$ rpki-client -vvf rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft File: WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft (raw, json) Hash identifier: zarceXDIe9JSH7JBGZk9qll9bpc5+I/IL8k1auNoHNU= Subject key identifier: 73:DC:FC:C5:60:06:14:5A:F0:8E:27:A5:01:89:03:82:2F:E5:9E:C7 Authority key identifier: 58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74 Certificate issuer: /CN=A91455BE/serialNumber=5839D445BA3B3F53E2D0A42023100B1875A96174 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft Manifest number: 72 Signing time: Fri 17 May 2024 07:31:22 +0000 Manifest this update: Fri 17 May 2024 07:31:21 +0000 Manifest next update: Fri 24 May 2024 07:31:21 +0000 Files and hashes: 1: WDnURbo7P1Pi0KQgIxALGHWpYXQ.crl (hash: A+KonnbgDxR2KceVxQweqMFOVa7922codQawGtLDBpQ=) 2: 27DE3D4C675511EEAD204D46C4F9AE02.roa (hash: qHL4gu1EUj7Oyzpx7BrZuPQd3XpAvcpeIebqUwat6IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.crl rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91455BE/serialNumber=5839D445BA3B3F53E2D0A42023100B1875A96174 Validity Not Before: May 17 07:31:21 2024 GMT Not After : May 24 07:31:21 2024 GMT Subject: CN=664707ca-0131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:25:8a:de:91:1e:a0:01:45:61:f8:c2:4a: 30:c1:bb:09:e5:13:ef:6a:ee:d0:d5:a9:e5:63:b9: 99:36:42:60:37:15:35:05:4d:6d:e4:9d:a5:29:fe: e7:56:63:38:68:10:e9:c5:92:4e:a5:08:c9:28:80: 33:95:ba:73:68:91:7c:84:5a:36:84:b3:d9:fb:33: 65:db:08:5c:bc:2e:b6:65:49:7a:72:b7:1f:b3:0b: e8:c3:48:a8:db:46:08:6a:d4:bb:4a:84:ca:09:d2: 10:95:82:00:ea:93:6b:8f:40:a9:51:69:01:09:1b: 4f:6f:f3:a8:ce:d0:71:b2:d0:4d:12:32:00:62:08: 38:c4:57:05:3a:3b:fc:48:5d:9e:64:1b:a9:90:dc: 62:38:49:ea:17:81:a0:dc:82:31:ea:bd:f6:4a:f4: 0c:2d:80:15:f5:4a:7e:c3:e1:f0:a8:25:11:b0:c5: 7a:8b:ed:fe:0e:4f:ff:16:58:82:96:c0:35:29:45: 25:1a:12:3c:aa:34:67:ac:64:4a:aa:56:9a:ea:92: 22:93:7a:63:cd:65:60:d0:4c:0b:fc:e4:2a:06:62: 96:79:30:93:d0:be:a0:08:f6:04:19:a7:11:0e:0a: 14:84:74:cb:98:c7:e4:62:b7:04:76:24:ed:37:88: ee:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DC:FC:C5:60:06:14:5A:F0:8E:27:A5:01:89:03:82:2F:E5:9E:C7 X509v3 Authority Key Identifier: keyid:58:39:D4:45:BA:3B:3F:53:E2:D0:A4:20:23:10:0B:18:75:A9:61:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WDnURbo7P1Pi0KQgIxALGHWpYXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91455BE/DDDA7ED6675411EE9DE70143C4F9AE02/WDnURbo7P1Pi0KQgIxALGHWpYXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e7:09:a2:7f:9b:6a:c1:31:98:ec:b0:b9:35:2d:ce:cb:d1: 62:22:7c:8a:eb:cb:ba:92:19:53:f5:d3:0a:b7:ca:9b:d9:83: a4:54:98:25:9c:95:76:c6:75:10:0e:5c:ff:27:45:b4:38:13: d7:f1:46:d7:21:01:94:fd:69:d0:e4:02:06:e6:29:dc:b9:da: 71:2f:05:7a:61:ca:12:8d:d7:c0:45:0f:2d:15:a8:b8:63:ff: b6:df:ac:32:af:ac:c2:5b:20:3b:f1:42:7b:2f:42:75:6b:6e: 63:d1:1c:30:c9:13:4a:ca:49:0e:41:7f:a7:2b:1c:08:a1:9a: 23:3a:c2:f0:84:f1:ff:23:52:36:1e:ae:e8:9e:0f:90:be:29: 4f:c5:00:52:2b:72:b6:79:90:7a:f8:05:7c:df:d9:fe:53:46: aa:b3:56:ab:ca:14:ea:a6:93:02:28:cc:52:22:ad:bb:18:ee: 57:09:28:52:b3:3e:4c:6c:01:bc:a9:32:66:e1:f1:aa:47:e4: 90:54:31:38:b4:16:6f:5e:70:60:1b:39:95:ac:aa:48:5d:49: 0b:6b:53:eb:2d:99:ce:81:bd:f0:0d:e8:d6:19:8a:30:0c:5b: 74:e9:da:84:d6:b4:74:43:00:17:af:ff:bf:10:dc:43:dc:af: d8:d1:56:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTVCRTExMC8GA1UEBRMoNTgzOUQ0NDVCQTNCM0Y1M0UyRDBBNDIwMjMxMDBCMTg3 NUE5NjE3NDAeFw0yNDA1MTcwNzMxMjFaFw0yNDA1MjQwNzMxMjFaMBgxFjAUBgNV BAMTDTY2NDcwN2NhLTAxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2WiWK3pEeoAFFYfjCSjDBuwnlE+9q7tDVqeVjuZk2QmA3FTUFTW3knaUp/udW YzhoEOnFkk6lCMkogDOVunNokXyEWjaEs9n7M2XbCFy8LrZlSXpytx+zC+jDSKjb Rghq1LtKhMoJ0hCVggDqk2uPQKlRaQEJG09v86jO0HGy0E0SMgBiCDjEVwU6O/xI XZ5kG6mQ3GI4SeoXgaDcgjHqvfZK9AwtgBX1Sn7D4fCoJRGwxXqL7f4OT/8WWIKW wDUpRSUaEjyqNGesZEqqVprqkiKTemPNZWDQTAv85CoGYpZ5MJPQvqAI9gQZpxEO ChSEdMuYx+RitwR2JO03iO7/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc9z8xWAG FFrwjielAYkDgi/lnscwHwYDVR0jBBgwFoAUWDnURbo7P1Pi0KQgIxALGHWpYXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NUJFL0REREE3RUQ2Njc1 NDExRUU5REU3MDE0M0M0RjlBRTAyL1dEblVSYm83UDFQaTBLUWdJeEFMR0hXcFlY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0RuVVJibzdQMVBpMEtRZ0l4QUxHSFdwWVhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NUJFL0REREE3RUQ2Njc1NDExRUU5REU3MDE0M0M0RjlBRTAyL1dEblVSYm83UDFQ aTBLUWdJeEFMR0hXcFlYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjnCaJ/m2rBMZjssLk1Lc7L0WIifIrry7qSGVP10wq3ypvZg6RUmCWc lXbGdRAOXP8nRbQ4E9fxRtchAZT9adDkAgbmKdy52nEvBXphyhKN18BFDy0VqLhj /7bfrDKvrMJbIDvxQnsvQnVrbmPRHDDJE0rKSQ5Bf6crHAihmiM6wvCE8f8jUjYe ruieD5C+KU/FAFIrcrZ5kHr4BXzf2f5TRqqzVqvKFOqmkwIozFIirbsY7lcJKFKz PkxsAbypMmbh8apH5JBUMTi0Fm9ecGAbOZWsqkhdSQtrU+stmc6BvfAN6NYZijAM W3Tp2oTWtHRDABev/78Q3EPcr9jRVuQ= -----END CERTIFICATE-----Generated at Fri May 17 08:13:49 2024 by rpki-client on console-fra.rpki-client.org