$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: nPQGtpKExumkhbYO7jwI+bGCzGWadTBAFH0gHO49E0o= Subject key identifier: 93:92:86:F7:59:B2:61:D2:EB:F8:3B:FF:60:11:B7:02:82:2D:42:D5 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0D97 Signing time: Tue 30 Apr 2024 18:49:31 +0000 Manifest this update: Tue 30 Apr 2024 18:49:30 +0000 Manifest next update: Tue 07 May 2024 18:49:30 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: DDd7/3kKSDbEzs0tAj0iYSQob0FHQVGm4XXPsGP/x9A=) 2: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: YesHwJZCWFPfBbdSFgp9ld0nujs2PN6NAZJ4zB0nTXA=) 3: 0B4EDB88909511ED9E54B261C4F9AE02.roa (hash: 4emzRUgWsmixDjQld96dbj/Sp5QI5a2k3+noP5YSYhY=) 4: A2AEFF821C7611EDB39EDA39C4F9AE02.roa (hash: 6MJ8uUVRE2N2yND/odSCEhS/uzQVXd5eqk1j1PMQkOQ=) 5: 141F86F437EA11ECA7D1B309C4F9AE02.roa (hash: sqwRRmaJwuQFiN3xLvOQrdUvxWPfQqgc0sMkOZ08KEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Apr 30 18:49:30 2024 GMT Not After : May 7 18:49:30 2024 GMT Subject: CN=66313d3b-a11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:c6:38:6e:d2:66:55:0d:33:30:cb:58:fc: 0a:75:45:47:1b:45:5b:2f:c5:fb:ec:bd:64:e7:44: 99:c2:87:65:fe:59:45:00:69:25:b8:a5:d9:36:08: 38:87:39:ad:96:3d:b7:fa:50:64:45:1c:78:4d:12: a8:11:b1:96:57:39:fd:c8:a5:81:a1:89:a3:75:b1: b0:a3:fe:e6:39:a8:76:6e:42:b0:39:aa:86:49:22: 3a:9f:40:41:b5:77:02:ad:c3:de:e7:1a:93:0c:c0: cd:98:77:61:93:1a:9b:2d:fa:b3:0a:e6:a5:23:19: 50:69:9d:1f:f1:ce:cc:34:6d:31:a0:43:d6:8d:fe: 71:22:d9:a0:8e:46:ac:57:17:f4:4c:60:cb:69:82: f8:a8:eb:79:6a:1b:3b:8c:49:fd:02:e1:73:c5:39: bc:eb:fe:c5:4a:a8:f5:cd:a9:6f:d3:4e:a2:30:c5: 9a:6b:cf:d3:25:ea:f1:5b:53:b7:99:f9:0f:70:df: 1a:e1:37:cf:3c:af:3c:ee:17:ba:98:1a:61:3c:fd: e9:a0:8b:c7:ce:77:49:16:b3:e9:d2:38:fc:74:41: 09:38:4c:8e:40:9f:d4:0e:6e:85:8a:db:9b:b3:71: ac:95:5c:96:10:a0:41:41:fb:54:d0:7d:48:82:e3: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:92:86:F7:59:B2:61:D2:EB:F8:3B:FF:60:11:B7:02:82:2D:42:D5 X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7e:25:61:0d:d2:9f:70:5f:6e:38:8e:29:05:2e:bc:b3:14: 71:00:79:80:bf:01:6f:22:17:82:4a:2e:1f:23:d5:8c:20:82: 71:47:87:fe:22:9e:c0:ef:f2:b1:5b:5d:3b:99:3e:40:11:30: b3:4c:80:64:51:65:ae:cd:6f:13:e4:09:e9:97:38:1b:44:a0: f6:3f:c9:9f:aa:67:44:aa:e9:1e:33:a5:04:bb:01:2e:9b:dd: ce:d1:13:1c:2a:6d:40:37:df:81:c8:84:07:21:58:c0:47:dc: bf:bc:81:c0:5b:8f:7b:41:ac:40:bd:71:a4:af:36:28:a5:25: 38:81:36:ef:a6:75:71:e8:21:29:91:2f:e6:d3:b3:e8:2e:a4: d7:50:80:dc:b9:05:2a:86:48:08:66:fe:b8:be:2e:fe:10:ca: 14:2e:b7:2e:42:f6:e0:46:71:12:d3:c8:8e:52:66:1b:ee:39: 69:89:0c:f8:bb:43:59:73:f3:6b:53:07:cb:5c:96:9b:d9:a5: cb:11:6f:dd:56:9b:9f:db:fb:a5:82:5f:90:4d:83:7a:4d:8b: df:35:7f:8a:a5:c4:d2:ea:2e:fc:77:3e:ca:16:39:59:b8:9e: f1:40:82:07:98:f7:ad:be:ae:4c:1b:28:db:c8:d5:76:32:f3: 6b:64:8f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjQwNDMwMTg0OTMwWhcNMjQwNTA3MTg0OTMwWjAYMRYwFAYD VQQDEw02NjMxM2QzYi1hMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TXGOG7SZlUNMzDLWPwKdUVHG0VbL8X77L1k50SZwodl/llFAGkluKXZNgg4 hzmtlj23+lBkRRx4TRKoEbGWVzn9yKWBoYmjdbGwo/7mOah2bkKwOaqGSSI6n0BB tXcCrcPe5xqTDMDNmHdhkxqbLfqzCualIxlQaZ0f8c7MNG0xoEPWjf5xItmgjkas Vxf0TGDLaYL4qOt5ahs7jEn9AuFzxTm86/7FSqj1zalv006iMMWaa8/TJerxW1O3 mfkPcN8a4TfPPK887he6mBphPP3poIvHzndJFrPp0jj8dEEJOEyOQJ/UDm6Fitub s3GslVyWEKBBQftU0H1IguM+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOShvdZ smHS6/g7/2ARtwKCLULVMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkfiVhDdKfcF9uOI4pBS68sxRxAHmAvwFvIheCSi4fI9WMIIJxR4f+ Ip7A7/KxW107mT5AETCzTIBkUWWuzW8T5AnplzgbRKD2P8mfqmdEqukeM6UEuwEu m93O0RMcKm1AN9+ByIQHIVjAR9y/vIHAW497QaxAvXGkrzYopSU4gTbvpnVx6CEp kS/m07PoLqTXUIDcuQUqhkgIZv64vi7+EMoULrcuQvbgRnES08iOUmYb7jlpiQz4 u0NZc/NrUwfLXJab2aXLEW/dVpuf2/ulgl+QTYN6TYvfNX+KpcTS6i78dz7KFjlZ uJ7xQIIHmPetvq5MGyjbyNV2MvNrZI// -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:54 2024 by rpki-client on console-fra.rpki-client.org