$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft File: wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json) Hash identifier: GN1eNf5royL7h0iaWNK39h/x0eerTz2xgB5s7ySLFCY= Subject key identifier: 5F:99:F0:B7:C5:27:F2:26:55:81:67:DC:B0:2D:23:30:65:E2:F3:2C Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 Certificate issuer: /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft Manifest number: B7 Signing time: Sat 27 Apr 2024 06:20:18 +0000 Manifest this update: Sat 27 Apr 2024 06:20:18 +0000 Manifest next update: Sat 04 May 2024 06:20:18 +0000 Files and hashes: 1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: AX8Rz1O0MX+OHVM6dC4PZ8dlgMk3chzXxcT8PxCHO+c=) 2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Ov9Iy68ylv/0olkozASTg06oN1egQxgWNpmo0R0rgcU=) 3: 6881BE7EEFF411EDB617DD7DC4F9AE02.roa (hash: TN1mL+bmYnXtbKJTvUvjcUGn6fI2atat4P6SVByVo4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Validity Not Before: Apr 27 06:20:18 2024 GMT Not After : May 4 06:20:18 2024 GMT Subject: CN=662c9922-f1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:97:e6:88:90:d2:4c:c9:eb:fd:03:f7:fc: 96:2d:ba:76:78:66:05:69:68:30:05:49:01:8f:93: 95:bf:6d:14:91:3b:69:12:af:ef:6a:09:58:fe:ca: ae:33:9a:ee:e4:f4:a5:39:a2:9c:9b:80:21:ab:57: 5b:09:ee:5c:27:d8:1e:ef:65:b6:3c:48:2f:64:f5: d2:af:f1:65:05:db:6d:37:0b:79:b5:49:a6:c3:9b: a9:a9:c8:7e:f8:43:b4:d1:27:8b:18:ec:79:c2:29: f6:fd:6a:d5:2c:09:ee:f0:b4:c0:90:9c:c8:1a:cf: 21:44:25:d1:d4:11:b7:6e:db:6c:8b:7d:d3:3b:26: 7b:6f:c6:ac:47:e5:d1:ad:12:26:b1:93:3a:01:0b: 9e:dd:7c:9d:5b:b7:d6:70:36:fc:53:74:57:9b:e7: 56:d4:b9:6d:fb:15:ea:b9:26:4e:3f:43:41:99:5d: d7:47:17:06:c9:b6:dc:65:8b:05:2c:b4:99:24:53: 51:9b:fe:db:9d:60:bf:f5:72:e8:57:4c:81:62:98: b4:6e:2c:d5:39:1a:f9:03:d5:f9:9b:0e:b3:69:9e: 62:c9:ac:be:2a:12:6e:b3:a4:8a:07:97:4f:a3:73: 19:e6:78:4e:1c:46:5f:09:2b:08:de:cc:52:e4:1e: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:99:F0:B7:C5:27:F2:26:55:81:67:DC:B0:2D:23:30:65:E2:F3:2C X509v3 Authority Key Identifier: keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3e:f2:0b:eb:33:fe:c2:f4:8a:af:bf:5a:b4:45:2a:20:a2: e5:cf:3a:01:8e:13:6e:12:78:11:2b:33:8f:b1:7c:49:4d:a6: 2d:85:44:c4:f4:d8:aa:08:9a:4d:77:d4:f0:86:65:c9:3a:15: 9e:2d:ee:30:1e:09:5f:32:9d:ba:fc:b0:60:54:85:ef:b5:8f: 0a:1f:3f:6f:bf:9c:ee:05:48:0b:af:2e:59:76:33:8d:05:89: d4:a8:1d:26:82:67:3c:12:bc:c3:b2:f2:16:a1:c9:8d:71:70: 48:1f:7e:f4:f4:5d:a5:96:63:bd:03:61:64:d6:31:ed:0b:75: 07:fa:9c:01:ad:5b:9d:46:ba:4e:54:79:90:75:e3:77:22:e2: d1:e1:ea:8a:d5:04:b1:29:b7:e4:ce:f7:9c:20:cb:53:dd:6d: fd:27:e1:41:70:63:2c:1f:e0:55:0a:70:99:b7:02:37:72:0c: 42:fa:f0:81:ca:6f:91:d9:14:de:18:3c:85:f6:4e:98:b7:53: b0:0f:71:05:30:25:ac:1b:46:04:ad:ac:99:b8:ad:5f:14:a3: 3f:6d:2c:21:73:2c:69:af:2d:ff:29:bb:0e:de:5c:bf:62:5f: fb:d0:32:74:2e:2d:fd:6f:12:73:25:79:be:0e:cd:31:63:ab: 60:e9:52:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3 RkE5Mjg1RDEwHhcNMjQwNDI3MDYyMDE4WhcNMjQwNTA0MDYyMDE4WjAYMRYwFAYD VQQDEw02NjJjOTkyMi1mMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzOX5oiQ0kzJ6/0D9/yWLbp2eGYFaWgwBUkBj5OVv20UkTtpEq/vaglY/squ M5ru5PSlOaKcm4Ahq1dbCe5cJ9ge72W2PEgvZPXSr/FlBdttNwt5tUmmw5upqch+ +EO00SeLGOx5win2/WrVLAnu8LTAkJzIGs8hRCXR1BG3bttsi33TOyZ7b8asR+XR rRImsZM6AQue3XydW7fWcDb8U3RXm+dW1Llt+xXquSZOP0NBmV3XRxcGybbcZYsF LLSZJFNRm/7bnWC/9XLoV0yBYpi0bizVORr5A9X5mw6zaZ5iyay+KhJus6SKB5dP o3MZ5nhOHEZfCSsI3sxS5B6ylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Z8LfF J/ImVYFn3LAtIzBl4vMsMB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTMyMy9FN0ZDMkYxRUVGRUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJW Zm1aLTh1aktwM05fcVNoZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLPvIL6zP+wvSKr79atEUqIKLlzzoBjhNuEngRKzOPsXxJTaYthUTE 9NiqCJpNd9TwhmXJOhWeLe4wHglfMp26/LBgVIXvtY8KHz9vv5zuBUgLry5ZdjON BYnUqB0mgmc8ErzDsvIWocmNcXBIH3709F2llmO9A2Fk1jHtC3UH+pwBrVudRrpO VHmQdeN3IuLR4eqK1QSxKbfkzvecIMtT3W39J+FBcGMsH+BVCnCZtwI3cgxC+vCB ym+R2RTeGDyF9k6Yt1OwD3EFMCWsG0YErayZuK1fFKM/bSwhcyxpry3/KbsO3ly/ Yl/70DJ0Li39bxJzJXm+Ds0xY6tg6VIX -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:07 2024 by rpki-client on console-ams.rpki-client.org