$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: d0OPpsOxnaGS515h5lZfEqMqKAhGYogSE0hFWaatlqU= Subject key identifier: 16:DF:BC:C4:C4:A6:93:66:40:41:80:FA:36:47:B5:5F:59:78:3D:BC Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 053A Signing time: Sun 19 May 2024 00:55:29 +0000 Manifest this update: Sun 19 May 2024 00:55:29 +0000 Manifest next update: Sun 26 May 2024 00:55:29 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: Dhi1rRaBLkpzPF1ZyKZrXLHfO2AWIAqniicp4u84+FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: May 19 00:55:29 2024 GMT Not After : May 26 00:55:29 2024 GMT Subject: CN=66494e01-74c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:e1:2f:0d:36:81:3e:da:d7:b2:82:3d:18: 5c:ac:b7:5d:73:d9:c3:41:8d:1b:51:8c:1b:34:2e: f4:be:76:5d:44:51:56:ca:2c:c9:7b:24:e4:9a:e3: 82:d7:24:5a:a5:d9:45:c3:d4:6f:18:81:5a:84:9b: e2:28:7d:cf:a9:a6:34:76:30:ef:90:98:d4:56:22: 41:06:62:48:15:c1:d3:06:16:6d:cf:5d:ff:93:bc: ab:6b:b1:29:5a:80:dc:bd:6a:d0:4a:e2:05:72:de: c0:70:5c:c4:aa:a0:42:59:e1:bd:89:3a:2f:c1:4c: 1a:d7:c2:cb:f3:87:77:54:ed:e6:27:80:16:14:89: 79:56:48:e7:0e:1b:1e:64:9b:f7:74:86:86:eb:ab: 9e:af:6d:65:02:5d:92:2b:9c:03:44:dd:63:3f:98: 3b:d9:4e:0e:76:b9:86:08:4b:4e:1c:80:1e:b6:21: 82:d4:5e:a1:d8:12:93:b9:da:d8:1d:82:31:5e:d3: d4:87:bd:cf:b1:90:30:a9:97:84:14:54:9b:4a:64: d1:2e:76:41:ee:b0:c3:f8:1a:de:30:c9:23:f6:33: b4:3f:89:77:f3:16:b9:4b:78:3b:fb:b4:bf:a3:57: 89:03:2d:1c:f8:06:55:3c:d8:d4:ef:75:22:d5:33: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DF:BC:C4:C4:A6:93:66:40:41:80:FA:36:47:B5:5F:59:78:3D:BC X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:84:60:e8:bb:22:3c:ac:a7:8b:cc:00:a0:7f:b7:05:80:d4: ed:66:00:81:94:0b:bf:4f:49:e5:2a:b3:8b:e5:7d:2b:82:18: 7b:e8:08:40:68:bb:7b:97:61:6b:cd:b3:9a:01:5d:3f:6e:bf: f4:68:4b:86:57:24:39:cd:5b:47:63:02:36:1a:05:c1:38:1c: f4:c2:fa:e8:ed:f7:01:28:32:53:fc:3a:95:14:9f:7b:df:91: a8:23:22:dc:d9:04:47:44:d5:04:61:7b:26:24:5e:b5:19:9d: 0d:d7:a0:da:51:58:5f:fd:01:3b:83:ad:e6:47:d5:98:89:27: 51:f8:a6:f1:71:57:3f:72:02:1b:1f:e7:aa:4f:a5:05:13:e0: 92:51:b8:55:4c:1d:e1:41:3e:69:8e:d6:dd:34:e1:8d:61:70: 4b:84:0e:70:cc:1a:dc:c0:37:df:00:33:e8:a7:d9:40:23:17: f5:80:62:7d:13:28:0d:c3:6d:f6:b1:52:b3:5a:e9:51:d4:5b: 7a:21:84:e8:80:e9:f2:7a:4a:90:2a:02:9f:77:3c:7a:21:a4: c8:46:99:15:08:80:25:93:28:26:5f:74:a6:eb:2a:0c:3b:8e: 36:87:ad:4a:7e:de:6d:e0:92:3c:5d:f0:c2:ff:bc:32:94:a3: f6:1b:5f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjQwNTE5MDA1NTI5WhcNMjQwNTI2MDA1NTI5WjAYMRYwFAYD VQQDEw02NjQ5NGUwMS03NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspXhLw02gT7a17KCPRhcrLddc9nDQY0bUYwbNC70vnZdRFFWyizJeyTkmuOC 1yRapdlFw9RvGIFahJviKH3PqaY0djDvkJjUViJBBmJIFcHTBhZtz13/k7yra7Ep WoDcvWrQSuIFct7AcFzEqqBCWeG9iTovwUwa18LL84d3VO3mJ4AWFIl5VkjnDhse ZJv3dIaG66uer21lAl2SK5wDRN1jP5g72U4OdrmGCEtOHIAetiGC1F6h2BKTudrY HYIxXtPUh73PsZAwqZeEFFSbSmTRLnZB7rDD+BreMMkj9jO0P4l38xa5S3g7+7S/ o1eJAy0c+AZVPNjU73Ui1TPP5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbfvMTE ppNmQEGA+jZHtV9ZeD28MB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQhGDouyI8rKeLzACgf7cFgNTtZgCBlAu/T0nlKrOL5X0rghh76AhA aLt7l2FrzbOaAV0/br/0aEuGVyQ5zVtHYwI2GgXBOBz0wvro7fcBKDJT/DqVFJ97 35GoIyLc2QRHRNUEYXsmJF61GZ0N16DaUVhf/QE7g63mR9WYiSdR+KbxcVc/cgIb H+eqT6UFE+CSUbhVTB3hQT5pjtbdNOGNYXBLhA5wzBrcwDffADPop9lAIxf1gGJ9 EygNw232sVKzWulR1Ft6IYTogOnyekqQKgKfdzx6IaTIRpkVCIAlkygmX3Sm6yoM O442h61Kft5t4JI8XfDC/7wylKP2G186 -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org