$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft File: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json) Hash identifier: qGOpD/O7Lw77aph5XEdrCCXKKVj+/S5OA235uckAgm0= Subject key identifier: 53:E5:35:97:8A:B6:54:23:78:E1:5D:C7:03:0E:63:3C:8F:F3:0B:F3 Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 Certificate issuer: /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:26:09 +0000 Manifest this update: Sun 19 May 2024 08:26:08 +0000 Manifest next update: Sun 26 May 2024 08:26:08 +0000 Files and hashes: 1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: W7H+3gFikp+rnZAPbmFv96wKoUgR5/4r9ie1pFsZAro=) 2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: wd14w0lW4XH6kG1+QNgR8vCyKObixV7tjrATg+oVgqg=) 3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: TkMxlHrE0FDAXno5w4Am4I9lFw+C+8vsvPyLVoqbib0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Validity Not Before: May 19 08:26:08 2024 GMT Not After : May 26 08:26:08 2024 GMT Subject: CN=6649b7a1-da4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:d6:8c:ed:8f:ae:fe:5a:64:65:72:69:96: 03:70:48:64:97:b4:8c:f6:7b:3f:38:5e:bf:61:98: a2:19:ed:8a:89:54:0c:a7:70:c1:48:cd:1c:19:35: ae:4d:b7:e5:0f:eb:68:db:ee:cb:b7:a4:98:7c:12: 29:88:09:e7:3b:a8:53:de:13:48:b8:ef:6c:4f:89: 36:0c:c4:60:1a:2f:46:b6:59:0a:dc:b2:ba:a2:ba: 49:e1:e7:54:9d:56:36:30:65:39:0c:28:8a:b4:2a: 11:9f:56:e4:8c:c7:19:b2:cb:22:48:25:84:7b:f9: 05:6e:1b:94:40:5d:1a:9b:66:3b:c2:03:4b:7d:3d: 07:58:50:b4:f3:87:05:66:77:36:fe:47:6f:23:9c: 6d:c7:ef:8c:62:ed:43:fc:f1:5f:1c:4e:9f:30:79: 50:0a:7a:7c:a6:a2:31:a8:30:a3:9c:b9:9f:2b:75: 05:fc:7c:62:b1:49:25:c0:7c:30:8e:c2:68:a1:45: 20:7c:05:81:4c:ed:62:22:d0:87:16:9e:ee:79:79: 6b:df:db:e7:43:90:a0:57:1f:d1:28:61:2c:6a:ba: 10:df:55:8d:6a:08:f5:7d:43:33:c4:78:5d:01:29: ef:19:a3:48:eb:dc:27:d5:5e:e6:c0:a6:79:3f:08: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E5:35:97:8A:B6:54:23:78:E1:5D:C7:03:0E:63:3C:8F:F3:0B:F3 X509v3 Authority Key Identifier: keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:26:51:8a:7d:57:8e:ea:0b:d3:4c:87:f6:ba:ec:67:8f:6d: 77:16:44:72:30:ad:e3:f1:cb:3f:34:ea:ab:b5:02:ef:8f:cc: a9:79:90:76:4a:05:7c:cd:dd:d9:c7:3b:ca:aa:3e:1e:e4:2d: d8:70:a3:07:d9:0d:57:67:3d:a7:6b:80:1e:84:dc:79:61:77: 75:f0:0b:c8:17:b1:34:b8:ba:11:2e:a1:e6:b2:3c:f1:ce:72: d7:95:b9:35:3e:14:8a:30:0d:6c:e8:e9:a1:4a:11:bc:dd:bd: 0d:d1:d8:e3:03:7e:f2:53:a4:41:0a:dd:7d:06:79:ea:05:47: 65:d4:8a:d9:f8:c3:80:75:a1:34:d1:5b:51:56:cd:cc:9a:e4: 3c:cc:6b:68:73:5a:16:d1:79:f2:8a:a6:1e:e9:29:f6:89:58: 0e:12:6a:5d:21:8c:c6:ab:72:10:1c:65:38:d5:89:d8:25:6f: 64:83:b5:e3:91:58:f6:8e:cf:fb:f2:b1:69:b7:91:85:7c:7d: 6b:d6:d9:76:5e:92:17:72:1b:90:a8:c7:24:9e:e4:1c:85:e1: 95:a5:c6:61:6c:00:95:d8:d1:03:cd:5e:9f:bb:0e:28:2d:ea: 34:12:8e:e4:69:2c:75:c2:8a:f0:f2:fc:ef:b6:7d:0c:10:b1: 3b:e4:b1:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzI5MjExMC8GA1UEBRMoQzJGQzY0NDg1NjRFQzY1MjZCOTFCMkZFMjNCNEZENTgz NDJEMjBGNDAeFw0yNDA1MTkwODI2MDhaFw0yNDA1MjYwODI2MDhaMBgxFjAUBgNV BAMTDTY2NDliN2ExLWRhNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDWdaM7Y+u/lpkZXJplgNwSGSXtIz2ez84Xr9hmKIZ7YqJVAyncMFIzRwZNa5N t+UP62jb7su3pJh8EimICec7qFPeE0i472xPiTYMxGAaL0a2WQrcsrqiuknh51Sd VjYwZTkMKIq0KhGfVuSMxxmyyyJIJYR7+QVuG5RAXRqbZjvCA0t9PQdYULTzhwVm dzb+R28jnG3H74xi7UP88V8cTp8weVAKenymojGoMKOcuZ8rdQX8fGKxSSXAfDCO wmihRSB8BYFM7WIi0IcWnu55eWvf2+dDkKBXH9EoYSxquhDfVY1qCPV9QzPEeF0B Ke8Zo0jr3CfVXubApnk/CJnvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU+U1l4q2 VCN44V3HAw5jPI/zC/MwHwYDVR0jBBgwFoAUwvxkSFZOxlJrkbL+I7T9WDQtIPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MjkyLzAzQjg4QURBRDE0 QTExRUU5OURFMkI1MkM0RjlBRTAyL3d2eGtTRlpPeGxKcmtiTC1JN1Q5V0RRdElQ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3Z4a1NGWk94bEpya2JMLUk3VDlXRFF0SVBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MjkyLzAzQjg4QURBRDE0QTExRUU5OURFMkI1MkM0RjlBRTAyL3d2eGtTRlpPeGxK cmtiTC1JN1Q5V0RRdElQUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOYmUYp9V47qC9NMh/a67GePbXcWRHIwrePxyz806qu1Au+PzKl5kHZK BXzN3dnHO8qqPh7kLdhwowfZDVdnPadrgB6E3Hlhd3XwC8gXsTS4uhEuoeayPPHO cteVuTU+FIowDWzo6aFKEbzdvQ3R2OMDfvJTpEEK3X0GeeoFR2XUitn4w4B1oTTR W1FWzcya5DzMa2hzWhbRefKKph7pKfaJWA4Sal0hjMarchAcZTjVidglb2SDteOR WPaOz/vysWm3kYV8fWvW2XZekhdyG5CoxySe5ByF4ZWlxmFsAJXY0QPNXp+7Digt 6jQSjuRpLHXCivDy/O+2fQwQsTvksXM= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org