$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft File: wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json) Hash identifier: xrb+h3fXmGYoXfQYchp8bYoi81QH74oIHNCbSXEORDg= Subject key identifier: CC:2A:A9:01:62:37:D6:58:82:7A:50:64:16:A4:BF:DE:8D:E6:C2:4F Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Certificate serial: 253A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft Manifest number: 252D Signing time: Tue 30 Apr 2024 16:03:05 +0000 Manifest this update: Tue 30 Apr 2024 16:03:04 +0000 Manifest next update: Tue 07 May 2024 16:03:04 +0000 Files and hashes: 1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: IYNqE5qOCBjeG5fyXNqnCJLKMtqNz4VBnRtFq/a37xw=) 2: 55045D76B0A911E5A9B47823C4F9AE02.roa (hash: ZuWVkITDYcznukznwkAzr97nmO+QFOaVtzNAiJfZoaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9530 (0x253a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Validity Not Before: Apr 30 16:03:04 2024 GMT Not After : May 7 16:03:04 2024 GMT Subject: CN=66311638-e9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:25:bc:f9:83:f0:fe:76:1c:bf:ab:f8:2e: 61:67:50:3d:dd:9e:71:6a:e6:20:18:f0:f7:2e:b3: 15:01:6e:96:cd:68:7a:86:18:c9:20:60:fe:06:14: 44:8c:57:34:e4:82:db:07:b6:04:7c:bb:57:a0:1b: 49:32:6b:82:ba:eb:81:2e:ed:fa:c1:66:58:1f:4b: 92:b3:e7:b3:d8:54:5d:28:ab:d7:63:a3:2a:9d:d3: 89:3b:9a:79:8e:a9:95:ba:e7:8c:17:33:b0:33:fa: 2e:ea:4a:55:24:e8:42:20:90:1a:ad:f0:f1:b0:60: cc:61:78:0c:8d:2a:f4:b7:cf:6d:20:a6:a7:a2:05: cc:1f:20:39:80:de:29:07:92:ef:23:08:63:12:de: 86:c8:96:7d:b4:af:db:52:63:6b:9a:53:c3:65:53: 49:3c:31:5e:20:59:cb:3e:52:53:9b:16:8b:48:80: b7:fa:78:48:1e:bd:18:f4:fc:5b:75:38:2a:8f:d0: 2d:93:08:ba:2c:a3:62:9a:f3:4c:b7:56:ae:88:e3: 28:f4:ca:8b:06:7f:fc:52:b3:fa:79:3a:2d:b4:71: 45:e7:fd:ae:d9:4d:45:ff:b7:e4:1c:8e:fa:8d:eb: 5b:7e:32:3a:d8:55:52:39:c5:aa:6e:b2:22:bc:61: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2A:A9:01:62:37:D6:58:82:7A:50:64:16:A4:BF:DE:8D:E6:C2:4F X509v3 Authority Key Identifier: keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c7:f7:72:a5:b5:1b:03:e5:96:a7:9e:fa:1a:04:e4:3d:c2: 39:0e:81:82:d8:b9:a9:9f:55:e1:e7:aa:79:4a:78:87:48:95: d3:4e:25:8c:9c:78:79:9f:63:17:27:4c:fb:50:b6:60:69:de: c4:15:1f:78:3b:0e:ce:1c:cf:11:ca:0d:7e:d4:5a:06:4d:3a: 3f:d5:3d:c1:da:89:73:45:b2:08:11:ab:81:a5:d5:85:94:71: ab:6d:9c:21:a3:ab:c1:aa:17:4f:2b:8f:a6:8d:a4:9f:0e:52: 93:b0:69:b4:3e:6f:9e:10:a1:03:21:e4:be:96:72:16:89:8f: c2:17:c7:52:fb:e9:8e:d6:c8:76:26:5b:03:3b:64:fb:94:64: d1:8f:b8:1f:09:3a:a1:d9:ac:c9:dc:9a:97:3f:c8:5c:67:a7: 3a:1a:d2:5f:a5:42:af:1b:37:23:86:4f:4c:86:41:30:1b:55: 65:b5:e1:f7:31:2e:f0:86:23:5f:69:70:15:6e:75:9d:24:09: d7:b3:b9:4b:ce:48:bd:5e:0b:fb:cc:df:26:98:b5:db:a5:91: 03:2e:2e:6b:5d:e2:a5:69:ff:3f:55:ec:45:32:d2:d1:8c:36: 48:e9:7b:e6:5b:b9:e6:a9:a7:71:bc:74:37:5a:74:ec:2d:4a: 31:d5:2a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC RDJGRjA1NDMwHhcNMjQwNDMwMTYwMzA0WhcNMjQwNTA3MTYwMzA0WjAYMRYwFAYD VQQDEw02NjMxMTYzOC1lOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMglvPmD8P52HL+r+C5hZ1A93Z5xauYgGPD3LrMVAW6WzWh6hhjJIGD+BhRE jFc05ILbB7YEfLtXoBtJMmuCuuuBLu36wWZYH0uSs+ez2FRdKKvXY6MqndOJO5p5 jqmVuueMFzOwM/ou6kpVJOhCIJAarfDxsGDMYXgMjSr0t89tIKanogXMHyA5gN4p B5LvIwhjEt6GyJZ9tK/bUmNrmlPDZVNJPDFeIFnLPlJTmxaLSIC3+nhIHr0Y9Pxb dTgqj9Atkwi6LKNimvNMt1auiOMo9MqLBn/8UrP6eTottHFF5/2u2U1F/7fkHI76 jetbfjI62FVSOcWqbrIivGEqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwqqQFi N9ZYgnpQZBakv96N5sJPMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTMyQS8xQjRGOUY5NkZBRDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFl V0ZCS2MwMUpCS2U5TF9CVU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARx/dypbUbA+WWp576GgTkPcI5DoGC2Lmpn1Xh56p5SniHSJXTTiWM nHh5n2MXJ0z7ULZgad7EFR94Ow7OHM8Ryg1+1FoGTTo/1T3B2olzRbIIEauBpdWF lHGrbZwho6vBqhdPK4+mjaSfDlKTsGm0Pm+eEKEDIeS+lnIWiY/CF8dS++mO1sh2 JlsDO2T7lGTRj7gfCTqh2azJ3JqXP8hcZ6c6GtJfpUKvGzcjhk9MhkEwG1VlteH3 MS7whiNfaXAVbnWdJAnXs7lLzki9Xgv7zN8mmLXbpZEDLi5rXeKlaf8/VexFMtLR jDZI6XvmW7nmqadxvHQ3WnTsLUox1SrG -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:05 2024 by rpki-client on console-ams.rpki-client.org