$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: lidDx/W9k4NQvoxt+SgoR/YZU95SDd/UipMbaDJC9Qw= Subject key identifier: 2F:A3:91:0A:D8:9A:0E:A7:BA:F0:BA:AC:DA:D7:A4:02:8E:76:81:F5 Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 038E Signing time: Sat 01 Jun 2024 03:43:19 +0000 Manifest this update: Sat 01 Jun 2024 03:43:19 +0000 Manifest next update: Sat 08 Jun 2024 03:43:19 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: g56IxzgF1pvGxAZOK7Df5TnyLIPQ6oUHqGY1Q4ghnZc=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: pcbA5T57P2MUdlC7Jx80FkjuDIgIlZMdTN8tkpoBtzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Jun 1 03:43:19 2024 GMT Not After : Jun 8 03:43:19 2024 GMT Subject: CN=665a98d7-1b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:61:f5:9c:66:22:a3:6f:34:5a:30:32:95:df: f0:17:07:6c:cd:3f:f4:e6:11:cf:b0:b2:0f:82:e5: ab:d8:14:2c:66:d3:55:3d:1f:fd:31:d1:a6:1a:27: d9:51:24:7d:a5:3e:17:dd:a2:cb:ab:ad:b0:88:a8: bf:42:28:9b:e7:e3:92:f4:c6:7a:16:75:35:10:5e: 17:52:6b:f9:c6:aa:4b:0a:49:01:89:e4:8b:e3:db: dd:dd:cd:f7:41:17:58:06:c1:a8:d0:88:83:76:7a: 11:d4:da:78:b6:95:15:9a:d9:54:19:69:d4:d4:c3: eb:42:d3:1e:16:b5:a2:51:b5:70:50:96:4e:77:3b: 77:3e:a3:00:40:c4:a2:4e:5c:c3:a8:02:35:a4:23: 31:bb:3f:2e:a3:a4:ad:2c:b2:75:a2:43:d5:2f:b9: bd:96:aa:18:39:69:6f:26:58:87:73:38:f6:69:f4: af:f0:c4:96:f8:8d:b5:3a:3c:43:9b:05:c9:35:ea: 42:5b:de:30:a2:cb:34:95:46:be:8f:7c:1e:9a:0e: 84:33:7e:e4:e2:5f:71:72:f9:15:f7:58:36:b9:01: e7:d1:b4:d5:11:bd:40:77:75:08:f7:13:79:92:ea: 8a:e8:e2:17:42:39:f4:f9:7f:5b:a3:e3:46:12:dd: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A3:91:0A:D8:9A:0E:A7:BA:F0:BA:AC:DA:D7:A4:02:8E:76:81:F5 X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b1:b3:cb:ae:42:63:bd:01:be:bb:da:4a:7e:4d:0f:e6:50: 0f:b3:4b:40:5b:45:d9:38:9d:58:20:c3:9c:5c:0b:bd:bf:f7: c5:56:22:13:1e:17:63:a7:3b:66:17:a1:4e:88:c3:63:17:9d: 2e:ab:53:42:b4:7d:74:93:86:15:5f:be:59:e3:2f:7b:b7:11: da:7e:b1:32:53:4a:32:f2:35:db:c1:8e:dc:d5:6e:f8:50:e6: 22:1a:81:4c:66:4e:d1:e6:27:db:8c:ab:81:7e:13:73:f5:87: dc:27:fa:7c:18:d2:11:17:50:e0:90:7b:4e:75:6d:21:97:da: 6b:54:b0:8f:c2:a8:71:fb:de:e7:fb:ab:c4:23:a7:e0:80:8f: f1:8d:e7:0c:eb:83:10:95:d6:34:92:dd:85:41:a4:06:ba:8c: 5d:ec:c0:f8:53:8b:c0:59:8c:1e:77:7c:b9:c9:93:9e:56:19: ff:5d:8e:8a:7e:d4:61:48:30:a6:12:15:4f:f7:ab:74:e6:2a: aa:3f:08:3c:2c:9e:eb:e2:af:b6:95:3a:61:c8:ea:d4:91:24: 39:e4:05:56:ef:51:21:a7:65:ce:ca:e5:c6:b3:f3:58:d5:7f: 17:4a:67:5e:bc:d8:7f:dd:8c:06:ad:dc:f6:30:35:06:8e:2d: 68:d4:3c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjQwNjAxMDM0MzE5WhcNMjQwNjA4MDM0MzE5WjAYMRYwFAYD VQQDEw02NjVhOThkNy0xYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2H1nGYio280WjAyld/wFwdszT/05hHPsLIPguWr2BQsZtNVPR/9MdGmGifZ USR9pT4X3aLLq62wiKi/Qiib5+OS9MZ6FnU1EF4XUmv5xqpLCkkBieSL49vd3c33 QRdYBsGo0IiDdnoR1Np4tpUVmtlUGWnU1MPrQtMeFrWiUbVwUJZOdzt3PqMAQMSi TlzDqAI1pCMxuz8uo6StLLJ1okPVL7m9lqoYOWlvJliHczj2afSv8MSW+I21OjxD mwXJNepCW94woss0lUa+j3wemg6EM37k4l9xcvkV91g2uQHn0bTVEb1Ad3UI9xN5 kuqK6OIXQjn0+X9bo+NGEt24LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+jkQrY mg6nuvC6rNrXpAKOdoH1MB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzsbPLrkJjvQG+u9pKfk0P5lAPs0tAW0XZOJ1YIMOcXAu9v/fFViIT HhdjpztmF6FOiMNjF50uq1NCtH10k4YVX75Z4y97txHafrEyU0oy8jXbwY7c1W74 UOYiGoFMZk7R5ifbjKuBfhNz9YfcJ/p8GNIRF1DgkHtOdW0hl9prVLCPwqhx+97n +6vEI6fggI/xjecM64MQldY0kt2FQaQGuoxd7MD4U4vAWYwed3y5yZOeVhn/XY6K ftRhSDCmEhVP96t05iqqPwg8LJ7r4q+2lTphyOrUkSQ55AVW71Ehp2XOyuXGs/NY 1X8XSmdevNh/3YwGrdz2MDUGji1o1Dx6 -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org