$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft File: Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json) Hash identifier: LnM1mHFMxGRKz0m28d/Z9gx631g17A5PwszojG+4w/E= Subject key identifier: 04:DE:29:46:B7:10:80:35:5B:1B:21:C9:4B:90:64:7C:2B:BB:35:97 Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB Certificate issuer: /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft Manifest number: 05C9 Signing time: Sun 19 May 2024 00:49:58 +0000 Manifest this update: Sun 19 May 2024 00:49:57 +0000 Manifest next update: Sun 26 May 2024 00:49:57 +0000 Files and hashes: 1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: NVauWwDLspcNR16KJAnKbx6hUSttgmkSIjJwimchW9w=) 2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: ZfqL0mekqMSkpT1JFuTMXYl9KofA+Q6YfWwZ2fBHwV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Validity Not Before: May 19 00:49:57 2024 GMT Not After : May 26 00:49:57 2024 GMT Subject: CN=66494cb5-973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:27:9e:f2:c2:11:9f:5a:f1:13:90:d4:0b: 26:c7:19:36:bc:2d:b1:f8:62:a5:37:c5:0e:30:4c: d8:85:93:e8:70:32:5b:7a:87:f0:d6:70:4f:33:95: c0:1b:55:8a:af:48:8c:32:a9:83:87:ae:02:75:eb: 27:73:60:85:cc:2f:24:7f:09:3d:2e:83:48:3c:75: b1:bb:ed:6e:ce:80:ce:e0:f8:0c:2d:3b:cb:97:ae: 0d:94:49:72:0f:b1:75:96:8b:c4:0f:b7:5b:41:80: 20:ae:f4:d3:b9:01:ba:d9:21:4d:d3:bf:a5:c7:fc: 6c:7f:a5:24:58:5e:d9:78:7b:b4:e7:09:b4:56:d5: 6f:dd:be:d5:66:1f:20:ae:82:8d:91:e8:44:9e:4a: ec:45:7f:6b:16:5e:2e:c7:a2:b0:b6:4c:01:0e:46: d5:24:94:d7:c9:9a:78:5b:92:e9:f3:64:ae:26:e5: 8e:00:65:27:e8:ce:42:01:f4:b8:eb:18:82:65:ed: 93:ff:77:df:a6:d1:2e:67:84:14:9f:c9:df:8f:c0: 1f:49:04:e8:11:1f:cb:9a:8e:56:09:75:d5:80:fb: ab:e0:0f:dc:7d:1c:d4:bc:97:0f:9f:2c:e4:6c:d3: c4:14:c5:c0:f6:15:68:a5:f3:de:e1:f5:96:3c:36: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DE:29:46:B7:10:80:35:5B:1B:21:C9:4B:90:64:7C:2B:BB:35:97 X509v3 Authority Key Identifier: keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4a:61:1d:c5:4b:62:b8:4b:0b:d7:3a:05:75:68:15:e2:d3: 51:88:5d:c6:34:ed:36:a0:e5:80:e7:ce:63:0d:56:55:54:fa: fe:1c:56:bf:33:b2:05:e7:33:b1:58:2f:56:bc:db:79:0b:3d: ec:33:be:e1:6a:94:a3:11:66:9d:85:1f:7e:c0:b4:68:f4:2e: 07:17:45:f0:29:65:aa:09:73:c1:8c:73:75:d4:9c:e5:72:d8: 1e:69:54:90:a2:03:de:a1:7c:ed:77:c6:57:06:a7:10:33:dc: f9:43:b7:17:a5:d8:48:21:c7:83:5c:a6:be:68:02:5c:5b:64: 34:46:20:e0:fe:00:f9:a4:46:ca:49:20:2e:8f:c1:f9:ff:97: 23:5f:1a:d5:fc:a4:28:76:c7:cb:67:61:43:8c:8f:d0:0e:57: 03:db:7c:c3:cf:36:e1:e4:63:fc:b2:41:7c:f3:4e:e7:e1:49: be:13:fc:2a:9f:52:23:d6:ed:fe:c4:8e:69:27:dd:23:15:c4: 3a:54:23:52:db:fe:1f:be:04:51:a0:1c:c0:f9:90:6d:85:d5: c3:89:7f:83:6c:4c:e5:7c:23:e6:c4:62:95:1c:bc:c1:2e:5f: 8c:06:76:27:f1:2b:c8:4f:53:dc:ca:d3:0e:e0:03:4f:64:0e: 04:ac:1c:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzIzNTExMC8GA1UEBRMoNUE1NkY4OUY1MDgxMkE4MTBGRjJERTg0NTQ3MEYxMDky NzI0QTFBQjAeFw0yNDA1MTkwMDQ5NTdaFw0yNDA1MjYwMDQ5NTdaMBgxFjAUBgNV BAMTDTY2NDk0Y2I1LTk3M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOwiee8sIRn1rxE5DUCybHGTa8LbH4YqU3xQ4wTNiFk+hwMlt6h/DWcE8zlcAb VYqvSIwyqYOHrgJ16ydzYIXMLyR/CT0ug0g8dbG77W7OgM7g+AwtO8uXrg2USXIP sXWWi8QPt1tBgCCu9NO5AbrZIU3Tv6XH/Gx/pSRYXtl4e7TnCbRW1W/dvtVmHyCu go2R6ESeSuxFf2sWXi7HorC2TAEORtUklNfJmnhbkunzZK4m5Y4AZSfozkIB9Ljr GIJl7ZP/d9+m0S5nhBSfyd+PwB9JBOgRH8uajlYJddWA+6vgD9x9HNS8lw+fLORs 08QUxcD2FWil897h9ZY8NgHnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBN4pRrcQ gDVbGyHJS5BkfCu7NZcwHwYDVR0jBBgwFoAUWlb4n1CBKoEP8t6EVHDxCSckoasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMjM1L0E0RkMzQjVBOUZB MDExRUI4MDQyRDUzN0M0RjlBRTAyL1dsYjRuMUNCS29FUDh0NkVWSER4Q1Nja29h cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2xiNG4xQ0JLb0VQOHQ2RVZIRHhDU2Nrb2FzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MjM1L0E0RkMzQjVBOUZBMDExRUI4MDQyRDUzN0M0RjlBRTAyL1dsYjRuMUNCS29F UDh0NkVWSER4Q1Nja29hcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxKYR3FS2K4SwvXOgV1aBXi01GIXcY07Tag5YDnzmMNVlVU+v4cVr8z sgXnM7FYL1a823kLPewzvuFqlKMRZp2FH37AtGj0LgcXRfApZaoJc8GMc3XUnOVy 2B5pVJCiA96hfO13xlcGpxAz3PlDtxel2Eghx4Ncpr5oAlxbZDRGIOD+APmkRspJ IC6Pwfn/lyNfGtX8pCh2x8tnYUOMj9AOVwPbfMPPNuHkY/yyQXzzTufhSb4T/Cqf UiPW7f7Ejmkn3SMVxDpUI1Lb/h++BFGgHMD5kG2F1cOJf4NsTOV8I+bEYpUcvMEu X4wGdifxK8hPU9zK0w7gA09kDgSsHHs= -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org