$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: GsPBirAb/wijhdedty0VxUkWr8w5YoM3oSm9QyDClN8= Subject key identifier: AF:1A:EC:2E:F9:E9:12:21:46:6C:CA:D1:D3:45:50:11:59:8C:1F:A4 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 33DF Signing time: Tue 30 Apr 2024 14:28:42 +0000 Manifest this update: Tue 30 Apr 2024 14:28:42 +0000 Manifest next update: Tue 07 May 2024 14:28:42 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: lQTc/bDwxvz7wbLSw6ua22bsoWTmiYPe1O2ciT3VuWk=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: OhyFTZMkQ0Lsb0HJnA8vV6teBU6PIDkPYMH0Rk7064s=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: neNYJqIEz8xW2AoFgnO+vg+NOrfZM+OF1VhMZH+wkRk=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: A75OHSDWXW0WzjUXTIrXgGI8y9ggeXqBCTyyb2T7Ldw=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: JK8W6UaIKOwZbbLYWrHQgOdLnCofpXI6UdkvJKjgYgE=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: lzFmgFwlx+ysDvsRN+ouOm/eTsfD/xJ8/CNYdaKB1L8=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: atmIiyo4XPPU6AeHw1WXpgRnFa7jfd2pOHkWGew1+XE=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: VDYRnkXPM98d5RA7/NO91xO7Z9K49iVQHvJBdyHXoqM=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: uv4YHJGeHIKZEuFqJlGDqjwkBu45qN9VkY0Iz5VKmrM=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: InWU/AiONnrgo1wTkMsfQ5x6H98uvw9sacgEkC/ZGcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Apr 30 14:28:42 2024 GMT Not After : May 7 14:28:42 2024 GMT Subject: CN=6631001a-d73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b7:69:87:b8:df:e4:1c:54:fc:04:9b:29:e0: d2:a1:65:54:b4:ca:ef:1a:33:c5:15:f4:27:de:0d: 0d:6f:54:82:8d:df:b3:3f:c3:ca:2f:cb:8e:7d:5b: 94:fd:8b:33:ab:a2:96:3e:ed:34:be:6b:05:7b:23: 2c:73:5f:21:e9:66:38:45:81:e2:c1:0c:07:53:0a: 63:81:a4:cc:f2:61:b8:53:fd:d2:5b:19:96:59:04: d1:3f:a1:58:82:c2:e0:59:53:0a:d6:5c:9d:bc:50: 86:fc:e1:90:05:ac:df:06:6c:07:77:25:5a:a2:28: c3:89:7c:aa:4f:aa:74:10:82:b9:91:52:9e:4f:b7: 74:dc:e3:b9:95:a1:30:17:5a:e7:ca:aa:1b:1a:8f: fa:8f:87:f4:68:cf:5c:11:80:24:31:78:a5:70:22: 45:6e:05:47:b7:52:9b:41:c7:7f:76:07:cb:e7:a0: cf:b3:f0:d7:cf:42:15:dd:19:ee:66:d7:a1:63:bf: ca:a6:27:af:00:73:20:db:dd:03:49:69:54:e1:49: 65:81:f6:db:bf:cb:76:67:90:95:d4:25:1b:a7:ad: 32:f3:2c:53:78:af:86:46:b1:78:9e:70:8a:f0:e6: 26:77:ea:d6:8e:4d:59:6d:d9:d6:3d:ad:7b:79:fc: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1A:EC:2E:F9:E9:12:21:46:6C:CA:D1:D3:45:50:11:59:8C:1F:A4 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e8:4c:04:b9:b6:98:29:c8:31:8f:80:a7:0b:44:0a:e2:3a: 5d:e1:5a:5f:b4:9e:dd:83:c9:53:1f:b3:e9:e7:fc:c4:8e:a7: 16:5a:b4:8f:28:b6:82:e8:48:1f:da:82:1b:5a:ee:95:df:f7: 01:25:3a:f9:2b:91:c7:a1:42:1d:c7:b1:00:96:49:22:ad:2f: a6:9f:aa:b8:9d:7d:fd:c3:49:b7:81:56:d9:3e:f1:fa:63:0c: 7e:d9:80:9a:3c:06:9a:65:66:bd:e5:00:b8:f1:2f:8e:34:ac: 77:e0:d4:ab:7c:61:35:11:06:c1:77:8d:af:54:9e:f0:84:a0: 78:8f:e6:4a:d4:e6:12:63:34:6f:f9:9c:66:a3:0b:d8:60:a4: 2e:ba:ad:b5:f7:06:f4:f7:37:7c:58:97:7a:42:61:23:71:ff: c6:55:69:d3:fb:81:74:86:4d:6c:73:21:27:e3:f1:b3:49:39: f1:04:7e:a9:af:88:c9:d5:20:7b:66:3c:f2:15:5b:e4:f7:85: 5f:86:e3:7c:39:a6:d6:8b:da:b3:49:34:55:d3:d1:4e:e9:3f: 3e:46:d5:5e:6b:e3:1b:78:f7:fc:92:5e:48:9f:e4:1b:e1:ee: 98:89:9d:88:78:37:cc:50:01:fb:1b:e0:84:be:6d:7c:63:84: 4d:fb:fa:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjQwNDMwMTQyODQyWhcNMjQwNTA3MTQyODQyWjAYMRYwFAYD VQQDEw02NjMxMDAxYS1kNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57dph7jf5BxU/ASbKeDSoWVUtMrvGjPFFfQn3g0Nb1SCjd+zP8PKL8uOfVuU /Yszq6KWPu00vmsFeyMsc18h6WY4RYHiwQwHUwpjgaTM8mG4U/3SWxmWWQTRP6FY gsLgWVMK1lydvFCG/OGQBazfBmwHdyVaoijDiXyqT6p0EIK5kVKeT7d03OO5laEw F1rnyqobGo/6j4f0aM9cEYAkMXilcCJFbgVHt1KbQcd/dgfL56DPs/DXz0IV3Rnu ZtehY7/KpievAHMg290DSWlU4Ullgfbbv8t2Z5CV1CUbp60y8yxTeK+GRrF4nnCK 8OYmd+rWjk1ZbdnWPa17efxrUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8a7C75 6RIhRmzK0dNFUBFZjB+kMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz6EwEubaYKcgxj4CnC0QK4jpd4VpftJ7dg8lTH7Pp5/zEjqcWWrSP KLaC6Egf2oIbWu6V3/cBJTr5K5HHoUIdx7EAlkkirS+mn6q4nX39w0m3gVbZPvH6 Ywx+2YCaPAaaZWa95QC48S+ONKx34NSrfGE1EQbBd42vVJ7whKB4j+ZK1OYSYzRv +ZxmowvYYKQuuq219wb09zd8WJd6QmEjcf/GVWnT+4F0hk1scyEn4/GzSTnxBH6p r4jJ1SB7ZjzyFVvk94VfhuN8OabWi9qzSTRV09FO6T8+RtVea+MbePf8kl5In+Qb 4e6YiZ2IeDfMUAH7G+CEvm18Y4RN+/rR -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:56 2024 by rpki-client on console-ams.rpki-client.org