$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft File: wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json) Hash identifier: 5oIIiVZRrhQKmSg8LiTUwkRRMbFYWVIBQG0Y/aJCz48= Subject key identifier: D3:AD:B5:AB:2F:32:F3:D8:10:DA:B5:22:53:58:4A:61:89:12:07:89 Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 Certificate issuer: /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Certificate serial: 1893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft Manifest number: 1883 Signing time: Thu 02 May 2024 16:57:33 +0000 Manifest this update: Thu 02 May 2024 16:57:32 +0000 Manifest next update: Thu 09 May 2024 16:57:32 +0000 Files and hashes: 1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: lvu1Pvsx3UzznS/O0nxfBphNJQ0QKj5eFgp/UwznleY=) 2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: JntOPTcB6nd+2Xt8FHYJCMbsmM98wj2vD8x8EymL3po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6291 (0x1893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Validity Not Before: May 2 16:57:32 2024 GMT Not After : May 9 16:57:32 2024 GMT Subject: CN=6633c5fd-0d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:58:e4:0c:4e:f3:54:84:c9:65:7e:50:8b: 88:2b:48:40:ba:5e:ed:f9:b1:98:af:83:7c:00:ac: 0c:8d:ba:bc:41:57:24:c7:fa:42:1c:23:93:02:42: f1:ca:ef:e1:17:dc:8f:3c:fe:e5:2a:29:90:f1:1f: 2a:53:fd:42:3d:71:c4:25:c6:98:28:09:bd:e0:58: 38:d4:42:fe:ea:28:5b:4e:be:ba:6a:fa:99:bb:3b: f0:0b:06:9e:67:aa:6e:bd:27:d5:bf:6c:ff:31:aa: ba:97:a7:4b:84:64:7e:26:37:45:ed:8c:2c:b7:59: 1b:e8:4d:0b:17:36:f2:73:47:83:52:61:c7:3a:ba: 93:62:72:37:88:e3:19:8b:45:df:9c:5f:42:83:61: 87:15:d4:02:51:b1:41:fc:53:e9:ec:04:fd:86:02: a6:b2:43:b8:2c:58:dd:3d:ef:22:9a:68:e5:ef:de: b1:c5:cc:82:bf:a0:fd:f3:1a:8c:8d:11:02:8e:a4: ce:46:6a:93:c7:c6:fe:a8:7f:fb:bc:e3:34:22:d9: d8:7a:78:d0:c3:a7:f6:0b:77:42:8b:f8:0b:bc:69: 27:7b:7d:f7:13:56:8a:db:c1:13:f5:59:0d:bd:54: a3:0c:d0:27:a8:97:e6:a4:ae:07:67:b0:77:b6:30: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AD:B5:AB:2F:32:F3:D8:10:DA:B5:22:53:58:4A:61:89:12:07:89 X509v3 Authority Key Identifier: keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:43:5f:eb:d9:f5:5e:86:f7:e7:ca:15:ff:57:a8:c0:86:c0: d2:d6:68:bb:fa:6e:3b:41:9a:f6:b2:20:e7:60:5c:1d:23:c4: 73:37:e0:42:87:8a:e1:8a:dd:ad:ce:40:70:32:f1:2f:37:85: a9:77:25:ec:1e:4b:30:59:17:cf:9d:f9:13:2b:a5:5d:9a:cd: 1b:c2:a1:f0:cb:62:31:a3:bb:54:f5:27:e1:e8:8d:2b:9c:64: db:d8:bb:12:f4:81:1f:66:83:dc:99:d8:6c:41:d9:88:3f:0a: ff:0c:66:8d:cd:0b:10:45:26:eb:a6:f5:79:92:06:54:ab:ee: 0c:cc:8d:64:f5:9b:d6:fc:98:78:da:c5:ef:8a:6a:9a:58:3f: e5:40:90:bb:2a:54:d8:82:ae:f8:4a:7f:d9:7d:2f:57:c1:61: 74:c2:d7:79:54:4e:f9:71:38:1c:f3:fe:6b:63:ea:bf:ab:17: 96:45:44:ba:39:ba:fe:9b:f8:da:51:8d:7e:e6:d6:87:74:a1: 60:6f:4a:90:5e:9c:bd:fd:10:f8:65:1e:28:64:ce:f3:eb:07: 92:4c:bf:c3:ed:2f:e4:34:4c:2a:40:0b:36:fe:dc:b9:c5:a2: 54:9e:dc:05:f9:6f:b8:96:db:58:f6:71:89:53:d4:02:9e:58: d3:b4:74:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDQzMxMTAvBgNVBAUTKEMxQUE1Q0U1MkUxMTUzM0I2NDFFM0I2ODVBQjMyM0M0 Njk3NkE0MDEwHhcNMjQwNTAyMTY1NzMyWhcNMjQwNTA5MTY1NzMyWjAYMRYwFAYD VQQDEw02NjMzYzVmZC0wZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR1Y5AxO81SEyWV+UIuIK0hAul7t+bGYr4N8AKwMjbq8QVckx/pCHCOTAkLx yu/hF9yPPP7lKimQ8R8qU/1CPXHEJcaYKAm94Fg41EL+6ihbTr66avqZuzvwCwae Z6puvSfVv2z/Maq6l6dLhGR+JjdF7Ywst1kb6E0LFzbyc0eDUmHHOrqTYnI3iOMZ i0XfnF9Cg2GHFdQCUbFB/FPp7AT9hgKmskO4LFjdPe8immjl796xxcyCv6D98xqM jRECjqTORmqTx8b+qH/7vOM0ItnYenjQw6f2C3dCi/gLvGkne333E1aK28ET9VkN vVSjDNAnqJfmpK4HZ7B3tjACYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOttasv MvPYENq1IlNYSmGJEgeJMB8GA1UdIwQYMBaAFMGqXOUuEVM7ZB47aFqzI8RpdqQB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUNDMy9ENEY0QjQ4ODc3 RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6dGtIanRvV3JNanhHbDJw QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhcGM1UzRSVXp0a0hqdG9Xck1qeEdsMnBBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUNDMy9ENEY0QjQ4ODc3RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6 dGtIanRvV3JNanhHbDJwQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFQ1/r2fVehvfnyhX/V6jAhsDS1mi7+m47QZr2siDnYFwdI8RzN+BC h4rhit2tzkBwMvEvN4WpdyXsHkswWRfPnfkTK6Vdms0bwqHwy2Ixo7tU9Sfh6I0r nGTb2LsS9IEfZoPcmdhsQdmIPwr/DGaNzQsQRSbrpvV5kgZUq+4MzI1k9ZvW/Jh4 2sXvimqaWD/lQJC7KlTYgq74Sn/ZfS9XwWF0wtd5VE75cTgc8/5rY+q/qxeWRUS6 Obr+m/jaUY1+5taHdKFgb0qQXpy9/RD4ZR4oZM7z6weSTL/D7S/kNEwqQAs2/ty5 xaJUntwF+W+4lttY9nGJU9QCnljTtHQF -----END CERTIFICATE-----Generated at Thu May 2 20:04:26 2024 by rpki-client on console-ams.rpki-client.org