$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: ONbKkymFPwYsLu7+htzhiXdzPV7pgmAyBVaIQi5eqHs= Subject key identifier: B7:F9:78:AB:56:C9:09:98:CC:5D:8C:DF:90:8C:7D:06:3C:49:7B:71 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 0783 Signing time: Sat 18 May 2024 22:13:34 +0000 Manifest this update: Sat 18 May 2024 22:13:33 +0000 Manifest next update: Sat 25 May 2024 22:13:33 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: GQKe3IzxuudpmIUDJTowG9wXCuQsge00pTypaXOIWfo=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: U8EB6upYFrJ4UfMW5CZQh628uac/PqerE0Ocy3lzW3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: May 18 22:13:33 2024 GMT Not After : May 25 22:13:33 2024 GMT Subject: CN=6649280e-1d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:15:0e:e4:b2:6a:7f:d1:ae:a2:a3:74:5e: c4:f9:5d:06:d8:bd:f5:f0:79:a9:ac:72:d4:4f:76: 47:63:f2:d4:fe:49:3a:99:0e:00:b2:d6:cd:c7:df: 7b:47:d2:5e:59:dc:06:49:05:5b:87:4b:82:a8:57: cf:46:42:66:dd:38:31:d1:84:11:4d:cc:5b:9c:db: c0:e9:18:9f:2e:ac:56:38:03:5f:34:3f:92:c2:c6: 8e:11:c5:0d:81:54:f4:2b:61:fa:c2:94:8a:78:78: 48:42:7e:9a:dc:27:b9:34:9d:0c:f0:b0:0f:48:a6: 35:8f:45:db:16:c3:03:8b:02:c8:7d:7c:06:52:ce: 47:9c:12:93:ef:9c:3e:aa:42:ea:2e:3b:7e:dd:09: 97:0b:be:1a:0f:96:3d:d7:0e:cc:b6:b5:73:4e:76: fc:a4:65:e6:af:07:da:38:f1:1b:d3:37:82:51:e8: 56:af:55:50:c3:4b:67:af:a6:ed:ef:00:12:51:c0: ec:b6:1a:26:5f:92:3d:e7:e0:43:f6:14:56:ff:ab: 7d:af:ae:6a:8b:57:81:98:88:a0:ee:87:f5:e3:c2: bf:ec:fa:c2:61:67:c5:c2:2a:56:9d:7e:73:0b:82: 38:5a:0c:9b:91:23:c0:5d:46:eb:6a:c8:24:46:14: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:78:AB:56:C9:09:98:CC:5D:8C:DF:90:8C:7D:06:3C:49:7B:71 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:68:bc:56:f3:8a:ca:59:62:8c:8c:31:3b:a6:56:cc:cc:2c: 1c:15:b4:e1:4d:8e:7c:64:ed:5d:53:0e:2a:34:43:7b:4b:1c: 52:b7:96:89:6c:d9:a1:3e:35:53:a7:90:04:88:00:37:66:6f: 06:fd:c5:70:ca:41:3e:b1:ee:09:20:d6:f4:4f:d8:0f:c6:3e: 39:da:b6:f9:a2:21:ce:ec:52:da:d4:68:81:c9:9f:f0:19:dd: 13:b1:57:61:27:70:e9:0d:af:d8:4a:5c:b8:fd:34:30:f7:21: 65:29:55:f8:f8:c1:c7:76:14:2b:69:b6:4a:02:36:02:dc:4f: a6:06:21:db:2f:1f:ee:db:4a:9f:19:e9:57:31:cb:43:1b:e0: e6:ef:aa:d3:41:af:06:89:06:7e:1f:0a:58:ab:b6:2f:f7:d7: 03:66:9e:f1:f3:37:ba:23:08:eb:c9:1f:4f:99:56:23:dd:e2: 34:cd:6b:46:3c:bf:80:0f:8c:ef:ce:60:44:23:96:3c:74:18: fb:f4:ef:bd:5a:5a:6e:39:63:21:fa:d7:a6:ca:29:02:a8:a5: c6:6b:70:e6:30:63:2a:d5:59:9a:f7:3c:48:3c:fa:f4:ab:fb: 28:3d:c1:30:9c:24:bb:60:f6:e4:2b:e8:49:43:23:19:2b:fa: d9:28:98:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjQwNTE4MjIxMzMzWhcNMjQwNTI1MjIxMzMzWjAYMRYwFAYD VQQDEw02NjQ5MjgwZS0xZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZIVDuSyan/RrqKjdF7E+V0G2L318HmprHLUT3ZHY/LU/kk6mQ4AstbNx997 R9JeWdwGSQVbh0uCqFfPRkJm3Tgx0YQRTcxbnNvA6RifLqxWOANfND+SwsaOEcUN gVT0K2H6wpSKeHhIQn6a3Ce5NJ0M8LAPSKY1j0XbFsMDiwLIfXwGUs5HnBKT75w+ qkLqLjt+3QmXC74aD5Y91w7MtrVzTnb8pGXmrwfaOPEb0zeCUehWr1VQw0tnr6bt 7wASUcDsthomX5I95+BD9hRW/6t9r65qi1eBmIig7of148K/7PrCYWfFwipWnX5z C4I4WgybkSPAXUbrasgkRhTkpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf5eKtW yQmYzF2M35CMfQY8SXtxMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZaLxW84rKWWKMjDE7plbMzCwcFbThTY58ZO1dUw4qNEN7SxxSt5aJ bNmhPjVTp5AEiAA3Zm8G/cVwykE+se4JINb0T9gPxj452rb5oiHO7FLa1GiByZ/w Gd0TsVdhJ3DpDa/YSly4/TQw9yFlKVX4+MHHdhQrabZKAjYC3E+mBiHbLx/u20qf GelXMctDG+Dm76rTQa8GiQZ+HwpYq7Yv99cDZp7x8ze6IwjryR9PmVYj3eI0zWtG PL+AD4zvzmBEI5Y8dBj79O+9WlpuOWMh+temyikCqKXGa3DmMGMq1Vma9zxIPPr0 q/soPcEwnCS7YPbkK+hJQyMZK/rZKJhh -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org