$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: fyIzQbd7MR1JbDR/Gdd3FpIotSKKZTlrW1Y4qHW38Hs= Subject key identifier: 93:36:10:50:0D:39:57:16:FB:7B:D9:DB:DA:EB:A9:2E:0E:84:A2:51 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0ED9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0EC8 Signing time: Fri 31 May 2024 18:47:08 +0000 Manifest this update: Fri 31 May 2024 18:47:07 +0000 Manifest next update: Fri 07 Jun 2024 18:47:07 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: 8RMdFxOHELNwHifJjTs4lZo+8BsDPKthal21eUSqhsE=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: YHNqmFypXejYYf+P9MpoCxPuczYJ30DL11bIt5OGM0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3801 (0xed9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: May 31 18:47:07 2024 GMT Not After : Jun 7 18:47:07 2024 GMT Subject: CN=665a1b2c-14a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:57:f8:51:d0:87:1a:21:2d:a1:94:1d:c0: 11:be:fd:92:07:0e:12:d3:3d:ee:d8:59:68:c7:0e: dc:73:92:96:61:d5:f7:07:95:ab:e4:d8:f8:0b:83: b8:81:ec:3a:84:7c:6f:dc:33:a9:8c:e4:a6:99:56: 30:c1:74:08:a1:38:c5:f3:e8:4c:3f:db:a9:f2:55: 25:2b:d9:6e:6b:13:10:7a:27:47:53:ef:9f:3e:28: 55:05:e0:25:a0:98:3f:1c:cc:8b:ca:ed:21:18:85: ed:96:86:3f:a4:92:84:d3:ce:2f:6d:ef:39:df:d6: 2c:77:e2:aa:26:df:1f:7d:45:50:b2:46:70:d6:ed: 2b:07:0d:61:d3:a7:48:6a:fd:46:ec:f9:9f:ab:5e: f5:4d:09:58:14:03:8b:19:24:3d:5d:c3:3d:7c:ae: 2f:75:dc:79:13:45:39:d6:2f:9d:f6:5c:b0:12:4e: c4:0b:e1:f9:e8:00:44:76:6d:f1:0f:f1:36:90:a4: 20:a4:c4:b4:36:d5:96:f0:d4:1a:8e:e6:1c:f3:27: dc:76:6b:59:e1:40:d9:5c:f0:bd:a9:6d:16:3c:48: 06:bf:2d:35:72:b6:52:b1:60:9c:f7:d3:99:bf:23: 5b:d3:fa:01:e1:e2:2b:ee:9f:b2:b4:26:da:e4:b0: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:36:10:50:0D:39:57:16:FB:7B:D9:DB:DA:EB:A9:2E:0E:84:A2:51 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:5a:bd:8b:1d:2f:ae:5e:f1:ba:f8:65:6d:22:cd:26:76:29: b6:e3:40:31:88:a0:96:72:dd:f5:68:8e:1a:aa:33:7f:75:b2: 6d:f0:c0:11:a7:5a:01:0d:cf:e7:b6:da:fe:23:b8:72:e4:ac: 8c:ab:b3:b0:29:88:c6:aa:80:c7:59:74:f0:d4:54:a1:e8:b1: 8b:89:a2:68:7e:c0:45:a1:86:4a:cd:10:d9:e1:d8:9d:db:87: b3:e5:09:ca:10:a0:cd:f8:0b:61:90:8d:9d:a1:7c:fc:79:3c: af:65:e9:85:8d:7c:fd:6e:cb:38:1f:cb:24:50:49:36:98:f8: 53:20:48:e0:1c:bc:6f:88:e9:98:0f:4d:d7:1c:5c:d4:24:c6: 4c:d4:4a:63:24:12:a6:ce:40:81:30:72:de:0e:be:ed:fb:77: 66:e6:d0:2d:45:47:ea:e0:69:29:dc:5b:9b:55:e7:b5:73:9b: 0b:70:a2:40:8e:2d:e8:5f:75:f6:97:2f:56:e9:d8:38:0d:da: 7b:9e:f0:f6:56:58:86:51:d1:a7:78:09:88:8e:0b:d4:94:30: 2e:32:cc:f7:80:77:69:e3:c7:2a:df:22:23:65:4c:3a:60:4a: a7:56:94:cd:14:fd:bf:d1:b2:46:d8:e7:b8:52:6e:cb:ca:f8: 81:9f:15:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjQwNTMxMTg0NzA3WhcNMjQwNjA3MTg0NzA3WjAYMRYwFAYD VQQDEw02NjVhMWIyYy0xNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVxX+FHQhxohLaGUHcARvv2SBw4S0z3u2Floxw7cc5KWYdX3B5Wr5Nj4C4O4 gew6hHxv3DOpjOSmmVYwwXQIoTjF8+hMP9up8lUlK9luaxMQeidHU++fPihVBeAl oJg/HMyLyu0hGIXtloY/pJKE084vbe8539Ysd+KqJt8ffUVQskZw1u0rBw1h06dI av1G7Pmfq171TQlYFAOLGSQ9XcM9fK4vddx5E0U51i+d9lywEk7EC+H56ABEdm3x D/E2kKQgpMS0NtWW8NQajuYc8yfcdmtZ4UDZXPC9qW0WPEgGvy01crZSsWCc99OZ vyNb0/oB4eIr7p+ytCba5LD2UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM2EFAN OVcW+3vZ29rrqS4OhKJRMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABWr2LHS+uXvG6+GVtIs0mdim240AxiKCWct31aI4aqjN/dbJt8MAR p1oBDc/nttr+I7hy5KyMq7OwKYjGqoDHWXTw1FSh6LGLiaJofsBFoYZKzRDZ4did 24ez5QnKEKDN+AthkI2doXz8eTyvZemFjXz9bss4H8skUEk2mPhTIEjgHLxviOmY D03XHFzUJMZM1EpjJBKmzkCBMHLeDr7t+3dm5tAtRUfq4Gkp3FubVee1c5sLcKJA ji3oX3X2ly9W6dg4Ddp7nvD2VliGUdGneAmIjgvUlDAuMsz3gHdp48cq3yIjZUw6 YEqnVpTNFP2/0bJG2Oe4Um7LyviBnxVy -----END CERTIFICATE-----Generated at Fri May 31 19:47:51 2024 by rpki-client on console-fra.rpki-client.org