$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: yLyxwHfjujcgTyadC0PZsZYhRSjwaAsDey7CcESkQys= Subject key identifier: 1C:F3:4F:01:7C:43:C1:73:B5:21:5D:25:B3:C3:C3:B6:6C:31:9E:98 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: 11 Signing time: Sun 19 May 2024 08:48:43 +0000 Manifest this update: Sun 19 May 2024 08:48:42 +0000 Manifest next update: Sun 26 May 2024 08:48:42 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: bRoHWIRZYBRXut7tg6480CgoLmmE02Jz506OB8pQcvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: May 19 08:48:42 2024 GMT Not After : May 26 08:48:42 2024 GMT Subject: CN=6649bcea-b77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:94:b0:bd:6f:b4:41:28:53:35:03:be:58: 1c:4e:dd:ed:81:cc:0d:38:b1:3e:04:be:26:42:2a: 27:55:af:b0:f8:40:52:65:1c:fc:f7:23:9b:f4:3c: 42:6e:30:7d:b1:0d:03:f1:c2:d3:78:c3:fb:5a:6d: 42:86:67:40:db:8c:20:d8:9b:29:2a:6f:02:f7:af: 01:c1:20:70:7c:cb:d1:2e:7f:a6:e1:d3:46:f7:6c: 18:a5:2e:f1:2b:55:03:6b:6b:90:4f:d0:bf:f8:bd: 6b:f4:9d:f6:a1:a4:3c:47:ce:05:60:2a:97:26:47: ab:51:d0:7e:72:05:b4:8e:2c:df:bf:f4:7f:cb:9b: 5a:3d:ad:85:29:31:18:58:97:35:6f:15:c4:48:7f: d9:84:ae:83:db:0f:75:11:36:45:06:da:78:4c:54: 6f:9e:65:b5:98:43:3e:3d:95:5b:23:f4:9f:b6:c1: 66:c5:a1:61:99:c8:7a:ed:38:11:6f:69:e6:40:83: ff:e2:a5:79:09:bb:88:33:e7:93:ca:82:0f:25:67: f7:bd:07:b3:ed:56:b5:43:57:5e:50:9e:10:eb:5a: 18:b6:f8:4d:ba:28:c1:d4:24:ea:68:61:01:44:e8: 7c:3f:20:b5:9a:21:93:7f:fb:0c:75:67:d8:04:c9: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F3:4F:01:7C:43:C1:73:B5:21:5D:25:B3:C3:C3:B6:6C:31:9E:98 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:85:31:29:64:87:00:f9:83:7c:9f:f1:23:94:50:b6:09: b9:10:4c:27:bd:e5:64:f8:b9:9d:a0:d5:35:3f:ed:bb:95:fa: 05:64:44:1f:1e:f6:7e:c7:fb:52:00:de:24:0f:ca:9b:c5:bf: 42:0f:72:d9:96:e2:58:fa:91:76:02:f5:ee:da:95:58:9a:bd: a5:23:a7:91:99:2d:1c:37:60:41:24:ba:27:1f:3c:8c:7a:23: f0:57:7f:e0:e7:ff:61:61:5a:1f:a6:3d:37:62:ee:cd:5c:eb: da:e4:28:9d:3e:fb:4f:6a:6b:24:53:f0:89:10:05:a1:7b:0e: 86:a3:f5:3a:e3:e7:e9:90:61:6a:da:72:5b:11:9f:b3:2f:9b: 10:75:c8:20:e5:c1:8b:c9:d1:ca:89:ba:b6:dd:fe:e6:e5:49: b4:bc:ab:c3:3f:e9:3a:f1:42:cc:cb:f8:5f:58:df:e2:dc:d2: f7:49:dc:da:b5:0e:82:11:ed:d1:69:2b:0d:44:fd:78:6b:58: 41:eb:92:d1:1b:c5:bd:12:dc:47:73:df:2e:61:33:b8:24:ad: 91:e9:b4:02:b4:0a:48:b3:f8:ea:13:fd:36:79:c9:76:57:f4: 50:65:a4:55:47:94:b8:f7:f9:12:00:0c:21:e0:72:9f:66:13: 47:b8:b6:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkY3QzExMC8GA1UEBRMoQzBFMzFCNUY0NUNGRTUyQkFDNUNFREI4RENDNkExQTMy MkY0NzA1RDAeFw0yNDA1MTkwODQ4NDJaFw0yNDA1MjYwODQ4NDJaMBgxFjAUBgNV BAMTDTY2NDliY2VhLWI3N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBf5SwvW+0QShTNQO+WBxO3e2BzA04sT4EviZCKidVr7D4QFJlHPz3I5v0PEJu MH2xDQPxwtN4w/tabUKGZ0DbjCDYmykqbwL3rwHBIHB8y9Euf6bh00b3bBilLvEr VQNra5BP0L/4vWv0nfahpDxHzgVgKpcmR6tR0H5yBbSOLN+/9H/Lm1o9rYUpMRhY lzVvFcRIf9mEroPbD3URNkUG2nhMVG+eZbWYQz49lVsj9J+2wWbFoWGZyHrtOBFv aeZAg//ipXkJu4gz55PKgg8lZ/e9B7PtVrVDV15QnhDrWhi2+E26KMHUJOpoYQFE 6Hw/ILWaIZN/+wx1Z9gEyfpfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHPNPAXxD wXO1IV0ls8PDtmwxnpgwHwYDVR0jBBgwFoAUwOMbX0XP5SusXO243MahoyL0cF0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RjdDLzg2RjkxNjFDRkM1 QjExRUVBM0ZGOUQ0N0M0RjlBRTAyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNG MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd09NYlgwWFA1U3VzWE8yNDNNYWhveUwwY0YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RjdDLzg2RjkxNjFDRkM1QjExRUVBM0ZGOUQ0N0M0RjlBRTAyL3dPTWJYMFhQNVN1 c1hPMjQzTWFob3lMMGNGMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6MhTEpZIcA+YN8n/EjlFC2CbkQTCe95WT4uZ2g1TU/7buV+gVkRB8e 9n7H+1IA3iQPypvFv0IPctmW4lj6kXYC9e7alViavaUjp5GZLRw3YEEkuicfPIx6 I/BXf+Dn/2FhWh+mPTdi7s1c69rkKJ0++09qayRT8IkQBaF7Doaj9Trj5+mQYWra clsRn7MvmxB1yCDlwYvJ0cqJurbd/ublSbS8q8M/6TrxQszL+F9Y3+Lc0vdJ3Nq1 DoIR7dFpKw1E/XhrWEHrktEbxb0S3Edz3y5hM7gkrZHptAK0Ckiz+OoT/TZ5yXZX 9FBlpFVHlLj3+RIADCHgcp9mE0e4tis= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org