$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: 0IXg0N2BXjTziEOuGzWPQeaE9gwNXKZEr9xND3dDtsU= Subject key identifier: FC:12:A2:24:12:5A:B6:55:C0:63:1F:49:B9:50:67:35:56:CC:6B:14 Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: 25 Signing time: Wed 15 May 2024 08:40:47 +0000 Manifest this update: Wed 15 May 2024 08:40:46 +0000 Manifest next update: Wed 22 May 2024 08:40:46 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: VX/72l80fnCTUWU2dR/5t9SKJV+/fmEUPWWdd6RdsHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: May 15 08:40:46 2024 GMT Not After : May 22 08:40:46 2024 GMT Subject: CN=6644750f-d123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:71:d2:33:46:46:63:fc:55:51:18:86:98: b6:67:64:79:f0:0b:9a:40:41:05:7b:2f:d2:1e:86: 99:c7:92:c3:ca:35:d6:01:84:37:f1:a8:8c:13:3c: be:52:5a:86:5a:12:2a:e4:38:3e:0e:c7:56:b0:43: 37:3d:06:48:eb:53:a2:7a:e5:30:ee:39:ba:c6:ef: 32:36:79:c1:b7:80:6e:35:3a:02:95:18:93:ca:37: 89:0f:1a:7c:d4:95:17:7b:cc:31:da:80:ed:60:2e: 14:a1:58:8e:cd:e4:df:12:fb:d6:ed:fa:55:fd:c1: 66:3c:8b:cb:f4:5c:9b:f6:85:5d:e2:4a:8b:cc:6b: e8:fe:cd:8d:c9:1b:88:34:f2:bd:17:87:86:1d:01: 06:c7:f1:ef:5c:2e:68:30:f6:9b:0e:71:7b:9a:57: 1f:06:d6:42:66:2b:a0:f8:9c:50:f8:32:6c:21:b9: b2:3c:5d:70:82:ec:3b:36:5c:6b:13:a3:5c:02:cb: dd:b4:5c:1c:0e:f7:50:27:90:d3:5d:31:13:15:74: 4f:ca:2f:b9:19:f3:49:44:ef:46:ff:f1:2f:e9:1c: 65:91:16:88:1a:1d:99:40:f1:c7:fb:38:ce:c0:98: ea:03:d7:27:4c:0b:49:c0:d2:00:44:90:5d:28:ab: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:12:A2:24:12:5A:B6:55:C0:63:1F:49:B9:50:67:35:56:CC:6B:14 X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b4:15:9d:28:31:a4:78:02:58:3c:bc:c8:49:0e:c8:3f:11: 4d:bc:cc:6d:78:51:4b:46:7c:4f:4e:3e:7c:d3:f9:7c:5a:0d: b8:86:2a:60:c7:a5:ab:25:5e:34:8e:0d:34:25:20:0b:a7:7f: 1e:39:fc:55:0e:7a:8b:a1:a3:bf:d4:59:df:87:a0:ce:c5:a4: ee:d5:e9:07:94:df:28:26:5d:96:99:71:46:79:6f:f2:e1:61: c2:3d:fb:b2:d0:68:db:95:46:f4:9c:fe:82:f7:a9:03:d0:f6: 6a:3e:a8:06:12:d2:cd:1d:bb:47:42:b0:ee:58:e9:c6:0e:93: ef:e2:86:e5:74:a5:74:33:be:12:fd:40:45:f5:33:3e:fb:22: ff:39:fc:03:fa:94:a7:0d:4c:6a:13:f2:49:6a:aa:65:76:f1: 5f:fd:af:8b:31:b7:6d:bf:5b:14:53:b5:61:9d:d9:8e:d9:5f: 52:d5:70:6a:1c:54:51:6a:17:ef:e4:b9:c0:76:52:1f:54:16: dc:ae:8a:1c:6f:42:80:1f:ae:28:b6:ce:a5:e4:ab:9b:b0:9f: 68:bb:62:03:2e:48:cd:15:90:be:ae:81:80:e9:27:20:f3:a6: 1a:9d:a1:fb:51:3f:b9:8a:35:da:fc:54:e2:41:24:26:4d:67: bc:30:d6:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDAwRTExMC8GA1UEBRMoQzE5RDZCNkRFQjNBMUY5QzM5ODQ3RTE0Q0FBNTU5OTdC QzlDRjI3NjAeFw0yNDA1MTUwODQwNDZaFw0yNDA1MjIwODQwNDZaMBgxFjAUBgNV BAMTDTY2NDQ3NTBmLWQxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCprXHSM0ZGY/xVURiGmLZnZHnwC5pAQQV7L9IehpnHksPKNdYBhDfxqIwTPL5S WoZaEirkOD4Ox1awQzc9BkjrU6J65TDuObrG7zI2ecG3gG41OgKVGJPKN4kPGnzU lRd7zDHagO1gLhShWI7N5N8S+9bt+lX9wWY8i8v0XJv2hV3iSovMa+j+zY3JG4g0 8r0Xh4YdAQbH8e9cLmgw9psOcXuaVx8G1kJmK6D4nFD4MmwhubI8XXCC7Ds2XGsT o1wCy920XBwO91AnkNNdMRMVdE/KL7kZ80lE70b/8S/pHGWRFogaHZlA8cf7OM7A mOoD1ydMC0nA0gBEkF0oq49LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/BKiJBJa tlXAYx9JuVBnNVbMaxQwHwYDVR0jBBgwFoAUwZ1rbes6H5w5hH4UyqVZl7yc8nYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MDBFL0NFREE1MkM0RDk0 ODExRUVCQTM0QjQ3QkM0RjlBRTAyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5Yzhu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1oxcmJlczZINXc1aEg0VXlxVlpsN3ljOG5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MDBFL0NFREE1MkM0RDk0ODExRUVCQTM0QjQ3QkM0RjlBRTAyL3daMXJiZXM2SDV3 NWhINFV5cVZabDd5YzhuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHe0FZ0oMaR4Alg8vMhJDsg/EU28zG14UUtGfE9OPnzT+XxaDbiGKmDH paslXjSODTQlIAunfx45/FUOeouho7/UWd+HoM7FpO7V6QeU3ygmXZaZcUZ5b/Lh YcI9+7LQaNuVRvSc/oL3qQPQ9mo+qAYS0s0du0dCsO5Y6cYOk+/ihuV0pXQzvhL9 QEX1Mz77Iv85/AP6lKcNTGoT8klqqmV28V/9r4sxt22/WxRTtWGd2Y7ZX1LVcGoc VFFqF+/kucB2Uh9UFtyuihxvQoAfrii2zqXkq5uwn2i7YgMuSM0VkL6ugYDpJyDz phqdoftRP7mKNdr8VOJBJCZNZ7ww1ug= -----END CERTIFICATE-----Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org