$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft File: Wnw4Syls_H8kJg8FEI1n1gxurc4.mft (raw, json) Hash identifier: R2wojx+0q3YMhlXyaVy/dEI9JU1XtonwBVfcVCXw8HM= Subject key identifier: 6C:A1:84:A5:DF:F7:A2:43:4A:7B:97:55:12:E5:82:CA:5E:71:9C:F6 Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE Certificate issuer: /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft Manifest number: 5A Signing time: Wed 15 May 2024 07:59:35 +0000 Manifest this update: Wed 15 May 2024 07:59:34 +0000 Manifest next update: Wed 22 May 2024 07:59:34 +0000 Files and hashes: 1: Wnw4Syls_H8kJg8FEI1n1gxurc4.crl (hash: JmPPIEqsXuVjtiEZVgEtRB17u3unkJx2x7PeJKNJyEs=) 2: 6BD285BA971D11EE9333CE70C4F9AE02.roa (hash: 2jcnVakS3krjydQJ7BjvsbQVu2ZW2FY3I2XTF3DMhnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Validity Not Before: May 15 07:59:34 2024 GMT Not After : May 22 07:59:34 2024 GMT Subject: CN=66446b67-fa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:68:68:35:b2:c5:3b:b1:0e:c7:47:88:aa: 36:83:2f:bc:00:33:8c:2e:d1:cd:64:22:21:76:6e: 7d:dd:cb:52:0c:13:02:47:a4:97:47:dc:37:6c:2c: d5:2e:df:c7:fd:e8:be:0c:21:0c:11:49:d3:68:f0: 3b:a7:d1:48:a7:20:89:76:14:fd:c2:cd:8b:d6:83: 3c:1b:c6:80:73:7c:47:89:65:1a:fe:be:74:64:44: 3b:16:9e:bf:80:71:e7:a6:44:71:89:d4:9d:ce:67: 30:7d:4f:62:25:49:23:ba:58:a9:21:98:eb:23:1b: 0c:e2:9b:51:81:7f:da:46:2d:80:4c:8c:73:03:e6: 88:0f:7f:87:5b:c3:25:70:eb:31:2a:e8:30:7c:3c: bb:5b:a5:7a:86:fe:e0:c7:fa:fc:8f:1f:e9:bb:0e: a1:b7:17:1b:94:86:e6:b7:f0:23:f9:a2:04:39:41: d2:cc:76:c8:73:d2:da:8a:fe:b9:55:4a:57:61:88: f9:42:b6:c0:e4:b9:12:13:2f:6c:dc:dc:6b:7a:c6: 55:e6:3d:f8:be:d5:d2:52:1c:0f:d5:b2:ba:89:fc: 26:f9:50:c2:80:bb:54:0d:9f:58:cd:e7:a4:76:c9: 93:ef:3e:e5:f1:c4:1b:62:63:d5:46:3b:37:0a:bc: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A1:84:A5:DF:F7:A2:43:4A:7B:97:55:12:E5:82:CA:5E:71:9C:F6 X509v3 Authority Key Identifier: keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4e:4e:1c:a8:1b:9c:06:f9:b0:42:c7:eb:a3:41:fe:b2:3d: 4c:d9:0c:cb:f2:86:ce:8d:3e:6b:58:26:a3:9b:22:98:87:25: aa:1d:74:06:ca:ac:71:fb:dc:fc:1b:f8:3e:7d:3e:b6:8f:21: 4d:61:92:68:74:2a:f2:e2:f1:dc:51:43:1e:2a:d4:27:0e:70: c9:2c:e6:95:ed:c6:b8:13:1d:c4:1d:45:83:19:3f:4e:42:2b: 89:91:a4:b8:7b:72:1f:d8:1a:b2:7b:35:5c:f6:0d:13:d9:1c: 02:9a:ed:8c:3c:08:ee:e8:5a:7d:1f:c1:fe:e2:1d:fa:0d:be: ee:72:5a:2f:5b:2e:07:14:d1:cf:cf:8e:a5:bd:cf:f6:52:df: e5:ed:7e:9d:5f:5f:aa:b5:88:9f:b7:99:80:b0:89:d5:f8:cf: bb:01:6d:bb:69:51:f6:84:33:a7:ba:0d:00:32:21:a9:3c:18: 5f:3a:a7:de:45:f5:0d:f5:11:48:58:ca:99:a8:d0:de:30:46: 71:09:52:94:06:65:3b:b8:7f:24:17:2c:a5:36:18:e9:ee:57: 0c:78:02:71:3e:06:ce:ef:17:a0:9a:fe:07:a3:97:ab:06:87: 66:ea:f6:49:ad:a0:96:ff:62:96:c4:5f:b5:bd:88:a3:25:68: e4:93:30:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQyRDExMC8GA1UEBRMoNUE3QzM4NEIyOTZDRkM3RjI0MjYwRjA1MTA4RDY3RDYw QzZFQURDRTAeFw0yNDA1MTUwNzU5MzRaFw0yNDA1MjIwNzU5MzRaMBgxFjAUBgNV BAMTDTY2NDQ2YjY3LWZhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWbWhoNbLFO7EOx0eIqjaDL7wAM4wu0c1kIiF2bn3dy1IMEwJHpJdH3DdsLNUu 38f96L4MIQwRSdNo8Dun0UinIIl2FP3CzYvWgzwbxoBzfEeJZRr+vnRkRDsWnr+A ceemRHGJ1J3OZzB9T2IlSSO6WKkhmOsjGwzim1GBf9pGLYBMjHMD5ogPf4dbwyVw 6zEq6DB8PLtbpXqG/uDH+vyPH+m7DqG3FxuUhua38CP5ogQ5QdLMdshz0tqK/rlV SldhiPlCtsDkuRITL2zc3Gt6xlXmPfi+1dJSHA/VsrqJ/Cb5UMKAu1QNn1jN56R2 yZPvPuXxxBtiY9VGOzcKvLY7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbKGEpd/3 okNKe5dVEuWCyl5xnPYwHwYDVR0jBBgwFoAUWnw4Syls/H8kJg8FEI1n1gxurc4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDJELzY2MzE1Q0MwOTYz MzExRUVBM0FBQzQxOEM0RjlBRTAyL1dudzRTeWxzX0g4a0pnOEZFSTFuMWd4dXJj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV253NFN5bHNfSDhrSmc4RkVJMW4xZ3h1cmM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDJELzY2MzE1Q0MwOTYzMzExRUVBM0FBQzQxOEM0RjlBRTAyL1dudzRTeWxzX0g4 a0pnOEZFSTFuMWd4dXJjNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGxOThyoG5wG+bBCx+ujQf6yPUzZDMvyhs6NPmtYJqObIpiHJaoddAbK rHH73Pwb+D59PraPIU1hkmh0KvLi8dxRQx4q1CcOcMks5pXtxrgTHcQdRYMZP05C K4mRpLh7ch/YGrJ7NVz2DRPZHAKa7Yw8CO7oWn0fwf7iHfoNvu5yWi9bLgcU0c/P jqW9z/ZS3+Xtfp1fX6q1iJ+3mYCwidX4z7sBbbtpUfaEM6e6DQAyIak8GF86p95F 9Q31EUhYypmo0N4wRnEJUpQGZTu4fyQXLKU2GOnuVwx4AnE+Bs7vF6Ca/gejl6sG h2bq9kmtoJb/YpbEX7W9iKMlaOSTMMg= -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org