$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: xwM9vxnGsORJ27tzj0Jd77RRlO7cmnoe8OrnieN9efE= Subject key identifier: B8:4E:D7:58:60:4B:97:11:D2:CA:41:17:C1:1F:A9:DA:FF:F9:7C:97 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 04A8 Signing time: Sun 19 May 2024 01:32:27 +0000 Manifest this update: Sun 19 May 2024 01:32:26 +0000 Manifest next update: Sun 26 May 2024 01:32:26 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: jwDYsApgIlZOqhOwCYZAV0f5FxIhHdP8a9K8GNkDlYE=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: L6syG/DU8pQWTn+BvOaIlndDQ6lYytfpaRl28DKM+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: May 19 01:32:26 2024 GMT Not After : May 26 01:32:26 2024 GMT Subject: CN=664956ab-7814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:0e:80:34:a6:29:c8:c0:43:f2:b2:39:65: 71:78:c4:8c:c3:12:0c:ae:76:e4:9e:c9:e1:a9:0a: 71:d2:d3:a2:bf:a9:4d:8a:cd:a6:52:d6:87:4f:7f: a2:50:a6:16:22:a0:74:33:11:70:57:c8:c4:01:0c: b2:0a:af:ae:07:43:1f:57:47:84:ba:4e:9a:28:72: c8:6d:f5:44:42:26:94:70:49:f3:f9:05:07:dc:f1: d2:ac:67:9b:a5:b5:08:10:c3:db:4e:14:3d:f9:6b: 5b:cd:0c:dc:eb:f6:4d:9b:fd:32:90:60:e4:0f:df: 42:75:1b:d8:5a:01:72:8f:b5:9b:c5:4d:34:e5:a9: 99:2e:07:79:72:0c:bb:5a:e8:c0:94:97:a0:93:48: 97:c0:8d:c1:7e:58:78:30:84:26:97:7c:97:f1:a7: 11:dc:64:6b:38:1a:60:ae:e1:3e:8f:44:35:2f:cc: e8:f9:18:d7:03:3a:cd:36:52:d6:04:f2:6e:ca:6c: b9:26:10:1e:fc:9a:78:0d:92:8b:08:a9:41:79:b8: f0:5a:8c:b7:3f:6f:71:28:32:42:cd:12:8b:20:fa: 88:07:c9:fc:d0:41:17:47:25:34:5c:77:e9:66:b7: a2:44:c4:cc:6a:44:95:8d:64:60:59:15:f2:3f:ac: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4E:D7:58:60:4B:97:11:D2:CA:41:17:C1:1F:A9:DA:FF:F9:7C:97 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7c:5d:04:22:0a:b0:21:b5:35:d2:a1:19:9d:9f:af:c1:5a: e6:15:d4:fe:f3:99:4c:cc:d0:fd:f7:b9:03:9a:cd:1e:08:26: 33:d8:22:64:79:fc:4b:31:44:df:63:fa:ab:9e:30:c8:69:31: d9:37:43:0a:65:22:e3:d2:7c:bd:2a:62:4a:3a:9b:4d:42:77: e5:97:f0:55:fa:81:bb:a9:c5:a7:2f:20:31:d2:f6:17:dc:57: 1a:4d:8a:7a:85:5e:ae:28:db:84:07:5d:93:73:fc:a7:ab:f9: 5e:8e:55:a8:ac:e9:ed:49:b2:6c:8c:66:eb:b6:0a:53:7e:d3: ee:73:ef:3c:7f:06:15:4f:a8:5e:6a:6f:1b:af:8e:5e:c5:d4: 91:0f:ab:1d:53:52:95:3f:65:45:02:e6:27:4b:10:70:52:02: f0:50:d7:c6:8b:db:b1:4e:52:af:91:0a:13:74:51:cb:bf:9f: 5c:ad:ee:22:ea:ce:da:e6:3d:f9:1e:c9:80:33:0e:94:1f:8f: 63:bb:24:52:92:48:af:bc:fc:d4:9e:b0:55:13:f5:e4:de:08: c1:db:0a:aa:28:d5:14:03:99:91:22:94:2a:f5:30:4e:77:d7: c7:85:f0:8e:a4:1d:7c:e1:49:40:3e:0c:c3:31:e6:1f:ac:c9: 7a:e5:a9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjQwNTE5MDEzMjI2WhcNMjQwNTI2MDEzMjI2WjAYMRYwFAYD VQQDEw02NjQ5NTZhYi03ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgEOgDSmKcjAQ/KyOWVxeMSMwxIMrnbknsnhqQpx0tOiv6lNis2mUtaHT3+i UKYWIqB0MxFwV8jEAQyyCq+uB0MfV0eEuk6aKHLIbfVEQiaUcEnz+QUH3PHSrGeb pbUIEMPbThQ9+WtbzQzc6/ZNm/0ykGDkD99CdRvYWgFyj7WbxU005amZLgd5cgy7 WujAlJegk0iXwI3Bflh4MIQml3yX8acR3GRrOBpgruE+j0Q1L8zo+RjXAzrNNlLW BPJuymy5JhAe/Jp4DZKLCKlBebjwWoy3P29xKDJCzRKLIPqIB8n80EEXRyU0XHfp ZreiRMTMakSVjWRgWRXyP6y+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhO11hg S5cR0spBF8Efqdr/+XyXMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvfF0EIgqwIbU10qEZnZ+vwVrmFdT+85lMzND997kDms0eCCYz2CJk efxLMUTfY/qrnjDIaTHZN0MKZSLj0ny9KmJKOptNQnfll/BV+oG7qcWnLyAx0vYX 3FcaTYp6hV6uKNuEB12Tc/ynq/lejlWorOntSbJsjGbrtgpTftPuc+88fwYVT6he am8br45exdSRD6sdU1KVP2VFAuYnSxBwUgLwUNfGi9uxTlKvkQoTdFHLv59cre4i 6s7a5j35HsmAMw6UH49juyRSkkivvPzUnrBVE/Xk3gjB2wqqKNUUA5mRIpQq9TBO d9fHhfCOpB184UlAPgzDMeYfrMl65anK -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org