$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json) Hash identifier: fkNIDpOAQN0/9lSIJfG0g5Fggk9HxGmEpGLuX78S8Tk= Subject key identifier: 0B:FE:A9:BA:13:41:72:4A:BB:16:3A:66:E2:A4:83:2D:1D:F8:A4:23 Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft Manifest number: 1054 Signing time: Sat 18 May 2024 20:53:58 +0000 Manifest this update: Sat 18 May 2024 20:53:57 +0000 Manifest next update: Sat 25 May 2024 20:53:57 +0000 Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: KkjgTDHQFAL0Me3NsHHRC9uvmVus4jxCW4cjToZgfQ8=) 2: 336BA9301F3511EBA1BEA484C4F9AE02.roa (hash: YmQJVFgClUNZS8zoNTFsOSqkp6KCRISLG2h6fntHKcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: May 18 20:53:57 2024 GMT Not After : May 25 20:53:57 2024 GMT Subject: CN=66491565-8fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:ae:54:00:cd:b5:ee:13:01:db:9c:3c:07: 4c:a5:da:70:41:e8:2c:17:08:6a:82:46:84:3c:f7: 5b:56:4d:89:e7:3d:05:0a:9e:b8:ff:e4:c5:50:30: 23:05:ae:cd:45:a4:02:ee:7c:24:d6:5d:44:4d:a4: 13:b7:81:37:8f:d4:86:10:50:26:99:d5:4b:82:72: 2c:26:f1:d1:d2:6b:e4:4c:d3:b4:3e:6f:d7:e5:2a: a5:81:5d:c3:97:c3:56:5c:67:1b:a2:75:1d:59:88: c6:56:2b:b0:ef:8a:9e:0e:df:e8:b7:4d:e0:e4:46: b5:fd:09:96:45:e7:66:e1:e7:61:4c:3a:d6:fb:57: ec:4b:ad:6f:d8:d1:4b:0c:d3:d3:aa:c7:a0:7a:fa: 5a:04:b0:00:e8:2f:21:65:71:5c:e9:eb:4f:33:16: 17:10:45:7c:95:75:09:c7:e8:a6:fa:9b:5c:68:6b: 78:79:eb:c6:f6:87:d4:ed:ca:97:d4:33:ef:c4:ae: 42:dd:2b:9c:29:74:c9:ec:7b:e6:e2:5d:b7:9e:a3: 5f:d6:fd:14:1b:04:ec:0d:b8:95:73:38:80:85:8f: 29:b3:93:82:72:d9:02:da:36:b3:22:e2:88:31:ba: 65:4e:28:29:73:1c:fe:78:74:c9:bf:cc:f2:10:e9: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FE:A9:BA:13:41:72:4A:BB:16:3A:66:E2:A4:83:2D:1D:F8:A4:23 X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:63:d7:78:df:f5:56:25:0e:ca:87:d8:df:73:90:9d:b3:52: d3:81:0a:4e:1b:39:85:be:a5:62:19:b8:1b:18:8d:59:0b:db: fd:22:48:55:08:d0:ea:e2:93:43:95:8b:ec:be:59:80:3f:f8: ac:3e:6b:e5:02:7f:8d:ca:da:91:01:07:ed:e8:cd:de:2e:d9: d4:39:06:76:51:88:2e:cd:7b:62:0a:43:5f:81:78:e3:25:e2: e7:25:fa:02:94:a5:4d:5f:93:49:1b:1e:94:73:8b:19:b5:05: 22:b4:70:23:9c:07:ff:e7:d1:ef:c9:61:1f:cc:44:a6:d5:80: f5:01:2a:2f:e9:71:c1:4b:1a:d5:43:e3:93:34:6d:89:57:79: 7f:51:06:25:92:a6:8a:87:aa:7a:d7:7a:fe:c7:34:7b:0b:f5: 53:ca:ff:07:a0:06:2c:b9:37:f5:a5:82:e7:9e:64:b7:3a:e7: 43:ff:5b:28:70:14:a3:3b:34:28:ea:9e:f2:09:a3:16:2b:8f: 4a:f0:d3:9d:03:10:b0:d6:cd:eb:67:30:40:50:d7:db:d9:82: f8:5c:16:c9:b9:45:85:78:18:e1:da:43:6c:da:68:4a:3b:9f: b4:53:73:c6:6f:9e:3b:3c:2c:20:ec:1b:87:a4:0e:52:b6:19: 94:a2:70:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjQwNTE4MjA1MzU3WhcNMjQwNTI1MjA1MzU3WjAYMRYwFAYD VQQDEw02NjQ5MTU2NS04ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbeuVADNte4TAducPAdMpdpwQegsFwhqgkaEPPdbVk2J5z0FCp64/+TFUDAj Ba7NRaQC7nwk1l1ETaQTt4E3j9SGEFAmmdVLgnIsJvHR0mvkTNO0Pm/X5SqlgV3D l8NWXGcbonUdWYjGViuw74qeDt/ot03g5Ea1/QmWRedm4edhTDrW+1fsS61v2NFL DNPTqsegevpaBLAA6C8hZXFc6etPMxYXEEV8lXUJx+im+ptcaGt4eevG9ofU7cqX 1DPvxK5C3SucKXTJ7Hvm4l23nqNf1v0UGwTsDbiVcziAhY8ps5OCctkC2jazIuKI MbplTigpcxz+eHTJv8zyEOn72QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAv+qboT QXJKuxY6ZuKkgy0d+KQjMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Y9d43/VWJQ7Kh9jfc5Cds1LTgQpOGzmFvqViGbgbGI1ZC9v9IkhV CNDq4pNDlYvsvlmAP/isPmvlAn+NytqRAQft6M3eLtnUOQZ2UYguzXtiCkNfgXjj JeLnJfoClKVNX5NJGx6Uc4sZtQUitHAjnAf/59HvyWEfzESm1YD1ASov6XHBSxrV Q+OTNG2JV3l/UQYlkqaKh6p613r+xzR7C/VTyv8HoAYsuTf1pYLnnmS3OudD/1so cBSjOzQo6p7yCaMWK49K8NOdAxCw1s3rZzBAUNfb2YL4XBbJuUWFeBjh2kNs2mhK O5+0U3PGb547PCwg7BuHpA5SthmUonAB -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org