$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft File: wvw-GxtUPr1I39pZHcJRgiT5W38.mft (raw, json) Hash identifier: m/ftE4R8YrYV4Th7vEfkKuuimVJCYWmFNW/lMHF30D8= Subject key identifier: AA:8B:15:60:F2:92:BB:60:0F:78:EF:96:E7:C3:A1:EB:C1:A2:0F:3A Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F Certificate issuer: /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft Manifest number: 0164 Signing time: Tue 07 May 2024 04:50:13 +0000 Manifest this update: Tue 07 May 2024 04:50:12 +0000 Manifest next update: Tue 14 May 2024 04:50:12 +0000 Files and hashes: 1: wvw-GxtUPr1I39pZHcJRgiT5W38.crl (hash: KS8I0jTHuvBOlRF304NqelZvYBqWB7LPpe4sZXatosw=) 2: FAEFF2722C7B11EDABC3811AC4F9AE02.roa (hash: ORHWmtqHeBVtPMfb9qlOk869GlcamiezUGmsTydEnpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Validity Not Before: May 7 04:50:12 2024 GMT Not After : May 14 04:50:12 2024 GMT Subject: CN=6639b304-dd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:00:4f:2c:ec:f3:af:be:64:f5:0e:7a:7e:04: b0:d8:5b:a2:7f:6e:4a:e7:37:bd:a0:94:95:49:cd: 40:dc:e1:a2:2c:a6:ec:fa:e5:bb:4e:68:cd:d2:9c: 7e:d3:8b:99:60:9e:cb:5c:e3:61:51:ab:e7:8f:d3: 47:31:27:ce:bc:b8:84:45:8b:b5:0d:3c:c1:3a:a0: 26:97:3b:c2:82:ea:52:51:0e:e9:4a:cf:c6:c7:06: 52:5b:dc:ce:57:15:ce:16:47:6a:58:ce:dc:7e:e4: 68:c6:c0:cb:59:24:0b:8b:b7:3b:94:67:97:55:87: 92:a4:42:94:2b:7f:3c:a7:4b:aa:58:89:8d:3a:b1: 8f:c3:c1:35:1c:6e:2c:9b:87:04:19:08:f8:37:c5: 92:44:a9:63:0f:d3:6b:22:3f:52:cc:7a:43:74:b1: 17:7c:cc:9f:51:e9:11:bf:e3:d1:97:01:47:f2:ca: e6:6c:15:30:1b:6c:4d:98:fa:69:a9:76:5b:28:5a: e6:ab:e0:0c:0f:72:5a:d2:e7:e6:09:41:e6:e2:43: f2:b9:14:41:53:1c:8c:68:e6:c5:73:81:de:7d:56: 77:2e:3d:ad:ed:9a:eb:85:87:e0:55:5a:78:ff:b5: a5:3f:cc:f1:24:06:44:13:78:55:7a:5b:e5:9c:6f: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8B:15:60:F2:92:BB:60:0F:78:EF:96:E7:C3:A1:EB:C1:A2:0F:3A X509v3 Authority Key Identifier: keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:24:eb:89:35:d7:b2:0e:00:4c:4b:f3:e9:7f:dd:39:c7: 41:1e:76:da:6d:86:a9:91:25:df:7a:30:a3:fe:9e:01:3f:b2: 4c:91:c6:e7:7e:2d:99:41:6b:90:95:4e:fe:6e:18:59:b8:17: c5:91:67:84:30:3c:8f:99:40:28:cc:e5:c4:f4:15:ff:64:6c: 3e:36:12:0e:6d:cf:69:ea:b4:43:1b:13:ca:c8:9e:38:bb:5a: de:be:7e:3a:d8:42:c1:6c:dd:dd:db:ea:9f:ec:63:e9:2c:e6: 00:fd:5f:ea:68:3a:71:5a:1a:34:a5:0b:8f:89:7c:e7:da:84: 03:01:86:46:f6:50:65:12:3e:a6:96:99:45:7a:3a:39:e3:79: 06:75:a4:7e:d3:4b:99:b3:a8:db:66:10:e7:5a:59:6b:80:11: 3e:07:01:90:2e:dd:46:8a:26:59:d6:9f:84:0c:97:2e:80:c2: 79:ae:c7:69:59:f0:bf:60:c1:11:0e:5e:a2:10:95:5f:22:bb: bd:54:56:da:27:d9:79:a2:ef:f2:5d:95:02:d2:74:d5:a4:af: 6b:ce:03:d5:f5:3b:f2:18:0f:7d:4b:4b:fa:43:0f:01:06:4e: 9e:0b:f7:79:1c:f6:75:9a:40:2f:b5:07:8a:9b:8b:61:ad:dd: de:d9:b6:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy MjRGOTVCN0YwHhcNMjQwNTA3MDQ1MDEyWhcNMjQwNTE0MDQ1MDEyWjAYMRYwFAYD VQQDEw02NjM5YjMwNC1kZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9QBPLOzzr75k9Q56fgSw2Fuif25K5ze9oJSVSc1A3OGiLKbs+uW7TmjN0px+ 04uZYJ7LXONhUavnj9NHMSfOvLiERYu1DTzBOqAmlzvCgupSUQ7pSs/GxwZSW9zO VxXOFkdqWM7cfuRoxsDLWSQLi7c7lGeXVYeSpEKUK388p0uqWImNOrGPw8E1HG4s m4cEGQj4N8WSRKljD9NrIj9SzHpDdLEXfMyfUekRv+PRlwFH8srmbBUwG2xNmPpp qXZbKFrmq+AMD3Ja0ufmCUHm4kPyuRRBUxyMaObFc4HefVZ3Lj2t7ZrrhYfgVVp4 /7WlP8zxJAZEE3hVelvlnG+cUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqLFWDy krtgD3jvlufDoevBog86MB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTUyNC80OTFGMDJERTJDNzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVBy MUkzOXBaSGNKUmdpVDVXMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB91STriTXXsg4ATEvz6X/dOcdBHnbabYapkSXfejCj/p4BP7JMkcbn fi2ZQWuQlU7+bhhZuBfFkWeEMDyPmUAozOXE9BX/ZGw+NhIObc9p6rRDGxPKyJ44 u1revn462ELBbN3d2+qf7GPpLOYA/V/qaDpxWho0pQuPiXzn2oQDAYZG9lBlEj6m lplFejo543kGdaR+00uZs6jbZhDnWllrgBE+BwGQLt1GiiZZ1p+EDJcugMJ5rsdp WfC/YMERDl6iEJVfIru9VFbaJ9l5ou/yXZUC0nTVpK9rzgPV9TvyGA99S0v6Qw8B Bk6eC/d5HPZ1mkAvtQeKm4thrd3e2bZM -----END CERTIFICATE-----Generated at Tue May 7 05:39:53 2024 by rpki-client on console-fra.rpki-client.org