$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: soTt7AbP2wqCeuxLyNvpl2FYyc3WW5u214xu6HZr5R0= Subject key identifier: 81:2B:F1:AA:63:34:F1:3F:91:CE:FE:49:E4:BF:19:BD:06:A2:44:C2 Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: 2F Signing time: Sun 19 May 2024 08:24:35 +0000 Manifest this update: Sun 19 May 2024 08:24:34 +0000 Manifest next update: Sun 26 May 2024 08:24:34 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: PYcoawwDu5qbG3KlgVyQcbjbd8ouG+w4qA1Lx2ynhfk=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: WEHBvskgD+7pAwM51UvYkvJPxMc31VB5wYczhy7vxrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Validity Not Before: May 19 08:24:34 2024 GMT Not After : May 26 08:24:34 2024 GMT Subject: CN=6649b743-0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:b4:37:99:fa:45:b7:15:e2:45:e9:05:1d: 47:81:ce:50:b9:03:05:64:ab:69:b8:ac:55:6c:da: a7:51:32:24:75:2a:f0:0e:b7:ba:3e:26:8b:58:73: 74:d8:64:f1:3d:a2:95:2b:94:0d:9b:25:ab:7b:f3: 93:89:64:2d:1e:f1:a5:f6:c1:14:f5:7a:a9:44:1b: 04:44:0e:e1:23:69:3e:a6:62:00:86:95:a8:d2:69: 92:92:30:7a:37:e5:6b:26:13:a8:4b:85:ca:e7:a5: c5:ee:4c:7c:77:a8:88:fc:49:47:60:2c:c3:63:ab: 26:b6:3b:4f:55:bf:a9:ba:93:a8:9e:aa:5a:f1:e4: aa:d2:a9:d8:92:9e:ea:15:60:12:ca:24:27:d5:3c: 25:f8:82:6b:3c:a7:cb:91:33:c0:54:e1:18:01:8c: d7:60:5b:bc:5b:84:89:04:55:9d:7e:71:3a:f1:8f: 58:1d:2d:f9:4d:e1:b8:95:4b:0a:9a:bf:51:f4:0f: 32:a1:a4:83:6a:3f:00:17:4c:35:af:01:05:3e:ff: cd:06:86:d4:1e:02:5a:27:9f:89:5f:21:6b:2c:41: 94:55:1b:2a:cb:ce:82:40:b0:4c:69:56:50:a2:e8: 9f:f8:b2:ba:4b:05:09:01:73:17:a8:1f:38:a3:16: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:F1:AA:63:34:F1:3F:91:CE:FE:49:E4:BF:19:BD:06:A2:44:C2 X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:07:c2:22:4c:35:10:9e:17:5b:7e:4f:66:cd:b3:cd:1f:42: b9:a4:bb:b9:16:de:30:cb:f2:92:de:43:79:c3:7b:e3:1f:a5: de:c0:44:35:bc:e1:ee:43:68:b7:aa:86:d9:66:55:ea:f8:f2: 97:ee:9e:ba:da:da:a7:e9:d7:09:53:ac:13:a3:95:e4:77:db: 2f:a8:3d:ba:02:f6:e0:7e:e5:1c:18:62:51:e5:b3:b8:57:06: 9c:b9:7e:78:2a:04:d3:5f:81:49:e8:a7:c4:0d:43:d5:5f:bc: 47:80:1c:f9:33:7f:56:dc:f2:7d:09:a6:1f:b6:ed:26:84:4f: 59:53:4d:71:ff:cb:01:b8:80:3b:60:dd:a1:f5:d1:0d:ae:d2: d0:03:f9:17:56:52:79:11:0e:57:10:c7:82:f9:36:6c:c0:f1: 36:5f:5f:4d:a2:68:4b:e0:31:28:1c:00:3e:76:33:65:32:23: db:0c:1e:15:02:51:26:ef:7b:6b:9c:d3:d5:72:90:58:db:ee: 59:53:9e:00:b4:5e:ea:59:20:8d:5b:81:89:72:f6:fc:13:2c: 9f:8b:36:47:ed:ed:93:4d:89:db:a7:70:15:63:79:58:60:3a: 2a:1e:5e:46:52:df:9d:79:70:96:3a:df:94:44:f1:d7:12:9b: cb:f0:f4:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEIyQjExMC8GA1UEBRMoQzA5RURGNUI2OTVFMDQ3OTJDMzUxNEY0OThGNEJCMTQ0 NzA5NkVGNzAeFw0yNDA1MTkwODI0MzRaFw0yNDA1MjYwODI0MzRaMBgxFjAUBgNV BAMTDTY2NDliNzQzLTBmZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqo7Q3mfpFtxXiRekFHUeBzlC5AwVkq2m4rFVs2qdRMiR1KvAOt7o+JotYc3TY ZPE9opUrlA2bJat785OJZC0e8aX2wRT1eqlEGwREDuEjaT6mYgCGlajSaZKSMHo3 5WsmE6hLhcrnpcXuTHx3qIj8SUdgLMNjqya2O09Vv6m6k6ieqlrx5KrSqdiSnuoV YBLKJCfVPCX4gms8p8uRM8BU4RgBjNdgW7xbhIkEVZ1+cTrxj1gdLflN4biVSwqa v1H0DzKhpINqPwAXTDWvAQU+/80GhtQeAlonn4lfIWssQZRVGyrLzoJAsExpVlCi 6J/4srpLBQkBcxeoHzijFkt1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgSvxqmM0 8T+Rzv5J5L8ZvQaiRMIwHwYDVR0jBBgwFoAUwJ7fW2leBHksNRT0mPS7FEcJbvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QjJCLzlCODIwNkQ0Q0Y5 QzExRUVBRjM0NDY1RkM0RjlBRTAyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd0o3ZlcybGVCSGtzTlJUMG1QUzdGRWNKYnZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QjJCLzlCODIwNkQ0Q0Y5QzExRUVBRjM0NDY1RkM0RjlBRTAyL3dKN2ZXMmxlQkhr c05SVDBtUFM3RkVjSmJ2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF4HwiJMNRCeF1t+T2bNs80fQrmku7kW3jDL8pLeQ3nDe+Mfpd7ARDW8 4e5DaLeqhtlmVer48pfunrra2qfp1wlTrBOjleR32y+oPboC9uB+5RwYYlHls7hX Bpy5fngqBNNfgUnop8QNQ9VfvEeAHPkzf1bc8n0Jph+27SaET1lTTXH/ywG4gDtg 3aH10Q2u0tAD+RdWUnkRDlcQx4L5NmzA8TZfX02iaEvgMSgcAD52M2UyI9sMHhUC USbve2uc09VykFjb7llTngC0XupZII1bgYly9vwTLJ+LNkft7ZNNiduncBVjeVhg OioeXkZS3515cJY635RE8dcSm8vw9Io= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org