$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: EnNzWQ/S5iJva2PTMFGNY9ehcAyCrFtUubDhbVKjIYk= Subject key identifier: DE:FD:B1:62:07:66:74:EA:77:67:65:06:CF:6A:7E:A4:A0:AE:1A:04 Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 0490 Signing time: Wed 01 May 2024 01:55:12 +0000 Manifest this update: Wed 01 May 2024 01:55:12 +0000 Manifest next update: Wed 08 May 2024 01:55:12 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: gWrPH7s1Zday/UkzL8Jlk2kTzpwn3HHKTd7Xyvt7+Xk=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: sbkQxmyHF5zPQR/UDBWCWEbbyoVFQKNcg9AzuA7dWNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: May 1 01:55:12 2024 GMT Not After : May 8 01:55:12 2024 GMT Subject: CN=6631a100-83d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:94:b7:9e:24:68:fe:c4:5a:05:ac:d3:63:29: 72:f0:9f:d4:39:04:15:83:92:dc:7b:f1:e5:e1:74: 67:d8:05:db:44:da:e5:f1:69:75:65:df:c2:18:ce: 18:fe:01:b4:d2:98:2f:9c:c4:d1:98:0a:bd:a5:e9: de:ad:b1:29:b5:5c:e0:48:49:68:e0:0c:e9:ee:35: d9:a0:dc:55:c6:22:28:a8:cf:cf:a4:37:24:d4:4d: 01:bc:75:fe:d2:6e:ac:87:22:b5:e7:cb:f3:94:38: b1:7e:27:80:85:f3:bc:b3:19:72:dc:6c:4e:b6:4e: ea:1b:6e:00:7b:ba:9d:f7:5f:15:db:21:5f:12:32: 04:10:43:4c:24:2a:89:a1:6b:b6:54:0b:71:ba:91: 6a:e5:6e:f4:da:61:32:d1:01:7f:bf:de:1c:3c:cd: 6f:5d:fa:a6:c4:7e:b2:31:57:43:59:d4:fe:ef:a8: 78:16:5e:64:65:82:e2:f9:b8:15:9d:fd:48:1e:40: 60:a3:87:8d:04:db:68:dd:d7:88:2c:ab:7f:6f:64: da:f9:a6:27:99:b6:0c:b3:e1:8f:ce:6e:b0:6e:b4: 14:e7:fe:e1:ec:2e:6b:a6:51:05:ac:7d:6b:3e:a7: 62:19:b1:fa:cf:5e:df:c7:fd:55:9c:93:65:9a:79: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:B1:62:07:66:74:EA:77:67:65:06:CF:6A:7E:A4:A0:AE:1A:04 X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:c8:71:75:15:b0:4b:62:19:c4:96:e5:54:b1:59:a4:32: 05:c7:f1:83:e8:eb:e0:b0:12:7f:e0:4a:9c:d9:d6:9b:5d:35: 5a:c2:83:12:6b:7d:d8:be:8d:0a:ca:4d:ec:1d:08:40:b2:44: d3:31:48:d0:1c:e4:94:dc:e2:91:fd:a8:7d:b7:4b:f7:1f:17: 55:fa:5f:8a:e1:ed:ac:c6:93:f8:0d:62:5a:15:f7:f3:13:92: 44:0d:90:e4:ba:70:9d:2b:83:80:3b:62:81:d8:6c:cf:11:e6: f0:05:f3:cd:82:fe:23:7d:e4:8c:82:e1:08:06:c6:1e:57:e4: 5a:ab:bb:ce:16:38:b6:05:07:61:9d:4f:c9:46:e6:55:f1:95: 39:11:ea:b0:46:50:ab:b4:49:d4:4e:06:6e:f1:f2:60:d5:e9: e1:fe:59:52:42:8e:e0:2f:1a:8b:a3:bf:44:11:5f:81:54:d2: b5:b3:39:e9:a7:66:51:fe:f5:4f:9a:43:1e:85:46:46:fe:5c: f7:3b:5e:0e:2c:3b:06:7b:58:7a:f7:a8:17:56:46:2d:75:ed: 53:1d:d6:80:06:bd:ec:e3:b8:67:45:6d:38:5a:45:ad:8a:3c: a2:1b:c9:ea:a1:83:bd:bc:31:48:17:57:89:d4:d3:66:09:a0: fd:7b:e8:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjQwNTAxMDE1NTEyWhcNMjQwNTA4MDE1NTEyWjAYMRYwFAYD VQQDEw02NjMxYTEwMC04M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JS3niRo/sRaBazTYyly8J/UOQQVg5Lce/Hl4XRn2AXbRNrl8Wl1Zd/CGM4Y /gG00pgvnMTRmAq9penerbEptVzgSElo4Azp7jXZoNxVxiIoqM/PpDck1E0BvHX+ 0m6shyK158vzlDixfieAhfO8sxly3GxOtk7qG24Ae7qd918V2yFfEjIEEENMJCqJ oWu2VAtxupFq5W702mEy0QF/v94cPM1vXfqmxH6yMVdDWdT+76h4Fl5kZYLi+bgV nf1IHkBgo4eNBNto3deILKt/b2Ta+aYnmbYMs+GPzm6wbrQU5/7h7C5rplEFrH1r PqdiGbH6z17fx/1VnJNlmnm7FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN79sWIH ZnTqd2dlBs9qfqSgrhoEMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg+shxdRWwS2IZxJblVLFZpDIFx/GD6OvgsBJ/4Eqc2dabXTVawoMS a33Yvo0Kyk3sHQhAskTTMUjQHOSU3OKR/ah9t0v3HxdV+l+K4e2sxpP4DWJaFffz E5JEDZDkunCdK4OAO2KB2GzPEebwBfPNgv4jfeSMguEIBsYeV+Raq7vOFji2BQdh nU/JRuZV8ZU5EeqwRlCrtEnUTgZu8fJg1enh/llSQo7gLxqLo79EEV+BVNK1sznp p2ZR/vVPmkMehUZG/lz3O14OLDsGe1h696gXVkYtde1THdaABr3s47hnRW04WkWt ijyiG8nqoYO9vDFIF1eJ1NNmCaD9e+hy -----END CERTIFICATE-----Generated at Wed May 1 02:46:18 2024 by rpki-client on console-ams.rpki-client.org