$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft File: WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json) Hash identifier: t7YHm378fyL8xmtHc1sOATWzaaS6bIz5EizczB6ZEIg= Subject key identifier: AE:C7:09:33:C1:11:2F:92:90:54:05:A9:01:03:86:FD:9E:D0:C2:6E Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA Certificate issuer: /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft Manifest number: F7 Signing time: Fri 03 May 2024 05:45:07 +0000 Manifest this update: Fri 03 May 2024 05:45:06 +0000 Manifest next update: Fri 10 May 2024 05:45:06 +0000 Files and hashes: 1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: qHoSjLe39VMcBLbtexe43m46CdZ4oQITCRr9gGMgVRA=) 2: ECD869468DDB11ED8FBBE183C4F9AE02.roa (hash: ecKiFk7uN6InJInU9egVh8ACrhR1NqBjXQbROigcsNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Validity Not Before: May 3 05:45:06 2024 GMT Not After : May 10 05:45:06 2024 GMT Subject: CN=663479e3-311f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:d5:05:18:03:e2:9c:0a:7c:1c:50:f6:28: 21:30:09:fe:02:c1:47:8a:ad:5b:d8:fe:f8:9a:3c: bc:db:d2:97:d9:02:b6:6a:63:ba:58:31:79:ea:1e: 0d:98:5b:b7:ab:ec:ba:67:cb:2c:d0:f5:09:97:52: 6a:02:77:72:6f:13:99:3c:88:12:c5:97:19:a9:8b: d7:4d:00:d0:de:c4:d8:c9:9d:3f:eb:d4:3e:1f:3a: 03:a4:5b:ab:15:e7:6e:fe:22:c4:f8:b5:27:33:bb: d0:e9:3e:d5:8b:eb:a3:19:eb:4f:07:89:12:4c:45: c2:3a:93:0a:d3:4c:90:ae:2d:38:b7:b7:c7:c4:9c: a0:47:e8:a5:df:c1:f4:88:b3:43:97:7c:a3:96:44: 11:7c:21:6d:7c:4b:6f:a4:d9:4f:c6:4d:27:ed:75: 9b:b9:7b:d4:c8:99:af:f7:4b:0f:a7:e2:ea:5f:5c: f1:39:59:bb:6a:4d:1e:39:ff:b1:0b:86:89:ac:a0: 49:00:97:83:cf:66:e0:3f:16:01:d0:92:64:b4:6a: 8c:e6:17:2c:ad:df:77:47:54:02:7f:df:52:e6:35: a3:10:4d:c5:0f:e1:ec:3f:72:74:6f:30:77:b0:95: a5:8e:18:1e:02:57:8b:6c:19:1c:b4:e9:e7:4a:2d: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C7:09:33:C1:11:2F:92:90:54:05:A9:01:03:86:FD:9E:D0:C2:6E X509v3 Authority Key Identifier: keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:48:a6:d2:f0:91:53:b0:1f:9a:2a:32:c8:d5:38:1e:0f: ca:ff:81:0b:31:7d:84:bf:65:8e:d9:6b:ff:ff:a5:81:3c:48: 04:1d:7a:ca:f9:9c:f7:fe:cf:ee:88:8b:76:89:1d:a7:03:8f: 1e:02:6f:10:31:15:21:a2:8b:0f:11:fc:39:c0:62:db:d6:bf: 04:10:b1:84:6b:75:c3:ee:ee:1e:8c:ae:5c:7b:ac:57:05:79: d3:f3:71:6e:7a:8c:95:72:87:bf:36:e6:cf:5f:2f:1b:66:81: 9e:4e:b2:d0:14:eb:de:5a:26:84:9f:00:0c:88:1a:0a:c7:ab: 0d:24:ee:57:08:25:92:e2:d5:51:8e:91:6a:b6:ce:5e:80:44: fe:cc:39:18:27:05:d4:1e:ef:bd:54:0f:1b:bc:7b:01:0d:f0: 21:fb:7e:62:2e:cd:11:ac:b2:17:5f:b8:d8:ab:5e:10:f8:98: b9:3e:16:52:e9:ca:4d:ed:b9:ce:8f:c5:5b:25:b1:2d:25:de: 43:d1:47:ec:70:ab:c7:ab:2f:d8:bc:cb:9b:90:7d:50:51:be: da:85:5f:05:5f:bc:6f:b7:ea:c0:7b:1e:66:1d:df:c9:2a:06: d2:a3:56:ed:d7:24:7b:71:26:dc:1e:e2:a1:50:50:35:0e:0c: 28:55:82:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3 RDFBMUE2Q0EwHhcNMjQwNTAzMDU0NTA2WhcNMjQwNTEwMDU0NTA2WjAYMRYwFAYD VQQDEw02NjM0NzllMy0zMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunvVBRgD4pwKfBxQ9ighMAn+AsFHiq1b2P74mjy829KX2QK2amO6WDF56h4N mFu3q+y6Z8ss0PUJl1JqAndybxOZPIgSxZcZqYvXTQDQ3sTYyZ0/69Q+HzoDpFur Fedu/iLE+LUnM7vQ6T7Vi+ujGetPB4kSTEXCOpMK00yQri04t7fHxJygR+il38H0 iLNDl3yjlkQRfCFtfEtvpNlPxk0n7XWbuXvUyJmv90sPp+LqX1zxOVm7ak0eOf+x C4aJrKBJAJeDz2bgPxYB0JJktGqM5hcsrd93R1QCf99S5jWjEE3FD+HsP3J0bzB3 sJWljhgeAleLbBkctOnnSi3cowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7HCTPB ES+SkFQFqQEDhv2e0MJuMB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhB VklWQVMwWE1OVXA5R2hwc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7P0im0vCRU7AfmioyyNU4Hg/K/4ELMX2Ev2WO2Wv//6WBPEgEHXrK +Zz3/s/uiIt2iR2nA48eAm8QMRUhoosPEfw5wGLb1r8EELGEa3XD7u4ejK5ce6xX BXnT83FueoyVcoe/NubPXy8bZoGeTrLQFOveWiaEnwAMiBoKx6sNJO5XCCWS4tVR jpFqts5egET+zDkYJwXUHu+9VA8bvHsBDfAh+35iLs0RrLIXX7jYq14Q+Ji5PhZS 6cpN7bnOj8VbJbEtJd5D0UfscKvHqy/YvMubkH1QUb7ahV8FX7xvt+rAex5mHd/J KgbSo1bt1yR7cSbcHuKhUFA1DgwoVYJx -----END CERTIFICATE-----Generated at Fri May 3 06:28:40 2024 by rpki-client on console-fra.rpki-client.org