$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft File: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json) Hash identifier: jF+yG4uEXpzksn4OddtdOePyTE2jTy8aDckSxyH/97k= Subject key identifier: 25:6F:4E:C3:1C:64:81:26:27:66:25:5C:E5:5D:10:91:AF:68:A6:22 Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft Manifest number: 0B2B Signing time: Sat 18 May 2024 19:54:22 +0000 Manifest this update: Sat 18 May 2024 19:54:21 +0000 Manifest next update: Sat 25 May 2024 19:54:21 +0000 Files and hashes: 1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: OfWFlitzlyCjhLYFcGptO5Eyv4lFf2t14LJ8yTR8rPk=) 2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: FL+VVzcPFPFYFK/eeGMO2XGhtXdZWZTlmhO3w7UvF4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Validity Not Before: May 18 19:54:21 2024 GMT Not After : May 25 19:54:21 2024 GMT Subject: CN=6649076d-9712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:e3:f2:d1:46:74:45:69:c6:b6:eb:0c:a5: 08:dc:fa:de:fd:55:e6:77:40:16:a1:2d:7a:54:f6: d7:34:b3:59:0f:80:33:4b:70:bb:31:b2:7a:9a:eb: 87:b2:bf:5e:95:af:f6:7a:17:74:e9:ad:d1:03:c1: 31:7e:08:f9:3a:02:cc:8e:32:49:2a:b8:71:44:2d: be:69:47:d7:10:0d:f8:a1:3f:ba:bd:67:61:67:06: 31:85:f5:8a:42:c2:ad:bc:44:15:5b:45:5c:06:67: 58:d6:a7:f1:63:dd:1b:f3:b1:81:6a:74:d9:03:c6: 45:d8:b0:95:00:df:29:37:74:6a:5e:fe:71:e2:ca: 4f:b6:95:6f:a5:2e:d0:cd:d1:8c:0d:96:22:65:a8: 14:f3:db:01:d0:c8:f7:25:12:41:47:76:b8:e2:90: a0:9b:a9:20:71:df:ca:72:79:ff:65:a8:01:a7:41: 60:bd:ea:71:d0:8c:c6:4d:f4:d4:a1:ce:cc:6a:39: ae:5f:fb:f0:bb:51:90:dc:34:38:6c:a6:5b:97:17: 7b:0b:6c:f1:1e:51:87:7a:70:b6:83:04:d6:a8:39: 27:ef:37:d9:ac:ff:76:ce:85:70:33:f5:03:a4:ab: bb:2a:c4:3d:83:59:98:ed:08:1d:38:2a:dc:a6:56: 14:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6F:4E:C3:1C:64:81:26:27:66:25:5C:E5:5D:10:91:AF:68:A6:22 X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:71:68:c0:39:0b:21:ad:4c:1d:d5:9b:04:99:49:fe:fa:87: f0:91:60:08:15:11:ee:b3:76:1d:d4:00:1b:b2:71:e9:b2:a3: 44:6a:ec:00:aa:3c:c8:33:46:6d:f7:4f:ed:5a:86:a3:b2:2e: 0c:fa:31:01:ba:9f:fb:4c:6f:3f:3d:c3:12:30:cd:8a:45:a9: fa:d7:31:5c:54:b5:c7:69:c4:8b:69:22:89:2a:d3:70:bd:f0: 64:1c:16:7a:2c:46:9d:31:f7:e0:92:6c:6b:30:bc:09:ba:87: 3e:36:9e:7d:40:03:6c:ae:5b:e9:e1:15:58:a4:87:dd:01:27: 63:f3:33:04:84:5a:bb:bc:44:de:62:1e:8b:c4:2e:9f:10:7f: 6c:72:1a:7f:39:1a:ed:97:c8:75:ec:22:89:38:e0:7d:f0:4f: d6:52:5c:33:83:84:e0:7a:5e:bb:a6:92:cd:10:98:7b:19:cf: 72:12:0e:4e:cf:18:86:4f:97:ae:a3:13:b0:0a:a0:9b:fd:e8: 2e:49:e8:7a:82:cc:8f:cb:8a:27:22:48:42:16:c3:5c:a9:fc: 2d:53:64:b5:f8:f8:25:f1:78:3f:00:69:a3:77:da:3c:fd:27: 3d:82:da:be:65:03:01:56:f7:bf:c9:d0:9c:e6:82:a7:d6:b5: a4:8d:26:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjQwNTE4MTk1NDIxWhcNMjQwNTI1MTk1NDIxWjAYMRYwFAYD VQQDEw02NjQ5MDc2ZC05NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Unj8tFGdEVpxrbrDKUI3Pre/VXmd0AWoS16VPbXNLNZD4AzS3C7MbJ6muuH sr9ela/2ehd06a3RA8Exfgj5OgLMjjJJKrhxRC2+aUfXEA34oT+6vWdhZwYxhfWK QsKtvEQVW0VcBmdY1qfxY90b87GBanTZA8ZF2LCVAN8pN3RqXv5x4spPtpVvpS7Q zdGMDZYiZagU89sB0Mj3JRJBR3a44pCgm6kgcd/Kcnn/ZagBp0Fgvepx0IzGTfTU oc7MajmuX/vwu1GQ3DQ4bKZblxd7C2zxHlGHenC2gwTWqDkn7zfZrP92zoVwM/UD pKu7KsQ9g1mY7QgdOCrcplYUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVvTsMc ZIEmJ2YlXOVdEJGvaKYiMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03 WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEcWjAOQshrUwd1ZsEmUn++ofwkWAIFRHus3Yd1AAbsnHpsqNEauwA qjzIM0Zt90/tWoajsi4M+jEBup/7TG8/PcMSMM2KRan61zFcVLXHacSLaSKJKtNw vfBkHBZ6LEadMffgkmxrMLwJuoc+Np59QANsrlvp4RVYpIfdASdj8zMEhFq7vETe Yh6LxC6fEH9schp/ORrtl8h17CKJOOB98E/WUlwzg4Tgel67ppLNEJh7Gc9yEg5O zxiGT5euoxOwCqCb/eguSeh6gsyPy4onIkhCFsNcqfwtU2S1+Pgl8Xg/AGmjd9o8 /Sc9gtq+ZQMBVve/ydCc5oKn1rWkjSb9 -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org