$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: QkUAFR/RI/kHsfl+Hm0fiQu2eiPNGy2ws1wVGOtYUWs= Subject key identifier: C5:0F:AF:44:E9:F7:9F:4F:6E:CC:38:03:F2:9C:86:B8:8F:5D:0C:77 Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 7C Signing time: Sat 25 May 2024 07:36:21 +0000 Manifest this update: Sat 25 May 2024 07:36:20 +0000 Manifest next update: Sat 01 Jun 2024 07:36:20 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: vIx/WIPXnVKyBDSxxdJgklFVpLgsXzYZIqNwvmieDi4=) 2: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: /TjW9AO7ISejU8TRY0ge1bQ+z/b39cY+4y6EmVLDEL0=) 3: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: 0GmwzEvjQkpIQOKVrUCegjL2exFdSiExkQmTbC5jqtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: May 25 07:36:20 2024 GMT Not After : Jun 1 07:36:20 2024 GMT Subject: CN=665194f4-2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:b3:6b:75:b2:77:0b:96:6e:26:83:7d:76: aa:81:63:7b:2b:84:15:fd:45:87:95:3b:78:d2:ca: c5:d1:5d:63:97:0d:ce:27:45:26:5d:06:08:b1:f1: 91:d1:28:8f:73:2e:02:75:03:97:7f:49:20:f4:c4: 28:0e:0d:1d:79:42:ec:c3:46:a4:fc:c8:37:e5:a5: 0c:1a:8f:4e:c0:df:b4:0d:a6:50:b5:11:04:b2:d5: a9:0b:14:2e:f7:0e:9f:d8:27:70:23:de:63:95:f3: 06:17:0d:d7:98:18:d3:db:19:ff:e6:ec:01:33:ab: ea:2c:db:d6:cc:a6:57:e2:11:32:b0:ae:3c:37:5c: 0f:57:63:91:51:66:7a:77:ff:9f:5e:9f:17:90:7b: 8f:cf:f5:0d:9a:a6:3e:14:45:35:38:25:a0:79:6f: 2c:22:07:1d:ae:5a:11:95:ac:eb:e9:99:71:8f:20: 8e:82:62:65:40:01:34:00:ce:71:00:4e:d9:3a:db: 4d:e2:b2:bb:53:be:36:07:7f:3a:1e:06:f9:5e:8f: 09:42:b2:91:c8:1f:6b:1f:99:83:dd:76:70:fa:5d: 83:83:6c:0a:ef:f7:24:35:45:b5:b1:94:b8:cf:88: 36:ca:36:ab:c7:3f:ef:12:fa:0c:e2:61:47:a3:f6: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0F:AF:44:E9:F7:9F:4F:6E:CC:38:03:F2:9C:86:B8:8F:5D:0C:77 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6d:0b:3a:02:e0:bc:a9:ab:84:4c:05:25:8c:7a:41:76:c9: 26:47:7f:85:26:29:97:ff:a6:d4:2f:fc:98:9c:2e:e0:f5:2b: 27:b9:a9:cf:55:1f:64:f4:8d:27:5a:a9:5c:8b:f7:9a:b6:e6: b8:c9:26:8d:b7:ac:07:0b:69:56:52:67:d9:e2:43:96:9e:b1: 00:75:02:b5:26:4f:92:73:72:49:09:b1:8a:4a:8a:6c:3a:74: 74:2f:b1:12:2f:10:71:59:af:24:37:af:17:c5:51:ce:58:5b: 27:46:d1:12:2c:d7:1a:d7:ca:ea:32:96:6a:29:0b:18:1c:ee: 71:b7:d1:84:19:e6:13:59:d9:f5:7a:32:ef:d7:23:0b:27:57: d2:21:df:0e:2e:18:7b:b0:a6:86:71:a7:1f:5c:b9:8a:23:cd: c1:c3:88:e7:91:94:c0:02:a5:63:fa:4b:25:a5:c7:52:6a:cf: 32:b6:eb:a7:37:9c:de:38:b8:a8:8c:68:91:8b:b6:6f:10:d7: dd:11:fa:b0:e3:16:16:49:97:1d:e6:4f:e3:c4:ff:e0:8a:39: 0f:82:12:32:cf:d5:6f:57:d5:0a:3c:65:5c:b2:73:c9:92:d0: 35:1c:79:4b:0e:22:a8:96:f0:80:5c:f6:2b:f4:76:05:81:3f: cc:aa:0d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjQwNTI1MDczNjIwWhcNMjQwNjAxMDczNjIwWjAYMRYwFAYD VQQDEw02NjUxOTRmNC0yMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLaza3WydwuWbiaDfXaqgWN7K4QV/UWHlTt40srF0V1jlw3OJ0UmXQYIsfGR 0SiPcy4CdQOXf0kg9MQoDg0deULsw0ak/Mg35aUMGo9OwN+0DaZQtREEstWpCxQu 9w6f2CdwI95jlfMGFw3XmBjT2xn/5uwBM6vqLNvWzKZX4hEysK48N1wPV2ORUWZ6 d/+fXp8XkHuPz/UNmqY+FEU1OCWgeW8sIgcdrloRlazr6ZlxjyCOgmJlQAE0AM5x AE7ZOttN4rK7U742B386Hgb5Xo8JQrKRyB9rH5mD3XZw+l2Dg2wK7/ckNUW1sZS4 z4g2yjarxz/vEvoM4mFHo/YrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUPr0Tp 959Pbsw4A/KchriPXQx3MB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArbQs6AuC8qauETAUljHpBdskmR3+FJimX/6bUL/yYnC7g9SsnuanP VR9k9I0nWqlci/eatua4ySaNt6wHC2lWUmfZ4kOWnrEAdQK1Jk+Sc3JJCbGKSops OnR0L7ESLxBxWa8kN68XxVHOWFsnRtESLNca18rqMpZqKQsYHO5xt9GEGeYTWdn1 ejLv1yMLJ1fSId8OLhh7sKaGcacfXLmKI83Bw4jnkZTAAqVj+kslpcdSas8ytuun N5zeOLiojGiRi7ZvENfdEfqw4xYWSZcd5k/jxP/gijkPghIyz9VvV9UKPGVcsnPJ ktA1HHlLDiKolvCAXPYr9HYFgT/Mqg3T -----END CERTIFICATE-----Generated at Sat May 25 10:21:17 2024 by rpki-client on console-ams.rpki-client.org