$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft File: WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json) Hash identifier: hNyS2c3EvUcE8BmaUB2f4y0M1FtrYbchyNQ5EjlR9Ew= Subject key identifier: 49:B7:BE:0E:EB:41:A9:8B:45:D3:94:59:36:89:2C:4C:7A:6A:F6:25 Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C Certificate issuer: /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Certificate serial: 33BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft Manifest number: 33BF Signing time: Sat 18 May 2024 15:16:25 +0000 Manifest this update: Sat 18 May 2024 15:16:25 +0000 Manifest next update: Sat 25 May 2024 15:16:25 +0000 Files and hashes: 1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: ofDbrJGqlxoInn/IxE24jLu3MYov67dP/pLg2YRyNjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Validity Not Before: May 18 15:16:25 2024 GMT Not After : May 25 15:16:25 2024 GMT Subject: CN=6648c649-c179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:3b:65:06:f6:79:93:4e:e9:67:3b:3d:13: 6e:7a:35:8e:29:8a:a9:4b:12:0f:5d:dc:bd:73:37: a6:e0:e0:d3:46:68:b9:d2:4c:1c:ac:56:49:54:47: 32:86:7b:56:1c:bf:a0:4c:ca:1e:04:a3:67:ab:33: 39:66:78:2a:5f:29:8f:df:f3:ba:28:62:76:7a:c2: 5f:77:27:ba:45:88:e8:05:50:1f:c4:15:86:6d:15: aa:87:3a:96:6c:36:6c:2b:7d:df:61:a0:2e:78:bf: 11:05:0b:b6:86:6b:46:02:72:79:7c:fb:5a:bc:91: 87:26:36:8b:e1:c1:d7:c4:45:4b:e3:49:d2:e3:6b: 4a:61:ef:83:d0:c6:6c:ab:61:c1:ff:a8:15:63:ce: 6d:fc:cc:40:12:06:f9:52:ba:76:0d:f4:6f:24:df: f6:13:a7:68:44:42:0f:9f:fa:87:53:d1:7f:63:c0: 90:05:c8:56:c0:f6:fd:d8:13:bf:94:a0:b0:67:f4: 95:f6:5b:3c:c5:6d:ad:fa:f1:4f:1f:3e:7b:e4:23: 06:43:55:13:57:0f:8b:54:48:91:f9:04:f5:ee:0f: 79:13:69:69:e9:ff:9c:85:96:8a:a6:0b:34:5d:83: 18:7c:1e:3d:f2:ad:2b:68:2d:b2:75:7b:4a:fa:ff: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:BE:0E:EB:41:A9:8B:45:D3:94:59:36:89:2C:4C:7A:6A:F6:25 X509v3 Authority Key Identifier: keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9d:b0:81:25:63:50:fe:e0:81:be:94:89:6a:9e:8d:fe:53: d4:88:04:cb:b8:de:42:45:ff:61:a1:2d:e3:46:af:2a:8c:eb: d0:6a:b5:35:a7:36:c5:7e:28:98:48:b7:c7:25:a5:86:30:b7: 60:25:53:88:0e:63:24:6e:2f:99:0c:1b:43:7a:33:59:3f:32: e9:96:b3:d4:0a:7f:ea:7c:b9:88:64:ac:0f:72:d2:e1:82:44: fe:47:a9:d2:2e:9d:16:17:36:7a:33:09:47:01:ed:c0:f7:53: 6b:51:78:0b:25:16:bb:14:85:c3:d3:0c:b1:28:1a:36:72:34: b5:11:61:bc:85:08:a3:63:e2:52:f1:77:7b:38:cf:b3:f4:6b: 6f:16:b0:b0:43:58:5c:fd:d5:3e:98:dd:9c:08:d2:47:86:78: 9a:00:62:2f:f2:80:c7:de:87:3b:b1:ef:e2:20:d9:50:dd:0a: ec:e1:24:0e:a7:31:d9:b0:0f:34:99:58:2e:ef:94:81:b2:d9: 69:75:ee:8d:06:4f:4c:9d:e7:90:a0:0d:75:c4:a9:89:b8:ea: a1:fc:05:f8:14:30:c5:33:5d:ab:13:9b:e3:fc:9c:8c:30:07: f4:a1:21:1c:32:48:a2:ba:0c:0b:25:dc:bc:bf:6d:85:05:5f: 27:40:b3:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYxQzYxMTAvBgNVBAUTKDU4NTcxOTg3NkMxRjlBMjBGREVCOEUwNEMzRDY5MzdB NUFDQUE1N0MwHhcNMjQwNTE4MTUxNjI1WhcNMjQwNTI1MTUxNjI1WjAYMRYwFAYD VQQDEw02NjQ4YzY0OS1jMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAld87ZQb2eZNO6Wc7PRNuejWOKYqpSxIPXdy9czem4ODTRmi50kwcrFZJVEcy hntWHL+gTMoeBKNnqzM5ZngqXymP3/O6KGJ2esJfdye6RYjoBVAfxBWGbRWqhzqW bDZsK33fYaAueL8RBQu2hmtGAnJ5fPtavJGHJjaL4cHXxEVL40nS42tKYe+D0MZs q2HB/6gVY85t/MxAEgb5Urp2DfRvJN/2E6doREIPn/qHU9F/Y8CQBchWwPb92BO/ lKCwZ/SV9ls8xW2t+vFPHz575CMGQ1UTVw+LVEiR+QT17g95E2lp6f+chZaKpgs0 XYMYfB498q0raC2ydXtK+v9EvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm3vg7r QamLRdOUWTaJLEx6avYlMB8GA1UdIwQYMBaAFFhXGYdsH5og/euOBMPWk3payqV8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjFDNi8zN0JEQUFDQzFE QTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1pRDk2NDRFdzlhVGVscktw WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGY1poMndmbWlEOTY0NEV3OWFUZWxyS3BYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjFDNi8zN0JEQUFDQzFEQTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1p RDk2NDRFdzlhVGVscktwWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCnbCBJWNQ/uCBvpSJap6N/lPUiATLuN5CRf9hoS3jRq8qjOvQarU1 pzbFfiiYSLfHJaWGMLdgJVOIDmMkbi+ZDBtDejNZPzLplrPUCn/qfLmIZKwPctLh gkT+R6nSLp0WFzZ6MwlHAe3A91NrUXgLJRa7FIXD0wyxKBo2cjS1EWG8hQijY+JS 8Xd7OM+z9GtvFrCwQ1hc/dU+mN2cCNJHhniaAGIv8oDH3oc7se/iINlQ3Qrs4SQO pzHZsA80mVgu75SBstlpde6NBk9MneeQoA11xKmJuOqh/AX4FDDFM12rE5vj/JyM MAf0oSEcMkiiugwLJdy8v22FBV8nQLOW -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org