$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft File: wHCklbOD5Z1FcbaxfYqSiartGCU.mft (raw, json) Hash identifier: GWlvEFbh6bWXK8N2KaRjJZC9mKxtCAU3MJBsBW4ViWo= Subject key identifier: 2D:29:DC:61:3C:E6:8D:D6:07:E6:33:DB:B6:AF:6C:65:7F:EF:4E:86 Authority key identifier: C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25 Certificate issuer: /CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft Manifest number: 0119 Signing time: Wed 01 May 2024 05:35:59 +0000 Manifest this update: Wed 01 May 2024 05:35:58 +0000 Manifest next update: Wed 08 May 2024 05:35:58 +0000 Files and hashes: 1: wHCklbOD5Z1FcbaxfYqSiartGCU.crl (hash: YaRr+HMWmyXihN25mULeF15LEJMRHgQ4HB/9CLTNpig=) 2: 8DE488088A6011EDADD5AD41C4F9AE02.roa (hash: SmkitE2AjGPVRszMcFrlWg3hlXp6jsTW3vpjHoW57vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.crl rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825 Validity Not Before: May 1 05:35:58 2024 GMT Not After : May 8 05:35:58 2024 GMT Subject: CN=6631d4bf-c7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:a3:92:77:13:df:c1:62:8f:b8:97:16:85: ca:ec:72:63:4a:20:fe:6a:d3:f3:f2:16:16:bf:c7: 5b:dc:91:3e:6b:59:8e:fc:9d:9d:61:1f:d7:34:f9: 37:20:58:cd:73:c2:31:57:21:c4:c0:97:93:1c:a1: 32:5f:80:05:94:31:d5:bc:2b:48:b0:87:65:e1:5f: 8f:5c:fc:de:24:69:aa:e1:76:fe:7d:75:3f:61:29: 57:80:5f:91:db:2c:d9:10:48:40:88:94:da:ba:67: 43:31:6f:90:5d:fc:0c:54:30:74:47:a0:cf:20:c9: 38:a3:84:a0:2e:cc:09:fc:92:ac:53:16:5a:4e:a4: e8:8a:14:a4:77:ed:07:2e:b0:dc:52:0e:40:5e:04: ed:95:c6:18:4f:fb:0e:7d:12:7d:97:82:ee:1f:3b: ba:07:61:69:75:36:9e:df:61:91:94:c4:71:e3:e3: a0:52:61:02:a9:a7:10:51:d8:b2:8c:82:18:52:02: bc:67:19:bd:a0:f8:b6:36:98:89:bf:f4:2d:7d:b0: 29:b6:bd:65:8b:1f:d8:5a:1a:5d:ac:86:e6:b7:6c: 17:06:ed:55:28:2a:6c:ab:d7:7e:40:99:e5:7d:b8: ab:a7:a5:aa:9b:6f:84:68:50:30:51:c3:0e:ad:97: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:29:DC:61:3C:E6:8D:D6:07:E6:33:DB:B6:AF:6C:65:7F:EF:4E:86 X509v3 Authority Key Identifier: keyid:C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:5b:97:89:e5:22:6a:01:01:de:16:3c:a2:ae:f2:aa:50:28: c2:c6:02:f2:a2:bb:2d:d7:0e:8c:62:30:b1:8b:5f:f9:b4:13: c0:79:16:78:14:ce:85:be:e1:a5:6f:c5:5c:b3:3c:b3:2b:b0: 65:c8:e4:fd:bd:51:c8:ba:07:3d:d2:07:35:1d:9a:1d:b8:2a: 13:26:9d:98:9f:c3:f3:c7:93:7f:9c:e8:f0:17:84:d6:19:9c: 99:51:40:58:03:fc:f3:b1:3f:df:f1:f5:83:f4:f1:5d:56:d1: 59:9e:49:ab:42:54:f7:0a:3d:1e:aa:67:8c:b6:5d:15:e1:9a: a9:4d:9e:eb:52:9e:13:2d:ab:28:47:8d:4f:b5:be:bb:b1:0b: ac:3c:a6:72:e0:83:cd:55:31:26:d7:24:28:20:81:83:da:cd: 38:29:16:0e:82:51:e4:c1:36:31:59:61:9e:dc:6e:1a:55:d9: 36:a2:d8:6b:11:d8:ab:59:5e:14:73:c4:f7:a4:56:9b:7d:d2: 15:66:5b:20:d6:46:19:b4:14:c6:01:cd:92:f9:d6:81:21:56: 43:c5:d2:ac:f2:58:80:50:35:32:d2:98:08:e4:fc:84:c2:c0: ca:23:54:eb:67:07:3c:16:a9:c9:87:e8:10:ca:0f:18:e1:30: 4f:d7:36:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEExMTAvBgNVBAUTKEMwNzBBNDk1QjM4M0U1OUQ0NTcxQjZCMTdEOEE5Mjg5 QUFFRDE4MjUwHhcNMjQwNTAxMDUzNTU4WhcNMjQwNTA4MDUzNTU4WjAYMRYwFAYD VQQDEw02NjMxZDRiZi1jN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjWjkncT38Fij7iXFoXK7HJjSiD+atPz8hYWv8db3JE+a1mO/J2dYR/XNPk3 IFjNc8IxVyHEwJeTHKEyX4AFlDHVvCtIsIdl4V+PXPzeJGmq4Xb+fXU/YSlXgF+R 2yzZEEhAiJTaumdDMW+QXfwMVDB0R6DPIMk4o4SgLswJ/JKsUxZaTqToihSkd+0H LrDcUg5AXgTtlcYYT/sOfRJ9l4LuHzu6B2FpdTae32GRlMRx4+OgUmECqacQUdiy jIIYUgK8Zxm9oPi2NpiJv/QtfbAptr1lix/YWhpdrIbmt2wXBu1VKCpsq9d+QJnl fbirp6Wqm2+EaFAwUcMOrZfiRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0p3GE8 5o3WB+Yz27avbGV/706GMB8GA1UdIwQYMBaAFMBwpJWzg+WdRXG2sX2Kkomq7Rgl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0QS8xNDEzNUU2MDY1 MTYxMUVEQTYzMjIxNEZDNEY5QUUwMi93SENrbGJPRDVaMUZjYmF4ZllxU2lhcnRH Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIQ2tsYk9ENVoxRmNiYXhmWXFTaWFydEdDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0QS8xNDEzNUU2MDY1MTYxMUVEQTYzMjIxNEZDNEY5QUUwMi93SENrbGJPRDVa MUZjYmF4ZllxU2lhcnRHQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4W5eJ5SJqAQHeFjyirvKqUCjCxgLyorst1w6MYjCxi1/5tBPAeRZ4 FM6FvuGlb8VcszyzK7BlyOT9vVHIugc90gc1HZoduCoTJp2Yn8Pzx5N/nOjwF4TW GZyZUUBYA/zzsT/f8fWD9PFdVtFZnkmrQlT3Cj0eqmeMtl0V4ZqpTZ7rUp4TLaso R41Ptb67sQusPKZy4IPNVTEm1yQoIIGD2s04KRYOglHkwTYxWWGe3G4aVdk2othr EdirWV4Uc8T3pFabfdIVZlsg1kYZtBTGAc2S+daBIVZDxdKs8liAUDUy0pgI5PyE wsDKI1TrZwc8FqnJh+gQyg8Y4TBP1zaD -----END CERTIFICATE-----Generated at Wed May 1 06:34:03 2024 by rpki-client on console-ams.rpki-client.org