$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: 0B+5mEuqZ3HRS2EKzwUvFZxFUKdeABzPx18/Abc3oRE= Subject key identifier: 79:4F:CB:28:01:45:B0:DB:04:99:21:50:6B:06:A4:F3:6D:35:1B:F1 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0B41 Signing time: Sat 18 May 2024 19:44:43 +0000 Manifest this update: Sat 18 May 2024 19:44:42 +0000 Manifest next update: Sat 25 May 2024 19:44:42 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: S2oq2Llw9SwFLgcV6pM5u+fgeFxBK2YGA6szX9SRuzk=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: c0jeJK9QAPrhoHAkb65StqU7qp272k5edHZrKw0cT9s=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5WuLHxmG8IWJX07luYYTcBfHJi95efpMQlBpweMImOc=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: hdDK9bB387XmiOfI09xup4zeZ5o4crSOg7jbYJEcLb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2902 (0xb56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: May 18 19:44:42 2024 GMT Not After : May 25 19:44:42 2024 GMT Subject: CN=6649052b-22c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:f8:f9:5b:87:77:98:7e:02:e8:f3:de:3a: 23:ac:14:f5:df:3c:39:55:65:32:37:3a:c6:30:c3: d4:35:66:97:e8:88:6d:72:fc:95:9a:07:98:0b:b2: 66:c3:81:25:5f:7e:af:fa:7b:e6:ab:06:5f:35:d0: 30:4b:7d:d6:40:33:56:52:a2:94:79:ce:5a:e8:5e: 09:0b:09:cd:87:af:4e:6d:2f:15:06:33:20:66:3e: c5:80:1a:de:db:52:82:44:08:0c:ab:34:84:26:75: 27:cc:48:e0:dc:9a:30:94:21:ac:79:f4:5a:4a:82: 58:ea:d6:c3:d3:7e:82:7f:28:84:d3:20:cb:b1:d1: 2b:77:b0:a4:b5:25:31:64:a7:4d:99:45:70:e4:fa: c8:cb:bd:7e:f0:9c:27:c0:44:41:c2:11:d4:d9:9a: 3e:f1:89:38:f5:81:e2:ab:66:df:52:98:da:50:ec: c6:e8:53:45:dd:87:bb:54:13:ed:13:39:06:e8:1a: 7f:ef:c6:00:10:9b:1f:5c:f1:28:2d:29:48:2a:06: 47:b5:d0:98:c4:48:36:44:c1:71:b8:d1:45:88:96: 57:84:86:f0:f2:04:9c:66:57:5a:92:e4:45:5e:15: 39:ab:e4:39:f6:79:74:27:bd:c4:02:6c:fc:76:3f: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:CB:28:01:45:B0:DB:04:99:21:50:6B:06:A4:F3:6D:35:1B:F1 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:c8:97:83:9e:18:ed:6a:b4:7f:3b:10:62:e4:63:9b:5b: 6e:50:7e:eb:da:63:fc:14:29:d0:db:55:43:60:03:06:ab:c3: 8a:44:64:43:70:d6:09:86:83:07:66:8a:09:6e:5a:b1:8d:66: 72:3d:8e:98:1b:da:63:57:41:3c:a4:97:35:7c:f6:a1:9e:97: 3b:eb:39:24:98:0b:80:f9:5b:d2:33:aa:89:58:e3:4b:63:a0: e3:f0:01:2b:b1:1a:99:b1:fc:ea:24:6e:75:26:86:1e:f0:ea: 51:59:af:ba:86:0c:04:10:ca:75:f2:6c:ac:f7:cd:c6:cf:2e: b8:71:f9:90:d6:a3:fb:2a:fd:57:23:6f:3b:8a:b2:3e:59:49: 55:d7:84:54:ba:a7:bd:ba:9d:a0:a9:06:f3:cf:f9:f8:ce:3b: 8d:46:2a:6a:7d:d5:5a:cf:f7:5d:c1:88:d9:d3:72:26:00:f9: 0c:7f:a3:d2:79:71:84:7c:f7:f0:d2:7a:55:8c:3a:02:91:bb: ab:6b:c2:19:34:55:7d:c5:c2:0d:81:a0:61:24:cb:bc:12:e6: c2:a0:bd:e0:c5:f6:91:44:94:54:b7:6c:8c:45:3f:c2:f3:87: d0:03:35:e0:55:7d:7f:55:39:5f:43:92:da:8d:32:fa:e4:b0: c4:7e:77:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjQwNTE4MTk0NDQyWhcNMjQwNTI1MTk0NDQyWjAYMRYwFAYD VQQDEw02NjQ5MDUyYi0yMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wT4+VuHd5h+Aujz3jojrBT13zw5VWUyNzrGMMPUNWaX6IhtcvyVmgeYC7Jm w4ElX36v+nvmqwZfNdAwS33WQDNWUqKUec5a6F4JCwnNh69ObS8VBjMgZj7FgBre 21KCRAgMqzSEJnUnzEjg3JowlCGsefRaSoJY6tbD036CfyiE0yDLsdErd7CktSUx ZKdNmUVw5PrIy71+8JwnwERBwhHU2Zo+8Yk49YHiq2bfUpjaUOzG6FNF3Ye7VBPt EzkG6Bp/78YAEJsfXPEoLSlIKgZHtdCYxEg2RMFxuNFFiJZXhIbw8gScZldakuRF XhU5q+Q59nl0J73EAmz8dj/lfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlPyygB RbDbBJkhUGsGpPNtNRvxMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIUsiXg54Y7Wq0fzsQYuRjm1tuUH7r2mP8FCnQ21VDYAMGq8OKRGRD cNYJhoMHZooJblqxjWZyPY6YG9pjV0E8pJc1fPahnpc76zkkmAuA+VvSM6qJWONL Y6Dj8AErsRqZsfzqJG51JoYe8OpRWa+6hgwEEMp18mys983Gzy64cfmQ1qP7Kv1X I287irI+WUlV14RUuqe9up2gqQbzz/n4zjuNRipqfdVaz/ddwYjZ03ImAPkMf6PS eXGEfPfw0npVjDoCkbura8IZNFV9xcINgaBhJMu8EubCoL3gxfaRRJRUt2yMRT/C 84fQAzXgVX1/VTlfQ5LajTL65LDEfndY -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org