$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft File: 1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft (raw, json) Hash identifier: anTd7GJNlebX0TKn9dnTMhZIDc7sH8qOLJXouj+74Dw= Subject key identifier: 46:79:D5:B8:BD:E4:01:18:F4:9F:2C:63:42:82:C1:23:2F:A1:75:70 Authority key identifier: D5:60:B8:3F:E9:69:40:66:FA:AC:19:CB:C9:9B:6D:58:6B:CB:95:F4 Certificate issuer: /CN=A9118B31/serialNumber=D560B83FE9694066FAAC19CBC99B6D586BCB95F4 Certificate serial: 1D1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WC4P-lpQGb6rBnLyZttWGvLlfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft Manifest number: 1D12 Signing time: Thu 02 May 2024 16:34:33 +0000 Manifest this update: Thu 02 May 2024 16:34:33 +0000 Manifest next update: Thu 09 May 2024 16:34:32 +0000 Files and hashes: 1: 1WC4P-lpQGb6rBnLyZttWGvLlfQ.crl (hash: JH/gzSv+dcdQ3+lNRzV+zI2FQo6n0Pcifda6dduEq34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.crl rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WC4P-lpQGb6rBnLyZttWGvLlfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7453 (0x1d1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B31/serialNumber=D560B83FE9694066FAAC19CBC99B6D586BCB95F4 Validity Not Before: May 2 16:34:33 2024 GMT Not After : May 9 16:34:32 2024 GMT Subject: CN=6633c099-3ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:db:92:90:70:27:e9:70:b3:98:c0:2c:ce: c1:aa:c6:82:85:e8:41:56:d0:d4:36:25:30:53:40: d6:37:d2:57:1e:88:0e:fa:fa:39:77:0f:e1:b5:66: 3a:9e:aa:6d:13:ab:5c:16:68:37:cf:39:eb:7e:2d: 30:5b:83:5a:b3:1b:9f:da:16:85:da:65:bf:d7:e6: d1:24:28:71:46:a8:9d:33:d2:0b:d3:6c:d9:ea:10: a4:2b:7d:42:af:c2:b7:17:bd:ab:d7:88:ae:26:e3: 16:db:d7:3e:5a:e6:74:68:49:67:9d:85:fe:7e:b2: fb:7a:94:bf:db:c7:3c:45:61:8e:29:0e:81:7a:bc: ab:9c:0c:e8:ce:94:38:89:17:bc:d4:ac:28:8f:21: 26:a1:35:59:86:66:db:5f:c1:fa:62:09:56:0f:b6: 7f:cc:86:32:bd:1b:a3:23:96:74:c3:f6:ab:4b:d7: b0:c9:c7:74:21:45:08:64:55:3d:7d:8a:67:62:68: 8a:66:5f:c9:d8:37:72:99:ff:ff:3d:b3:9c:99:a7: ea:c9:e9:e6:3b:57:d8:73:52:d4:11:70:d4:da:9f: d6:71:fd:c3:91:16:17:36:56:e1:07:d9:5d:b5:39: e8:a5:86:96:7a:c7:4a:e8:9a:7b:53:04:59:2d:7f: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:79:D5:B8:BD:E4:01:18:F4:9F:2C:63:42:82:C1:23:2F:A1:75:70 X509v3 Authority Key Identifier: keyid:D5:60:B8:3F:E9:69:40:66:FA:AC:19:CB:C9:9B:6D:58:6B:CB:95:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WC4P-lpQGb6rBnLyZttWGvLlfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f0:fe:54:d3:bd:09:4a:f7:81:c9:8f:77:e4:42:0e:86:a2: 9c:5c:3f:88:c1:ea:63:e6:04:6d:65:a3:e4:20:91:be:f6:74: 0f:14:8e:61:97:11:c2:e3:28:42:24:b2:7f:ba:cb:1e:3e:cc: 5e:48:90:61:fe:0e:f7:e1:e4:91:db:c9:61:64:cd:6a:3e:a4: f7:df:1a:11:0a:47:20:f5:89:6d:f0:43:96:9b:29:a7:1c:02: 0c:07:6b:38:17:95:d6:59:32:51:c2:b0:a5:f4:c4:c8:32:a6: 11:17:b1:86:ec:6a:76:05:2b:4a:3a:41:f0:1f:e9:cb:d9:80: 9a:14:b9:88:b1:cb:e0:56:90:86:71:76:70:56:29:ca:94:e7: 56:dd:6c:7f:d8:e3:e4:e4:67:b2:15:d6:81:7e:5b:ce:37:c1: 28:97:0f:98:5b:b7:bb:5f:13:fb:fb:a0:70:40:c3:92:c0:d0: cd:d0:98:f6:10:57:9e:20:f8:79:10:df:44:15:c7:ba:40:c6: 16:94:60:d0:8c:76:d7:7f:00:47:0c:64:0b:cd:c4:9d:90:29: 4f:51:cc:9d:55:c8:b8:f1:66:ae:e8:a6:0d:17:85:26:5b:ac: 05:a7:93:57:04:bc:e4:a2:0c:b6:fd:96:45:f7:3a:04:8a:88: 1f:4c:9c:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzExMTAvBgNVBAUTKEQ1NjBCODNGRTk2OTQwNjZGQUFDMTlDQkM5OUI2RDU4 NkJDQjk1RjQwHhcNMjQwNTAyMTYzNDMzWhcNMjQwNTA5MTYzNDMyWjAYMRYwFAYD VQQDEw02NjMzYzA5OS0zY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUHbkpBwJ+lws5jALM7BqsaChehBVtDUNiUwU0DWN9JXHogO+vo5dw/htWY6 nqptE6tcFmg3zznrfi0wW4Nasxuf2haF2mW/1+bRJChxRqidM9IL02zZ6hCkK31C r8K3F72r14iuJuMW29c+WuZ0aElnnYX+frL7epS/28c8RWGOKQ6BeryrnAzozpQ4 iRe81KwojyEmoTVZhmbbX8H6YglWD7Z/zIYyvRujI5Z0w/arS9ewycd0IUUIZFU9 fYpnYmiKZl/J2Ddymf//PbOcmafqyenmO1fYc1LUEXDU2p/Wcf3DkRYXNlbhB9ld tTnopYaWesdK6Jp7UwRZLX/ofQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ51bi9 5AEY9J8sY0KCwSMvoXVwMB8GA1UdIwQYMBaAFNVguD/paUBm+qwZy8mbbVhry5X0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMS9CMTgxMkM3Mjkx QTUxMUU2OUEwNjhGMEFDNEY5QUUwMi8xV0M0UC1scFFHYjZyQm5MeVp0dFdHdkxs ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXQzRQLWxwUUdiNnJCbkx5WnR0V0d2TGxmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMS9CMTgxMkM3MjkxQTUxMUU2OUEwNjhGMEFDNEY5QUUwMi8xV0M0UC1scFFH YjZyQm5MeVp0dFdHdkxsZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA18P5U070JSveByY935EIOhqKcXD+Iwepj5gRtZaPkIJG+9nQPFI5h lxHC4yhCJLJ/ussePsxeSJBh/g734eSR28lhZM1qPqT33xoRCkcg9Ylt8EOWmymn HAIMB2s4F5XWWTJRwrCl9MTIMqYRF7GG7Gp2BStKOkHwH+nL2YCaFLmIscvgVpCG cXZwVinKlOdW3Wx/2OPk5GeyFdaBflvON8Eolw+YW7e7XxP7+6BwQMOSwNDN0Jj2 EFeeIPh5EN9EFce6QMYWlGDQjHbXfwBHDGQLzcSdkClPUcydVci48Wau6KYNF4Um W6wFp5NXBLzkogy2/ZZF9zoEiogfTJz/ -----END CERTIFICATE-----Generated at Thu May 2 17:43:02 2024 by rpki-client on console-fra.rpki-client.org