$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: t7zZgCwthxg2bpGXq7ao3wl7R295kHsoIhzcNwMZIZQ= Subject key identifier: 23:24:BF:98:E8:87:6E:0A:34:AA:E6:54:4F:86:88:45:C9:D3:90:01 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 0226 Signing time: Sun 19 May 2024 04:03:45 +0000 Manifest this update: Sun 19 May 2024 04:03:44 +0000 Manifest next update: Sun 26 May 2024 04:03:44 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: ll01jUuHU7fQEJA4gXJn6A3ZeYl9bJW/pbwVw9vM/5s=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: 1xNSVwrWuI1dNeDqj4OPmRPkWgqvypr2z6wt59QMq7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: May 19 04:03:44 2024 GMT Not After : May 26 04:03:44 2024 GMT Subject: CN=66497a20-a0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:40:72:ed:8b:a2:d8:1b:21:e0:c4:42:05: c1:4d:52:79:78:a0:3a:69:43:dc:78:d8:17:93:f4: df:01:e4:2e:9c:11:8f:73:52:21:57:bc:24:da:32: 35:b5:e7:c1:cf:3d:16:57:33:9c:dc:0a:ef:ec:de: 28:29:d0:e6:98:56:f6:aa:46:76:3b:4c:60:90:60: 1f:ad:7c:7e:56:ee:12:17:60:0d:6b:82:d3:e7:df: 5c:17:05:2f:72:6e:2a:ac:87:ab:15:fa:97:5a:36: 66:4c:3e:df:67:3b:4a:20:3e:60:05:ce:dc:ca:73: 81:aa:c9:03:84:04:38:22:dd:32:b1:e9:59:21:f5: db:9f:64:28:96:59:e5:a6:f1:d6:2c:2a:fb:40:0e: 1f:39:f7:3d:8e:1a:cf:36:13:3b:0e:9c:d7:7e:d3: cc:fa:a9:39:68:00:50:84:44:23:2f:8e:d3:db:a3: 2a:05:62:88:d1:74:e0:eb:43:82:eb:a9:68:c1:cf: 19:b8:1a:b9:84:2b:88:26:6f:f3:91:c9:b2:95:72: 61:bd:bf:55:1d:55:8a:d9:01:31:a7:97:9e:22:a0: 17:51:2e:aa:33:98:ae:f9:21:32:ec:5d:df:b6:23: 6c:b9:79:e4:c5:ee:6f:d9:31:d9:db:ff:b9:7c:92: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:24:BF:98:E8:87:6E:0A:34:AA:E6:54:4F:86:88:45:C9:D3:90:01 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8c:c3:50:68:bb:4d:c3:7d:64:17:5f:c5:61:e7:5a:67:a2: 18:19:e5:45:b8:96:61:69:be:2a:10:d4:e5:97:f2:da:6e:d0: 63:22:28:c9:f0:27:0b:06:81:82:ba:cd:5a:9b:bd:3f:80:5f: 6d:2d:90:3e:21:4a:90:cf:89:f3:df:89:72:f3:98:96:03:a4: 91:79:85:20:bb:33:d1:6f:1a:02:11:79:f8:a5:c6:16:6d:6e: 0d:ac:e1:6a:fd:6f:9c:ab:61:be:03:b1:75:86:18:4c:eb:7a: 03:5d:51:27:73:b2:da:0d:44:b9:3f:f7:cd:62:bf:74:f7:22: 0d:18:10:26:a7:d8:a1:84:46:ae:ce:fc:aa:e8:42:33:72:2e: b3:eb:fe:d8:56:5b:f1:2f:8a:b1:f2:20:6a:06:d1:dd:a4:54: d9:ee:dd:ba:0e:62:2c:4f:c5:c1:ff:2b:91:24:c2:59:e6:2c: e3:93:72:e1:5c:be:39:26:01:48:99:c3:87:f3:69:99:26:2f: 3f:b3:76:45:7e:cf:3d:dd:57:f0:d6:1f:66:d4:aa:ce:c1:a0: f1:d6:a8:ff:73:d8:2a:e0:49:c0:b0:d6:c8:fe:6c:0b:30:2f: cc:ca:1b:53:dd:0c:1c:3e:c7:8e:4d:05:a0:75:e7:b5:ac:12: ce:7e:d7:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjQwNTE5MDQwMzQ0WhcNMjQwNTI2MDQwMzQ0WjAYMRYwFAYD VQQDEw02NjQ5N2EyMC1hMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r1Acu2LotgbIeDEQgXBTVJ5eKA6aUPceNgXk/TfAeQunBGPc1IhV7wk2jI1 tefBzz0WVzOc3Arv7N4oKdDmmFb2qkZ2O0xgkGAfrXx+Vu4SF2ANa4LT599cFwUv cm4qrIerFfqXWjZmTD7fZztKID5gBc7cynOBqskDhAQ4It0yselZIfXbn2Qollnl pvHWLCr7QA4fOfc9jhrPNhM7DpzXftPM+qk5aABQhEQjL47T26MqBWKI0XTg60OC 66lowc8ZuBq5hCuIJm/zkcmylXJhvb9VHVWK2QExp5eeIqAXUS6qM5iu+SEy7F3f tiNsuXnkxe5v2THZ2/+5fJIfqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMkv5jo h24KNKrmVE+GiEXJ05ABMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsjMNQaLtNw31kF1/FYedaZ6IYGeVFuJZhab4qENTll/LabtBjIijJ 8CcLBoGCus1am70/gF9tLZA+IUqQz4nz34ly85iWA6SReYUguzPRbxoCEXn4pcYW bW4NrOFq/W+cq2G+A7F1hhhM63oDXVEnc7LaDUS5P/fNYr909yINGBAmp9ihhEau zvyq6EIzci6z6/7YVlvxL4qx8iBqBtHdpFTZ7t26DmIsT8XB/yuRJMJZ5izjk3Lh XL45JgFImcOH82mZJi8/s3ZFfs893Vfw1h9m1KrOwaDx1qj/c9gq4EnAsNbI/mwL MC/MyhtT3QwcPseOTQWgdee1rBLOftc5 -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org