$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: GrmqUEAd7DRl27bD0tKOWNHKAScBqOnfzpSGj+VuSzI= Subject key identifier: 8E:4C:78:C0:6D:82:8F:13:66:97:B2:E3:7E:92:4C:48:0A:08:ED:4C Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 58 Signing time: Sun 19 May 2024 07:55:11 +0000 Manifest this update: Sun 19 May 2024 07:55:10 +0000 Manifest next update: Sun 26 May 2024 07:55:10 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: rOiTVsaJ0KCzv6QB56/SiClF/6OPQMs15S5R6NW096g=) 2: 7D9A528A990E11EE87118E20C4F9AE02.roa (hash: iaqtPE7/e/3g4lNfhjgSYmN548vGrlJdRh9cx3zzzvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: May 19 07:55:10 2024 GMT Not After : May 26 07:55:10 2024 GMT Subject: CN=6649b05e-d8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:19:bf:8b:9a:24:ee:30:cd:92:ae:90:d8: d8:88:44:b4:cd:a2:ef:df:68:1c:bb:20:53:2b:f2: e7:79:72:b3:0a:a6:9f:e1:fc:74:4c:0d:f1:08:19: f0:e1:66:39:24:ab:97:47:e9:22:02:e0:1c:19:48: 92:82:56:7f:19:dd:88:b2:04:54:a3:19:3f:e8:19: 9d:1c:90:00:36:2e:38:29:95:4f:4b:c4:21:80:2e: c2:f4:51:66:c8:d8:ff:98:2b:3f:a1:9d:af:ab:de: 62:d3:dd:91:f2:25:a9:c0:3b:c2:0e:a2:8a:4b:ae: 34:0e:b3:48:f9:be:6d:41:63:71:83:a1:e9:3d:ba: f9:5c:39:f1:ac:39:26:a4:53:11:24:58:4a:a9:89: de:02:15:a5:92:85:29:83:d2:88:2c:16:70:b9:8a: 23:ba:63:24:20:5d:d7:e2:dd:21:93:e1:16:25:39: bb:0c:24:01:38:b8:52:87:b6:27:c3:3b:13:a8:64: 42:01:03:1c:cb:ad:5a:fb:6e:e5:8e:20:95:4c:ed: d8:6c:1b:7b:bd:21:e3:ba:08:a7:e7:95:5e:f0:36: 8f:ba:a9:6b:27:6a:40:cd:15:65:e2:8e:9c:24:2e: 81:13:b7:73:70:14:39:dc:73:04:5f:3f:f8:24:6f: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:78:C0:6D:82:8F:13:66:97:B2:E3:7E:92:4C:48:0A:08:ED:4C X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:1d:95:3d:56:0e:73:20:c2:ad:73:cb:ca:76:ea:b5:43:1a: 9f:7a:77:9a:67:36:76:d5:14:94:30:24:fc:30:27:f2:01:0f: 7e:2d:bf:24:1d:71:9f:96:bb:98:cc:29:b4:36:f9:dc:2d:67: 1e:e4:92:d7:6f:fd:50:89:5d:77:30:13:fd:a6:8a:84:1a:76: e3:92:37:0e:50:48:d1:14:0f:0c:32:e4:d2:73:8c:8b:8d:12: ef:a5:ca:34:f5:07:44:30:36:3b:3d:03:cd:65:58:d7:19:2f: 65:50:0a:7a:4f:5f:c2:c7:13:fa:f3:0a:87:17:83:25:09:4c: eb:45:2f:05:3a:de:74:c1:47:dd:6a:98:9f:6f:7b:20:2e:65: e8:8f:87:19:a5:18:e3:73:cf:40:bc:f5:5e:3f:78:3f:23:07: 3f:f6:da:ff:c8:90:be:26:eb:5c:80:4e:b6:f7:81:70:99:cc: 31:87:32:00:98:6f:45:3c:41:09:c9:6a:8a:84:eb:ee:41:50: 41:96:16:68:94:23:be:35:14:d6:7f:32:d4:69:85:07:7f:97: 48:f5:89:d2:86:4d:45:4a:70:98:7d:50:63:cf:74:77:ca:30: db:69:e3:c2:04:3d:05:4f:a1:60:db:39:af:a9:92:32:39:43: 31:06:07:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTVBMjExMC8GA1UEBRMoNUI1OUZDQjY1MzQxRkQzMzc4OUJGQkFGQTk2MzdERjBD RTQwNERBQjAeFw0yNDA1MTkwNzU1MTBaFw0yNDA1MjYwNzU1MTBaMBgxFjAUBgNV BAMTDTY2NDliMDVlLWQ4ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWyBm/i5ok7jDNkq6Q2NiIRLTNou/faBy7IFMr8ud5crMKpp/h/HRMDfEIGfDh Zjkkq5dH6SIC4BwZSJKCVn8Z3YiyBFSjGT/oGZ0ckAA2LjgplU9LxCGALsL0UWbI 2P+YKz+hna+r3mLT3ZHyJanAO8IOoopLrjQOs0j5vm1BY3GDoek9uvlcOfGsOSak UxEkWEqpid4CFaWShSmD0ogsFnC5iiO6YyQgXdfi3SGT4RYlObsMJAE4uFKHtifD OxOoZEIBAxzLrVr7buWOIJVM7dhsG3u9IeO6CKfnlV7wNo+6qWsnakDNFWXijpwk LoETt3NwFDnccwRfP/gkb+l7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjkx4wG2C jxNml7LjfpJMSAoI7UwwHwYDVR0jBBgwFoAUW1n8tlNB/TN4m/uvqWN98M5ATasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNUEyLzNFMTY0MTY4OThG NjExRUVCQkYxRjQxN0M0RjlBRTAyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRh cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVzFuOHRsTkJfVE40bV91dnFXTjk4TTVBVGFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NUEyLzNFMTY0MTY4OThGNjExRUVCQkYxRjQxN0M0RjlBRTAyL1cxbjh0bE5CX1RO NG1fdXZxV045OE01QVRhcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFgdlT1WDnMgwq1zy8p26rVDGp96d5pnNnbVFJQwJPwwJ/IBD34tvyQd cZ+Wu5jMKbQ2+dwtZx7kktdv/VCJXXcwE/2mioQaduOSNw5QSNEUDwwy5NJzjIuN Eu+lyjT1B0QwNjs9A81lWNcZL2VQCnpPX8LHE/rzCocXgyUJTOtFLwU63nTBR91q mJ9veyAuZeiPhxmlGONzz0C89V4/eD8jBz/22v/IkL4m61yATrb3gXCZzDGHMgCY b0U8QQnJaoqE6+5BUEGWFmiUI741FNZ/MtRphQd/l0j1idKGTUVKcJh9UGPPdHfK MNtp48IEPQVPoWDbOa+pkjI5QzEGB0I= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org