVep+dgGXHokEW08GeBWCj2DBOYHZDa8kYw vblSAg6cOUvf/F8WJK85UZ+sngufyl3F+po1jvzPe8YfBRExv/KbQUA5xOMYZEnP /W+zSZ5m72kYTnbuoac+6FJcMB47kzn+ -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org