$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: nYbR8MgpDnOWQOB5Pexdl2rua3Z+zMq6xfL7SormhhI= Subject key identifier: 02:3C:8E:5A:34:4B:72:51:69:BE:12:78:12:98:6C:0D:4F:B5:D4:DD Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 023C Signing time: Tue 07 May 2024 04:09:34 +0000 Manifest this update: Tue 07 May 2024 04:09:33 +0000 Manifest next update: Tue 14 May 2024 04:09:33 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: NyuD9cKtArojNaYxr7x9tPl3TSfDBFySzn/9TORACzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: May 7 04:09:33 2024 GMT Not After : May 14 04:09:33 2024 GMT Subject: CN=6639a97e-c69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:21:ea:25:b4:af:b9:b0:f8:0f:95:b7:a4: 6f:16:15:9c:cb:0d:24:f8:00:2d:5a:86:2c:1a:fe: 65:c2:20:3e:e6:d9:15:f1:9e:8f:67:23:22:cc:a7: 01:78:77:ed:5e:fb:c9:3f:3f:e7:ea:93:63:ff:d9: 4e:bc:ad:68:04:57:0d:5a:6d:e9:30:7e:10:dc:c6: ef:37:f6:f5:5f:c0:db:e4:dd:14:43:a7:c8:2d:ad: 5c:af:8b:e3:82:9c:a2:46:7e:58:53:8b:29:9b:30: 7a:82:50:f5:eb:2c:04:9e:69:b0:fb:7c:44:0f:e4: 14:93:20:fd:e7:82:59:bb:70:49:a6:5f:41:64:9d: d3:c8:c9:bd:7b:fc:ef:29:64:73:1c:82:ab:9b:8c: c4:05:cc:5a:3e:4f:16:66:e7:d4:db:58:7c:6c:93: 89:b6:74:e5:cf:27:3c:70:bc:8c:72:66:66:99:72: 5d:18:85:31:eb:30:fc:4a:ee:36:cd:a8:7d:c0:f1: ef:2e:5a:ea:df:9c:fd:76:50:24:7d:93:4b:2e:bf: d8:4a:50:0f:52:a7:a9:da:d3:d6:aa:19:9f:d1:01: 31:f1:b4:36:16:0b:12:c3:67:63:42:b5:f8:67:5e: 99:fd:cb:77:a0:49:c5:58:6b:5d:8a:1e:fc:c2:ab: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:8E:5A:34:4B:72:51:69:BE:12:78:12:98:6C:0D:4F:B5:D4:DD X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9f:b7:05:5a:2f:d0:d8:15:b4:ec:39:e7:86:1d:64:ff:9e: 64:e5:23:95:18:f5:a7:2f:1b:a0:07:03:90:a3:60:c5:ed:10: af:2b:ea:00:7d:1d:7a:ca:7d:33:ce:b9:e0:e7:6b:53:7c:e0: 14:c5:6b:be:a5:b7:a6:4d:60:96:0a:1a:ec:b7:04:01:d3:4a: da:9e:20:ea:bb:a8:23:dd:c5:1a:57:db:e6:61:a4:bc:3b:19: a5:47:c5:ab:e0:9f:1a:0f:de:fd:01:be:9a:12:13:09:2b:1e: 70:42:ff:f9:64:fc:5d:6a:44:57:bf:5b:3e:7a:a0:ac:6f:12: 00:5a:6e:00:5f:bd:c7:95:97:24:96:56:0b:8c:be:ea:d3:24: 34:bb:2e:16:1f:dc:49:7c:12:36:16:92:82:11:63:39:ba:70: b3:e7:09:47:6c:bf:65:3d:55:a3:25:aa:ad:76:68:cf:6b:6b: 6c:45:42:76:3b:23:50:bb:9d:6a:ec:ca:a6:48:5d:3c:ca:db: 4c:b9:af:6c:38:3a:2b:4f:c6:2b:37:18:21:3b:de:7f:9c:6a: 49:b4:4b:b3:b1:ef:e7:05:1d:d3:1d:27:a0:26:0a:79:1b:50: b1:66:e8:0c:fd:01:39:75:98:75:26:3a:db:17:d8:3b:2b:4b: 6f:78:48:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjQwNTA3MDQwOTMzWhcNMjQwNTE0MDQwOTMzWjAYMRYwFAYD VQQDEw02NjM5YTk3ZS1jNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2y8h6iW0r7mw+A+Vt6RvFhWcyw0k+AAtWoYsGv5lwiA+5tkV8Z6PZyMizKcB eHftXvvJPz/n6pNj/9lOvK1oBFcNWm3pMH4Q3MbvN/b1X8Db5N0UQ6fILa1cr4vj gpyiRn5YU4spmzB6glD16ywEnmmw+3xED+QUkyD954JZu3BJpl9BZJ3TyMm9e/zv KWRzHIKrm4zEBcxaPk8WZufU21h8bJOJtnTlzyc8cLyMcmZmmXJdGIUx6zD8Su42 zah9wPHvLlrq35z9dlAkfZNLLr/YSlAPUqep2tPWqhmf0QEx8bQ2FgsSw2djQrX4 Z16Z/ct3oEnFWGtdih78wqvycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAI8jlo0 S3JRab4SeBKYbA1PtdTdMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8n7cFWi/Q2BW07Dnnhh1k/55k5SOVGPWnLxugBwOQo2DF7RCvK+oA fR16yn0zzrng52tTfOAUxWu+pbemTWCWChrstwQB00raniDqu6gj3cUaV9vmYaS8 OxmlR8Wr4J8aD979Ab6aEhMJKx5wQv/5ZPxdakRXv1s+eqCsbxIAWm4AX73HlZck llYLjL7q0yQ0uy4WH9xJfBI2FpKCEWM5unCz5wlHbL9lPVWjJaqtdmjPa2tsRUJ2 OyNQu51q7MqmSF08yttMua9sODorT8YrNxghO95/nGpJtEuzse/nBR3THSegJgp5 G1CxZugM/QE5dZh1JjrbF9g7K0tveEhO -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org