$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft (raw, json) Hash identifier: VFK2tFMJkBs7nB5avtLQqYSpPRZnR4GVtPVjj4ELhHA= Subject key identifier: 85:76:D4:EB:BA:FC:BC:C2:F7:14:38:95:44:FE:BF:0B:C3:5B:5B:0C Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft Manifest number: 0226 Signing time: Sun 19 May 2024 04:04:05 +0000 Manifest this update: Sun 19 May 2024 04:04:04 +0000 Manifest next update: Sun 26 May 2024 04:04:04 +0000 Files and hashes: 1: WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl (hash: N9RziXDjwWwRejcn0DPwPcLmPdHiwlIiq6J8ELDVttY=) 2: 2CCD56C8E33D11ECA430C25AC4F9AE02.roa (hash: U86p5u71TOWjIBSjWoG1eT1xUhAaYR+Xro7PSSd38QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Validity Not Before: May 19 04:04:04 2024 GMT Not After : May 26 04:04:04 2024 GMT Subject: CN=66497a34-d5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:5e:86:1e:f4:a6:d0:b7:c2:4d:ed:52:f2: ca:57:76:3f:bd:d8:11:6a:4c:b9:7e:ff:66:2e:f4: 06:31:3a:e8:8a:ac:c5:e9:f2:6b:64:13:1e:d0:90: 1c:96:73:90:c8:f8:43:64:1c:93:06:33:a8:25:fc: c0:08:aa:8f:f9:68:e6:7a:54:73:5d:b3:c5:ac:2b: f3:b0:b3:4e:cc:f7:dc:31:c8:cf:a7:5a:9e:a1:28: ea:89:94:91:74:34:97:ac:17:dd:74:28:72:93:8e: f9:50:d0:0d:46:40:5f:bd:15:09:04:9b:31:49:82: 80:a7:e1:07:bb:f8:7f:31:3e:7e:65:41:88:a7:cd: 63:a2:34:fe:6f:35:16:92:f5:a3:76:24:cd:fd:ae: 8c:13:90:93:bc:c6:7d:00:52:a8:a0:56:c3:d5:d0: 7d:28:96:39:f8:df:b2:bc:3c:b6:31:45:e2:ed:f1: 17:2d:97:ef:2c:b8:1c:27:2b:9f:99:d7:e3:fb:38: da:e8:2f:72:72:dc:56:c7:a1:a4:6f:8f:79:0d:39: d8:f2:05:16:25:e0:15:ea:d1:df:d3:f8:18:6d:d7: 75:43:4e:01:b3:9a:20:69:d5:ab:2b:68:9d:a5:e9: e1:22:24:ce:2e:5d:0b:6a:e4:81:1e:39:16:f5:0f: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:76:D4:EB:BA:FC:BC:C2:F7:14:38:95:44:FE:BF:0B:C3:5B:5B:0C X509v3 Authority Key Identifier: keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:3f:43:1f:93:5e:4f:ec:a9:ae:20:5c:24:c7:67:34:3f:7d: dc:d5:c3:88:30:f1:a0:f6:82:55:e1:8e:d9:10:8a:31:be:c8: 7e:20:a0:f8:15:fd:37:21:17:3a:b6:b6:3c:fc:a4:6a:40:0a: 86:a6:f4:0e:5f:98:d4:9e:8c:8d:5b:69:b9:c6:ff:cd:8f:9b: 68:f1:00:60:ff:18:79:b5:82:7f:f6:fc:a4:72:54:8d:0a:0b: 07:97:14:97:c1:a4:6d:df:c6:76:3d:09:11:c0:7c:2c:f1:e7: 81:7b:6f:e3:15:d8:41:5d:df:a2:38:ab:b0:1f:17:24:81:22: 90:5e:43:28:f0:68:fe:9d:8c:63:2e:80:cd:6b:fd:db:93:50: ac:fe:12:cc:d5:e0:fa:26:d2:6e:4c:9e:f9:13:2b:5a:c0:0c: d3:c9:2f:24:27:43:5a:09:4f:ba:52:cd:5d:19:d2:5d:95:8c: 11:0a:2b:9f:d3:cb:3d:58:27:17:ed:d6:b4:46:ed:84:57:43: d5:8e:27:b1:b9:d1:68:72:5f:7e:71:9c:b6:95:73:0f:3d:c4: 29:c7:b9:0e:49:39:e6:c2:bd:13:1a:37:eb:b3:7a:80:41:ad: 34:d2:55:fc:6d:3d:43:56:38:31:02:d5:2c:8c:b4:75:6f:d5: 59:a5:63:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD QzY2NjQ4OEQwHhcNMjQwNTE5MDQwNDA0WhcNMjQwNTI2MDQwNDA0WjAYMRYwFAYD VQQDEw02NjQ5N2EzNC1kNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzetehh70ptC3wk3tUvLKV3Y/vdgRaky5fv9mLvQGMTroiqzF6fJrZBMe0JAc lnOQyPhDZByTBjOoJfzACKqP+WjmelRzXbPFrCvzsLNOzPfcMcjPp1qeoSjqiZSR dDSXrBfddChyk475UNANRkBfvRUJBJsxSYKAp+EHu/h/MT5+ZUGIp81jojT+bzUW kvWjdiTN/a6ME5CTvMZ9AFKooFbD1dB9KJY5+N+yvDy2MUXi7fEXLZfvLLgcJyuf mdfj+zja6C9yctxWx6Gkb495DTnY8gUWJeAV6tHf0/gYbdd1Q04Bs5ogadWrK2id penhIiTOLl0LauSBHjkW9Q/aYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIV21Ou6 /LzC9xQ4lUT+vwvDW1sMMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IxRC9CQTY0RDA2NkUzMzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2 ZzNjUHF1Rk5kWFhNWm1TSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUP0Mfk15P7KmuIFwkx2c0P33c1cOIMPGg9oJV4Y7ZEIoxvsh+IKD4 Ff03IRc6trY8/KRqQAqGpvQOX5jUnoyNW2m5xv/Nj5to8QBg/xh5tYJ/9vykclSN CgsHlxSXwaRt38Z2PQkRwHws8eeBe2/jFdhBXd+iOKuwHxckgSKQXkMo8Gj+nYxj LoDNa/3bk1Cs/hLM1eD6JtJuTJ75EytawAzTyS8kJ0NaCU+6Us1dGdJdlYwRCiuf 08s9WCcX7da0Ru2EV0PVjiexudFocl9+cZy2lXMPPcQpx7kOSTnmwr0TGjfrs3qA Qa000lX8bT1DVjgxAtUsjLR1b9VZpWP9 -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org