$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: WygHhpS7Jg8i3KouXdj5rD9qoXhFiAZaCI/hkZq3Unw= Subject key identifier: 96:DC:8C:FB:79:A2:00:27:96:B8:FD:12:6D:42:90:32:19:DB:8A:DB Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 12E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 12C0 Signing time: Fri 31 May 2024 17:57:24 +0000 Manifest this update: Fri 31 May 2024 17:57:23 +0000 Manifest next update: Fri 07 Jun 2024 17:57:23 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: X1QvOFmoXsQ2dbJLQaBNxJxAjnlv6lz62oh4wkXuAdk=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: E5p0L4s5yLaJ1iajf72Hbp/+FA1uGcyIYQEUg1n7rWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4832 (0x12e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: May 31 17:57:23 2024 GMT Not After : Jun 7 17:57:23 2024 GMT Subject: CN=665a0f84-ce35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:5d:9a:72:1f:78:3a:86:d6:e0:d3:0d:ee: 2f:04:fb:23:5b:52:10:c6:82:bd:6e:11:52:d6:df: b8:f0:12:87:21:69:4c:46:48:bd:b3:bb:24:d6:46: eb:3b:0c:87:61:f3:a9:05:b9:9a:69:df:c5:2a:00: 7f:22:11:4b:7c:46:57:cd:d4:26:73:72:61:11:c6: 82:11:04:28:76:c7:d1:d7:4a:77:c5:b2:34:af:7a: 9b:d7:eb:fd:40:35:3c:9c:a8:be:de:7e:a2:80:7f: 91:b6:11:e4:46:db:30:1c:db:80:04:b4:4f:24:73: 02:a3:fe:2b:17:5f:1c:b3:37:3c:df:7c:e4:ed:0c: f6:f0:4c:79:31:57:86:8e:2e:e2:c5:20:98:52:aa: 41:91:2c:53:d1:3b:63:1d:52:f1:23:d3:07:a5:a4: 9d:8f:a4:78:13:8c:a9:1e:35:f4:12:8b:d2:97:06: f6:ba:e3:31:b3:49:87:f4:1f:fb:64:a3:47:47:9d: a8:a8:a9:e2:e1:80:20:ee:e5:af:2c:cb:d6:f8:79: 1a:ff:ad:54:a1:64:46:2e:bc:b5:d6:68:35:c7:af: 62:24:09:88:4c:b1:7b:2b:51:89:98:b1:0a:dc:e8: 2c:b4:a1:b4:69:d5:da:14:c6:14:81:27:6c:7c:8c: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:8C:FB:79:A2:00:27:96:B8:FD:12:6D:42:90:32:19:DB:8A:DB X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e1:c4:30:48:bc:26:f9:51:27:76:39:8a:38:18:aa:35:bd: 6c:46:50:7f:13:83:3d:5d:74:53:da:2f:c2:5e:45:3c:09:89: 25:2d:9d:cb:2b:ca:15:30:7e:a5:0e:c0:dc:ca:7f:35:6d:f2: 32:2a:c6:cc:78:ab:85:e6:65:cb:a4:97:cd:32:87:dd:bd:d1: 6a:ba:a5:34:ea:14:fc:46:f1:17:20:9a:35:97:58:72:46:9e: d2:7c:69:40:3b:44:88:ad:a4:80:45:8a:a0:19:d5:bd:58:a7: 0a:8d:cd:13:6d:d1:10:6e:f7:2e:8e:d8:5e:a5:29:ac:5f:ff: 3c:12:2c:31:2f:db:36:ac:f3:f8:3e:5a:d4:7b:41:ca:8b:5b: 4a:20:1b:9f:38:ed:4b:1e:3b:be:a7:2d:ea:46:7f:66:ed:d4: 7a:b9:9f:c4:6c:55:2d:9a:2a:a4:8c:fd:d5:89:ef:9c:8c:b4: b8:18:2f:1d:d1:a4:94:a6:9e:36:b3:b7:5d:83:91:45:b2:e9: 0f:42:20:90:23:f4:6e:ac:7f:2b:9e:f0:2b:74:38:4d:39:56: b2:20:97:d5:f7:c7:ef:92:01:c6:94:16:a0:91:e2:84:17:ea: 1c:ce:88:e5:2b:63:3b:b5:ff:61:02:49:9c:a1:f5:1d:ee:3a: 0e:da:ad:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjQwNTMxMTc1NzIzWhcNMjQwNjA3MTc1NzIzWjAYMRYwFAYD VQQDEw02NjVhMGY4NC1jZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2hdmnIfeDqG1uDTDe4vBPsjW1IQxoK9bhFS1t+48BKHIWlMRki9s7sk1kbr OwyHYfOpBbmaad/FKgB/IhFLfEZXzdQmc3JhEcaCEQQodsfR10p3xbI0r3qb1+v9 QDU8nKi+3n6igH+RthHkRtswHNuABLRPJHMCo/4rF18cszc833zk7Qz28Ex5MVeG ji7ixSCYUqpBkSxT0TtjHVLxI9MHpaSdj6R4E4ypHjX0EovSlwb2uuMxs0mH9B/7 ZKNHR52oqKni4YAg7uWvLMvW+Hka/61UoWRGLry11mg1x69iJAmITLF7K1GJmLEK 3OgstKG0adXaFMYUgSdsfIyK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbcjPt5 ogAnlrj9Em1CkDIZ24rbMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4cQwSLwm+VEndjmKOBiqNb1sRlB/E4M9XXRT2i/CXkU8CYklLZ3L K8oVMH6lDsDcyn81bfIyKsbMeKuF5mXLpJfNMofdvdFquqU06hT8RvEXIJo1l1hy Rp7SfGlAO0SIraSARYqgGdW9WKcKjc0TbdEQbvcujthepSmsX/88EiwxL9s2rPP4 PlrUe0HKi1tKIBufOO1LHju+py3qRn9m7dR6uZ/EbFUtmiqkjP3Vie+cjLS4GC8d 0aSUpp42s7ddg5FFsukPQiCQI/RurH8rnvArdDhNOVayIJfV98fvkgHGlBagkeKE F+oczojlK2M7tf9hAkmcofUd7joO2q3v -----END CERTIFICATE-----Generated at Fri May 31 20:34:14 2024 by rpki-client on console-ams.rpki-client.org