$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft File: WHWg6apyuWJyxu1EVcFM2I01uVw.mft (raw, json) Hash identifier: 86uggEAW+omLM47KJVfP71XnfG9fMX2JadDqF3NZC7k= Subject key identifier: DA:49:0E:5D:1C:02:41:42:EB:6E:96:5C:E3:8A:0C:B9:18:F7:FD:3B Authority key identifier: 58:75:A0:E9:AA:72:B9:62:72:C6:ED:44:55:C1:4C:D8:8D:35:B9:5C Certificate issuer: /CN=A91AD9CB/serialNumber=5875A0E9AA72B96272C6ED4455C14CD88D35B95C Certificate serial: 30B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft Manifest number: 30B4 Signing time: Sat 18 May 2024 15:40:28 +0000 Manifest this update: Sat 18 May 2024 15:40:27 +0000 Manifest next update: Sat 25 May 2024 15:40:27 +0000 Files and hashes: 1: WHWg6apyuWJyxu1EVcFM2I01uVw.crl (hash: MKJSR1r1s99xd6Phof+AV8ajw4wGE6mQcU78dFiEdzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.crl rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12468 (0x30b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9CB/serialNumber=5875A0E9AA72B96272C6ED4455C14CD88D35B95C Validity Not Before: May 18 15:40:27 2024 GMT Not After : May 25 15:40:27 2024 GMT Subject: CN=6648cbec-6a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:f5:48:d0:bf:33:df:00:b9:0c:ee:fc:1c: 04:cd:6d:9f:8e:be:f0:b1:0f:0a:2d:20:83:a0:c6: de:f7:d8:10:69:ba:b6:ae:94:4b:c8:39:f2:0c:3b: 69:62:b9:1b:df:bc:e8:4f:42:5b:41:29:28:1d:fe: cf:e9:b5:bc:00:34:04:dd:9a:47:b0:c3:0a:2b:a0: 8e:3d:06:f5:e0:de:0b:0d:68:55:5b:ae:fc:2c:30: 80:d4:a0:0e:11:0e:5e:09:fe:bc:d9:15:d0:c3:dc: 19:0f:6c:76:e8:d5:aa:c6:7c:5e:f8:41:c4:6a:6c: 6e:2b:30:f3:a7:1e:0b:46:0e:74:d4:91:f8:cd:5d: 79:54:13:95:46:4d:44:12:3c:b4:45:f3:5c:41:d6: f3:75:39:bb:f8:76:a0:dd:28:21:0f:7a:29:13:e4: 51:25:ff:93:9f:37:4e:c8:9d:d4:16:84:2b:6a:fe: 58:72:23:e5:23:c2:4d:5b:5b:78:59:b5:2f:07:99: e2:d9:68:68:02:0b:68:8b:c9:35:78:8f:a0:3f:7b: c4:1a:a1:e9:02:6a:19:61:d3:1d:53:34:0f:b9:66: bd:3e:f0:10:e6:b0:3b:de:0c:f4:c8:3c:59:84:17: e8:9f:0f:eb:11:41:4d:52:53:4d:a1:0a:da:55:f0: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:49:0E:5D:1C:02:41:42:EB:6E:96:5C:E3:8A:0C:B9:18:F7:FD:3B X509v3 Authority Key Identifier: keyid:58:75:A0:E9:AA:72:B9:62:72:C6:ED:44:55:C1:4C:D8:8D:35:B9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:17:d3:c9:3c:e6:53:2f:fc:81:2f:6e:b1:aa:34:b7:68:84: 4b:9e:51:9c:0d:3d:86:e6:c6:05:0d:5a:5e:f0:b2:0f:97:48: 91:b3:23:2f:38:da:a8:e1:c9:4a:08:3d:da:f2:cb:e3:a2:f5: 3e:04:3f:da:37:57:04:a8:42:48:09:e4:97:5a:c9:c5:e2:61: ab:31:b4:f6:1f:6b:60:73:01:45:a3:08:b9:a4:d7:01:be:a7: 01:79:53:b0:f9:0a:5b:f9:bc:9c:ca:df:0f:76:12:42:41:17: d0:4c:46:71:0d:e8:d4:61:6b:7c:9b:54:7b:7a:22:22:1a:cd: 70:58:08:31:dd:bb:ca:93:1c:ec:2f:65:45:30:1c:a8:f5:e8: eb:00:49:1e:37:ae:0c:63:c2:db:84:1e:03:aa:2a:4c:21:ee: ca:cd:25:94:ae:29:75:7e:86:f4:16:3b:d0:03:c7:05:e0:ff: f2:14:6f:35:4f:07:09:06:a4:02:b5:b1:bd:30:d1:d9:21:48: 09:ed:f7:58:25:8e:be:6c:80:78:6e:45:bd:c8:20:3c:45:96: 0d:be:17:0f:ae:0f:57:87:d9:ff:b7:7e:1b:62:f6:24:e9:07: 15:e1:51:23:52:39:ef:4f:5b:9e:6b:8a:ad:02:13:84:32:88: 0c:fa:e0:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5Q0IxMTAvBgNVBAUTKDU4NzVBMEU5QUE3MkI5NjI3MkM2RUQ0NDU1QzE0Q0Q4 OEQzNUI5NUMwHhcNMjQwNTE4MTU0MDI3WhcNMjQwNTI1MTU0MDI3WjAYMRYwFAYD VQQDEw02NjQ4Y2JlYy02YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xr1SNC/M98AuQzu/BwEzW2fjr7wsQ8KLSCDoMbe99gQabq2rpRLyDnyDDtp Yrkb37zoT0JbQSkoHf7P6bW8ADQE3ZpHsMMKK6COPQb14N4LDWhVW678LDCA1KAO EQ5eCf682RXQw9wZD2x26NWqxnxe+EHEamxuKzDzpx4LRg501JH4zV15VBOVRk1E Ejy0RfNcQdbzdTm7+Hag3SghD3opE+RRJf+TnzdOyJ3UFoQrav5YciPlI8JNW1t4 WbUvB5ni2WhoAgtoi8k1eI+gP3vEGqHpAmoZYdMdUzQPuWa9PvAQ5rA73gz0yDxZ hBfonw/rEUFNUlNNoQraVfCGnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpJDl0c AkFC626WXOOKDLkY9/07MB8GA1UdIwQYMBaAFFh1oOmqcrlicsbtRFXBTNiNNblc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlDQi8wMEQ2Q0U0RUI2 RDAxMUUyQjY4MzBBQjY2ODg2NUNFRS9XSFdnNmFweXVXSnl4dTFFVmNGTTJJMDF1 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIV2c2YXB5dVdKeXh1MUVWY0ZNMkkwMXVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlDQi8wMEQ2Q0U0RUI2RDAxMUUyQjY4MzBBQjY2ODg2NUNFRS9XSFdnNmFweXVX Snl4dTFFVmNGTTJJMDF1VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKF9PJPOZTL/yBL26xqjS3aIRLnlGcDT2G5sYFDVpe8LIPl0iRsyMv ONqo4clKCD3a8svjovU+BD/aN1cEqEJICeSXWsnF4mGrMbT2H2tgcwFFowi5pNcB vqcBeVOw+Qpb+bycyt8PdhJCQRfQTEZxDejUYWt8m1R7eiIiGs1wWAgx3bvKkxzs L2VFMByo9ejrAEkeN64MY8LbhB4DqipMIe7KzSWUril1fob0FjvQA8cF4P/yFG81 TwcJBqQCtbG9MNHZIUgJ7fdYJY6+bIB4bkW9yCA8RZYNvhcPrg9Xh9n/t34bYvYk 6QcV4VEjUjnvT1uea4qtAhOEMogM+uAa -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org