$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft File: wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json) Hash identifier: sOLrQSI8tgwopOek9diy/K6lTbpjNV7Q3+0S0MmhdSU= Subject key identifier: 83:83:10:35:09:91:A8:C4:66:AE:70:C9:C2:31:79:A7:C9:16:6A:BA Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 Certificate issuer: /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft Manifest number: C1 Signing time: Fri 17 May 2024 06:27:53 +0000 Manifest this update: Fri 17 May 2024 06:27:53 +0000 Manifest next update: Fri 24 May 2024 06:27:53 +0000 Files and hashes: 1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: uf+jgM64cDE6/sXEwVgT/wT/KRsY7oOf/t0us8cTMng=) 2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Ov9Iy68ylv/0olkozASTg06oN1egQxgWNpmo0R0rgcU=) 3: 6881BE7EEFF411EDB617DD7DC4F9AE02.roa (hash: TN1mL+bmYnXtbKJTvUvjcUGn6fI2atat4P6SVByVo4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Validity Not Before: May 17 06:27:53 2024 GMT Not After : May 24 06:27:53 2024 GMT Subject: CN=6646f8e9-964e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:9f:bc:e7:79:43:ed:1b:fd:54:56:7d:de: 4e:02:a5:7b:8d:1a:37:31:63:47:ee:a7:2f:5b:91: bd:a7:1b:8f:16:7e:15:0c:36:e5:02:04:c7:12:12: 08:62:de:0c:2a:f2:fc:c6:7f:3a:fe:dd:3a:1a:f3: b4:f5:b7:3e:e7:30:4f:28:15:a1:25:ae:b2:60:fc: 1c:2c:83:c8:4b:03:4b:24:06:52:4f:79:f1:d0:40: 77:1c:c0:44:ac:fa:ae:87:58:2e:eb:b2:86:df:a7: df:04:01:ab:7f:9b:a7:15:6e:38:58:f8:08:44:8d: 4e:1f:d0:75:fd:36:21:a3:9a:5d:3f:19:17:aa:82: 2c:fc:84:10:2e:57:5e:45:83:77:10:c5:c9:88:d6: 39:ac:a1:a8:16:ce:dd:00:30:21:1e:f5:8e:68:4c: 32:ce:49:38:b6:54:28:48:cd:62:95:03:66:ef:4d: c7:42:e0:fe:54:3b:cf:53:39:58:c2:6b:88:1d:fb: 0e:ab:4d:19:c0:53:48:9c:d2:db:38:e8:31:92:c4: 04:bd:56:9e:72:26:4c:d9:f1:a0:46:96:25:3e:68: cf:ec:56:ef:85:04:8b:bd:20:90:2f:8d:7d:0c:59: 3f:77:57:73:26:cf:b2:8f:5a:0e:7e:17:2d:7d:c4: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:83:10:35:09:91:A8:C4:66:AE:70:C9:C2:31:79:A7:C9:16:6A:BA X509v3 Authority Key Identifier: keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e5:e5:4c:f1:51:12:c0:ce:4f:3d:e1:5c:ed:3d:8d:1a:d4: 36:75:a1:f7:63:68:8e:ad:ce:ae:1a:0d:41:c5:3d:e3:fb:4d: 18:b1:21:1c:cd:1f:ad:20:45:4e:5c:ee:3a:7f:af:93:e9:ea: a4:05:a3:91:5e:a1:40:ea:d4:27:b4:25:bb:aa:d5:2c:c2:01: f8:6b:4a:57:ce:09:78:5a:d0:c3:2e:10:2a:cc:b6:d1:f6:a6: be:a5:8b:0c:2b:97:4e:9e:39:3e:8c:86:0f:4a:0b:a8:86:11: bf:50:a7:21:44:a4:49:11:41:be:2d:64:3d:ea:e2:23:ac:44: a3:9a:17:71:da:d6:c7:af:cd:7d:4c:67:b4:9b:c9:65:85:45: a9:4a:dc:33:60:aa:48:11:11:21:b5:9a:a7:2a:29:5b:f5:f6: d3:f6:0f:1b:2d:b2:c9:27:c8:d5:9b:27:5b:21:15:88:de:6c: b3:dc:49:d4:9e:9e:37:f1:f1:47:b8:aa:74:41:a6:26:d3:c9: 1b:26:36:e4:ab:ce:2f:1a:45:73:37:ab:5c:39:23:90:91:30: 5f:94:ce:2a:44:62:cf:63:17:7f:26:91:38:9b:6a:5d:f6:a7: 94:06:41:83:de:ef:12:51:5f:bb:84:a6:5e:e9:d6:e2:39:61: 47:a8:74:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3 RkE5Mjg1RDEwHhcNMjQwNTE3MDYyNzUzWhcNMjQwNTI0MDYyNzUzWjAYMRYwFAYD VQQDEw02NjQ2ZjhlOS05NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBGfvOd5Q+0b/VRWfd5OAqV7jRo3MWNH7qcvW5G9pxuPFn4VDDblAgTHEhII Yt4MKvL8xn86/t06GvO09bc+5zBPKBWhJa6yYPwcLIPISwNLJAZST3nx0EB3HMBE rPquh1gu67KG36ffBAGrf5unFW44WPgIRI1OH9B1/TYho5pdPxkXqoIs/IQQLlde RYN3EMXJiNY5rKGoFs7dADAhHvWOaEwyzkk4tlQoSM1ilQNm703HQuD+VDvPUzlY wmuIHfsOq00ZwFNInNLbOOgxksQEvVaeciZM2fGgRpYlPmjP7FbvhQSLvSCQL419 DFk/d1dzJs+yj1oOfhctfcSJnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIODEDUJ kajEZq5wycIxeafJFmq6MB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTMyMy9FN0ZDMkYxRUVGRUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJW Zm1aLTh1aktwM05fcVNoZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh5eVM8VESwM5PPeFc7T2NGtQ2daH3Y2iOrc6uGg1BxT3j+00YsSEc zR+tIEVOXO46f6+T6eqkBaORXqFA6tQntCW7qtUswgH4a0pXzgl4WtDDLhAqzLbR 9qa+pYsMK5dOnjk+jIYPSguohhG/UKchRKRJEUG+LWQ96uIjrESjmhdx2tbHr819 TGe0m8llhUWpStwzYKpIEREhtZqnKilb9fbT9g8bLbLJJ8jVmydbIRWI3myz3EnU np438fFHuKp0QaYm08kbJjbkq84vGkVzN6tcOSOQkTBflM4qRGLPYxd/JpE4m2pd 9qeUBkGD3u8SUV+7hKZe6dbiOWFHqHT5 -----END CERTIFICATE-----Generated at Fri May 17 08:52:49 2024 by rpki-client on console-ams.rpki-client.org