$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft File: wN6dhGshfHjdZIVanteaw9JxEI4.mft (raw, json) Hash identifier: 2NsBobWXu+H8lKKZQ2UqprSzpj5T7EzcXWHLXwY+8P4= Subject key identifier: D9:E4:95:93:11:99:08:DD:0F:D3:01:3B:96:56:B2:06:7C:56:0A:D5 Authority key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E Certificate issuer: /CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft Manifest number: 0191 Signing time: Wed 01 May 2024 05:02:46 +0000 Manifest this update: Wed 01 May 2024 05:02:45 +0000 Manifest next update: Wed 08 May 2024 05:02:45 +0000 Files and hashes: 1: wN6dhGshfHjdZIVanteaw9JxEI4.crl (hash: /0S6ZHM6IP3I2rh7xgHF/qLKYJxg31p9bbPznXHUx8Q=) 2: F3862312575011EDA38B8A6DC4F9AE02.roa (hash: CHJvzVDKqNtSgxZ7VZRTTWB44l85IJL6x9+LPVh3frQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Validity Not Before: May 1 05:02:45 2024 GMT Not After : May 8 05:02:45 2024 GMT Subject: CN=6631ccf6-10d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:0b:91:5a:8d:f9:4b:92:d3:fa:c8:e1:4e: 11:58:03:b8:14:6b:38:28:03:94:b1:f0:cb:97:9b: d6:38:c0:5b:d9:4c:55:a4:78:3b:2a:d6:58:4e:8b: 4e:a4:46:cf:c6:60:db:5b:32:c0:dd:4e:76:0d:08: ed:43:3f:23:f8:fb:e2:b8:f7:56:aa:5d:29:c5:94: 09:f0:8b:8c:14:11:3b:30:76:be:2d:07:62:79:68: e6:de:ba:c7:01:a8:d6:81:48:24:b5:10:49:bc:09: 59:50:ac:c8:4c:19:4f:a1:be:8d:65:bf:ec:0d:ff: 8b:9f:b3:2c:6f:83:55:21:98:e1:ce:1d:ea:55:a7: 66:e8:5d:85:51:dd:93:94:f0:92:b4:d2:39:99:e4: fb:c0:bc:69:cd:c1:4d:c3:48:ae:aa:23:0b:79:21: b9:88:36:0b:5c:6f:dc:b7:64:7e:c4:f3:c3:63:ef: 3b:88:50:30:b3:fb:3c:f0:01:ab:2d:49:cd:d5:0b: 3d:40:9e:cb:82:40:f0:7d:52:c6:c0:37:f7:85:b9: 4f:aa:e4:d0:3f:27:05:c2:87:b6:f9:a3:bd:cc:b4: 50:c6:92:e3:b6:43:d0:2e:0c:d0:cf:93:19:0a:45: 48:ea:19:68:47:88:d0:d9:63:46:9d:ed:90:43:61: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:95:93:11:99:08:DD:0F:D3:01:3B:96:56:B2:06:7C:56:0A:D5 X509v3 Authority Key Identifier: keyid:C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:18:71:a3:d9:54:1d:94:2b:d3:76:17:e6:69:9c:09:75:31: d8:1a:fe:73:9b:0c:58:f7:1a:dd:4e:7f:43:bf:62:17:c2:2c: 80:9f:a5:ba:d8:e4:df:ca:c6:09:ad:7f:21:97:3a:f6:ea:38: e6:b6:a3:9b:ae:7e:e1:69:fa:f0:17:1e:24:61:bd:ad:f5:a4: 88:c2:13:92:43:6a:af:4f:de:d4:7f:d9:70:52:ca:4e:ff:d2: f0:3c:5b:b0:c2:7a:28:4e:c3:0b:94:4b:b4:e0:9e:50:35:dc: 46:2c:0c:74:ef:04:29:ce:05:de:15:0d:ec:36:36:c0:e1:b4: c9:66:23:ad:77:3d:1f:b5:ad:28:8d:9d:36:ed:db:b0:95:31: 52:18:b8:90:4d:75:de:17:6b:19:71:24:3b:f6:38:91:ee:81: 2c:f0:32:a7:8e:d9:6c:12:03:d0:9f:d1:0e:39:2f:a2:54:b9: f8:53:d5:51:3f:ec:0f:61:c8:32:94:3e:da:51:ee:e9:e9:be: ba:ac:4c:59:e0:62:97:dc:a6:f2:dc:0e:db:c5:72:cf:06:cb: dd:62:47:dd:ea:26:89:75:e2:ed:3c:8f:ac:df:c8:fa:6a:f5: 5c:6a:8a:7f:20:97:06:01:cd:1a:1f:52:c1:85:3b:d8:16:7e: 18:1e:7c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzQxMTAvBgNVBAUTKEMwREU5RDg0NkIyMTdDNzhERDY0ODU1QTlFRDc5QUMz RDI3MTEwOEUwHhcNMjQwNTAxMDUwMjQ1WhcNMjQwNTA4MDUwMjQ1WjAYMRYwFAYD VQQDEw02NjMxY2NmNi0xMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfULkVqN+UuS0/rI4U4RWAO4FGs4KAOUsfDLl5vWOMBb2UxVpHg7KtZYTotO pEbPxmDbWzLA3U52DQjtQz8j+PviuPdWql0pxZQJ8IuMFBE7MHa+LQdieWjm3rrH AajWgUgktRBJvAlZUKzITBlPob6NZb/sDf+Ln7Msb4NVIZjhzh3qVadm6F2FUd2T lPCStNI5meT7wLxpzcFNw0iuqiMLeSG5iDYLXG/ct2R+xPPDY+87iFAws/s88AGr LUnN1Qs9QJ7LgkDwfVLGwDf3hblPquTQPycFwoe2+aO9zLRQxpLjtkPQLgzQz5MZ CkVI6hloR4jQ2WNGne2QQ2H5rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnklZMR mQjdD9MBO5ZWsgZ8VgrVMB8GA1UdIwQYMBaAFMDenYRrIXx43WSFWp7XmsPScRCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDNC8wQjIyQTZGODFC QUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZIamRaSVZhbnRlYXc5SnhF STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dONmRoR3NoZkhqZFpJVmFudGVhdzlKeEVJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDNC8wQjIyQTZGODFCQUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZI amRaSVZhbnRlYXc5SnhFSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1GHGj2VQdlCvTdhfmaZwJdTHYGv5zmwxY9xrdTn9Dv2IXwiyAn6W6 2OTfysYJrX8hlzr26jjmtqObrn7hafrwFx4kYb2t9aSIwhOSQ2qvT97Uf9lwUspO /9LwPFuwwnooTsMLlEu04J5QNdxGLAx07wQpzgXeFQ3sNjbA4bTJZiOtdz0fta0o jZ027duwlTFSGLiQTXXeF2sZcSQ79jiR7oEs8DKnjtlsEgPQn9EOOS+iVLn4U9VR P+wPYcgylD7aUe7p6b66rExZ4GKX3Kby3A7bxXLPBsvdYkfd6iaJdeLtPI+s38j6 avVcaop/IJcGAc0aH1LBhTvYFn4YHnwI -----END CERTIFICATE-----Generated at Wed May 1 05:59:05 2024 by rpki-client on console-fra.rpki-client.org