$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: hS/sVoLfSG9nqncfCqKPSYCYIeg9vl2QWHF2o5l4gkk= Subject key identifier: C0:33:05:DE:F6:FB:84:F4:3C:82:E2:D9:FE:EB:8F:61:DD:9F:5F:AB Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1E4B Signing time: Sat 18 May 2024 16:24:59 +0000 Manifest this update: Sat 18 May 2024 16:24:59 +0000 Manifest next update: Sat 25 May 2024 16:24:59 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: WBvta6s6xbY6f3O+LNF3c4tUgVS4+jxvzz1UQjB2IL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7755 (0x1e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: May 18 16:24:59 2024 GMT Not After : May 25 16:24:59 2024 GMT Subject: CN=6648d65b-b7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:24:5a:ed:63:c6:4f:fa:9f:ad:6d:a9:95: 87:c8:9d:5d:e6:45:33:10:a0:08:7b:83:bc:35:2d: 89:bb:7e:ca:18:9e:9c:c4:71:3a:a7:58:84:70:c5: cb:10:9f:af:88:32:6d:d1:40:36:fd:96:04:55:4e: d9:01:d7:17:ca:14:24:05:3a:de:18:d9:ea:87:72: d4:9d:c1:af:09:5b:1f:ff:cf:ac:3b:45:9e:ff:80: 8f:64:80:97:63:d5:01:af:fd:58:4d:a3:ea:ee:e0: 4c:a3:20:db:46:ab:d2:8f:e6:29:dc:c1:8c:cd:6b: 7f:5e:c4:60:7e:54:9a:38:d7:c8:8d:3e:c9:22:5b: 51:7a:b0:58:b3:cd:05:c3:04:de:73:59:a5:c3:99: b5:b1:91:85:3e:c0:aa:14:6e:3a:7c:c0:21:e2:a9: 94:80:47:d5:ac:f2:8d:17:74:d7:77:ea:82:55:c0: 7b:49:67:69:c9:34:fa:7b:a7:92:91:c4:e5:f6:60: 29:f8:2c:8f:47:e2:5f:b9:3f:6b:a4:24:b0:c0:7c: 69:58:60:42:e6:d9:c1:7d:39:dc:42:c8:a0:25:6c: 6f:2d:3c:22:7e:ea:7a:1b:6c:47:82:17:a8:9f:77: 81:d7:23:7d:05:e7:bc:ad:27:35:53:5e:5b:2f:3e: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:33:05:DE:F6:FB:84:F4:3C:82:E2:D9:FE:EB:8F:61:DD:9F:5F:AB X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c8:c9:3f:bc:e4:d3:a7:de:f4:6d:f5:23:d1:7b:c8:64:8d: 59:e9:7c:91:9b:50:ae:17:90:44:ca:26:2a:8a:80:bb:77:cc: 68:46:a7:ac:fd:cc:c3:c5:d5:8f:cb:f1:03:98:d2:55:18:9c: 99:90:b1:08:f2:4f:25:f7:0e:3a:ab:8b:1e:42:97:04:93:e9: db:18:f5:bf:8d:37:63:61:23:6d:dc:d0:f7:14:2d:4f:a1:05: 99:be:cc:d3:59:83:1a:80:91:d0:e2:c5:a6:bc:ad:0d:3d:3e: 44:f7:b4:5b:d9:04:c4:19:69:38:96:65:8a:f1:e7:7e:9b:63: b0:ce:29:c6:8b:7e:ea:76:81:46:2e:a7:51:f0:73:08:07:db: 99:18:57:40:6d:ed:7e:32:43:4e:15:12:64:27:69:5a:2b:1b: 13:d1:05:f0:6d:c7:cc:ec:29:52:62:36:32:35:06:7f:e1:82: 58:cc:cf:b9:91:8a:79:87:8f:ed:3c:ba:e0:df:f8:73:51:99: 29:78:70:22:6c:54:b7:48:93:ee:eb:29:a6:8a:cd:f4:77:49: 49:84:3f:9b:48:af:ee:d5:83:fa:f9:f4:01:1e:b2:6c:29:78: dd:d6:31:75:7e:3c:a4:8a:72:b7:80:3a:f0:fa:fe:33:7b:f8: 54:3f:c7:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjQwNTE4MTYyNDU5WhcNMjQwNTI1MTYyNDU5WjAYMRYwFAYD VQQDEw02NjQ4ZDY1Yi1iN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YgkWu1jxk/6n61tqZWHyJ1d5kUzEKAIe4O8NS2Ju37KGJ6cxHE6p1iEcMXL EJ+viDJt0UA2/ZYEVU7ZAdcXyhQkBTreGNnqh3LUncGvCVsf/8+sO0We/4CPZICX Y9UBr/1YTaPq7uBMoyDbRqvSj+Yp3MGMzWt/XsRgflSaONfIjT7JIltRerBYs80F wwTec1mlw5m1sZGFPsCqFG46fMAh4qmUgEfVrPKNF3TXd+qCVcB7SWdpyTT6e6eS kcTl9mAp+CyPR+JfuT9rpCSwwHxpWGBC5tnBfTncQsigJWxvLTwifup6G2xHgheo n3eB1yN9Bee8rSc1U15bLz5HjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAzBd72 +4T0PILi2f7rj2Hdn1+rMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVyMk/vOTTp970bfUj0XvIZI1Z6XyRm1CuF5BEyiYqioC7d8xoRqes /czDxdWPy/EDmNJVGJyZkLEI8k8l9w46q4seQpcEk+nbGPW/jTdjYSNt3ND3FC1P oQWZvszTWYMagJHQ4sWmvK0NPT5E97Rb2QTEGWk4lmWK8ed+m2OwzinGi37qdoFG LqdR8HMIB9uZGFdAbe1+MkNOFRJkJ2laKxsT0QXwbcfM7ClSYjYyNQZ/4YJYzM+5 kYp5h4/tPLrg3/hzUZkpeHAibFS3SJPu6ymmis30d0lJhD+bSK/u1YP6+fQBHrJs KXjd1jF1fjykinK3gDrw+v4ze/hUP8dF -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org