$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: nkzjTcqfD0q9blSIJod8r/ij2khTUpvcfsH78H9/nZ0= Subject key identifier: F9:72:62:D1:C1:B7:05:FD:A0:04:89:D7:3D:07:8C:48:43:8C:86:4B Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 029F Signing time: Sun 19 May 2024 03:37:09 +0000 Manifest this update: Sun 19 May 2024 03:37:08 +0000 Manifest next update: Sun 26 May 2024 03:37:08 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: 4KUxoftB3JppQ7wVi1E0vSOH9QlrwyD/ykt4hYII/rI=) 2: 64DF1E90EE3F11ECA9E43485C4F9AE02.roa (hash: hVZJ0zpXl3HIf84EQwJt238SaOF7zZFnGXXrUjVRB7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: May 19 03:37:08 2024 GMT Not After : May 26 03:37:08 2024 GMT Subject: CN=664973e4-24c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:2b:b6:e5:7d:5b:7e:43:4b:c6:5d:bc:56: 8d:31:67:62:fc:af:6d:12:e5:57:d5:a0:1d:36:fb: 2e:57:46:87:c2:45:41:b3:8a:5f:d5:55:39:b1:f5: 39:aa:9b:e8:bb:88:8f:59:da:db:d2:95:2a:58:45: 26:ce:a6:df:f4:34:94:a7:8c:53:89:42:c4:f0:e4: 34:f1:97:7f:e1:ba:86:e3:f4:d3:62:92:eb:d7:59: ea:54:8f:82:9d:0c:8f:56:9d:9f:bf:13:63:0b:1b: e4:28:bb:6c:a8:ca:0c:91:8c:fa:71:35:80:ef:e5: db:29:f5:d4:31:1f:a8:cd:64:f6:45:f3:1c:17:63: 15:c9:82:e1:df:e7:47:0b:dd:ef:2b:52:2e:eb:7f: a6:e2:05:58:d2:cc:ee:7a:31:37:e0:4d:b5:fb:a9: 2a:fd:c2:2c:89:97:b8:e8:5f:df:47:f6:94:af:00: c9:6f:16:14:17:f1:c8:9a:38:d7:c5:9d:61:58:ef: d6:a0:35:d3:73:03:3d:41:3d:cd:5d:7e:8d:36:57: 4a:a2:b6:dd:5a:b9:78:c6:dc:64:2b:2b:3f:ae:fb: 14:e8:47:46:ef:01:4f:84:10:e8:44:29:3b:50:24: 3c:33:2a:f0:5b:fc:0a:44:57:18:ec:e8:fb:cf:26: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:72:62:D1:C1:B7:05:FD:A0:04:89:D7:3D:07:8C:48:43:8C:86:4B X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ac:e1:01:61:1c:ab:6e:69:fb:91:82:e9:a4:26:55:60:0a: 64:53:8b:e4:eb:46:52:58:61:87:c1:d6:e8:e7:f5:5d:f8:e2: 84:8b:21:c2:08:c5:fa:1d:c9:3f:c5:a6:51:3a:29:59:ad:31: 91:a9:0f:1c:2c:af:f8:5e:8d:32:c5:d9:3a:46:75:6d:7b:03: e3:e9:f4:1e:6b:a6:7f:11:88:fb:cb:86:bc:35:00:3c:cd:0b: 9d:c9:b6:e3:d2:3e:f5:e5:c3:0e:3a:db:2b:51:5c:6f:1e:4c: 4b:70:28:55:b2:7b:ef:43:83:35:6a:7a:43:7a:ef:a9:1f:9a: d4:cc:c5:95:a3:3a:53:e2:64:dd:6a:a3:7f:b1:0d:17:3e:69: f5:a5:1c:a3:e8:86:09:51:f9:58:49:6e:08:11:cb:a3:8a:81: e6:4b:32:ae:1b:76:ea:14:b7:25:34:c3:82:d9:76:9d:55:f1: 8b:c9:bf:27:54:46:b2:6d:2b:31:48:c5:8f:13:b8:cf:d4:ae: a9:53:64:26:9e:d7:53:e8:f7:bc:24:ad:41:1e:c2:13:f6:e6: 1d:ed:4d:b4:c0:2d:7c:bb:b0:b4:4d:6c:cd:a1:cf:7d:d2:18: 58:38:87:9e:7a:3c:92:15:0e:9e:21:6d:93:b3:5b:6d:58:53: 39:6e:a4:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjQwNTE5MDMzNzA4WhcNMjQwNTI2MDMzNzA4WjAYMRYwFAYD VQQDEw02NjQ5NzNlNC0yNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmN8rtuV9W35DS8ZdvFaNMWdi/K9tEuVX1aAdNvsuV0aHwkVBs4pf1VU5sfU5 qpvou4iPWdrb0pUqWEUmzqbf9DSUp4xTiULE8OQ08Zd/4bqG4/TTYpLr11nqVI+C nQyPVp2fvxNjCxvkKLtsqMoMkYz6cTWA7+XbKfXUMR+ozWT2RfMcF2MVyYLh3+dH C93vK1Iu63+m4gVY0szuejE34E21+6kq/cIsiZe46F/fR/aUrwDJbxYUF/HImjjX xZ1hWO/WoDXTcwM9QT3NXX6NNldKorbdWrl4xtxkKys/rvsU6EdG7wFPhBDoRCk7 UCQ8MyrwW/wKRFcY7Oj7zyYycwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlyYtHB twX9oASJ1z0HjEhDjIZLMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMrOEBYRyrbmn7kYLppCZVYApkU4vk60ZSWGGHwdbo5/Vd+OKEiyHC CMX6Hck/xaZROilZrTGRqQ8cLK/4Xo0yxdk6RnVtewPj6fQea6Z/EYj7y4a8NQA8 zQudybbj0j715cMOOtsrUVxvHkxLcChVsnvvQ4M1anpDeu+pH5rUzMWVozpT4mTd aqN/sQ0XPmn1pRyj6IYJUflYSW4IEcujioHmSzKuG3bqFLclNMOC2XadVfGLyb8n VEaybSsxSMWPE7jP1K6pU2QmntdT6Pe8JK1BHsIT9uYd7U20wC18u7C0TWzNoc99 0hhYOIeeejySFQ6eIW2Ts1ttWFM5bqSa -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org