$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft File: WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json) Hash identifier: pHbuJ0+YVZJQ0Zy3D1GY6itFC74aptlix5KVNXKRew8= Subject key identifier: CD:D7:50:AC:F1:1A:E4:1B:5D:FF:D5:35:8C:24:65:B2:08:95:F0:F7 Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF Certificate issuer: /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft Manifest number: 04B4 Signing time: Sun 19 May 2024 01:29:16 +0000 Manifest this update: Sun 19 May 2024 01:29:16 +0000 Manifest next update: Sun 26 May 2024 01:29:16 +0000 Files and hashes: 1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: wa6R0eDc9RlL65BplA3by1Vx3KO7StMe5UIHIgaCicY=) 2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: bYyvFr8OOyMgsXjmGqishMAmmbBiFzjuP/Np6S14WO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Validity Not Before: May 19 01:29:16 2024 GMT Not After : May 26 01:29:16 2024 GMT Subject: CN=664955ec-d587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:92:bd:b0:9c:ed:71:0d:db:2b:92:9d:4e: 16:20:fc:78:67:eb:f3:ba:6d:cb:93:68:7b:c4:4e: 83:e4:76:b1:4c:2c:45:1a:82:e3:e7:6e:bb:1a:41: 8d:a9:07:6f:c7:37:e5:ba:4f:59:7b:59:8b:4d:eb: d9:b9:36:46:d9:52:a5:23:81:6c:9c:4a:99:83:62: 3e:cf:b1:7e:60:77:8c:cf:3a:60:35:1c:d8:1f:bb: 2c:6e:e8:2b:99:8d:78:c9:fb:a9:b2:54:fd:8d:0d: 40:ba:6e:90:17:f2:b0:6e:df:b4:53:13:6d:92:09: 93:fd:28:02:eb:97:5a:39:12:61:eb:66:e2:02:87: 0f:ec:b0:e9:a2:2b:d9:8e:42:31:9d:ad:62:04:ac: 81:e3:88:51:46:0d:a6:b0:c1:1a:5b:b7:53:31:56: 5e:5c:05:16:c2:95:2e:9b:76:ac:c5:ae:5a:4e:c9: d2:eb:06:ae:95:07:d6:a2:d0:f8:bf:f2:e1:ca:0f: 55:85:ef:de:98:60:1a:fe:d6:8a:aa:21:5b:cf:f7: 9f:85:9c:68:55:e5:f9:b6:c5:ca:a9:c2:9f:9c:4b: fc:f6:c3:6e:a8:60:6a:ab:b5:81:85:1e:b1:5c:b2: 81:9a:3b:49:56:e0:78:04:fd:3c:a3:98:dd:a5:6e: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D7:50:AC:F1:1A:E4:1B:5D:FF:D5:35:8C:24:65:B2:08:95:F0:F7 X509v3 Authority Key Identifier: keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:61:01:63:d3:55:bb:30:1e:73:0a:b8:cb:42:87:20:59:a1: 24:d5:06:20:22:5e:f7:21:37:db:8b:0c:a1:86:2a:16:06:e9: d8:35:77:fe:dd:a2:1a:25:31:24:1d:b1:43:99:99:2f:76:eb: b4:67:1c:03:b1:2c:56:b0:a3:92:16:a1:5d:2a:92:1c:ce:66: 7f:eb:4f:72:f8:a9:54:63:ec:e3:1d:0c:29:b1:96:aa:85:e2: b4:d6:73:ec:94:73:3b:99:58:a6:e6:8a:fa:b6:5f:73:1b:66: 96:a8:f4:8a:92:51:c2:99:e7:c9:69:3d:37:83:1b:0e:1c:fc: c8:c5:83:d7:c0:f6:88:81:51:03:47:d1:fe:48:60:62:bb:ea: de:a0:6d:7d:bf:44:fb:fd:49:b7:c6:09:67:f3:b8:2a:52:23: 42:ee:f9:0a:6a:19:9e:88:b8:f4:9c:2b:20:19:e1:89:26:b7: 57:0e:c3:74:a7:0d:94:bc:3d:09:4d:ba:1d:de:42:ef:7e:d6: 7c:82:63:7a:e9:c8:4c:3c:b3:da:d2:6e:3c:28:1c:88:95:0f: 4f:3d:a6:05:81:9d:67:79:be:6c:7c:30:de:0f:b7:82:71:2f: a5:70:66:7b:30:8a:a7:d2:8a:d3:d0:b8:47:f8:b5:8a:c3:4b: 3a:b1:80:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc0MkQxMTAvBgNVBAUTKDU4MjIyNzAzNDBGMzJBRjhENzA5MjI2MTBCNzA4MEZD MzQxNzdBQ0YwHhcNMjQwNTE5MDEyOTE2WhcNMjQwNTI2MDEyOTE2WjAYMRYwFAYD VQQDEw02NjQ5NTVlYy1kNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygSSvbCc7XEN2yuSnU4WIPx4Z+vzum3Lk2h7xE6D5HaxTCxFGoLj5267GkGN qQdvxzfluk9Ze1mLTevZuTZG2VKlI4FsnEqZg2I+z7F+YHeMzzpgNRzYH7ssbugr mY14yfupslT9jQ1Aum6QF/Kwbt+0UxNtkgmT/SgC65daORJh62biAocP7LDpoivZ jkIxna1iBKyB44hRRg2msMEaW7dTMVZeXAUWwpUum3asxa5aTsnS6waulQfWotD4 v/Lhyg9Vhe/emGAa/taKqiFbz/efhZxoVeX5tsXKqcKfnEv89sNuqGBqq7WBhR6x XLKBmjtJVuB4BP08o5jdpW4NSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3XUKzx GuQbXf/VNYwkZbIIlfD3MB8GA1UdIwQYMBaAFFgiJwNA8yr41wkiYQtwgPw0F3rP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzQyRC9FMkFGOUI3NkRF MjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2alhDU0poQzNDQV9EUVhl czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDSW5BMER6S3ZqWENTSmhDM0NBX0RRWGVzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzQyRC9FMkFGOUI3NkRFMjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2 alhDU0poQzNDQV9EUVhlczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbYQFj01W7MB5zCrjLQocgWaEk1QYgIl73ITfbiwyhhioWBunYNXf+ 3aIaJTEkHbFDmZkvduu0ZxwDsSxWsKOSFqFdKpIczmZ/609y+KlUY+zjHQwpsZaq heK01nPslHM7mVim5or6tl9zG2aWqPSKklHCmefJaT03gxsOHPzIxYPXwPaIgVED R9H+SGBiu+reoG19v0T7/Um3xgln87gqUiNC7vkKahmeiLj0nCsgGeGJJrdXDsN0 pw2UvD0JTbod3kLvftZ8gmN66chMPLPa0m48KByIlQ9PPaYFgZ1neb5sfDDeD7eC cS+lcGZ7MIqn0orT0LhH+LWKw0s6sYDx -----END CERTIFICATE-----Generated at Sun May 19 02:59:17 2024 by rpki-client on console-ams.rpki-client.org