$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft File: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json) Hash identifier: z5EfMOdDcBtPaFTy3+8DHNGUzPexW68Y/7IxsB5ap4A= Subject key identifier: 94:05:C1:26:10:5A:00:39:1F:28:41:E8:D4:FF:24:5F:6C:1D:47:F0 Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 Certificate issuer: /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft Manifest number: 23 Signing time: Wed 15 May 2024 08:43:10 +0000 Manifest this update: Wed 15 May 2024 08:43:09 +0000 Manifest next update: Wed 22 May 2024 08:43:09 +0000 Files and hashes: 1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: hgHMhocFQ11uyf9wsgPgBdNKwOTUYk4b6biwrTQwKRc=) 2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: IbdaHFfeEoQaUZaW7ARqIDcFtCSyxpUy30pPQAG7s/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Validity Not Before: May 15 08:43:09 2024 GMT Not After : May 22 08:43:09 2024 GMT Subject: CN=6644759e-c2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:a4:c3:ec:2c:a6:d9:4d:f6:33:37:4e:1a: 74:1c:74:db:4d:ab:95:9c:4d:54:54:0b:0f:d5:a6: f2:fa:78:be:5a:23:a0:b4:8f:84:64:24:6b:6b:7e: c7:f7:26:ab:b8:85:58:e5:43:5a:86:bd:9b:20:7a: 14:72:cf:0a:42:21:6b:97:52:38:54:17:2d:37:8d: 44:5f:9d:dc:e0:04:4b:2a:08:56:80:63:9c:ed:06: 6b:08:a9:dd:1a:f7:52:f8:fd:7e:2d:ae:09:ee:1a: 0b:75:c8:94:29:02:7e:31:61:5b:fd:03:f6:96:ec: c8:1d:da:eb:dc:ab:4d:43:cf:95:99:c3:50:81:f7: 07:f7:a1:5c:74:76:1e:1c:54:dd:d5:d3:a0:57:22: 8e:0a:75:a6:d2:c3:e7:48:c6:5b:11:5d:84:8b:98: 0c:11:f2:d6:71:5d:a3:c0:12:ab:34:64:0d:d2:0d: 1d:08:1b:50:99:1f:8b:44:6c:cf:09:83:81:af:c0: d5:56:cf:66:69:60:c2:c2:a2:74:f9:cd:0c:49:cf: 45:6c:4d:5b:8c:16:d0:5d:ff:c4:b6:2f:1f:74:bc: c1:e9:24:74:d5:3d:2d:ee:44:b6:d0:f0:a5:aa:5f: 68:7d:c8:e1:0c:3e:6e:ac:dc:6e:4e:ff:50:5c:0b: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:05:C1:26:10:5A:00:39:1F:28:41:E8:D4:FF:24:5F:6C:1D:47:F0 X509v3 Authority Key Identifier: keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:ee:49:0e:0c:ca:7f:37:42:a4:0b:a2:63:f4:97:ab:37:3b: 18:6d:a0:c7:9b:66:39:a2:0a:22:dd:3f:7e:57:c4:76:99:ea: c2:1e:e6:40:6e:49:73:18:9d:60:cf:c2:96:ef:e1:60:57:7a: fd:6d:c6:42:ef:03:d9:b9:c6:01:a7:d1:3f:86:35:37:55:9b: 41:e3:b5:78:d5:57:c4:50:62:3e:65:39:d0:d6:8b:ae:ff:43: 99:98:c0:28:7f:85:ce:97:d3:ae:a2:29:7d:49:9e:31:61:9a: 3c:d4:df:f9:b0:6a:8e:01:ac:61:90:e0:70:60:cc:34:38:a2: 5d:25:45:5b:e2:c2:fb:dc:47:60:ac:d7:37:c3:8a:ae:80:e7: 32:b3:cd:1b:a2:37:83:32:6f:aa:b0:8f:64:f4:9b:91:28:eb: 13:32:57:bc:46:1f:40:59:13:e3:15:31:dd:1a:ac:15:ab:ad: 05:bf:db:aa:79:ce:8e:5c:cb:75:1a:f7:64:ce:56:0c:69:ec: 0a:0d:59:89:83:83:4f:46:f3:13:55:a3:7d:ff:fe:6d:7d:3e: 09:8e:cb:e8:3e:d0:ea:c6:7a:43:5c:e3:3c:5c:4d:c7:f6:f6: ce:92:42:77:6c:c5:88:7b:dd:26:9b:83:37:5f:e0:2a:cc:24: e9:8d:63:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODMyMjExMC8GA1UEBRMoNUFGMzQ1QzIyMkIwOUE1NTVDN0U2QUE1QTU3MzYxMDMw QjkzMTdBNjAeFw0yNDA1MTUwODQzMDlaFw0yNDA1MjIwODQzMDlaMBgxFjAUBgNV BAMTDTY2NDQ3NTllLWMyZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQNqTD7Cym2U32MzdOGnQcdNtNq5WcTVRUCw/VpvL6eL5aI6C0j4RkJGtrfsf3 Jqu4hVjlQ1qGvZsgehRyzwpCIWuXUjhUFy03jURfndzgBEsqCFaAY5ztBmsIqd0a 91L4/X4trgnuGgt1yJQpAn4xYVv9A/aW7Mgd2uvcq01Dz5WZw1CB9wf3oVx0dh4c VN3V06BXIo4KdabSw+dIxlsRXYSLmAwR8tZxXaPAEqs0ZA3SDR0IG1CZH4tEbM8J g4GvwNVWz2ZpYMLConT5zQxJz0VsTVuMFtBd/8S2Lx90vMHpJHTVPS3uRLbQ8KWq X2h9yOEMPm6s3G5O/1BcC+eRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlAXBJhBa ADkfKEHo1P8kX2wdR/AwHwYDVR0jBBgwFoAUWvNFwiKwmlVcfmqlpXNhAwuTF6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MzIyLzU1QUMwNjY2REY1 ODExRUU5RjRDQ0Y1RUM0RjlBRTAyL1d2TkZ3aUt3bWxWY2ZtcWxwWE5oQXd1VEY2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3ZORndpS3dtbFZjZm1xbHBYTmhBd3VURjZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MzIyLzU1QUMwNjY2REY1ODExRUU5RjRDQ0Y1RUM0RjlBRTAyL1d2TkZ3aUt3bWxW Y2ZtcWxwWE5oQXd1VEY2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN3uSQ4Myn83QqQLomP0l6s3OxhtoMebZjmiCiLdP35XxHaZ6sIe5kBu SXMYnWDPwpbv4WBXev1txkLvA9m5xgGn0T+GNTdVm0HjtXjVV8RQYj5lOdDWi67/ Q5mYwCh/hc6X066iKX1JnjFhmjzU3/mwao4BrGGQ4HBgzDQ4ol0lRVviwvvcR2Cs 1zfDiq6A5zKzzRuiN4Myb6qwj2T0m5Eo6xMyV7xGH0BZE+MVMd0arBWrrQW/26p5 zo5cy3Ua92TOVgxp7AoNWYmDg09G8xNVo33//m19PgmOy+g+0OrGekNc4zxcTcf2 9s6SQndsxYh73Sabgzdf4CrMJOmNYyo= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org