$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json) Hash identifier: XO6uwHJEsE57hpVBQQ7Z5dk/37u88rllWi3W+2fBEDo= Subject key identifier: 2D:71:58:0A:B1:D4:E9:E2:8D:CF:BA:14:84:06:7D:1F:B2:DC:FD:8E Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 16C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft Manifest number: 168F Signing time: Sat 04 May 2024 17:16:24 +0000 Manifest this update: Sat 04 May 2024 17:16:24 +0000 Manifest next update: Sat 11 May 2024 17:16:24 +0000 Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: ta0FhVZyc9tU69fBJHUyfMNCxBF9e+33116gyY6azqw=) 2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: VBATkXjYIVoH0C4iNeRjPySzIZVhyo2JDikcE+6Jvbs=) 3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: nGeKeTUPgYPuvBrf2CFwlKqYex4DQBySE4sY9K3KqjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5826 (0x16c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: May 4 17:16:24 2024 GMT Not After : May 11 17:16:24 2024 GMT Subject: CN=66366d68-783f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:76:e2:af:49:ff:a2:07:d2:f8:ec:30:4d: 7b:85:79:44:00:04:75:a5:7d:fa:6f:ed:dd:89:88: e3:68:1f:e3:aa:88:55:19:fe:67:d4:2c:da:53:4d: d8:ba:19:00:2b:3f:89:e4:12:a2:0b:8c:5f:38:ba: fd:36:22:a6:95:8d:b6:f1:38:06:e9:27:3b:4e:ea: 8c:24:db:77:4a:17:a5:f4:02:16:a4:9c:00:06:a9: 0e:21:e5:62:07:04:73:ee:bd:d6:7f:5e:c0:ba:13: dc:18:0f:c7:97:2c:41:ff:c5:ba:55:c9:70:11:8e: 50:4a:a8:e0:54:c3:9c:5e:3a:9a:36:0d:fb:7d:75: ee:c0:21:c9:5c:8c:52:20:ab:d3:b8:60:61:92:ba: 17:e3:d6:fe:88:d6:5e:c4:52:ce:c6:07:c9:d7:1d: e5:b0:81:68:4b:0d:19:c4:20:51:24:38:7c:a5:cd: a3:85:cc:2e:80:26:5e:0d:19:30:6e:ac:a5:a9:51: 44:0f:40:55:e1:eb:3c:ed:50:ca:75:2b:0a:0c:8c: 94:84:d2:b4:15:f4:eb:31:cc:23:c7:87:04:bf:e2: e4:d0:77:13:0c:de:bf:20:89:aa:1e:72:3a:66:68: 01:17:e8:d6:97:79:03:92:0e:74:6a:d8:0d:1e:64: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:71:58:0A:B1:D4:E9:E2:8D:CF:BA:14:84:06:7D:1F:B2:DC:FD:8E X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8a:49:8f:20:1f:6b:0d:03:a7:0a:ce:8a:3d:0d:8a:71:89: 2f:a8:c2:82:8a:01:04:b8:94:fa:4c:da:48:a6:27:0d:8d:b6: 04:a8:bc:2d:5c:1f:62:5d:4f:58:e7:0b:cb:e1:a4:c1:95:7e: 5c:1d:ba:40:95:26:41:64:0a:9e:e3:b3:45:77:9e:8b:82:65: e8:b7:ac:a0:35:3c:14:16:77:d3:c8:8a:11:e8:26:d9:43:5c: 1f:71:e5:cc:a2:0c:6d:60:59:bb:17:9a:94:d3:5f:6e:5c:d8: 06:81:da:64:a9:3f:cd:0f:e9:80:99:26:c6:fb:18:c2:28:9b: e7:fc:72:72:a6:de:e9:34:cb:13:c2:78:c9:31:f8:9f:62:ac: 43:ec:7d:da:12:63:2b:4a:6f:27:71:1f:3e:43:f0:f2:ee:18: dc:b7:82:f8:a9:a5:9b:34:a1:fb:06:23:54:6c:66:b7:a2:25: ab:80:a6:3d:31:b8:2e:43:73:c7:ac:f1:0b:95:a4:44:ad:13: 48:2b:96:3d:db:04:8e:55:29:f0:a7:bd:50:fb:71:70:0c:33: 28:27:38:c7:f4:f0:c7:3c:f0:41:56:19:a8:41:58:82:01:a3: 46:de:22:0d:53:63:4b:c5:16:e3:84:5c:25:b9:14:09:1c:c3: 89:eb:2d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjQwNTA0MTcxNjI0WhcNMjQwNTExMTcxNjI0WjAYMRYwFAYD VQQDEw02NjM2NmQ2OC03ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEN24q9J/6IH0vjsME17hXlEAAR1pX36b+3diYjjaB/jqohVGf5n1CzaU03Y uhkAKz+J5BKiC4xfOLr9NiKmlY228TgG6Sc7TuqMJNt3Shel9AIWpJwABqkOIeVi BwRz7r3Wf17AuhPcGA/HlyxB/8W6VclwEY5QSqjgVMOcXjqaNg37fXXuwCHJXIxS IKvTuGBhkroX49b+iNZexFLOxgfJ1x3lsIFoSw0ZxCBRJDh8pc2jhcwugCZeDRkw bqylqVFED0BV4es87VDKdSsKDIyUhNK0FfTrMcwjx4cEv+Lk0HcTDN6/IImqHnI6 ZmgBF+jWl3kDkg50atgNHmSKeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1xWAqx 1Onijc+6FIQGfR+y3P2OMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ WklER00xSUhhVU84ZWJuOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPikmPIB9rDQOnCs6KPQ2KcYkvqMKCigEEuJT6TNpIpicNjbYEqLwt XB9iXU9Y5wvL4aTBlX5cHbpAlSZBZAqe47NFd56LgmXot6ygNTwUFnfTyIoR6CbZ Q1wfceXMogxtYFm7F5qU019uXNgGgdpkqT/ND+mAmSbG+xjCKJvn/HJypt7pNMsT wnjJMfifYqxD7H3aEmMrSm8ncR8+Q/Dy7hjct4L4qaWbNKH7BiNUbGa3oiWrgKY9 MbguQ3PHrPELlaRErRNIK5Y92wSOVSnwp71Q+3FwDDMoJzjH9PDHPPBBVhmoQViC AaNG3iINU2NLxRbjhFwluRQJHMOJ6y2l -----END CERTIFICATE-----Generated at Sat May 4 18:00:11 2024 by rpki-client on console-fra.rpki-client.org