$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: PcuRaL64EvIdk9+0C/d5fHoRr3xbc/fFBqSfR6w7x3o= Subject key identifier: A1:64:22:77:AB:A2:E7:D0:FD:A8:B5:A9:87:67:2C:3C:E6:52:36:83 Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0AD2 Signing time: Wed 24 Apr 2024 20:07:01 +0000 Manifest this update: Wed 24 Apr 2024 20:07:00 +0000 Manifest next update: Wed 01 May 2024 20:07:00 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: UKoqffBxTzJFt0p2rQwgt/acvfNht+toNzxnQVnm5VU=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: +JUSMu0C/kOLfZkdFWfDm5VHGngMhJgPT+7RyVNnJzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: Apr 24 20:07:00 2024 GMT Not After : May 1 20:07:00 2024 GMT Subject: CN=66296665-578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:c6:47:b1:06:b4:39:bc:a2:c6:4b:e9:77: 96:57:72:b7:ed:78:29:99:e1:17:8e:61:af:91:48: c8:d8:da:3f:8b:36:5e:40:9b:41:3b:7d:e9:8a:c5: 49:fe:35:c9:6c:9d:a0:4b:50:98:d0:6f:cf:bb:81: 10:86:ee:30:e2:09:df:6d:67:45:4c:e4:c3:c0:3f: 69:df:35:1b:5b:f3:9e:f4:40:7f:9f:37:a2:d4:82: 47:50:f8:51:13:90:46:c2:12:aa:60:df:98:b2:93: dd:9e:f5:7e:9b:b8:5e:9f:f6:c2:b0:d6:1f:a9:40: 9a:c8:4d:8f:bc:14:08:98:8b:d1:ea:d8:0d:bd:fb: 3f:67:0c:ba:b9:ec:51:df:e8:36:24:1d:e2:ff:ef: ea:97:57:81:d5:fe:4b:79:bd:f6:61:20:bd:24:09: 0a:bb:8b:26:f2:7c:cd:a9:90:b4:76:3b:47:31:18: 27:04:ef:e5:cf:db:fa:69:63:54:3c:83:a3:98:0e: 4b:86:22:2b:82:5d:7f:74:3f:f1:f6:ec:f1:eb:63: a5:e6:1b:b3:75:b6:3f:c7:6a:de:f5:54:22:92:b3: e9:53:f1:6e:58:4f:e1:26:e3:d4:eb:c2:33:57:ab: 4c:89:07:90:1d:84:d8:a7:5b:83:fb:fa:5f:ed:8e: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:22:77:AB:A2:E7:D0:FD:A8:B5:A9:87:67:2C:3C:E6:52:36:83 X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:60:74:d5:ed:5b:37:77:dc:e0:8c:a4:09:5b:12:27:dd:30: 05:3a:06:dd:4f:51:73:e8:c6:f0:73:73:63:40:93:78:ca:11: 89:72:60:b4:50:c4:ab:86:28:85:58:b4:a0:8b:6a:92:d4:35: e7:3a:a3:24:b7:dd:14:f2:f8:cc:ff:07:71:32:e3:22:60:b8: 78:08:d6:cd:ea:47:93:98:30:47:c2:7d:f8:ac:09:cb:3d:f5: 6d:73:71:c7:e6:01:e3:23:7f:e5:28:50:d1:0e:02:9f:55:20: c6:bc:e8:a7:2d:8a:4a:05:e5:85:73:d9:6d:61:61:34:f9:01: 1e:1d:23:ad:ad:b6:d2:f9:25:fe:b8:83:cd:6b:6e:6a:6e:ee: 0f:ec:b7:9e:58:74:28:dd:18:c2:89:13:03:3f:39:2b:bb:f8: f6:bc:07:b1:c8:43:27:5d:c4:7a:a5:e0:bb:9d:6c:78:d5:86: 64:58:d4:70:4e:fa:9b:b9:25:e9:61:6c:dc:bf:68:46:8d:60: c9:a2:c6:26:01:38:21:71:19:87:8f:4e:7c:49:ff:e7:68:ed: 9c:67:93:5c:50:bf:19:46:91:00:d9:ad:07:4d:47:0d:35:b6: 77:ce:7e:3f:f2:12:b5:47:c5:34:04:77:a3:e2:34:8d:c5:36: 0f:ec:a2:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjQwNDI0MjAwNzAwWhcNMjQwNTAxMjAwNzAwWjAYMRYwFAYD VQQDEw02NjI5NjY2NS01NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFzGR7EGtDm8osZL6XeWV3K37XgpmeEXjmGvkUjI2No/izZeQJtBO33pisVJ /jXJbJ2gS1CY0G/Pu4EQhu4w4gnfbWdFTOTDwD9p3zUbW/Oe9EB/nzei1IJHUPhR E5BGwhKqYN+YspPdnvV+m7hen/bCsNYfqUCayE2PvBQImIvR6tgNvfs/Zwy6uexR 3+g2JB3i/+/ql1eB1f5Leb32YSC9JAkKu4sm8nzNqZC0djtHMRgnBO/lz9v6aWNU PIOjmA5LhiIrgl1/dD/x9uzx62Ol5huzdbY/x2re9VQikrPpU/FuWE/hJuPU68Iz V6tMiQeQHYTYp1uD+/pf7Y5JawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFkIner oufQ/ai1qYdnLDzmUjaDMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMYHTV7Vs3d9zgjKQJWxIn3TAFOgbdT1Fz6Mbwc3NjQJN4yhGJcmC0 UMSrhiiFWLSgi2qS1DXnOqMkt90U8vjM/wdxMuMiYLh4CNbN6keTmDBHwn34rAnL PfVtc3HH5gHjI3/lKFDRDgKfVSDGvOinLYpKBeWFc9ltYWE0+QEeHSOtrbbS+SX+ uIPNa25qbu4P7LeeWHQo3RjCiRMDPzkru/j2vAexyEMnXcR6peC7nWx41YZkWNRw TvqbuSXpYWzcv2hGjWDJosYmATghcRmHj058Sf/naO2cZ5NcUL8ZRpEA2a0HTUcN NbZ3zn4/8hK1R8U0BHej4jSNxTYP7KJu -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:14 2024 by rpki-client on console-ams.rpki-client.org