$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json) Hash identifier: ANdQfirxaXqzrOsQzDJdoQGI/DkIShy1lKJ8FRLB7DI= Subject key identifier: 26:29:4C:D8:80:C6:11:BB:79:9A:85:4B:DF:22:A1:7A:E4:D2:E1:D2 Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Certificate serial: 0B89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft Manifest number: 0B80 Signing time: Mon 06 May 2024 19:25:38 +0000 Manifest this update: Mon 06 May 2024 19:25:37 +0000 Manifest next update: Mon 13 May 2024 19:25:37 +0000 Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: meVjubueJuizYLiuZCRXjH1sQVGFnuJ1pmm7Kio89n8=) 2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: suETF+vFD1wbLZix4YvOuJSudoXGPltkTo1vKWv22Vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2953 (0xb89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Validity Not Before: May 6 19:25:37 2024 GMT Not After : May 13 19:25:37 2024 GMT Subject: CN=66392eb2-6be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:fa:4e:d5:dd:58:11:b4:a2:42:f1:6c:cd: 5b:c2:23:4e:44:23:1a:a4:42:8b:f7:c6:24:a1:07: 0a:6b:c4:1b:91:fb:95:8d:9c:4c:78:f1:16:93:87: 88:90:56:4b:15:5b:8f:9d:38:c6:d6:31:1b:e9:87: 1e:ee:c5:6f:eb:64:62:f3:ce:40:af:b2:d7:56:c6: 9d:d6:d0:80:89:44:cc:ea:73:ea:49:57:18:7f:22: 6c:b6:07:56:31:e9:5d:17:80:fa:5c:61:c4:6d:96: 3c:68:5f:da:ec:71:99:f6:17:91:21:74:29:bd:77: e2:da:f1:7f:5b:d3:78:e6:00:89:d4:43:89:47:fc: ac:71:22:04:f6:d3:8b:23:85:a5:bf:b4:dd:97:05: f8:cd:f2:3a:fb:9d:9c:0d:8f:b6:ce:cf:04:79:56: d7:7a:9d:b7:ef:6b:e9:c6:46:19:d1:59:2d:08:b0: 4c:df:1b:f3:47:0f:91:48:ee:bd:61:b6:c0:06:62: d6:0b:45:2a:24:7b:61:bf:f1:31:1a:d3:7c:72:20: f0:77:f8:a9:65:4c:39:da:4a:b5:63:c7:f5:d1:ac: a9:47:2c:50:f0:bc:dd:b1:da:43:cd:6b:22:f7:8c: 2e:4e:05:4f:7d:2c:e7:ea:fe:12:e8:d7:e6:1b:2c: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:4C:D8:80:C6:11:BB:79:9A:85:4B:DF:22:A1:7A:E4:D2:E1:D2 X509v3 Authority Key Identifier: keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:12:04:d8:7f:a4:96:21:78:25:54:af:af:80:34:83:60:4d: b4:ff:d7:9f:39:ac:72:72:f2:5e:d4:b8:cf:2f:83:a4:c1:91: d9:c3:72:33:a0:5c:69:91:8c:d8:ba:bf:59:f4:94:fa:ba:8d: e6:8d:a2:01:18:09:17:15:c9:b2:4b:2a:01:d7:6f:df:bf:3b: 30:6a:6d:7f:8a:be:95:74:ca:0d:dc:09:49:b7:02:6f:ba:87: 47:17:53:95:a4:85:89:64:18:55:4a:7b:84:4d:5b:f4:95:2a: 8f:68:a0:bd:3e:7c:1f:f8:b0:da:e8:57:df:0a:a4:47:07:46: 9a:de:a1:98:08:24:7d:7d:a9:33:63:7f:58:ea:bf:bd:b0:76: eb:33:05:c3:c0:d3:12:79:0e:0f:db:46:e7:9e:b8:84:84:bc: b2:3e:1a:8c:39:70:07:11:7d:bf:f8:36:a6:6f:74:5e:d1:7c: de:3b:2c:60:67:d3:59:ee:e2:3c:29:ef:d6:ad:72:5c:09:56: 2d:ad:b7:3e:05:2f:62:ba:d7:9d:89:0a:3f:b4:5f:4e:fd:fc: 78:98:ac:53:6e:7c:fa:0c:02:34:9a:53:aa:70:b5:db:23:7c: 2f:cb:db:ff:64:2f:16:cb:42:96:96:59:3c:6e:08:48:99:06: fc:48:35:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw MjQ4MkI3MjgwHhcNMjQwNTA2MTkyNTM3WhcNMjQwNTEzMTkyNTM3WjAYMRYwFAYD VQQDEw02NjM5MmViMi02YmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWX6TtXdWBG0okLxbM1bwiNORCMapEKL98YkoQcKa8QbkfuVjZxMePEWk4eI kFZLFVuPnTjG1jEb6Yce7sVv62Ri885Ar7LXVsad1tCAiUTM6nPqSVcYfyJstgdW MeldF4D6XGHEbZY8aF/a7HGZ9heRIXQpvXfi2vF/W9N45gCJ1EOJR/yscSIE9tOL I4Wlv7TdlwX4zfI6+52cDY+2zs8EeVbXep2372vpxkYZ0VktCLBM3xvzRw+RSO69 YbbABmLWC0UqJHthv/ExGtN8ciDwd/ipZUw52kq1Y8f10aypRyxQ8LzdsdpDzWsi 94wuTgVPfSzn6v4S6NfmGyzxYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYpTNiA xhG7eZqFS98ioXrk0uHSMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0 NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2 RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdEgTYf6SWIXglVK+vgDSDYE20/9efOaxycvJe1LjPL4OkwZHZw3Iz oFxpkYzYur9Z9JT6uo3mjaIBGAkXFcmySyoB12/fvzswam1/ir6VdMoN3AlJtwJv uodHF1OVpIWJZBhVSnuETVv0lSqPaKC9Pnwf+LDa6FffCqRHB0aa3qGYCCR9fakz Y39Y6r+9sHbrMwXDwNMSeQ4P20bnnriEhLyyPhqMOXAHEX2/+Damb3Re0XzeOyxg Z9NZ7uI8Ke/WrXJcCVYtrbc+BS9iutediQo/tF9O/fx4mKxTbnz6DAI0mlOqcLXb I3wvy9v/ZC8Wy0KWllk8bghImQb8SDX+ -----END CERTIFICATE-----Generated at Mon May 6 20:19:13 2024 by rpki-client on console-fra.rpki-client.org