$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: RohHle8k+VS4D3bpVRfQH3lVL+JVVwAGD9JLcNtJQ9o= Subject key identifier: E0:07:4A:7D:44:3A:71:0B:07:42:17:0D:21:53:F0:AC:66:BF:33:5F Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: 39 Signing time: Sun 19 May 2024 08:17:42 +0000 Manifest this update: Sun 19 May 2024 08:17:42 +0000 Manifest next update: Sun 26 May 2024 08:17:42 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: rMV6yp3E8gWMrOuXyHuj3Z0h8n74FGAr4Skr9izNBSA=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: vdjvb/3ZRx74eaLttznaQOdBXcHEfYOyZXwsd4KdeBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: May 19 08:17:42 2024 GMT Not After : May 26 08:17:42 2024 GMT Subject: CN=6649b5a6-ddeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:b4:ba:8c:62:22:79:dd:85:da:8d:a5:86: e4:09:43:94:bd:e3:23:69:2c:ad:5c:a8:5f:12:11: c1:c2:1e:77:57:ed:31:a6:ad:95:05:de:48:94:75: 06:7b:bd:37:e2:6e:c5:ae:30:e1:4f:7c:9f:98:d0: e2:2e:a8:16:a8:12:fc:e8:d8:2d:56:24:9c:0b:c1: b8:b6:e0:83:cc:d1:74:93:af:e8:86:df:af:3d:03: 20:81:1f:9d:fe:fc:0b:e3:c1:22:1b:f2:ab:af:bf: cb:e5:d5:cc:87:bd:0c:9e:e0:a9:8a:ab:50:e9:28: 77:0d:5e:7a:4d:28:93:01:50:e2:02:1e:d0:ca:81: f4:ca:b4:c5:4a:9e:e5:f9:12:1c:03:3d:d3:7c:40: 10:50:3b:d3:af:01:71:8f:8c:b3:b2:4c:bd:06:e1: 3b:d5:53:34:41:4d:4d:65:fb:9a:ac:c2:aa:c2:9c: 66:bf:3e:20:a3:3f:73:82:81:f5:9f:57:fd:19:96: 87:73:22:33:82:eb:ea:15:40:15:fa:af:2c:af:5b: 29:c5:a3:4e:5c:59:4e:ee:fd:3a:34:af:a6:d9:e2: 66:2b:cc:0f:90:61:34:a7:55:4d:0f:e4:e8:62:52: 1a:29:87:41:a4:50:5c:44:47:38:e1:4c:4b:f4:d8: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:07:4A:7D:44:3A:71:0B:07:42:17:0D:21:53:F0:AC:66:BF:33:5F X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2b:cc:66:ca:61:6c:02:ad:82:02:fe:a6:67:53:8e:cd:df: 73:b6:28:e4:f0:6c:c6:c6:b9:6b:c2:2e:87:8c:78:b6:6c:a0: 42:19:c0:8c:5a:5c:93:f7:62:15:43:a3:38:e9:56:9b:da:02: 83:06:4b:6c:d9:94:ae:2a:91:07:8e:67:96:f4:76:f8:ce:da: cb:56:c4:1e:24:b8:3a:53:65:8c:c8:4b:87:33:9f:70:28:09: 32:8a:86:df:2e:2f:34:0e:fa:e3:0d:63:1e:4b:6a:f5:85:02: d6:dc:32:5d:f1:01:1b:fb:4c:6f:7e:fc:7f:d4:f1:16:fd:21: 46:9a:50:13:d4:d4:4b:ea:85:1d:d2:59:2a:9b:e5:68:35:11: a7:06:b8:42:1c:56:5b:ff:b8:6d:af:9d:3e:40:06:a5:1e:57: 8a:93:4b:6a:a9:91:43:48:11:35:70:fd:59:ea:bc:50:5c:49: 47:24:47:88:a0:fc:f3:60:9c:54:93:a0:d6:4b:1d:12:9f:37: 97:0f:46:86:43:47:0a:9c:2b:a4:64:17:e9:a9:92:53:56:bb: 26:32:50:7e:f9:8e:e3:8f:78:b0:75:35:7e:ae:b0:4a:bf:cd: 8b:f4:0f:84:be:a7:74:68:e2:02:d1:a1:15:07:2a:7d:37:59: b3:a8:f4:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTY3RjExMC8GA1UEBRMoQzIxMTJGNDRENDQ1OEYxODVDREI5QUQ5QTkxQUY4Mjkw NjQ4OUNDNjAeFw0yNDA1MTkwODE3NDJaFw0yNDA1MjYwODE3NDJaMBgxFjAUBgNV BAMTDTY2NDliNWE2LWRkZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVWrS6jGIied2F2o2lhuQJQ5S94yNpLK1cqF8SEcHCHndX7TGmrZUF3kiUdQZ7 vTfibsWuMOFPfJ+Y0OIuqBaoEvzo2C1WJJwLwbi24IPM0XSTr+iG3689AyCBH53+ /AvjwSIb8quvv8vl1cyHvQye4KmKq1DpKHcNXnpNKJMBUOICHtDKgfTKtMVKnuX5 EhwDPdN8QBBQO9OvAXGPjLOyTL0G4TvVUzRBTU1l+5qswqrCnGa/PiCjP3OCgfWf V/0ZlodzIjOC6+oVQBX6ryyvWynFo05cWU7u/To0r6bZ4mYrzA+QYTSnVU0P5Ohi Uhoph0GkUFxERzjhTEv02JAZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4AdKfUQ6 cQsHQhcNIVPwrGa/M18wHwYDVR0jBBgwFoAUwhEvRNRFjxhc25rZqRr4KQZInMYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjdGLzg3QzM0NTRDQzQ1 RjExRUU4MjgxQ0M3REM0RjlBRTAyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5N WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2hFdlJOUkZqeGhjMjVyWnFScjRLUVpJbk1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjdGLzg3QzM0NTRDQzQ1RjExRUU4MjgxQ0M3REM0RjlBRTAyL3doRXZSTlJGanho YzI1clpxUnI0S1FaSW5NWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYrzGbKYWwCrYIC/qZnU47N33O2KOTwbMbGuWvCLoeMeLZsoEIZwIxa XJP3YhVDozjpVpvaAoMGS2zZlK4qkQeOZ5b0dvjO2stWxB4kuDpTZYzIS4czn3Ao CTKKht8uLzQO+uMNYx5LavWFAtbcMl3xARv7TG9+/H/U8Rb9IUaaUBPU1EvqhR3S WSqb5Wg1EacGuEIcVlv/uG2vnT5ABqUeV4qTS2qpkUNIETVw/VnqvFBcSUckR4ig /PNgnFSToNZLHRKfN5cPRoZDRwqcK6RkF+mpklNWuyYyUH75juOPeLB1NX6usEq/ zYv0D4S+p3Ro4gLRoRUHKn03WbOo9MM= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org