$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json) Hash identifier: n3gfwUsphXZdRGUoltikyZhX2OElWN82p07HCrw+Y4g= Subject key identifier: 7C:CA:6C:4A:04:D1:64:20:65:E4:32:85:51:8B:21:FD:AF:DF:DF:60 Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft Manifest number: 24 Signing time: Sun 19 May 2024 08:31:19 +0000 Manifest this update: Sun 19 May 2024 08:31:19 +0000 Manifest next update: Sun 26 May 2024 08:31:19 +0000 Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: dud9O9KCY6NYpWqBLtjMpGEn/RMlYr1tJRndGNMlRDk=) 2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: 4ifq9H+2oUaf4XogyDcgufI74BbBk+/yBuSEMG4BFOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Validity Not Before: May 19 08:31:19 2024 GMT Not After : May 26 08:31:19 2024 GMT Subject: CN=6649b8d7-b7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:f2:b8:46:0b:ec:af:1a:d3:b2:f3:1b:df: 59:0c:7f:63:0e:5f:23:3d:72:05:8d:38:ec:12:0c: 6c:65:d3:58:4b:8c:50:f0:63:1b:62:6b:55:69:a5: c3:20:99:16:ff:14:d5:e9:9a:cf:ae:7e:ff:6f:4b: f5:69:57:0d:31:86:cc:88:74:4e:0a:de:da:a8:70: b7:9c:a2:b8:81:20:62:4b:83:4c:0c:52:fb:d0:54: 13:a3:0d:7c:f3:3a:bd:c8:ce:df:7b:d8:1b:eb:67: c6:44:d6:14:5c:4d:bf:f5:4f:22:b0:e2:e2:9b:80: 8b:9b:b7:a6:98:cf:0e:a5:38:82:ba:7a:39:3e:7d: 53:3b:7f:ef:03:43:10:45:6f:9d:cf:3a:60:08:95: 23:4e:6f:52:be:30:b8:29:2f:a1:ba:74:56:35:c6: 3c:db:81:20:39:ee:fc:84:a0:c8:c2:c1:07:00:d5: 91:a0:16:41:bc:e3:a6:9e:70:d2:70:ab:0d:a2:b1: b2:76:16:0a:b6:b7:ac:23:62:97:ca:3e:31:a4:30: 8c:93:96:b7:9a:56:5e:d8:46:7a:38:7d:9d:cf:23: 6a:2a:56:a0:9a:98:b5:8f:74:03:10:b4:2d:9b:cb: e4:49:70:a1:22:9f:bb:54:81:1d:93:3d:04:ac:ef: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:6C:4A:04:D1:64:20:65:E4:32:85:51:8B:21:FD:AF:DF:DF:60 X509v3 Authority Key Identifier: keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:27:5e:68:0b:87:f0:9b:fc:64:aa:d1:0e:47:f8:5e:da:d7: cc:f8:37:78:7a:2f:a5:59:fe:89:b8:94:1c:44:40:51:44:0e: f8:d7:a8:65:37:23:4d:74:1f:f8:7e:69:3e:6c:b1:68:02:72: 9d:56:2e:ad:df:30:9b:8b:e1:42:36:3a:93:34:cc:59:88:98: 1f:0a:06:82:c9:bf:e5:54:f0:0f:57:9d:73:29:19:0a:a6:83: 4b:e7:08:fa:03:ad:67:39:1d:89:16:0a:3d:52:17:88:67:c1: f2:b1:37:78:64:46:e2:49:6d:d5:bf:bc:aa:20:41:c9:e9:f8: 9f:c5:c9:72:00:2c:1d:ce:7f:c4:b8:f3:82:e3:1b:cf:0b:9c: 3c:8b:2d:7b:04:6e:11:66:9b:27:cd:dc:7e:9c:ae:c6:1b:6c: c5:cc:e6:2a:fa:00:6a:29:49:fd:9f:e7:61:4d:69:5e:eb:55: 7d:71:d6:12:4f:d8:d8:4d:19:89:39:dc:6b:5d:92:e5:84:51: 61:19:c7:2e:36:3b:ec:d9:0b:2d:42:6c:b5:89:95:d0:21:bd: b7:ce:77:92:2e:ae:55:4c:bb:9f:4a:87:af:ea:ba:dc:78:61: 46:f6:e1:81:2d:75:09:e5:74:e7:2d:d6:6c:f6:71:87:bc:b1: 7c:98:7b:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REFDMDExMC8GA1UEBRMoQkZGNTgxNTExOEMzQkNERDhENUFDMjMxN0RCQkNGQTM5 OTdFMzVGNjAeFw0yNDA1MTkwODMxMTlaFw0yNDA1MjYwODMxMTlaMBgxFjAUBgNV BAMTDTY2NDliOGQ3LWI3YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXlvK4RgvsrxrTsvMb31kMf2MOXyM9cgWNOOwSDGxl01hLjFDwYxtia1VppcMg mRb/FNXpms+ufv9vS/VpVw0xhsyIdE4K3tqocLecoriBIGJLg0wMUvvQVBOjDXzz Or3Izt972BvrZ8ZE1hRcTb/1TyKw4uKbgIubt6aYzw6lOIK6ejk+fVM7f+8DQxBF b53POmAIlSNOb1K+MLgpL6G6dFY1xjzbgSA57vyEoMjCwQcA1ZGgFkG846aecNJw qw2isbJ2Fgq2t6wjYpfKPjGkMIyTlreaVl7YRno4fZ3PI2oqVqCamLWPdAMQtC2b y+RJcKEin7tUgR2TPQSs78UnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfMpsSgTR ZCBl5DKFUYsh/a/f32AwHwYDVR0jBBgwFoAUv/WBURjDvN2NWsIxfbvPo5l+NfYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQUMwL0REQzk0MkFBREU4 ODExRUU5M0Q5QTc0NEM0RjlBRTAyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5m WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdl9XQlVSakR2TjJOV3NJeGZidlBvNWwtTmZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE QUMwL0REQzk0MkFBREU4ODExRUU5M0Q5QTc0NEM0RjlBRTAyL3ZfV0JVUmpEdk4y TldzSXhmYnZQbzVsLU5mWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUnXmgLh/Cb/GSq0Q5H+F7a18z4N3h6L6VZ/om4lBxEQFFEDvjXqGU3 I010H/h+aT5ssWgCcp1WLq3fMJuL4UI2OpM0zFmImB8KBoLJv+VU8A9XnXMpGQqm g0vnCPoDrWc5HYkWCj1SF4hnwfKxN3hkRuJJbdW/vKogQcnp+J/FyXIALB3Of8S4 84LjG88LnDyLLXsEbhFmmyfN3H6crsYbbMXM5ir6AGopSf2f52FNaV7rVX1x1hJP 2NhNGYk53GtdkuWEUWEZxy42O+zZCy1CbLWJldAhvbfOd5IurlVMu59Kh6/qutx4 YUb24YEtdQnldOct1mz2cYe8sXyYeyg= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org