$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: FqGuQLxfuOQWSh9sX1PfgFnODereGDk3uJAWuOCKbko= Subject key identifier: A1:85:80:51:5B:B3:67:20:36:7A:41:4F:B8:61:47:CA:04:78:56:8D Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: AE Signing time: Fri 31 May 2024 07:29:01 +0000 Manifest this update: Fri 31 May 2024 07:29:01 +0000 Manifest next update: Fri 07 Jun 2024 07:29:01 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: adgrm0PK1hlfit8D2xyusUFQYwcMEYSrnJjiYdZP0+M=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: 87jyq80/7TFEo0ZjtNAlfKQCEGSGhXKCvcBSYItfaWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: May 31 07:29:01 2024 GMT Not After : Jun 7 07:29:01 2024 GMT Subject: CN=66597c3d-8c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:d3:df:44:c7:71:a0:d6:4f:6a:82:e1:c6: 04:b8:35:4c:d6:35:f8:56:e8:a1:d5:d6:62:01:a8: fd:48:b1:e9:85:93:6e:1f:b2:ef:9c:c2:f8:24:ee: 1f:e4:df:77:6d:85:4b:4e:cb:ea:cf:d9:8f:6c:c0: 55:bc:c2:ba:25:fc:01:0b:5e:82:ef:74:06:98:12: 66:c6:43:ce:6f:70:65:5d:92:d7:52:33:89:86:cb: 70:fe:05:9d:26:e9:7f:fd:ad:7c:82:92:4a:f7:b2: 02:7f:21:c2:dd:6f:d2:88:9d:3c:73:a8:65:2d:bb: 23:f9:27:6c:c8:20:c3:b8:df:6e:0e:2c:44:f8:99: f2:34:46:aa:21:36:49:6d:5d:2f:dd:3a:96:fc:04: b7:05:e0:53:c3:14:aa:4f:c4:ef:69:f9:44:c3:b5: 01:24:b8:ba:58:cf:a9:6a:85:73:d7:93:36:b9:78: a0:f9:32:9b:45:7d:3d:3a:d5:6c:6b:c1:10:e3:03: 48:40:c9:4c:32:39:41:19:f4:40:2c:7a:b3:51:10: 67:bc:7d:43:63:fd:2d:13:00:df:f1:09:8d:8c:b1: d5:33:c4:68:e5:42:c5:1a:fb:8d:7c:23:06:f4:e0: dc:69:83:af:f9:95:14:db:cb:7a:41:96:7c:18:a7: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:80:51:5B:B3:67:20:36:7A:41:4F:B8:61:47:CA:04:78:56:8D X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7b:5b:89:ce:58:89:b4:56:f9:2c:48:6b:a1:ff:3e:dc:8f: d4:c6:3f:46:e8:a7:94:1e:9b:ec:24:9b:70:68:26:02:75:f1: b5:ff:e4:77:a2:d5:93:f1:bd:12:4f:6b:45:3e:d6:b3:f7:56: c6:5c:50:54:2f:f7:ee:4a:96:65:5f:0c:00:ea:56:b3:ed:77: 4c:f4:d4:b5:10:89:7b:4d:d1:c3:df:6c:42:46:29:d0:d9:1e: 1f:c0:5a:c5:2a:82:06:31:12:8e:77:b8:4e:99:6a:12:02:83: b7:aa:a5:07:d3:26:98:88:4e:69:e7:2b:a8:6c:78:f2:d0:05: 05:d3:ea:80:8b:ea:51:35:00:94:4c:d8:08:9d:8b:d2:59:9f: 56:8c:84:da:94:b0:dd:87:84:a1:99:27:eb:e7:98:cf:e4:59: 21:9c:30:97:d1:c2:00:70:07:28:93:22:cf:da:a5:79:5e:d4: 5c:d5:88:79:f6:b3:26:41:c9:a5:6d:48:68:ba:f2:2b:37:e2: f5:69:bc:28:85:b6:a0:a7:27:3a:e9:d9:d3:50:31:01:af:38: 6a:63:dd:ca:e0:c0:96:64:9e:f0:76:7c:73:51:d2:f7:e0:f0: d5:74:6d:2b:ba:4e:4a:01:ae:4f:a1:7f:73:5a:04:2b:a2:28: 6e:88:4b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjQwNTMxMDcyOTAxWhcNMjQwNjA3MDcyOTAxWjAYMRYwFAYD VQQDEw02NjU5N2MzZC04YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk/T30THcaDWT2qC4cYEuDVM1jX4Vuih1dZiAaj9SLHphZNuH7LvnML4JO4f 5N93bYVLTsvqz9mPbMBVvMK6JfwBC16C73QGmBJmxkPOb3BlXZLXUjOJhstw/gWd Jul//a18gpJK97ICfyHC3W/SiJ08c6hlLbsj+SdsyCDDuN9uDixE+JnyNEaqITZJ bV0v3TqW/AS3BeBTwxSqT8TvaflEw7UBJLi6WM+paoVz15M2uXig+TKbRX09OtVs a8EQ4wNIQMlMMjlBGfRALHqzURBnvH1DY/0tEwDf8QmNjLHVM8Ro5ULFGvuNfCMG 9ODcaYOv+ZUU28t6QZZ8GKcXJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGFgFFb s2cgNnpBT7hhR8oEeFaNMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4e1uJzliJtFb5LEhrof8+3I/Uxj9G6KeUHpvsJJtwaCYCdfG1/+R3 otWT8b0ST2tFPtaz91bGXFBUL/fuSpZlXwwA6laz7XdM9NS1EIl7TdHD32xCRinQ 2R4fwFrFKoIGMRKOd7hOmWoSAoO3qqUH0yaYiE5p5yuobHjy0AUF0+qAi+pRNQCU TNgInYvSWZ9WjITalLDdh4ShmSfr55jP5FkhnDCX0cIAcAcokyLP2qV5XtRc1Yh5 9rMmQcmlbUhouvIrN+L1abwohbagpyc66dnTUDEBrzhqY93K4MCWZJ7wdnxzUdL3 4PDVdG0ruk5KAa5PoX9zWgQroihuiEtb -----END CERTIFICATE-----Generated at Fri May 31 08:39:00 2024 by rpki-client on console-fra.rpki-client.org