$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: ZIw7boHuzAUVvDWS+MS5coxKPdkhSQJdKVk4ogdGH50= Subject key identifier: A7:F9:56:D8:B0:18:AA:02:25:A9:7F:DE:AB:E0:97:86:55:E4:1A:E8 Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1B92 Signing time: Sat 18 May 2024 16:37:00 +0000 Manifest this update: Sat 18 May 2024 16:36:59 +0000 Manifest next update: Sat 25 May 2024 16:36:59 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: 8v5fwbwxm0NPQCav6O2sORYX/AELCfvRpl/CBmY37DY=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: soiy3Hpj7mqRgQ/hwN14mYIrc6Nq37CBEl6xEMwp1/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7071 (0x1b9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: May 18 16:36:59 2024 GMT Not After : May 25 16:36:59 2024 GMT Subject: CN=6648d92b-ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2e:5a:3c:b0:51:98:2b:75:37:d7:47:d5:15: 5b:6e:d0:65:df:a5:82:0c:60:a7:40:78:1a:f2:00: 78:92:13:ac:ab:26:ba:37:1b:b7:39:ee:08:30:25: d0:ad:a6:6d:12:66:02:36:3a:b2:3d:57:83:cc:09: 1a:4c:15:2d:5d:1d:fd:01:d1:12:e4:cd:15:8b:c1: 6f:85:c8:53:ef:0c:5b:84:8a:1b:74:04:36:2f:84: 14:dd:56:a3:e8:c4:48:f6:05:37:79:7c:55:5d:93: a5:ba:c2:33:db:44:e0:21:21:cf:33:80:53:18:3b: a3:55:9e:83:e5:87:15:15:13:f8:14:85:a6:6b:f5: 0d:7a:69:37:ff:21:c2:f8:11:f6:7b:62:49:0d:8d: 03:08:ba:05:a2:6d:31:ff:64:23:c5:7c:ec:e5:7e: f3:b5:23:76:c0:ee:c2:46:fb:cf:1a:f9:90:52:9a: 1d:ab:5a:ff:74:07:8b:06:0f:d0:62:81:e0:4f:f4: 09:6d:4f:a1:a3:c3:be:61:96:a0:35:83:e9:5e:5e: 85:bb:ba:38:ae:4e:bd:9b:ce:4e:75:93:89:b1:0b: bc:dd:e3:e6:25:d4:0d:49:f6:ba:a6:3b:c0:53:ad: dd:40:bd:3e:78:9f:c2:99:65:f4:09:32:3e:72:b7: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F9:56:D8:B0:18:AA:02:25:A9:7F:DE:AB:E0:97:86:55:E4:1A:E8 X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d3:8e:59:b1:4a:b6:9e:bd:57:95:df:03:98:bb:7e:6a:e9: 7d:71:8e:ba:30:15:1c:63:98:55:e1:76:35:ad:f6:40:2b:de: e1:1b:30:f6:a6:9e:66:e6:37:c3:43:d6:6b:d6:b4:9f:98:99: b6:af:ed:dc:3b:c2:34:3e:8a:03:c0:fb:b0:bd:2c:d2:0b:b6: e3:bf:ce:5a:1c:d2:94:db:69:34:af:1c:98:09:b1:40:f3:67: 69:f3:8c:4a:6a:fb:d9:89:92:a2:3d:e6:b5:c9:c0:14:a8:18: 92:2f:7a:aa:d4:e1:d0:c1:53:cd:e4:cc:1a:c1:6f:14:1d:c6: d4:24:ed:0b:50:16:15:6b:36:af:91:2b:2f:38:b5:09:61:12: 1d:33:f6:7b:7d:ab:d8:d8:d8:ec:40:55:30:b8:16:9b:e3:3f: ba:84:de:00:82:d0:98:16:51:e0:59:8e:c5:44:ff:77:74:5c: 94:1c:ed:0c:28:3c:57:14:b8:9a:3d:53:9a:53:55:d4:0d:1d: f0:4e:8f:8a:93:8b:bb:25:29:5f:0b:cb:cd:eb:61:39:99:7d: 63:26:98:56:6f:3f:2f:ae:bb:9c:8e:b8:c2:af:9e:8e:20:d4: 4b:c0:6e:d5:fa:a6:f5:ac:31:4b:56:de:a8:72:77:c2:40:c2: 77:b0:95:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjQwNTE4MTYzNjU5WhcNMjQwNTI1MTYzNjU5WjAYMRYwFAYD VQQDEw02NjQ4ZDkyYi1mZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i5aPLBRmCt1N9dH1RVbbtBl36WCDGCnQHga8gB4khOsqya6Nxu3Oe4IMCXQ raZtEmYCNjqyPVeDzAkaTBUtXR39AdES5M0Vi8FvhchT7wxbhIobdAQ2L4QU3Vaj 6MRI9gU3eXxVXZOlusIz20TgISHPM4BTGDujVZ6D5YcVFRP4FIWma/UNemk3/yHC +BH2e2JJDY0DCLoFom0x/2QjxXzs5X7ztSN2wO7CRvvPGvmQUpodq1r/dAeLBg/Q YoHgT/QJbU+ho8O+YZagNYPpXl6Fu7o4rk69m85OdZOJsQu83ePmJdQNSfa6pjvA U63dQL0+eJ/CmWX0CTI+crc2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf5Vtiw GKoCJal/3qvgl4ZV5BroMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL045ZsUq2nr1Xld8DmLt+aul9cY66MBUcY5hV4XY1rfZAK97hGzD2 pp5m5jfDQ9Zr1rSfmJm2r+3cO8I0PooDwPuwvSzSC7bjv85aHNKU22k0rxyYCbFA 82dp84xKavvZiZKiPea1ycAUqBiSL3qq1OHQwVPN5MwawW8UHcbUJO0LUBYVazav kSsvOLUJYRIdM/Z7favY2NjsQFUwuBab4z+6hN4AgtCYFlHgWY7FRP93dFyUHO0M KDxXFLiaPVOaU1XUDR3wTo+Kk4u7JSlfC8vN62E5mX1jJphWbz8vrrucjrjCr56O INRLwG7V+qb1rDFLVt6ocnfCQMJ3sJWb -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org