$ rpki-client -vvf rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft File: wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft (raw, json) Hash identifier: HsKzJ35S+dMJFga72VBN98mxxtMXw8zInhO+tNdy0x0= Subject key identifier: B1:CF:A5:F0:1D:9E:42:85:B2:E3:BA:E3:4C:CF:09:6F:E8:5C:D8:18 Authority key identifier: C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10 Certificate issuer: /CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft Manifest number: 061A Signing time: Sat 01 Jun 2024 00:41:26 +0000 Manifest this update: Sat 01 Jun 2024 00:41:26 +0000 Manifest next update: Sat 08 Jun 2024 00:41:26 +0000 Files and hashes: 1: wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl (hash: 9yquV3eRhhMcvlhL2B51pw1YX6RlvPqTvM7VGZwKAnQ=) 2: 5E7AC046554C11EB87AB9070C4F9AE02.roa (hash: 9SEp12826tyPgZ90rcyya6rTZZSYMM+g/IkmHnoRS+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10 Validity Not Before: Jun 1 00:41:26 2024 GMT Not After : Jun 8 00:41:26 2024 GMT Subject: CN=665a6e36-2a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:f5:49:70:5a:64:c2:f6:9f:2d:43:90:be: 0c:67:5c:36:fc:6b:8e:64:92:e1:5e:24:6c:c7:fb: 7c:e1:fa:95:50:b6:8f:07:cc:11:7f:8c:6a:9e:f4: a1:70:ca:28:bc:44:77:c7:cb:20:46:47:dd:95:61: 36:72:19:74:45:25:5c:3f:b4:e8:d4:4c:e0:b7:a4: 64:19:05:a4:8e:17:c8:9e:64:95:70:ab:a2:20:f3: eb:49:d3:3e:be:31:27:0e:97:dd:89:78:7b:7c:25: 68:80:f8:94:87:01:9e:b0:19:d4:1c:05:1c:dc:30: e3:72:f0:80:2b:a2:f6:1b:01:72:f9:ba:74:bf:ec: a7:2c:77:29:60:85:c3:32:89:06:b9:1e:ac:d9:7b: c2:0b:c5:9d:6b:19:71:49:6a:21:e5:fc:8f:92:9e: 43:e3:c3:9e:22:ff:90:ed:11:0d:7c:99:f5:43:93: 4f:22:90:3a:50:3f:93:93:02:14:f8:94:1b:5a:ae: 4d:33:68:ce:c5:ed:fa:a0:60:ed:52:f2:56:6c:78: 58:e3:b6:26:25:21:3c:40:49:4f:31:69:6a:e7:0d: 8c:f4:3e:b1:58:dd:19:09:db:1f:5a:5f:bc:c5:9d: 7b:e8:4e:84:70:96:fd:d6:ae:f3:f3:3c:76:90:15: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:A5:F0:1D:9E:42:85:B2:E3:BA:E3:4C:CF:09:6F:E8:5C:D8:18 X509v3 Authority Key Identifier: keyid:C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:13:4f:08:a5:84:2a:d6:e7:0d:45:07:7a:ea:32:92:b9:bc: db:9e:a7:81:2b:49:f8:3b:c7:88:e8:6b:b5:20:03:75:80:54: e4:66:38:d9:5d:32:73:f9:1c:31:ee:ea:36:22:83:d3:1c:f7: a0:78:ef:85:8c:27:6b:c7:d5:39:ad:1f:a2:de:12:5d:48:8e: db:63:eb:40:65:83:d3:e4:f4:28:16:67:a6:4a:03:f1:7b:2e: 30:55:62:d8:df:17:63:ee:41:27:cf:19:31:5f:dd:91:cd:48: af:89:a5:a4:cf:cb:57:3a:d5:78:e6:7c:e1:17:9b:9a:e2:7e: f2:d8:37:0f:f9:9e:d6:54:22:d2:ee:1a:ce:18:4c:af:27:8d: 23:84:04:85:11:b6:4d:0b:f9:02:19:fb:e6:10:62:00:f3:1e: 80:f3:04:40:a2:31:38:4f:d2:33:49:0a:ff:52:d1:32:d2:17: e9:12:01:76:9a:26:7d:39:29:51:77:07:09:a6:c3:5d:4f:8d: 01:7d:54:c5:9d:64:88:4a:c4:21:c8:42:87:d3:b9:f2:20:d8: 8b:9f:5a:3e:28:99:6f:32:c7:f0:6a:6d:5d:b6:c5:ad:60:f9: f8:7e:b5:7f:46:5d:85:cb:f9:2e:fa:f9:41:e8:d3:b6:cc:6c: 25:ef:f8:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyM0QxMTAvBgNVBAUTKEMxQkZBMjZDMUI3OTQzODAwOEJDMUQ3MzE1OENDODUx QkQxMjlDMTAwHhcNMjQwNjAxMDA0MTI2WhcNMjQwNjA4MDA0MTI2WjAYMRYwFAYD VQQDEw02NjVhNmUzNi0yYTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FP1SXBaZML2ny1DkL4MZ1w2/GuOZJLhXiRsx/t84fqVULaPB8wRf4xqnvSh cMoovER3x8sgRkfdlWE2chl0RSVcP7To1Ezgt6RkGQWkjhfInmSVcKuiIPPrSdM+ vjEnDpfdiXh7fCVogPiUhwGesBnUHAUc3DDjcvCAK6L2GwFy+bp0v+ynLHcpYIXD MokGuR6s2XvCC8WdaxlxSWoh5fyPkp5D48OeIv+Q7RENfJn1Q5NPIpA6UD+TkwIU +JQbWq5NM2jOxe36oGDtUvJWbHhY47YmJSE8QElPMWlq5w2M9D6xWN0ZCdsfWl+8 xZ176E6EcJb91q7z8zx2kBVlnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHPpfAd nkKFsuO640zPCW/oXNgYMB8GA1UdIwQYMBaAFMG/omwbeUOACLwdcxWMyFG9EpwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIzRC83RDg5MUZGQTU1 M0QxMUVCQjU2ODdGNzRDNEY5QUUwMi93Yi1pYkJ0NVE0QUl2QjF6Rll6SVViMFNu QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diLWliQnQ1UTRBSXZCMXpGWXpJVWIwU25CQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIzRC83RDg5MUZGQTU1M0QxMUVCQjU2ODdGNzRDNEY5QUUwMi93Yi1pYkJ0NVE0 QUl2QjF6Rll6SVViMFNuQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfE08IpYQq1ucNRQd66jKSubzbnqeBK0n4O8eI6Gu1IAN1gFTkZjjZ XTJz+Rwx7uo2IoPTHPegeO+FjCdrx9U5rR+i3hJdSI7bY+tAZYPT5PQoFmemSgPx ey4wVWLY3xdj7kEnzxkxX92RzUiviaWkz8tXOtV45nzhF5ua4n7y2DcP+Z7WVCLS 7hrOGEyvJ40jhASFEbZNC/kCGfvmEGIA8x6A8wRAojE4T9IzSQr/UtEy0hfpEgF2 miZ9OSlRdwcJpsNdT40BfVTFnWSISsQhyEKH07nyINiLn1o+KJlvMsfwam1dtsWt YPn4frV/Rl2Fy/ku+vlB6NO2zGwl7/hg -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org