$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: 9efsQKNNvnEcryq48A1oWbFHLns6PiU5dz6X8tH+aRM= Subject key identifier: 05:13:24:5C:9C:4A:C7:54:58:97:CB:67:88:9D:31:7F:60:BE:8F:BA Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: DC Signing time: Sat 01 Jun 2024 07:24:28 +0000 Manifest this update: Sat 01 Jun 2024 07:24:27 +0000 Manifest next update: Sat 08 Jun 2024 07:24:27 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: WVVmewiKLHYIKGzpiFfF+kIbzh2VXXUgAFfbnNEV3e8=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: S559gsIWXVd6S5Op4XFYguV0V2ZXge3n4rHa7okd57c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: Jun 1 07:24:27 2024 GMT Not After : Jun 8 07:24:27 2024 GMT Subject: CN=665accab-53ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:87:1b:19:6a:53:7d:f9:49:7a:43:c7:4f: ac:3f:3d:23:c4:e1:e6:8a:83:bd:1a:61:a7:27:9c: a3:8b:46:e7:a1:2f:ed:e5:a9:1b:fb:2b:0b:50:06: 87:73:f7:b2:13:dd:78:8a:ef:f2:24:90:b3:88:c0: 08:0d:65:ff:1b:ac:f2:2f:81:37:00:2b:9c:02:f1: 24:6c:cf:3e:75:36:4a:36:02:8f:f4:ea:c8:54:66: f8:f1:a7:39:44:e3:2e:a0:42:ac:41:06:4e:c3:2f: 41:82:1f:23:51:5b:fc:87:4a:4b:b5:e4:10:52:40: 15:9e:5c:ab:24:4c:3b:a8:b2:66:5a:81:d0:2d:d3: 06:09:6e:f4:b7:e4:c0:78:de:fd:c5:ea:1e:45:2b: 94:58:7c:09:b2:85:11:20:96:9f:67:0e:62:9f:80: 1b:df:6d:91:02:74:9b:14:ea:b6:d9:0b:65:3e:72: 2a:91:6c:2d:bb:4a:63:97:64:a0:ed:b5:5d:bf:a1: 31:c2:3a:09:a5:2a:05:e2:aa:c8:b0:c4:c9:e6:d3: f4:cf:dd:14:25:7f:51:0f:8a:07:26:0e:8e:07:b1: dc:3b:89:ca:1d:33:d6:29:6c:b3:1a:ca:fa:a0:7c: 81:32:e7:23:aa:56:0a:30:5f:04:07:9b:b6:90:8f: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:13:24:5C:9C:4A:C7:54:58:97:CB:67:88:9D:31:7F:60:BE:8F:BA X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:71:97:49:03:e4:5a:4d:2d:a8:49:0a:78:38:1b:25:04:07: 90:86:1e:0a:0b:6c:b3:23:f6:fa:05:17:ec:55:3d:6c:43:9a: c5:fe:db:63:9f:1f:71:c2:3b:06:a3:e3:09:7b:13:ec:e5:78: 5c:d7:29:6d:17:82:2d:21:08:fc:0e:a0:06:d8:bf:77:25:19: 28:ee:7c:3f:c7:b2:a6:56:4e:76:0b:d7:b4:06:a2:21:84:ee: bb:13:65:3f:2c:c0:2b:28:8b:b4:c1:b9:57:7b:bf:9a:c5:86: 54:31:03:4b:11:ca:ce:20:90:f8:8d:a9:c5:17:90:cc:86:5f: 73:61:c6:bb:44:2d:3f:80:30:7e:44:7a:cf:5c:22:af:57:46: 70:88:c4:38:af:e4:57:82:ca:5e:3d:4a:e8:19:00:84:60:e0: 31:a0:f2:95:d3:6b:28:0e:45:00:d8:27:c9:82:ff:c9:47:a9: 4a:cd:fe:b6:bc:10:c8:f5:e0:ad:eb:d9:97:25:18:43:d4:f6: 47:de:f8:b9:83:db:a5:97:0e:2a:48:c6:a9:1d:50:c8:1d:ca: 23:1e:67:91:31:17:7f:12:b9:2b:8c:14:73:ec:54:22:ce:88: 96:a3:c7:e5:9f:08:2c:af:36:01:e0:4d:86:9d:f1:ce:76:79: 93:6e:f2:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjQwNjAxMDcyNDI3WhcNMjQwNjA4MDcyNDI3WjAYMRYwFAYD VQQDEw02NjVhY2NhYi01M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MmHGxlqU335SXpDx0+sPz0jxOHmioO9GmGnJ5yji0bnoS/t5akb+ysLUAaH c/eyE914iu/yJJCziMAIDWX/G6zyL4E3ACucAvEkbM8+dTZKNgKP9OrIVGb48ac5 ROMuoEKsQQZOwy9Bgh8jUVv8h0pLteQQUkAVnlyrJEw7qLJmWoHQLdMGCW70t+TA eN79xeoeRSuUWHwJsoURIJafZw5in4Ab322RAnSbFOq22QtlPnIqkWwtu0pjl2Sg 7bVdv6ExwjoJpSoF4qrIsMTJ5tP0z90UJX9RD4oHJg6OB7HcO4nKHTPWKWyzGsr6 oHyBMucjqlYKMF8EB5u2kI8x5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUTJFyc SsdUWJfLZ4idMX9gvo+6MB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBcZdJA+RaTS2oSQp4OBslBAeQhh4KC2yzI/b6BRfsVT1sQ5rF/ttj nx9xwjsGo+MJexPs5Xhc1yltF4ItIQj8DqAG2L93JRko7nw/x7KmVk52C9e0BqIh hO67E2U/LMArKIu0wblXe7+axYZUMQNLEcrOIJD4janFF5DMhl9zYca7RC0/gDB+ RHrPXCKvV0ZwiMQ4r+RXgspePUroGQCEYOAxoPKV02soDkUA2CfJgv/JR6lKzf62 vBDI9eCt69mXJRhD1PZH3vi5g9ullw4qSMapHVDIHcojHmeRMRd/ErkrjBRz7FQi zoiWo8flnwgsrzYB4E2GnfHOdnmTbvLt -----END CERTIFICATE-----Generated at Sat Jun 1 08:16:01 2024 by rpki-client on console-ams.rpki-client.org