$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: Ll4Po1AVdaAcGvXisLsUDX26LBZAoHwAdIbNy1cfDio= Subject key identifier: 3E:DF:0C:DA:25:0F:FD:2B:BD:9D:66:01:4C:AF:B8:93:52:A4:3A:25 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1E56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1E34 Signing time: Sat 18 May 2024 16:25:54 +0000 Manifest this update: Sat 18 May 2024 16:25:54 +0000 Manifest next update: Sat 25 May 2024 16:25:54 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: C6T15bDf+OLD4NMpE+0hT0WhPugjJDlV9y0iGCsOnao=) 2: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: dWNwojX+FbKzMLZhyhzAIove+AbYk3aE5UjX6l18gfU=) 3: 44CE53C4CCA911EEB99D3C21C4F9AE02.roa (hash: oWoCxkO3Xr2nTs/WWs0z0gqXSB3M2bR2ORqKgSXD+oU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7766 (0x1e56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: May 18 16:25:54 2024 GMT Not After : May 25 16:25:54 2024 GMT Subject: CN=6648d692-70b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1d:50:a6:2b:ee:99:4c:7e:94:0b:99:e7:97: 49:ac:ae:05:f6:35:52:9f:45:a1:d9:19:34:3e:5f: 96:4e:cc:60:c2:14:3d:39:3e:01:53:3d:b8:07:57: c1:90:6f:7b:50:92:22:71:ab:f7:74:8b:7f:2c:19: ea:99:e2:74:00:a8:89:e5:49:b6:5f:f1:5e:0b:5a: 5d:31:45:1a:59:53:38:3c:60:3d:18:02:c1:5d:aa: 78:11:f3:95:99:49:39:f1:8c:3c:a1:ec:36:55:f5: 22:ba:aa:50:ca:ea:71:00:eb:89:70:bb:a4:7a:ae: 2a:26:e9:5f:e9:e5:88:b9:4d:74:a1:ae:a7:7b:43: 0f:5c:2f:d8:c5:0b:5d:4b:91:26:51:6d:22:ea:e9: 5a:f8:25:89:13:72:f7:32:fe:a2:e7:a3:35:06:12: 2c:2d:99:ad:27:37:1a:72:5e:78:5a:1f:56:bb:32: 50:ba:a8:05:07:0a:56:18:8d:6f:71:4f:99:33:46: 74:54:da:74:ae:04:dd:c5:41:9b:00:e9:2d:3f:1d: 5c:d0:ea:0e:e3:20:67:a9:9d:23:7a:f6:74:20:28: 8a:ba:6f:65:67:93:14:7a:cd:3a:bb:49:6a:3b:e8: b0:be:1c:46:bf:47:26:ce:c0:32:c8:f3:17:f0:2d: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DF:0C:DA:25:0F:FD:2B:BD:9D:66:01:4C:AF:B8:93:52:A4:3A:25 X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d9:20:ea:7d:17:e7:e7:7f:c7:dd:87:f3:69:a1:3e:b5:e6: 59:5b:db:d3:dc:f6:bb:cd:b7:b4:26:f5:0b:5d:88:ff:ab:e2: 9d:40:0a:b1:75:a3:eb:fe:51:dd:c8:6a:a3:1b:29:02:71:e3: ad:6d:cd:8b:40:08:0b:e5:95:36:08:37:5d:a2:af:97:0d:6f: 3a:58:50:45:66:eb:f3:92:56:48:e9:84:16:13:9a:ea:e3:26: dd:15:28:a1:ee:c7:ab:9c:b6:e2:fe:5d:c3:01:56:37:b0:e8: 8b:00:96:cc:0e:b1:2b:0f:99:d3:da:07:ab:78:7f:2e:84:8e: ec:27:a1:81:ec:6a:1b:e6:e4:f4:b8:17:19:60:0f:36:19:40: d3:ae:20:38:74:c1:22:93:53:da:36:01:bc:51:fd:3f:40:fc: 40:e7:4b:60:f9:7d:dc:c6:0c:a5:c8:e4:a6:f3:75:5c:5f:50: 56:68:5c:db:c4:01:49:3a:e5:e2:90:32:cb:e3:4c:67:06:34: 38:f3:d5:af:7b:89:47:bd:09:1a:50:9d:1a:aa:6c:a3:b2:ca: 95:e1:04:6e:13:92:28:53:00:d4:12:1c:a5:88:de:2f:16:c4: 82:d4:72:0c:3d:d0:dd:85:2d:f0:fa:2a:2d:6f:f9:c1:6c:60: 9a:ac:ce:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjQwNTE4MTYyNTU0WhcNMjQwNTI1MTYyNTU0WjAYMRYwFAYD VQQDEw02NjQ4ZDY5Mi03MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h1QpivumUx+lAuZ55dJrK4F9jVSn0Wh2Rk0Pl+WTsxgwhQ9OT4BUz24B1fB kG97UJIicav3dIt/LBnqmeJ0AKiJ5Um2X/FeC1pdMUUaWVM4PGA9GALBXap4EfOV mUk58Yw8oew2VfUiuqpQyupxAOuJcLukeq4qJulf6eWIuU10oa6ne0MPXC/YxQtd S5EmUW0i6ula+CWJE3L3Mv6i56M1BhIsLZmtJzcacl54Wh9WuzJQuqgFBwpWGI1v cU+ZM0Z0VNp0rgTdxUGbAOktPx1c0OoO4yBnqZ0jevZ0ICiKum9lZ5MUes06u0lq O+iwvhxGv0cmzsAyyPMX8C01MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7fDNol D/0rvZ1mAUyvuJNSpDolMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz2SDqfRfn53/H3YfzaaE+teZZW9vT3Pa7zbe0JvULXYj/q+KdQAqx daPr/lHdyGqjGykCceOtbc2LQAgL5ZU2CDddoq+XDW86WFBFZuvzklZI6YQWE5rq 4ybdFSih7sernLbi/l3DAVY3sOiLAJbMDrErD5nT2gereH8uhI7sJ6GB7Gob5uT0 uBcZYA82GUDTriA4dMEik1PaNgG8Uf0/QPxA50tg+X3cxgylyOSm83VcX1BWaFzb xAFJOuXikDLL40xnBjQ489Wve4lHvQkaUJ0aqmyjssqV4QRuE5IoUwDUEhyliN4v FsSC1HIMPdDdhS3w+iotb/nBbGCarM4S -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org