$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft File: wUoOYILw6SLK_iKWlSPoZMeo8dw.mft (raw, json) Hash identifier: Py5zp9sHe9v5Qyiy9L4UDbP4Q+KSZCX670dE2jj6HXI= Subject key identifier: 42:CD:B1:6B:83:81:52:4F:BB:B9:22:2F:A7:30:03:11:8C:73:90:2C Authority key identifier: C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC Certificate issuer: /CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft Manifest number: 2A Signing time: Fri 31 May 2024 09:43:48 +0000 Manifest this update: Fri 31 May 2024 09:43:48 +0000 Manifest next update: Fri 07 Jun 2024 09:43:48 +0000 Files and hashes: 1: wUoOYILw6SLK_iKWlSPoZMeo8dw.crl (hash: 1ggRIM/BZ/jUJ7eHxpiaAaCxSGvdH1wScbQAFjjm/Vk=) 2: 8E1DCEDA013B11EF86588545C4F9AE02.roa (hash: smRqwZU79BxT70mcDEE+mLVxCUFpEnrUcI1Z0dFF4ZU=) 3: E0C16642013B11EFA1286E46C4F9AE02.roa (hash: uhIUjELjVZa5Y62wg4YBJZgNj0OBhnAUsoUiBAK0Lh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 09:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62B6/serialNumber=C14A0E6082F0E922CAFE22969523E864C7A8F1DC Validity Not Before: May 31 09:43:48 2024 GMT Not After : Jun 7 09:43:48 2024 GMT Subject: CN=66599bd4-b450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:88:da:25:cc:12:c8:b4:40:c5:53:51:4a: 43:c9:cd:cc:f1:d1:93:64:12:20:f9:98:ab:2a:92: cb:8a:d7:a8:f8:a9:97:e5:32:bd:e2:03:41:d1:6a: c3:b4:63:4f:7f:f7:0e:bf:25:70:18:d3:be:e8:c7: 78:00:0e:09:cb:d6:65:08:85:43:06:23:0a:20:77: 5c:d0:ac:4d:21:bc:28:59:64:58:22:98:70:db:ba: fa:67:5f:bb:ba:28:bb:f0:eb:ca:39:67:7c:5d:ea: 76:81:48:a2:fd:82:de:4a:99:2c:f8:d7:54:bc:52: 10:b8:96:77:a9:ec:6c:4a:e8:dc:d9:07:3f:ff:66: 07:3a:54:4e:71:b1:ec:b6:28:da:f0:59:44:9e:35: c3:6d:23:7f:34:9d:c4:ea:1a:63:87:c1:68:7b:4e: 24:47:95:7c:26:24:08:cc:9e:6c:13:09:fc:f3:e2: 5b:63:d6:ad:df:a9:88:05:d4:10:50:06:72:cc:aa: 53:29:b8:e0:f9:39:ee:67:2a:cd:35:21:1f:5c:80: 23:9f:50:31:9f:46:f4:f9:ba:a7:8b:ff:aa:e8:75: 3e:fe:65:71:75:ff:e2:99:b1:2b:e7:99:9b:04:58: a6:ae:e7:45:1b:bf:0d:dc:44:ff:0c:95:18:b5:db: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CD:B1:6B:83:81:52:4F:BB:B9:22:2F:A7:30:03:11:8C:73:90:2C X509v3 Authority Key Identifier: keyid:C1:4A:0E:60:82:F0:E9:22:CA:FE:22:96:95:23:E8:64:C7:A8:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUoOYILw6SLK_iKWlSPoZMeo8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62B6/B9987AA4FE4011EE8FE74569C4F9AE02/wUoOYILw6SLK_iKWlSPoZMeo8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e0:1a:b1:85:61:b7:26:4b:35:be:ac:eb:49:f3:9b:f0:46: da:61:55:10:f4:b1:e0:3e:16:20:92:ed:e1:f5:6a:86:d2:58: d7:d8:69:5a:51:22:71:8f:da:d1:89:58:3a:1f:6d:d4:58:2b: fb:e4:1d:3d:f9:78:91:1f:88:2e:2a:41:c2:1b:7e:c1:b5:4e: 0e:1e:a3:7e:98:bf:48:9f:08:fa:4f:72:01:2a:54:85:6f:51: cd:ec:c5:72:f9:e8:08:37:9a:ff:95:ef:5f:10:f6:4d:01:8d: 37:47:f0:7a:e8:07:73:0d:f3:f5:3a:3c:50:68:cc:c9:87:c8: 2c:7a:3c:8f:8f:de:95:06:a2:a0:82:8e:c0:3e:b4:67:b8:e4: 97:d0:3b:92:d5:80:94:84:02:40:f6:a2:76:44:e6:62:b6:f8: 95:c8:6e:14:f6:97:ad:e4:c8:d4:9a:07:48:f1:92:6e:86:fd: 38:c1:bc:e4:7e:6c:d6:db:6a:a9:c6:2d:cc:44:84:20:55:cf: b5:d4:0b:85:c1:f6:27:c9:4b:b9:12:a4:bf:6d:80:df:4d:a3: 41:4b:64:44:21:17:ab:b4:cf:b2:5e:92:76:28:a8:a4:b4:1f: fc:a2:78:fe:ed:a9:49:36:d4:78:35:5a:06:c0:ac:a0:67:d7: 16:8b:0d:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjJCNjExMC8GA1UEBRMoQzE0QTBFNjA4MkYwRTkyMkNBRkUyMjk2OTUyM0U4NjRD N0E4RjFEQzAeFw0yNDA1MzEwOTQzNDhaFw0yNDA2MDcwOTQzNDhaMBgxFjAUBgNV BAMTDTY2NTk5YmQ0LWI0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIoIjaJcwSyLRAxVNRSkPJzczx0ZNkEiD5mKsqksuK16j4qZflMr3iA0HRasO0 Y09/9w6/JXAY077ox3gADgnL1mUIhUMGIwogd1zQrE0hvChZZFgimHDbuvpnX7u6 KLvw68o5Z3xd6naBSKL9gt5KmSz411S8UhC4lnep7GxK6NzZBz//Zgc6VE5xsey2 KNrwWUSeNcNtI380ncTqGmOHwWh7TiRHlXwmJAjMnmwTCfzz4ltj1q3fqYgF1BBQ BnLMqlMpuOD5Oe5nKs01IR9cgCOfUDGfRvT5uqeL/6rodT7+ZXF1/+KZsSvnmZsE WKau50Ubvw3cRP8MlRi126VlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQs2xa4OB Uk+7uSIvpzADEYxzkCwwHwYDVR0jBBgwFoAUwUoOYILw6SLK/iKWlSPoZMeo8dww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MkI2L0I5OTg3QUE0RkU0 MDExRUU4RkU3NDU2OUM0RjlBRTAyL3dVb09ZSUx3NlNMS19pS1dsU1BvWk1lbzhk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1VvT1lJTHc2U0xLX2lLV2xTUG9aTWVvOGR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MkI2L0I5OTg3QUE0RkU0MDExRUU4RkU3NDU2OUM0RjlBRTAyL3dVb09ZSUx3NlNM S19pS1dsU1BvWk1lbzhkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEDgGrGFYbcmSzW+rOtJ85vwRtphVRD0seA+FiCS7eH1aobSWNfYaVpR InGP2tGJWDofbdRYK/vkHT35eJEfiC4qQcIbfsG1Tg4eo36Yv0ifCPpPcgEqVIVv Uc3sxXL56Ag3mv+V718Q9k0BjTdH8HroB3MN8/U6PFBozMmHyCx6PI+P3pUGoqCC jsA+tGe45JfQO5LVgJSEAkD2onZE5mK2+JXIbhT2l63kyNSaB0jxkm6G/TjBvOR+ bNbbaqnGLcxEhCBVz7XUC4XB9ifJS7kSpL9tgN9No0FLZEQhF6u0z7JeknYoqKS0 H/yieP7tqUk21Hg1WgbArKBn1xaLDVY= -----END CERTIFICATE-----Generated at Fri May 31 13:04:58 2024 by rpki-client on console-ams.rpki-client.org