$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: fZywdr1ShgUgUYYoKPCTV/6iZo9eiTEMR1XeMN1phr0= Subject key identifier: B9:40:51:44:16:9D:0A:CB:09:87:A7:F5:42:C9:CF:D8:32:2E:77:6E Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 48 Signing time: Fri 17 May 2024 08:12:52 +0000 Manifest this update: Fri 17 May 2024 08:12:51 +0000 Manifest next update: Fri 24 May 2024 08:12:51 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: /VdnUlK+nJo1h0eZAVGyqcdgczo0ky9iR02M1EZKWwM=) 2: D2A0E6FEE3C811EE900A6909C4F9AE02.roa (hash: g97LC1BCWHycvusZlIYhFR2TmnuGnbENmy2sxwjPlKs=) 3: EAEFF196E3C811EE8818A409C4F9AE02.roa (hash: HX7W9yI/6Topdma74/kpwIA0DVLeKAQpdbxnAszEWTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: May 17 08:12:51 2024 GMT Not After : May 24 08:12:51 2024 GMT Subject: CN=66471184-460d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:d9:93:3c:f8:8c:9e:de:08:70:aa:39:b7: 65:9b:04:28:2a:a5:9d:df:54:28:9e:e8:39:ae:04: 13:32:55:6c:6e:fd:7d:ef:8b:55:3c:b6:18:e9:71: 17:83:d8:27:21:92:f1:45:9a:f1:31:bd:c9:67:6f: 65:47:57:12:07:e9:46:ad:64:c6:05:90:69:07:4d: 56:15:9c:3b:03:ce:ec:6f:0b:c3:4f:93:69:a4:56: bb:70:5d:ca:22:1f:30:44:f5:b1:e0:12:83:ad:4a: bb:47:89:d1:f9:ef:d6:4c:d0:3e:3a:92:50:27:1e: 64:dd:54:ad:e3:c0:a4:0d:db:72:7f:cb:5a:9f:47: f8:dd:64:05:fb:65:61:bf:c2:69:fe:2b:6b:f8:dd: dd:9c:20:0e:95:60:d1:4c:26:cb:e5:a8:8c:f8:7c: 14:68:94:7b:4e:a9:6f:8f:93:44:ab:2f:bb:7d:7e: 9f:2d:98:06:ca:a7:d7:47:1b:21:96:f3:5f:a4:0e: e0:ae:a2:30:0a:a8:2f:14:0a:87:66:97:f0:cb:af: ec:99:86:a7:2c:af:d6:a7:f8:ad:1a:51:5f:7b:c5: 1d:de:54:e2:5a:49:26:eb:b4:06:01:92:1d:ae:4c: 75:b9:d6:d6:7a:10:b4:c9:d6:d8:79:5b:37:8c:db: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:51:44:16:9D:0A:CB:09:87:A7:F5:42:C9:CF:D8:32:2E:77:6E X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:51:a8:1c:c7:a1:23:f1:ae:e2:1e:d1:e7:27:2d:55:8e:a2: 10:5a:ea:02:24:13:57:70:f1:a3:70:1b:fb:12:d9:fc:b5:46: 99:ad:40:c2:cf:5f:97:59:cf:81:46:01:af:7c:4c:f9:7f:8e: 10:25:db:3b:54:71:bc:21:5e:da:3c:62:42:40:b9:bd:10:99: 7d:9b:14:2c:31:dc:39:2f:b5:9f:01:7c:e4:12:aa:1e:1e:70: 3d:2e:41:2a:bc:72:38:16:49:64:d8:55:df:69:11:e1:6d:f8: 83:d2:76:32:9b:36:83:fc:cd:de:92:a0:6a:7e:a7:5f:7c:be: 0d:8c:7e:38:c7:de:ec:b8:7b:fc:ed:4a:8b:40:2f:7d:73:fa: ab:00:ad:60:7b:c1:7d:17:56:c4:84:5d:bb:f3:e4:ee:69:d4: 15:41:04:e4:88:05:af:0e:b0:40:5a:62:b4:52:78:6b:67:c5: 6b:cd:a6:32:a4:00:d4:2d:01:13:2d:4d:1e:7e:81:8f:dd:dc: 70:f3:82:fb:ff:c2:1a:77:14:67:e3:36:a6:99:0d:32:25:ed: 78:f0:80:7a:50:7a:90:a5:e0:17:6c:5d:8a:69:13:ee:b9:39: f0:09:87:ba:02:a6:ed:c6:23:98:92:ca:72:6f:22:ef:65:6d: 2b:80:54:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkRDNDExMC8GA1UEBRMoNUI0MzAwRkU0OUFFRTBFNDE1Q0M2MTk3NkMwMkI1QjlD MDIwNEFBRDAeFw0yNDA1MTcwODEyNTFaFw0yNDA1MjQwODEyNTFaMBgxFjAUBgNV BAMTDTY2NDcxMTg0LTQ2MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcTdmTPPiMnt4IcKo5t2WbBCgqpZ3fVCie6DmuBBMyVWxu/X3vi1U8thjpcReD 2CchkvFFmvExvclnb2VHVxIH6UatZMYFkGkHTVYVnDsDzuxvC8NPk2mkVrtwXcoi HzBE9bHgEoOtSrtHidH579ZM0D46klAnHmTdVK3jwKQN23J/y1qfR/jdZAX7ZWG/ wmn+K2v43d2cIA6VYNFMJsvlqIz4fBRolHtOqW+Pk0SrL7t9fp8tmAbKp9dHGyGW 81+kDuCuojAKqC8UCodml/DLr+yZhqcsr9an+K0aUV97xR3eVOJaSSbrtAYBkh2u THW51tZ6ELTJ1th5WzeM22xJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuUBRRBad CssJh6f1QsnP2DIud24wHwYDVR0jBBgwFoAUW0MA/kmu4OQVzGGXbAK1ucAgSq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyREM0LzVCRUREMDU0QjMx NjExRUVBOEJDQzYyNEM0RjlBRTAyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1Nx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVzBNQV9rbXU0T1FWekdHWGJBSzF1Y0FnU3EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy REM0LzVCRUREMDU0QjMxNjExRUVBOEJDQzYyNEM0RjlBRTAyL1cwTUFfa211NE9R VnpHR1hiQUsxdWNBZ1NxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFRqBzHoSPxruIe0ecnLVWOohBa6gIkE1dw8aNwG/sS2fy1RpmtQMLP X5dZz4FGAa98TPl/jhAl2ztUcbwhXto8YkJAub0QmX2bFCwx3DkvtZ8BfOQSqh4e cD0uQSq8cjgWSWTYVd9pEeFt+IPSdjKbNoP8zd6SoGp+p198vg2MfjjH3uy4e/zt SotAL31z+qsArWB7wX0XVsSEXbvz5O5p1BVBBOSIBa8OsEBaYrRSeGtnxWvNpjKk ANQtARMtTR5+gY/d3HDzgvv/whp3FGfjNqaZDTIl7XjwgHpQepCl4BdsXYppE+65 OfAJh7oCpu3GI5iSynJvIu9lbSuAVGo= -----END CERTIFICATE-----Generated at Fri May 17 10:10:48 2024 by rpki-client on console-fra.rpki-client.org