$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: DYueJKH5czaU9HoLi1ZKc9ZMC+yOZAUs73nq/aa2zPM= Subject key identifier: AF:D8:F8:29:96:A7:EC:AB:0D:1B:0B:DF:36:54:6A:66:F9:1C:5D:92 Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 79 Signing time: Fri 17 May 2024 07:23:34 +0000 Manifest this update: Fri 17 May 2024 07:23:34 +0000 Manifest next update: Fri 24 May 2024 07:23:34 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: qjoo5SkzGzkA7KHaFykWiGDcG0rzmnZJGg1/bsVeVHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: May 17 07:23:34 2024 GMT Not After : May 24 07:23:34 2024 GMT Subject: CN=664705f6-41c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:94:d2:7b:3a:31:2a:5d:14:ff:b6:92:68: 83:2e:ba:e0:4c:ed:86:23:74:e4:e5:a7:6c:e5:33: 76:9c:8f:3b:38:86:38:3a:44:3e:21:c4:96:6c:36: c8:fc:a8:4d:bb:46:49:10:64:61:67:8d:e8:c0:0e: 37:d0:82:cc:9e:88:a6:6e:97:ee:bd:23:39:52:5d: b7:25:63:7a:13:83:74:7e:53:1e:a8:18:4a:66:31: c1:5c:69:e8:f6:2e:01:a6:c2:36:5d:e7:cf:9e:bc: 26:69:35:87:3e:8e:41:ee:2f:b6:56:12:20:e3:38: 30:f4:59:3a:1a:66:02:03:c4:38:36:0a:48:1a:87: d3:84:49:61:8a:6c:ef:60:ba:de:56:58:3f:63:b0: 5a:2f:7b:a6:76:57:d4:65:b8:67:00:03:a3:8c:eb: c6:c3:76:25:01:f3:c3:30:28:92:c8:ce:75:a0:d1: 5f:3d:7c:b7:aa:d0:e6:ae:29:9e:cf:7a:39:5f:f2: 07:09:a0:14:f8:e8:3c:d3:f9:b8:5e:14:ef:f1:3e: 88:4b:ca:73:18:a0:7c:fd:f9:a6:bd:68:ca:0d:97: d8:ed:15:a9:35:28:cb:f8:0b:ea:39:c6:b3:34:8c: 8f:0b:ad:66:ae:d8:90:e6:04:fd:2a:31:29:ba:2b: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:F8:29:96:A7:EC:AB:0D:1B:0B:DF:36:54:6A:66:F9:1C:5D:92 X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2c:fb:71:ff:8c:48:d1:d2:d2:cb:99:7c:30:90:7d:88:50: 33:20:bd:90:43:e0:5b:bd:7e:04:e3:5a:f9:1e:48:46:80:50: ad:3c:f3:51:eb:f9:e9:06:c5:f6:c9:26:d0:dd:d2:1a:9b:32: c5:80:10:e3:49:39:48:38:96:a2:ed:1b:fd:bc:2e:fb:f0:59: be:0b:4b:dd:c4:9b:bf:6d:55:0a:ce:4d:94:ca:7e:fd:5b:bf: 9f:f8:1b:42:78:db:61:fc:29:f7:bc:9a:a6:7b:67:2b:d8:6e: d5:be:ab:e6:f6:cf:66:ec:21:6a:29:12:24:dc:58:2e:ab:49: 31:94:24:88:05:cd:bd:ad:10:14:9e:3e:89:84:1f:09:1d:ef: 72:a2:d2:02:23:b1:34:a6:41:d8:38:26:10:c3:2a:42:5e:4e: 18:ca:91:6d:c5:df:7e:f2:da:0d:48:ff:0d:b7:b3:c6:70:15: 8f:de:cc:b3:ac:48:d1:5b:14:65:8d:39:06:20:07:83:64:89: ed:30:4b:ea:9a:7b:95:66:0d:94:24:62:1f:d5:30:9e:63:8a: fd:0a:68:8c:47:1f:cb:75:4b:9b:4a:dc:c1:0d:36:bc:3f:12: 50:7d:e2:40:42:fa:86:20:17:d3:45:bc:2f:b5:e1:67:71:ab: 8a:b2:b7:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RjkzNzExMC8GA1UEBRMoQzAwRjA1QUUwRkE5QjY4MEE5MUI1NkYwRDMyMUM1MTg4 QzFFNzEyQzAeFw0yNDA1MTcwNzIzMzRaFw0yNDA1MjQwNzIzMzRaMBgxFjAUBgNV BAMTDTY2NDcwNWY2LTQxYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6y5TSezoxKl0U/7aSaIMuuuBM7YYjdOTlp2zlM3acjzs4hjg6RD4hxJZsNsj8 qE27RkkQZGFnjejADjfQgsyeiKZul+69IzlSXbclY3oTg3R+Ux6oGEpmMcFcaej2 LgGmwjZd58+evCZpNYc+jkHuL7ZWEiDjODD0WToaZgIDxDg2Ckgah9OESWGKbO9g ut5WWD9jsFove6Z2V9RluGcAA6OM68bDdiUB88MwKJLIznWg0V89fLeq0OauKZ7P ejlf8gcJoBT46DzT+bheFO/xPohLynMYoHz9+aa9aMoNl9jtFak1KMv4C+o5xrM0 jI8LrWau2JDmBP0qMSm6K+FpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr9j4KZan 7KsNGwvfNlRqZvkcXZIwHwYDVR0jBBgwFoAUwA8Frg+ptoCpG1bw0yHFGIwecSww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGOTM3LzJGMkIzRjIwNUIy MzExRUVCODc3M0Y3MEM0RjlBRTAyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNT dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0E4RnJnLXB0b0NwRzFidzB5SEZHSXdlY1N3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG OTM3LzJGMkIzRjIwNUIyMzExRUVCODc3M0Y3MEM0RjlBRTAyL3dBOEZyZy1wdG9D cEcxYncweUhGR0l3ZWNTdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYs+3H/jEjR0tLLmXwwkH2IUDMgvZBD4Fu9fgTjWvkeSEaAUK0881Hr +ekGxfbJJtDd0hqbMsWAEONJOUg4lqLtG/28LvvwWb4LS93Em79tVQrOTZTKfv1b v5/4G0J422H8Kfe8mqZ7ZyvYbtW+q+b2z2bsIWopEiTcWC6rSTGUJIgFzb2tEBSe PomEHwkd73Ki0gIjsTSmQdg4JhDDKkJeThjKkW3F337y2g1I/w23s8ZwFY/ezLOs SNFbFGWNOQYgB4Nkie0wS+qae5VmDZQkYh/VMJ5jiv0KaIxHH8t1S5tK3MENNrw/ ElB94kBC+oYgF9NFvC+14Wdxq4qyt9w= -----END CERTIFICATE-----Generated at Fri May 17 08:13:50 2024 by rpki-client on console-fra.rpki-client.org