$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft File: WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json) Hash identifier: vaZ7mr/MZbnUBvvTGFy2u3Xy/K3AwZx7zvQYsB7pbKI= Subject key identifier: CD:F8:CB:25:01:58:CE:B5:F5:75:3F:F3:5A:F8:B9:9A:51:17:C6:DA Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27 Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft Manifest number: AF Signing time: Sun 19 May 2024 06:53:59 +0000 Manifest this update: Sun 19 May 2024 06:53:58 +0000 Manifest next update: Sun 26 May 2024 06:53:58 +0000 Files and hashes: 1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: IzncAagCx1GpftYawJJhMIcaOavbS7zThuonOs+/njU=) 2: ED024CD6D09A11EE90ADC85FC4F9AE02.roa (hash: 685GVAzo4DYuy3+LPziWRxAy8zQgA0oTX2Vqk7yxcB4=) 3: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: JP3QXvIHYsvruOpC0snsj1YBYPA17lHalx5tTuorcTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27 Validity Not Before: May 19 06:53:58 2024 GMT Not After : May 26 06:53:58 2024 GMT Subject: CN=6649a206-c9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:04:48:b6:6d:5a:12:db:78:e0:c2:01:ce: d6:98:56:07:21:dd:fe:3d:41:cb:5b:c3:9f:9c:8f: af:bd:fe:1e:db:23:18:2e:0b:46:35:39:0d:76:8c: b6:ea:f4:c8:5a:cd:8c:86:0d:63:99:0b:3d:6b:64: 3f:5f:e6:36:69:d2:cd:ac:8b:0a:65:d5:62:02:df: c9:d0:00:da:aa:db:2e:b5:83:c0:c7:cd:2f:3b:15: a6:d9:67:3b:43:f5:68:3f:55:2c:1e:b7:e0:41:7d: b1:ff:dc:ca:0f:07:ba:23:e3:7d:98:a8:99:a7:b7: 57:4a:55:19:ed:01:ea:4f:7f:6f:75:32:ca:6c:fb: e5:65:14:ee:c3:0e:ad:72:a8:48:6f:58:fc:6d:c5: ca:fd:58:0f:0d:ab:f8:ef:f5:7a:19:67:c4:9d:08: f6:e4:83:6f:0b:3e:b0:a9:79:e5:7c:5a:54:d1:18: 7c:03:f7:bf:4c:da:8a:f1:02:1c:d7:73:3a:f0:80: 63:4c:c8:9e:53:27:8f:9f:4f:4b:6b:59:41:44:84: 7a:f3:ca:47:c5:83:e0:e5:1a:b2:4b:49:a9:f8:73: 64:76:d0:34:70:a4:4d:f9:dd:a4:84:82:93:a9:46: 5e:79:b8:41:a0:57:f6:e0:f2:84:04:99:28:ec:18: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F8:CB:25:01:58:CE:B5:F5:75:3F:F3:5A:F8:B9:9A:51:17:C6:DA X509v3 Authority Key Identifier: keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:76:5f:c5:ff:c9:46:76:3b:b8:04:55:14:cf:1a:26:4b:eb: 60:f4:84:c3:c9:98:34:1a:59:68:7b:16:1c:e7:db:f5:f4:f3: b4:6b:06:6e:5d:0e:fd:f2:ae:e2:81:45:ad:b8:fb:89:61:d5: 70:d4:36:54:e9:4f:b8:17:e7:af:c0:b0:26:a5:8e:69:bc:2a: 45:1a:19:16:d8:69:59:82:70:d7:d6:1f:73:84:03:a6:d0:d5: 65:93:f1:a9:e2:f4:0a:a5:46:d3:42:d3:a2:32:1c:a9:b2:0a: 42:55:63:e9:fa:80:81:f2:86:3e:cd:67:df:35:6b:21:aa:45: 7c:b9:46:19:cc:36:f1:4a:49:1e:4d:db:46:60:0e:5d:2e:c5: 20:51:75:39:88:b2:87:ca:f0:c0:b9:58:ab:de:97:ae:4c:75: 33:b1:9e:d0:5f:a7:df:dd:70:34:be:25:b5:6b:b6:e9:b2:a0: 06:51:13:5c:8f:1d:81:b7:b0:fc:75:af:dc:6b:a6:ec:3d:08: ff:95:30:cc:f1:3d:28:e7:2d:48:bd:a2:94:ed:99:28:c0:37: f8:03:84:d8:a7:80:8e:fa:db:38:40:d8:4b:4f:14:e6:b3:c3: 62:7e:36:30:5e:99:9b:5b:d0:13:6c:b1:40:c1:70:2f:91:4b: ac:63:38:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3QUIxMTAvBgNVBAUTKDU5RDU4ODEyNUE3MTY2OTg3MzhEMUQxRTlFNkQ4QTY4 RDc0MDlCMjcwHhcNMjQwNTE5MDY1MzU4WhcNMjQwNTI2MDY1MzU4WjAYMRYwFAYD VQQDEw02NjQ5YTIwNi1jOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL0ESLZtWhLbeODCAc7WmFYHId3+PUHLW8OfnI+vvf4e2yMYLgtGNTkNdoy2 6vTIWs2Mhg1jmQs9a2Q/X+Y2adLNrIsKZdViAt/J0ADaqtsutYPAx80vOxWm2Wc7 Q/VoP1UsHrfgQX2x/9zKDwe6I+N9mKiZp7dXSlUZ7QHqT39vdTLKbPvlZRTuww6t cqhIb1j8bcXK/VgPDav47/V6GWfEnQj25INvCz6wqXnlfFpU0Rh8A/e/TNqK8QIc 13M68IBjTMieUyePn09La1lBRIR688pHxYPg5RqyS0mp+HNkdtA0cKRN+d2khIKT qUZeebhBoFf24PKEBJko7BgnnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM34yyUB WM619XU/81r4uZpRF8baMB8GA1UdIwQYMBaAFFnViBJacWaYc40dHp5timjXQJsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjdBQi82RjZFOTgyODMx MEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpwaHpqUjBlbm0yS2FOZEFt eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkV0lFbHB4WnBoempSMGVubTJLYU5kQW15Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjdBQi82RjZFOTgyODMxMEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpw aHpqUjBlbm0yS2FOZEFteWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFdl/F/8lGdju4BFUUzxomS+tg9ITDyZg0GlloexYc59v19PO0awZu XQ798q7igUWtuPuJYdVw1DZU6U+4F+evwLAmpY5pvCpFGhkW2GlZgnDX1h9zhAOm 0NVlk/Gp4vQKpUbTQtOiMhypsgpCVWPp+oCB8oY+zWffNWshqkV8uUYZzDbxSkke TdtGYA5dLsUgUXU5iLKHyvDAuVir3peuTHUzsZ7QX6ff3XA0viW1a7bpsqAGURNc jx2Bt7D8da/ca6bsPQj/lTDM8T0o5y1IvaKU7ZkowDf4A4TYp4CO+ts4QNhLTxTm s8NifjYwXpmbW9ATbLFAwXAvkUusYzjz -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org