$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: Brukwzp6FtGqcQp+Ak9xFJPFR0P+zuUXAlv2TBsatc8= Subject key identifier: 91:0F:31:E3:16:E9:4C:F4:A3:B3:8C:DE:15:E0:95:E8:0F:73:02:49 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 0108 Signing time: Fri 31 May 2024 06:14:55 +0000 Manifest this update: Fri 31 May 2024 06:14:54 +0000 Manifest next update: Fri 07 Jun 2024 06:14:54 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: Fro9lFugwtK52/f+5HJjEujPulJ+Qbmq4QVFM05U+pQ=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: CKaLCTd4F4dZmPq0DjBqP23YnYGXlc9buqXVc1NvzyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: May 31 06:14:54 2024 GMT Not After : Jun 7 06:14:54 2024 GMT Subject: CN=66596adf-5f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:80:c9:97:01:9c:a0:7e:85:60:66:f8:03: c5:e9:3c:25:f5:da:51:39:ab:c5:af:2e:df:1f:2c: cd:82:b3:11:48:4a:2e:b1:57:6f:0f:60:3a:57:03: 43:62:ac:29:59:35:2d:6d:17:b6:1e:2c:d1:04:87: 7d:fa:1f:e2:96:10:13:46:cb:10:b4:fa:8f:03:93: f6:3c:a8:96:0f:62:58:95:8c:74:b9:ea:24:a7:c5: d9:a7:c3:f3:f6:6e:35:d1:35:41:99:ef:eb:6f:ae: a5:e6:e3:34:b8:af:18:d3:7d:f1:14:12:52:2c:7f: 45:c6:33:2b:e5:8a:8f:93:66:a8:b2:8f:e9:11:0c: 99:20:33:95:4c:30:9b:03:b1:75:a6:fd:10:25:c7: 03:a1:18:b5:8e:ef:5f:7e:50:5e:67:5f:00:11:f2: f3:a3:1a:1d:05:92:7e:7b:d3:2e:81:a3:a6:6a:57: 15:75:6e:12:a8:7c:ff:db:b3:79:f8:61:30:f6:2b: 31:c2:5c:26:3a:c5:cf:c5:f5:8d:26:00:2d:f6:f3: b9:96:82:ea:e7:a8:35:66:48:12:4c:c4:ea:5f:7d: ec:3e:ee:c6:d9:d0:54:5f:76:57:ee:4a:84:d7:5d: 77:8d:a1:9c:ee:ed:dc:27:bc:29:cb:b5:3c:b1:f9: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0F:31:E3:16:E9:4C:F4:A3:B3:8C:DE:15:E0:95:E8:0F:73:02:49 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:63:aa:16:74:fe:6a:23:c9:35:94:aa:c5:6d:5f:19:2f:39: d0:da:05:12:c0:9b:e8:c8:2d:72:b5:b5:5d:64:49:79:7f:d0: d8:62:13:3b:81:88:ce:9b:50:06:e9:df:09:d8:23:e9:b3:a7: 80:c4:ca:9b:bf:4d:ea:66:a3:96:79:72:ab:f3:fe:91:2a:fc: 84:21:c0:65:c9:fb:b1:0c:89:51:ef:53:5e:11:97:5a:31:fd: 89:b4:8e:5a:b7:1b:dd:0a:d8:15:fe:5c:30:9c:38:ea:9b:71: aa:6d:95:61:69:08:cc:fd:6a:49:1c:3c:56:6a:c9:4c:7f:4b: 96:de:52:f2:2f:e6:e6:eb:ac:03:f0:71:dd:ec:5c:a4:f4:ed: 6c:bc:3a:12:71:51:a1:59:f5:56:76:e9:2b:d7:9b:39:d4:02: 0a:ba:99:33:16:29:f5:47:f5:6e:6e:70:f5:2a:67:10:09:fe: 37:ee:b8:65:1d:2a:12:33:76:38:c4:98:34:6a:e3:1a:22:8a: 0a:54:9e:39:cd:3a:43:18:46:ff:a9:e5:9d:08:aa:9a:e2:cf: 32:2f:c3:b2:07:3f:ec:26:d8:90:e4:90:55:54:44:5a:d6:61: 6c:44:63:18:85:69:af:3a:ff:68:0b:bb:be:df:f4:ed:9e:a3: 58:23:82:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjQwNTMxMDYxNDU0WhcNMjQwNjA3MDYxNDU0WjAYMRYwFAYD VQQDEw02NjU5NmFkZi01Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpuAyZcBnKB+hWBm+APF6Twl9dpROavFry7fHyzNgrMRSEousVdvD2A6VwND YqwpWTUtbRe2HizRBId9+h/ilhATRssQtPqPA5P2PKiWD2JYlYx0ueokp8XZp8Pz 9m410TVBme/rb66l5uM0uK8Y033xFBJSLH9FxjMr5YqPk2aoso/pEQyZIDOVTDCb A7F1pv0QJccDoRi1ju9fflBeZ18AEfLzoxodBZJ+e9MugaOmalcVdW4SqHz/27N5 +GEw9isxwlwmOsXPxfWNJgAt9vO5loLq56g1ZkgSTMTqX33sPu7G2dBUX3ZX7kqE 1113jaGc7u3cJ7wpy7U8sfn04wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEPMeMW 6Uz0o7OM3hXglegPcwJJMB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Y6oWdP5qI8k1lKrFbV8ZLznQ2gUSwJvoyC1ytbVdZEl5f9DYYhM7 gYjOm1AG6d8J2CPps6eAxMqbv03qZqOWeXKr8/6RKvyEIcBlyfuxDIlR71NeEZda Mf2JtI5atxvdCtgV/lwwnDjqm3GqbZVhaQjM/WpJHDxWaslMf0uW3lLyL+bm66wD 8HHd7Fyk9O1svDoScVGhWfVWdukr15s51AIKupkzFin1R/VubnD1KmcQCf437rhl HSoSM3Y4xJg0auMaIooKVJ45zTpDGEb/qeWdCKqa4s8yL8OyBz/sJtiQ5JBVVERa 1mFsRGMYhWmvOv9oC7u+3/TtnqNYI4L0 -----END CERTIFICATE-----Generated at Fri May 31 10:02:40 2024 by rpki-client on console-ams.rpki-client.org