$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: gQg826wdkbS+7EkOMXFrViQ0t1XtSRiAm6jlw2Sc4XU= Subject key identifier: F6:CE:37:55:A2:A0:5F:71:9A:73:4D:72:49:21:29:39:76:7D:75:EE Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0557 Signing time: Tue 07 May 2024 00:52:12 +0000 Manifest this update: Tue 07 May 2024 00:52:12 +0000 Manifest next update: Tue 14 May 2024 00:52:12 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: uSwvtPe4I4x0S9WDbGIx9RMJqAHw0xIcmLreWwznsnU=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: jL7K2qXUesFefhj101lXMUxYFQ6RdxwGwPai4xu50AQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: May 7 00:52:12 2024 GMT Not After : May 14 00:52:12 2024 GMT Subject: CN=66397b3c-db5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:1d:08:0b:3f:fd:86:ab:bb:f8:02:24:a8: f4:5d:97:ce:bb:98:0b:7e:cc:67:7a:09:b1:40:eb: f8:e9:23:5c:b4:6e:f1:68:b7:d2:77:b7:62:e2:76: c2:68:a8:69:bf:01:28:7e:2e:61:41:72:fd:e2:8e: a4:a5:80:79:4f:75:20:73:03:68:ba:3f:ae:91:8d: 52:a7:ed:6b:ff:da:20:62:a5:f8:55:ef:19:4c:1a: 6e:4c:df:3e:3a:1e:7e:01:43:17:71:dd:05:5a:b1: dd:ad:81:38:f7:21:ff:d6:c2:60:e4:a4:3f:44:40: 2f:d3:26:2e:83:8a:d0:d5:be:2b:d7:0b:b0:52:07: 81:d1:af:d2:8e:a9:04:8b:95:3f:c0:74:ff:a1:a8: 6d:0b:c2:38:49:5b:cb:62:f2:55:70:91:1a:45:5e: 87:9a:85:73:fc:52:ec:fd:65:38:b7:57:83:3e:6f: cb:31:2c:1e:95:d5:18:5d:7a:9f:5e:3f:bb:7f:1d: f1:75:37:8e:be:f5:83:de:0d:80:1c:83:88:96:d5: 15:54:55:4c:66:e9:db:9d:9b:0d:62:b9:b6:dc:72: 28:ab:28:a2:b5:44:44:f4:cd:5d:bd:88:d5:b2:44: 5c:ee:10:01:85:a7:6c:18:d3:88:e2:fb:33:53:a4: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CE:37:55:A2:A0:5F:71:9A:73:4D:72:49:21:29:39:76:7D:75:EE X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:bd:bc:8c:e7:35:79:3a:90:2c:c3:54:1d:52:9c:14:04:15: ce:25:28:04:d4:d4:9e:45:cc:cd:db:b5:0a:09:28:12:04:1a: 3a:3d:0e:04:50:d0:ad:47:32:c7:0d:f3:39:14:0a:92:62:23: 49:ae:21:fb:c8:42:05:a1:45:75:8c:50:27:29:6f:37:21:7f: ed:5d:f0:92:ae:a3:43:9a:76:12:f1:41:c7:f4:cd:08:2f:05: 3f:2d:95:3c:60:ef:ef:04:6a:c8:fa:28:3d:7d:e6:37:03:e1: 86:ef:8b:44:b0:f8:3d:a7:be:63:22:7d:56:ef:4f:e6:be:81: 12:12:98:6b:a9:af:f2:7e:3c:df:cc:e5:b7:56:ac:15:f9:31: 71:b6:ac:e4:d3:4c:d4:8f:16:e1:eb:18:36:5d:de:3e:71:65: 69:f4:8d:f1:08:d0:85:4a:64:13:47:aa:49:cb:41:a8:43:1c: 67:a2:4d:ef:a6:26:25:a4:2b:3a:68:ee:fa:b7:a2:fa:df:d2: 87:1a:f4:ae:7a:35:33:a9:ef:06:18:33:68:2e:3b:45:79:55: cf:15:e6:2d:51:e5:2b:36:8c:86:4b:be:3e:a6:dd:3f:93:d2: ce:e6:32:5a:2c:9e:8d:8a:03:1f:9c:c6:ef:74:93:22:97:a9: 83:7c:5b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjQwNTA3MDA1MjEyWhcNMjQwNTE0MDA1MjEyWjAYMRYwFAYD VQQDEw02NjM5N2IzYy1kYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhMdCAs//Yaru/gCJKj0XZfOu5gLfsxnegmxQOv46SNctG7xaLfSd7di4nbC aKhpvwEofi5hQXL94o6kpYB5T3UgcwNouj+ukY1Sp+1r/9ogYqX4Ve8ZTBpuTN8+ Oh5+AUMXcd0FWrHdrYE49yH/1sJg5KQ/REAv0yYug4rQ1b4r1wuwUgeB0a/SjqkE i5U/wHT/oahtC8I4SVvLYvJVcJEaRV6HmoVz/FLs/WU4t1eDPm/LMSweldUYXXqf Xj+7fx3xdTeOvvWD3g2AHIOIltUVVFVMZunbnZsNYrm23HIoqyiitURE9M1dvYjV skRc7hABhadsGNOI4vszU6Q1pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbON1Wi oF9xmnNNckkhKTl2fXXuMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZvbyM5zV5OpAsw1QdUpwUBBXOJSgE1NSeRczN27UKCSgSBBo6PQ4E UNCtRzLHDfM5FAqSYiNJriH7yEIFoUV1jFAnKW83IX/tXfCSrqNDmnYS8UHH9M0I LwU/LZU8YO/vBGrI+ig9feY3A+GG74tEsPg9p75jIn1W70/mvoESEphrqa/yfjzf zOW3VqwV+TFxtqzk00zUjxbh6xg2Xd4+cWVp9I3xCNCFSmQTR6pJy0GoQxxnok3v piYlpCs6aO76t6L639KHGvSuejUzqe8GGDNoLjtFeVXPFeYtUeUrNoyGS74+pt0/ k9LO5jJaLJ6NigMfnMbvdJMil6mDfFvm -----END CERTIFICATE-----Generated at Tue May 7 02:00:59 2024 by rpki-client on console-ams.rpki-client.org