$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: 5FdAFIpsHi8K7eVHzD5gymgiV0z+BakOjIi12CSEukM= Subject key identifier: 23:A7:F3:10:05:BC:A4:0A:F6:F7:06:31:52:80:6E:EE:C8:86:B4:DA Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0ABD Signing time: Sat 18 May 2024 20:11:44 +0000 Manifest this update: Sat 18 May 2024 20:11:43 +0000 Manifest next update: Sat 25 May 2024 20:11:43 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: NUG6NFasZAyYxHc3LOZzlj7EsSPDQKXu/Myduhte4Js=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: HA8b7O0J4U/fVhELFxa2fc2iFFbl1YKY12nGF5DR6EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2777 (0xad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: May 18 20:11:43 2024 GMT Not After : May 25 20:11:43 2024 GMT Subject: CN=66490b7f-8fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:40:00:ac:d1:e1:db:d4:92:8f:cd:40:08: 19:8f:41:0c:af:ec:ae:15:df:80:78:85:94:ac:bc: e7:0d:30:54:fe:18:86:6b:38:d3:16:ea:08:78:70: 34:03:db:1d:cc:df:64:c9:12:3f:a2:ad:6a:06:fa: 96:4d:08:67:8b:76:af:d1:ff:8d:76:8e:a6:23:ba: 0e:fb:54:15:65:88:27:da:c3:c8:36:e5:a1:21:24: a4:99:ab:ab:43:1d:14:3e:a7:46:5b:c7:82:bf:fb: c0:43:2e:da:dd:94:cb:e2:07:a0:f4:e9:e0:bc:22: 67:d4:eb:5e:a9:42:0e:48:e9:88:dc:e5:a5:c3:0b: 7e:3e:03:12:76:fc:b1:08:b3:bc:eb:81:e4:18:86: a4:1a:bb:d6:87:37:42:94:44:56:86:f7:44:b1:a1: 73:e9:63:b3:c4:ce:7c:b5:88:8b:a9:45:66:9d:61: 24:6a:59:48:db:ba:b8:72:cd:13:0d:3f:b5:99:30: 00:df:4b:68:c1:59:c7:b2:5f:06:7d:b3:1d:be:da: 91:d6:51:58:cb:e6:1a:50:b4:69:27:19:26:21:aa: f5:a7:7c:e0:2d:c7:1e:1d:35:f7:c7:db:83:b8:76: 21:6c:d4:57:ea:95:74:77:20:a0:63:a3:0d:04:7c: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:F3:10:05:BC:A4:0A:F6:F7:06:31:52:80:6E:EE:C8:86:B4:DA X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:c4:0f:61:a2:d3:bb:31:be:53:29:c1:dc:cc:67:bd:73: 72:bc:1e:35:bc:f2:d6:f9:18:4f:ee:3c:d2:05:89:77:4b:e9: ee:4f:f5:42:09:f1:d0:51:4f:5f:68:c8:0e:58:1b:47:40:a3: e0:b8:76:6a:eb:b7:5a:f1:af:c6:b0:76:d9:d1:0f:e8:8d:cc: 99:eb:9c:20:e2:aa:8c:a5:d4:61:61:8b:f0:f6:5b:05:c0:27: bd:00:84:70:c9:6a:04:dc:85:e7:00:0f:0b:f4:96:58:65:12: dd:e9:9c:9e:c8:89:44:86:7e:7d:e3:33:59:ae:74:c0:d4:25: 8b:ba:ce:2e:7e:ad:e3:f3:3c:a7:80:4c:c6:bd:ef:36:59:8c: 3b:8b:5e:5a:f6:7b:41:7e:ed:b2:d3:b7:57:3e:60:23:73:31: 49:fc:59:a5:1a:47:c6:91:e4:15:61:93:6f:9f:bb:fe:13:db: f9:1c:92:0c:6d:7c:78:03:19:3d:4b:de:25:c1:de:e4:49:0f: a6:f8:a4:01:52:eb:86:fd:54:f1:dc:93:c5:7d:0a:16:54:35: c1:31:7d:67:06:70:3b:80:d0:96:57:29:d5:21:68:b2:f3:c4: eb:09:8d:53:22:7c:65:8c:8f:1b:94:93:83:8f:c5:cb:28:00: cc:56:1f:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjQwNTE4MjAxMTQzWhcNMjQwNTI1MjAxMTQzWjAYMRYwFAYD VQQDEw02NjQ5MGI3Zi04ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv9AAKzR4dvUko/NQAgZj0EMr+yuFd+AeIWUrLznDTBU/hiGazjTFuoIeHA0 A9sdzN9kyRI/oq1qBvqWTQhni3av0f+Ndo6mI7oO+1QVZYgn2sPINuWhISSkmaur Qx0UPqdGW8eCv/vAQy7a3ZTL4geg9OngvCJn1OteqUIOSOmI3OWlwwt+PgMSdvyx CLO864HkGIakGrvWhzdClERWhvdEsaFz6WOzxM58tYiLqUVmnWEkallI27q4cs0T DT+1mTAA30towVnHsl8GfbMdvtqR1lFYy+YaULRpJxkmIar1p3zgLcceHTX3x9uD uHYhbNRX6pV0dyCgY6MNBHyoYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOn8xAF vKQK9vcGMVKAbu7IhrTaMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeF8QPYaLTuzG+UynB3MxnvXNyvB41vPLW+RhP7jzSBYl3S+nuT/VC CfHQUU9faMgOWBtHQKPguHZq67da8a/GsHbZ0Q/ojcyZ65wg4qqMpdRhYYvw9lsF wCe9AIRwyWoE3IXnAA8L9JZYZRLd6ZyeyIlEhn594zNZrnTA1CWLus4ufq3j8zyn gEzGve82WYw7i15a9ntBfu2y07dXPmAjczFJ/FmlGkfGkeQVYZNvn7v+E9v5HJIM bXx4Axk9S94lwd7kSQ+m+KQBUuuG/VTx3JPFfQoWVDXBMX1nBnA7gNCWVynVIWiy 88TrCY1TInxljI8blJODj8XLKADMVh8W -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org