$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: vi0Iu4wt+F4ipoaShofHM9B9TEB2mg5fQNHlu5ma+sQ= Subject key identifier: 21:31:EC:FB:BB:B2:84:F2:51:6C:41:20:E5:73:66:95:5B:D3:6A:B5 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0A64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0A5E Signing time: Sat 18 May 2024 20:21:29 +0000 Manifest this update: Sat 18 May 2024 20:21:28 +0000 Manifest next update: Sat 25 May 2024 20:21:28 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: /hhhaHdYcfoyxU0vaD1FCfw9oAjU5JFvrYzdAdDLDqk=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: AeTLEvIImEeEIFDLcyyzsKZIqpZz08BSLMKw6j/d4o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: May 18 20:21:28 2024 GMT Not After : May 25 20:21:28 2024 GMT Subject: CN=66490dc9-f815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:7e:45:0b:36:53:90:8e:a4:06:b9:81:0b: c0:71:12:63:c0:4f:1d:04:2a:a5:10:56:18:93:65: f7:9e:82:25:e4:29:26:7b:c5:6c:b3:38:06:ba:f2: 01:63:b7:12:ab:c4:43:a8:eb:8b:41:1d:cf:2f:f9: ca:74:1c:2e:9a:fa:fb:fd:0f:ca:51:d8:51:a4:db: 2f:29:30:a3:41:76:c4:8a:f5:81:c1:25:4c:b7:de: ac:f9:27:56:0e:04:ba:b8:24:22:bc:4c:72:03:ac: d6:c7:a6:36:07:ff:a0:3a:1b:01:0f:30:58:a2:5d: 8c:bd:bd:8f:d3:5b:1b:d6:ae:91:ff:bf:40:cb:7b: e8:85:c7:ea:c2:ee:3a:ff:f7:d1:05:40:3c:0c:f4: 05:51:31:7a:12:b1:7d:95:3f:21:86:81:22:2c:71: a2:c5:61:2e:1a:17:4d:b1:d8:12:d3:22:5e:91:5f: e2:2f:18:1a:98:fd:c5:c7:ba:20:db:73:e4:44:50: 5b:44:21:8f:ce:91:8b:36:8f:a9:74:37:29:7c:03: 29:01:3a:8f:1e:d1:7d:23:b5:ad:a4:d6:b1:8d:4f: f1:12:9a:16:8d:bd:c8:65:6e:28:9c:92:31:66:eb: ac:00:ac:a7:ec:77:29:bc:3b:2b:a8:19:54:82:67: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:31:EC:FB:BB:B2:84:F2:51:6C:41:20:E5:73:66:95:5B:D3:6A:B5 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:19:58:24:b3:6a:e0:44:d1:b5:2b:91:65:81:f8:ab:18:4b: 88:6b:47:74:88:1a:78:ab:53:db:a5:e7:33:9a:79:08:78:79: aa:f3:ca:c0:d8:b3:7b:54:a4:5c:6d:0f:14:c7:e1:ea:db:1e: c8:13:8e:07:b9:bb:d0:e5:b8:f6:eb:bf:3f:f7:70:85:eb:60: be:e9:f0:95:0c:8d:87:97:52:05:fc:73:19:41:26:af:20:98: 52:07:9e:38:0e:54:a0:0a:68:81:91:d8:90:70:29:f1:a6:c4: 73:7a:e4:b3:99:3f:76:66:b7:7d:ba:ce:33:04:8a:6c:2b:63: 6e:42:09:6b:3a:44:21:84:81:26:ed:47:02:ba:47:f3:bc:e8: bf:d2:37:5a:52:bf:c1:0c:27:49:3c:d2:95:e4:bf:12:07:8a: 2a:82:89:37:27:bd:ff:ac:aa:c9:f3:53:73:26:8f:a6:dd:53: 0c:9e:c4:1b:03:65:0c:c6:17:b2:df:7c:55:49:ef:17:07:dd: 7e:61:8f:b2:67:dc:7e:0a:bc:e5:a5:55:0a:10:69:27:29:59: 0d:fa:34:1f:34:a0:0b:6f:b8:ee:07:ed:43:45:80:c6:9f:c0: 6b:6d:64:2e:39:8c:d3:35:4f:77:61:05:e6:9c:d4:1b:fe:d4: 8d:67:de:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjQwNTE4MjAyMTI4WhcNMjQwNTI1MjAyMTI4WjAYMRYwFAYD VQQDEw02NjQ5MGRjOS1mODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr9+RQs2U5COpAa5gQvAcRJjwE8dBCqlEFYYk2X3noIl5Ckme8VsszgGuvIB Y7cSq8RDqOuLQR3PL/nKdBwumvr7/Q/KUdhRpNsvKTCjQXbEivWBwSVMt96s+SdW DgS6uCQivExyA6zWx6Y2B/+gOhsBDzBYol2Mvb2P01sb1q6R/79Ay3vohcfqwu46 //fRBUA8DPQFUTF6ErF9lT8hhoEiLHGixWEuGhdNsdgS0yJekV/iLxgamP3Fx7og 23PkRFBbRCGPzpGLNo+pdDcpfAMpATqPHtF9I7WtpNaxjU/xEpoWjb3IZW4onJIx ZuusAKyn7HcpvDsrqBlUgmcGfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEx7Pu7 soTyUWxBIOVzZpVb02q1MB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGVgks2rgRNG1K5FlgfirGEuIa0d0iBp4q1PbpeczmnkIeHmq88rA 2LN7VKRcbQ8Ux+Hq2x7IE44HubvQ5bj2678/93CF62C+6fCVDI2Hl1IF/HMZQSav IJhSB544DlSgCmiBkdiQcCnxpsRzeuSzmT92Zrd9us4zBIpsK2NuQglrOkQhhIEm 7UcCukfzvOi/0jdaUr/BDCdJPNKV5L8SB4oqgok3J73/rKrJ81NzJo+m3VMMnsQb A2UMxhey33xVSe8XB91+YY+yZ9x+CrzlpVUKEGknKVkN+jQfNKALb7juB+1DRYDG n8BrbWQuOYzTNU93YQXmnNQb/tSNZ951 -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org