$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: SgRz4WQO1ZaQRYUT8shPDcDNbHp6Ytf8gGbWQ1321PU= Subject key identifier: D5:06:50:6A:CF:36:EA:A0:1C:75:01:7D:50:3D:F1:B8:3A:F6:1C:E9 Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 0534 Signing time: Tue 07 May 2024 00:58:33 +0000 Manifest this update: Tue 07 May 2024 00:58:32 +0000 Manifest next update: Tue 14 May 2024 00:58:32 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: YDlRA9fnD5CbehjhHyOCiMCWmjymOTfczcr09WSwWrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: May 7 00:58:32 2024 GMT Not After : May 14 00:58:32 2024 GMT Subject: CN=66397cb8-9824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9a:7b:1d:95:6e:59:b4:a9:7a:21:30:9c:41: 67:b7:52:13:f7:bc:32:d2:43:1f:3e:db:3e:5f:80: 54:bf:73:50:cb:d5:92:36:19:c6:80:5b:8f:15:04: ec:b8:5e:e8:1d:7f:16:ea:a3:18:c1:2b:dd:2a:e0: 56:6a:d5:54:00:55:10:1b:1a:ae:e2:b6:c1:47:f9: b4:37:76:04:db:f9:81:fc:50:51:ed:64:c6:39:88: 7a:00:3c:56:31:a8:47:9c:24:35:16:68:4c:a0:6c: f4:a4:bf:e6:81:cc:93:6e:89:18:dd:8e:f5:8f:1e: 43:cf:9c:1c:aa:0f:33:41:93:5a:28:27:1f:29:15: ce:e9:9e:9d:47:fa:a0:6c:76:0b:09:ad:7d:ed:ad: 48:cc:8b:48:34:ab:8d:11:05:6f:37:03:ee:e1:7e: 0c:15:f0:d1:45:8d:e6:5b:e8:b1:63:1d:34:c7:b0: ac:84:3b:65:a3:de:85:c8:1e:54:fe:6c:b8:bf:11: 01:cb:0c:31:c2:73:b2:65:cd:b2:02:eb:2a:17:65: 0e:fc:ec:23:1a:dd:57:7c:fc:73:9b:ea:ea:11:a6: 60:89:2a:fe:fe:93:af:b7:15:23:db:42:00:6f:0f: 2f:69:0a:2f:8b:48:ba:c7:bf:54:d6:e3:be:93:cf: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:06:50:6A:CF:36:EA:A0:1C:75:01:7D:50:3D:F1:B8:3A:F6:1C:E9 X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:80:1a:46:97:6e:25:56:ad:51:25:b7:00:7a:52:92:45:e9: e3:b2:f1:0b:32:f6:d9:c6:b1:aa:59:44:3c:d7:35:76:ca:5a: cd:15:37:ae:08:5f:8c:99:ee:fd:fb:ad:79:9c:48:19:50:89: ef:1d:10:49:2d:96:f0:86:ed:dd:55:e1:83:98:df:7e:8d:35: e3:eb:cd:82:43:35:7b:d5:fd:e9:45:ff:64:60:f2:9f:34:8b: f7:d5:98:99:4f:56:90:1f:12:41:cc:1e:c8:90:df:4a:a6:af: 39:8f:c7:84:d5:ff:fe:e9:74:7d:c8:1f:1e:ca:24:dd:0f:19: 75:80:59:4b:0e:78:1b:a7:de:63:4d:11:f8:83:cf:31:83:db: 57:e9:6b:d9:68:7e:9f:8b:54:ab:55:f1:f5:38:e8:bc:1e:0d: 31:cb:0d:18:a4:c1:63:42:68:8c:33:64:41:a2:10:22:f7:77: 03:01:d0:fe:e5:f0:cf:0a:35:07:d3:be:7a:82:e7:10:34:a8: fb:e7:42:93:0b:dd:e2:3b:73:f2:fe:06:04:cb:0b:83:58:6a: 3d:b9:da:13:c1:39:3f:8c:29:90:f4:c7:c0:6f:4e:23:ed:72: bd:dd:35:40:6b:b0:20:49:37:0d:06:92:07:d3:7e:6a:ca:21: d3:ff:ff:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjQwNTA3MDA1ODMyWhcNMjQwNTE0MDA1ODMyWjAYMRYwFAYD VQQDEw02NjM5N2NiOC05ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45p7HZVuWbSpeiEwnEFnt1IT97wy0kMfPts+X4BUv3NQy9WSNhnGgFuPFQTs uF7oHX8W6qMYwSvdKuBWatVUAFUQGxqu4rbBR/m0N3YE2/mB/FBR7WTGOYh6ADxW MahHnCQ1FmhMoGz0pL/mgcyTbokY3Y71jx5Dz5wcqg8zQZNaKCcfKRXO6Z6dR/qg bHYLCa197a1IzItINKuNEQVvNwPu4X4MFfDRRY3mW+ixYx00x7CshDtlo96FyB5U /my4vxEBywwxwnOyZc2yAusqF2UO/OwjGt1XfPxzm+rqEaZgiSr+/pOvtxUj20IA bw8vaQovi0i6x79U1uO+k8/mdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUGUGrP NuqgHHUBfVA98bg69hzpMB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXgBpGl24lVq1RJbcAelKSRenjsvELMvbZxrGqWUQ81zV2ylrNFTeu CF+Mme79+615nEgZUInvHRBJLZbwhu3dVeGDmN9+jTXj682CQzV71f3pRf9kYPKf NIv31ZiZT1aQHxJBzB7IkN9Kpq85j8eE1f/+6XR9yB8eyiTdDxl1gFlLDngbp95j TRH4g88xg9tX6WvZaH6fi1SrVfH1OOi8Hg0xyw0YpMFjQmiMM2RBohAi93cDAdD+ 5fDPCjUH0756gucQNKj750KTC93iO3Py/gYEywuDWGo9udoTwTk/jCmQ9MfAb04j 7XK93TVAa7AgSTcNBpIH035qyiHT///X -----END CERTIFICATE-----Generated at Tue May 7 02:01:00 2024 by rpki-client on console-ams.rpki-client.org