$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: PNKFakHnPH9qBtaG0Omb5dmQEicd+OX1vNjbHg0C53c= Subject key identifier: 0C:B0:8A:04:56:9C:2F:64:1C:A6:B3:9C:D9:8B:5F:A3:C0:3B:87:72 Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: F7 Signing time: Mon 29 Apr 2024 05:43:37 +0000 Manifest this update: Mon 29 Apr 2024 05:43:37 +0000 Manifest next update: Mon 06 May 2024 05:43:37 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: 6Lt2IV6kCRJoDPFHSQzmfjJFx56JBXXTuAg4M1L8UBs=) 2: D779E8C6F2A811EEA7160744C4F9AE02.roa (hash: yJJD1EbutORFauOfi4zZ/C9WB2mmx903sG/YHu7T+9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: Apr 29 05:43:37 2024 GMT Not After : May 6 05:43:37 2024 GMT Subject: CN=662f3389-0162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:74:55:ec:c0:72:33:22:ca:e6:7f:ae:dd: f4:6d:1f:1c:69:89:2e:b7:62:bb:2c:d2:b6:ed:bb: 4a:2a:aa:c5:2e:2f:b7:1c:fd:0d:f1:cb:f3:18:bd: 81:8c:9b:1c:c0:63:52:c8:a2:b7:ca:2c:4a:a1:45: 50:6f:b7:e2:ef:ac:7c:b5:f2:86:ea:2b:01:92:f4: 5c:3b:14:1b:84:13:f4:63:8d:4b:10:bd:93:de:cb: 8f:ed:d1:04:af:2a:51:d8:21:6d:84:6a:60:2f:92: 7f:72:e5:cd:1c:12:c3:84:c9:d8:30:95:60:01:51: 5b:6b:c9:23:70:c0:97:ee:00:c4:5a:ce:49:05:ac: 75:c7:5e:14:30:b2:29:4d:c0:cc:20:21:99:d0:c2: d3:c8:ce:37:72:6c:9d:bc:e8:fb:fa:db:23:ba:e6: 82:17:09:c7:ee:d5:eb:d2:7c:43:11:c5:77:18:de: c4:59:33:96:fd:52:58:62:38:3f:a9:dd:77:d4:9a: 5a:6c:9a:11:da:9c:55:2b:f2:c6:75:41:95:9d:85: dd:43:63:b1:a3:01:e2:40:1e:ac:1d:cd:e5:6a:98: b0:5a:41:6f:db:bf:4a:48:bb:95:e2:2b:c7:21:db: d1:dd:0b:e1:c5:6e:56:25:64:8e:ca:1c:bd:35:ed: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:8A:04:56:9C:2F:64:1C:A6:B3:9C:D9:8B:5F:A3:C0:3B:87:72 X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ec:36:e9:3b:16:8e:e8:6f:04:1b:c7:e4:28:59:4f:45:93: 87:b8:e6:4e:8a:c7:0a:6d:69:f1:a6:2c:6f:50:1f:55:e7:53: 97:f8:02:ce:c0:f0:c0:c2:93:42:68:51:af:1b:e5:c7:f3:02: e7:cd:e8:29:a1:92:08:4e:28:c0:a4:a2:7a:72:4c:f3:6a:85: 6b:fd:b8:b6:1d:6b:da:17:da:a2:e1:50:c9:c1:96:c4:a1:99: ff:45:ab:89:89:64:99:0d:e2:98:38:95:61:23:d1:cd:19:18: f6:69:e0:4e:7f:b2:3f:be:16:96:8f:a8:c0:32:37:ea:f7:8a: 8d:54:15:ef:31:ee:f2:4e:f3:bf:40:77:81:eb:21:85:05:ab: 9f:6e:62:d1:d1:09:47:26:d0:aa:b4:86:76:be:79:54:6c:cc: bf:a3:f7:08:a3:83:56:d7:72:b8:66:03:39:83:88:d1:97:44: 1c:0d:5e:07:f3:2b:d6:1a:e1:db:1e:bc:1f:c1:48:8e:06:f2: 86:ca:ef:e0:58:57:fc:f0:67:7f:e1:90:ba:a8:e6:9f:8c:5e: 7e:10:38:f9:58:66:0e:1c:8b:59:2c:7c:93:06:5f:b7:d9:00: be:e0:2b:c7:07:1a:d0:33:57:15:05:1e:35:ba:e6:43:85:24: f3:00:9f:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjQwNDI5MDU0MzM3WhcNMjQwNTA2MDU0MzM3WjAYMRYwFAYD VQQDEw02NjJmMzM4OS0wMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xN0VezAcjMiyuZ/rt30bR8caYkut2K7LNK27btKKqrFLi+3HP0N8cvzGL2B jJscwGNSyKK3yixKoUVQb7fi76x8tfKG6isBkvRcOxQbhBP0Y41LEL2T3suP7dEE rypR2CFthGpgL5J/cuXNHBLDhMnYMJVgAVFba8kjcMCX7gDEWs5JBax1x14UMLIp TcDMICGZ0MLTyM43cmydvOj7+tsjuuaCFwnH7tXr0nxDEcV3GN7EWTOW/VJYYjg/ qd131JpabJoR2pxVK/LGdUGVnYXdQ2OxowHiQB6sHc3lapiwWkFv279KSLuV4ivH IdvR3QvhxW5WJWSOyhy9Ne0bfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAywigRW nC9kHKaznNmLX6PAO4dyMB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW7DbpOxaO6G8EG8fkKFlPRZOHuOZOiscKbWnxpixvUB9V51OX+ALO wPDAwpNCaFGvG+XH8wLnzegpoZIITijApKJ6ckzzaoVr/bi2HWvaF9qi4VDJwZbE oZn/RauJiWSZDeKYOJVhI9HNGRj2aeBOf7I/vhaWj6jAMjfq94qNVBXvMe7yTvO/ QHeB6yGFBaufbmLR0QlHJtCqtIZ2vnlUbMy/o/cIo4NW13K4ZgM5g4jRl0QcDV4H 8yvWGuHbHrwfwUiOBvKGyu/gWFf88Gd/4ZC6qOafjF5+EDj5WGYOHItZLHyTBl+3 2QC+4CvHBxrQM1cVBR41uuZDhSTzAJ8L -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:05 2024 by rpki-client on console-ams.rpki-client.org