$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: 9pSCeh6Mdm44QkthO9EJJxKpSfQWCWiUi0LWrd6aL3c= Subject key identifier: AC:D2:E2:45:4E:60:0A:81:1B:B3:0D:DC:66:D3:7B:F5:7A:B0:EE:62 Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: F1 Signing time: Wed 01 May 2024 06:04:47 +0000 Manifest this update: Wed 01 May 2024 06:04:46 +0000 Manifest next update: Wed 08 May 2024 06:04:46 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: lK5SReTL9nBzRSzoVPlVCJNOSXWUy4nIMlypJ3V5YKk=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: OEKv7P5lgSyN95lexkYQQPDBgSrO0jMtbC3pa2USD3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: May 1 06:04:46 2024 GMT Not After : May 8 06:04:46 2024 GMT Subject: CN=6631db7e-c879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:e9:83:14:72:20:c6:9c:6b:a1:91:15:d0: ab:fc:88:25:ac:e1:c7:19:26:4d:a1:36:08:7d:13: 29:09:f6:2a:f7:58:57:10:0e:4b:1b:aa:bd:43:08: d9:26:8e:a2:c6:3b:9b:f5:bf:a8:f1:1f:49:2c:18: 4b:30:73:74:34:3d:58:02:3e:5f:85:b5:2b:2b:b4: 11:91:5b:17:c2:d7:5c:ad:80:e5:1a:0f:52:1e:8e: 34:f8:fe:2f:fd:f2:a7:76:1d:f2:79:3a:4f:58:f6: 19:4a:d3:cd:cf:a1:a8:11:77:5f:a0:c5:82:2a:83: 88:96:ab:9b:0b:10:a3:3c:a1:8c:c8:a1:27:3d:3e: 3b:90:5c:bb:57:af:be:ae:90:67:d2:25:8c:b4:ef: bc:9e:4b:6a:03:db:e7:1c:7e:58:3d:e5:db:ca:86: 0c:da:1b:b6:a7:4b:42:cb:21:f1:04:a9:5c:03:40: 53:71:b3:33:9b:c8:3a:57:13:29:c5:21:73:12:7d: af:b1:ba:a4:4e:e4:b9:45:1e:89:a7:22:ca:4b:1a: ac:fa:b7:e3:42:48:8e:2c:d8:66:7b:2b:8b:6c:94: 5c:33:2c:1b:b2:a8:15:c8:82:20:05:61:a8:40:46: 79:97:1a:8d:60:fa:26:2b:f7:64:e5:ab:48:60:c4: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:E2:45:4E:60:0A:81:1B:B3:0D:DC:66:D3:7B:F5:7A:B0:EE:62 X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ba:72:b5:9e:be:39:6e:91:6c:86:92:40:68:09:6e:48:9d: 2e:e4:87:4c:18:43:f7:20:62:7c:0d:2c:6f:a7:77:36:3d:1d: 36:ac:89:8f:c1:3c:22:0f:05:6f:55:1b:86:96:ce:ad:aa:a7: d6:11:ab:36:34:25:7a:77:4d:c9:d5:5e:1d:ae:29:48:b0:33: 91:ee:1f:f8:76:08:ba:d1:05:14:48:c6:ea:45:f9:02:19:41: 3b:59:bc:7c:9d:ef:f6:a5:41:e2:ef:a8:71:fc:07:b1:dc:cd: d1:8a:1b:b3:76:93:6d:a1:7e:b2:9a:76:b2:a1:2e:d6:26:d9: 03:e1:de:6d:6a:9c:20:db:6e:1b:a1:a4:28:21:88:f2:b3:76: 79:56:e1:1b:7b:7a:00:8a:41:c3:be:78:3a:01:3e:41:8a:65: 28:c8:3c:a0:28:c1:6f:eb:35:29:54:72:03:3e:35:97:b3:0b: d2:61:f8:c0:c2:2f:93:fa:ae:85:0f:ef:19:4c:eb:12:03:d9: 56:6b:a2:61:23:a6:f3:cf:63:a6:b6:9a:10:91:59:62:e5:85: c4:d3:53:98:e4:92:2f:e7:0f:57:f3:89:8e:38:b4:09:3c:07: aa:2f:76:e4:8f:66:63:bb:95:f1:18:52:5f:7f:d7:2a:c5:c0: 39:30:7b:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjQwNTAxMDYwNDQ2WhcNMjQwNTA4MDYwNDQ2WjAYMRYwFAYD VQQDEw02NjMxZGI3ZS1jODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqETpgxRyIMaca6GRFdCr/IglrOHHGSZNoTYIfRMpCfYq91hXEA5LG6q9QwjZ Jo6ixjub9b+o8R9JLBhLMHN0ND1YAj5fhbUrK7QRkVsXwtdcrYDlGg9SHo40+P4v /fKndh3yeTpPWPYZStPNz6GoEXdfoMWCKoOIlqubCxCjPKGMyKEnPT47kFy7V6++ rpBn0iWMtO+8nktqA9vnHH5YPeXbyoYM2hu2p0tCyyHxBKlcA0BTcbMzm8g6VxMp xSFzEn2vsbqkTuS5RR6JpyLKSxqs+rfjQkiOLNhmeyuLbJRcMywbsqgVyIIgBWGo QEZ5lxqNYPomK/dk5atIYMStEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzS4kVO YAqBG7MN3GbTe/V6sO5iMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3unK1nr45bpFshpJAaAluSJ0u5IdMGEP3IGJ8DSxvp3c2PR02rImP wTwiDwVvVRuGls6tqqfWEas2NCV6d03J1V4drilIsDOR7h/4dgi60QUUSMbqRfkC GUE7Wbx8ne/2pUHi76hx/Aex3M3RihuzdpNtoX6ymnayoS7WJtkD4d5tapwg224b oaQoIYjys3Z5VuEbe3oAikHDvng6AT5BimUoyDygKMFv6zUpVHIDPjWXswvSYfjA wi+T+q6FD+8ZTOsSA9lWa6JhI6bzz2OmtpoQkVli5YXE01OY5JIv5w9X84mOOLQJ PAeqL3bkj2Zju5XxGFJff9cqxcA5MHuN -----END CERTIFICATE-----Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org