$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: Uw0kgo2yUHKe1o8dKwAnLQnbVeEG5fG4pbL7ABn0SX0= Subject key identifier: 44:FD:4A:67:F8:02:2B:62:3A:62:98:7F:44:FA:8E:57:1A:C4:64:35 Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0A16 Signing time: Sat 18 May 2024 20:36:08 +0000 Manifest this update: Sat 18 May 2024 20:36:07 +0000 Manifest next update: Sat 25 May 2024 20:36:07 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: Rj329g8V+FGzmdWw1M4lemryVLsystkV/xtTW863j3g=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: dvoU6rv4WmyJLk9iRDJv4tzFR57evRNSLVJVzcM3I5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: May 18 20:36:07 2024 GMT Not After : May 25 20:36:07 2024 GMT Subject: CN=66491138-313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3a:99:1b:70:e6:f0:97:f8:8d:a4:0b:aa:de: 0b:db:6a:77:da:00:77:82:d9:f4:6d:24:26:b4:38: 34:83:42:fb:73:18:fd:ee:fa:e2:4a:f2:55:00:8c: ad:20:31:e8:10:73:d2:8c:f4:44:b3:d4:db:ba:24: 39:d1:dc:ea:11:bb:ae:85:4c:8d:27:80:7d:d8:bd: 5d:2c:34:f9:e5:fc:67:89:ef:39:f2:ac:b8:c1:c9: 69:63:69:f6:c8:40:35:87:bd:e1:65:37:8b:4a:4e: 5c:59:ad:d0:e5:53:62:82:2e:c0:09:27:e6:c4:7f: 6d:8f:d1:d5:12:0d:7e:6d:5f:78:b4:dc:01:1f:ed: 0b:7e:71:33:dd:58:95:09:b5:6b:ee:1d:83:2e:c4: f5:81:09:2a:6f:74:65:3f:9c:99:f3:1b:0f:89:19: b3:cc:e4:ac:b8:58:28:d8:fc:05:94:6c:79:bf:b3: 8a:b6:cc:ec:51:9f:26:b6:f8:41:c4:7b:c0:fb:89: 79:a3:a9:3b:d2:b5:9d:8c:a7:02:bb:96:7c:d6:b3: 42:d1:38:8b:77:28:95:3b:9e:49:83:ba:1f:b1:3f: 85:4a:e2:7f:20:19:06:52:9b:c3:d3:b3:7b:73:13: 63:a1:60:f9:b0:dc:c4:5b:b7:fc:fb:5f:02:96:73: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:4A:67:F8:02:2B:62:3A:62:98:7F:44:FA:8E:57:1A:C4:64:35 X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:10:8c:10:b6:28:59:02:cb:2e:59:11:c8:c2:51:a4:8b:ea: 03:47:45:6b:38:0e:94:c4:49:be:f2:25:1b:fd:c6:96:38:dc: 87:fc:ad:75:55:70:bf:c7:f4:ad:48:cf:41:5f:02:fb:3e:13: e2:fb:01:cf:d7:5e:b1:e8:d2:3a:5b:85:1f:19:69:77:f8:29: 3d:4a:4a:de:cb:3a:61:63:f7:e2:6b:fd:5d:ea:87:86:c5:03: 6c:b0:5a:92:60:e7:5d:c9:84:65:59:f7:52:eb:10:60:21:93: e3:5c:42:46:70:24:1c:5d:4c:a2:67:74:b8:d1:6c:f1:1f:b4: 15:03:b5:57:d0:a5:7f:94:ee:fd:c9:8a:69:55:e3:c0:e9:11: 74:9c:dc:40:45:ea:17:9a:28:ab:1a:2d:ed:46:81:f2:c0:96: db:ba:9b:8c:e6:c3:3a:44:ba:d0:1d:51:76:29:8b:08:98:53: 42:0d:04:75:8e:2d:39:0d:68:8b:e1:0e:f4:d1:54:88:fe:21: 4a:fa:cc:a4:6a:9e:ed:d2:c3:b0:07:5e:c2:a2:13:b6:cd:16: a1:12:1f:3f:b2:3d:35:81:a2:23:53:01:56:1e:1a:07:c7:80: 4c:43:a3:4b:47:1b:6c:2a:b3:9a:fd:12:d6:fb:e6:b2:36:c2: b2:c5:e7:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjQwNTE4MjAzNjA3WhcNMjQwNTI1MjAzNjA3WjAYMRYwFAYD VQQDEw02NjQ5MTEzOC0zMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zqZG3Dm8Jf4jaQLqt4L22p32gB3gtn0bSQmtDg0g0L7cxj97vriSvJVAIyt IDHoEHPSjPREs9TbuiQ50dzqEbuuhUyNJ4B92L1dLDT55fxnie858qy4wclpY2n2 yEA1h73hZTeLSk5cWa3Q5VNigi7ACSfmxH9tj9HVEg1+bV94tNwBH+0LfnEz3ViV CbVr7h2DLsT1gQkqb3RlP5yZ8xsPiRmzzOSsuFgo2PwFlGx5v7OKtszsUZ8mtvhB xHvA+4l5o6k70rWdjKcCu5Z81rNC0TiLdyiVO55Jg7ofsT+FSuJ/IBkGUpvD07N7 cxNjoWD5sNzEW7f8+18ClnM5KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET9Smf4 AitiOmKYf0T6jlcaxGQ1MB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGEIwQtihZAssuWRHIwlGki+oDR0VrOA6UxEm+8iUb/caWONyH/K11 VXC/x/StSM9BXwL7PhPi+wHP116x6NI6W4UfGWl3+Ck9SkreyzphY/fia/1d6oeG xQNssFqSYOddyYRlWfdS6xBgIZPjXEJGcCQcXUyiZ3S40WzxH7QVA7VX0KV/lO79 yYppVePA6RF0nNxAReoXmiirGi3tRoHywJbbupuM5sM6RLrQHVF2KYsImFNCDQR1 ji05DWiL4Q700VSI/iFK+sykap7t0sOwB17CohO2zRahEh8/sj01gaIjUwFWHhoH x4BMQ6NLRxtsKrOa/RLW++ayNsKyxees -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org