$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: Et8NdDUpNQdz+Z9XVdQRc0jFeqED2eBDLMiAxVEyVYM= Subject key identifier: F7:7C:D1:82:16:C3:73:50:9E:81:87:C5:12:3E:41:E0:86:51:80:2B Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 1929 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 191A Signing time: Sat 18 May 2024 16:51:45 +0000 Manifest this update: Sat 18 May 2024 16:51:45 +0000 Manifest next update: Sat 25 May 2024 16:51:45 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: Y0lJnutWV+/mWunclZesqetwGdlOU2u/hw0GisIdOMI=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: 229M5wQ79kMkp7IyMNbQzPN9ua0MSiyhRdYezXrdYlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6441 (0x1929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: May 18 16:51:45 2024 GMT Not After : May 25 16:51:45 2024 GMT Subject: CN=6648dca1-53fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:67:24:48:a6:c0:9d:ce:63:26:3d:3d:cc: a4:57:1c:86:d5:21:83:b3:b9:6a:41:a3:1f:36:a7: 46:43:df:e2:09:f8:b1:bd:e8:fd:21:de:41:d8:3e: 91:87:65:ba:6a:8d:f8:ed:26:38:28:d4:aa:1b:43: 47:cf:a8:17:02:bc:45:b7:c6:1c:6d:37:dd:6b:a9: 19:7c:51:94:2a:c4:29:6a:64:64:fe:95:3b:03:71: cf:07:04:01:5f:5f:fc:c5:3e:58:cc:d0:6b:2e:95: 7a:a0:c9:af:29:1f:1e:05:6f:c5:4e:0b:a0:26:aa: a2:e9:c3:22:94:82:42:fa:01:54:4d:1d:a1:64:b0: 32:67:86:58:9b:d9:2c:f8:f6:ba:60:db:99:6f:34: d5:a8:c6:6b:1e:49:de:f5:fd:22:73:4f:64:59:c1: f3:d8:41:ae:17:cd:f9:a2:00:c1:ed:90:fb:ff:14: 88:b5:36:f3:0b:fd:97:86:84:17:fe:bc:27:61:eb: ea:fc:af:31:e7:a9:9c:24:aa:68:70:dd:66:83:4b: 4b:5a:c2:a2:e7:8b:4e:da:53:45:90:f4:aa:bf:f7: 83:3c:b2:39:75:de:08:ee:75:a0:04:d2:fc:89:7d: 07:3c:cf:bb:cb:8c:e4:1a:23:88:30:17:ac:e9:c3: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7C:D1:82:16:C3:73:50:9E:81:87:C5:12:3E:41:E0:86:51:80:2B X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c1:f3:ba:8b:0c:a6:1f:d9:81:6d:48:85:4f:1a:7c:13:c9: 3e:eb:3f:b3:18:6f:7b:2e:36:16:fd:5d:74:1e:fa:69:63:88: b7:da:ce:9c:bc:2d:82:4e:8d:6a:a5:19:53:4e:80:31:33:ec: 60:0e:09:eb:f7:85:37:50:76:c8:a8:d7:22:9e:76:39:94:01: 34:5b:10:2f:d1:e9:c0:d1:91:2c:c7:73:4e:5f:87:1c:e4:37: d1:a1:ed:b2:85:17:0a:5a:91:89:a4:60:f6:3c:5f:30:de:99: 19:87:2b:0f:0c:43:68:a9:b7:8a:81:00:81:e3:2a:5d:58:4b: 22:ac:96:c1:92:9a:e9:81:ce:51:76:09:5f:2f:4a:0c:2a:10: ad:c5:85:90:e8:cc:42:98:61:9a:d7:4c:db:05:de:ac:54:6b: 26:da:24:3d:98:e2:ba:e3:98:12:dd:10:88:f9:04:51:92:fb: 59:40:39:71:38:a1:7a:28:af:5f:88:fe:ff:ef:29:4e:4b:f7: e4:33:17:69:e8:14:6c:85:6c:4c:f2:1c:33:b1:df:93:b3:67: e7:ce:e7:fc:23:0e:f0:67:31:c1:7b:1e:66:50:74:db:76:6a: c6:83:2a:d8:f0:38:74:4a:90:a6:f1:81:ee:77:d0:3a:1c:51: 38:de:79:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjQwNTE4MTY1MTQ1WhcNMjQwNTI1MTY1MTQ1WjAYMRYwFAYD VQQDEw02NjQ4ZGNhMS01M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JxnJEimwJ3OYyY9PcykVxyG1SGDs7lqQaMfNqdGQ9/iCfixvej9Id5B2D6R h2W6ao347SY4KNSqG0NHz6gXArxFt8YcbTfda6kZfFGUKsQpamRk/pU7A3HPBwQB X1/8xT5YzNBrLpV6oMmvKR8eBW/FTgugJqqi6cMilIJC+gFUTR2hZLAyZ4ZYm9ks +Pa6YNuZbzTVqMZrHkne9f0ic09kWcHz2EGuF835ogDB7ZD7/xSItTbzC/2XhoQX /rwnYevq/K8x56mcJKpocN1mg0tLWsKi54tO2lNFkPSqv/eDPLI5dd4I7nWgBNL8 iX0HPM+7y4zkGiOIMBes6cODAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd80YIW w3NQnoGHxRI+QeCGUYArMB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfwfO6iwymH9mBbUiFTxp8E8k+6z+zGG97LjYW/V10HvppY4i32s6c vC2CTo1qpRlTToAxM+xgDgnr94U3UHbIqNcinnY5lAE0WxAv0enA0ZEsx3NOX4cc 5DfRoe2yhRcKWpGJpGD2PF8w3pkZhysPDENoqbeKgQCB4ypdWEsirJbBkprpgc5R dglfL0oMKhCtxYWQ6MxCmGGa10zbBd6sVGsm2iQ9mOK645gS3RCI+QRRkvtZQDlx OKF6KK9fiP7/7ylOS/fkMxdp6BRshWxM8hwzsd+Ts2fnzuf8Iw7wZzHBex5mUHTb dmrGgyrY8Dh0SpCm8YHud9A6HFE43nk4 -----END CERTIFICATE-----Generated at Sat May 18 18:21:40 2024 by rpki-client on console-ams.rpki-client.org