$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: akFyZ46edXRWIEM9ZKuTjRiD50QLhrBKdgeaxbI2ms4= Subject key identifier: 27:1B:19:D9:9C:8A:1E:11:B6:D8:CF:0C:E7:06:FC:6D:F5:DB:66:8D Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0EC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0EB3 Signing time: Wed 24 Apr 2024 18:23:38 +0000 Manifest this update: Wed 24 Apr 2024 18:23:38 +0000 Manifest next update: Wed 01 May 2024 18:23:38 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: sqNS91ErUXZ+fXHug8R7S1xcopSoTynuUV9GGThpqaQ=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: f7GuiPtg7MgyCmEaZiMTnlaZNJTafy5J90h7zeKDhk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3779 (0xec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Apr 24 18:23:38 2024 GMT Not After : May 1 18:23:38 2024 GMT Subject: CN=66294e2a-3b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:da:c2:90:d6:25:d2:8b:16:16:af:a1:03: f0:f8:a2:74:40:42:c4:dd:65:78:12:17:9a:cf:fc: fc:1a:6f:bf:f5:a6:77:ef:d3:fd:65:17:55:3b:bd: b1:5c:f8:65:41:b8:d1:98:e7:36:43:a6:cb:ff:07: c1:48:ae:95:46:03:88:b0:ca:94:ad:28:ce:55:c0: 5a:25:d2:5b:da:44:ea:67:96:0d:7e:b7:18:58:da: ba:4b:3a:a0:76:d8:60:ed:d7:ef:06:c7:24:d7:a4: a0:09:a0:c3:71:95:7e:ff:9c:d9:d9:cc:67:58:03: 6e:db:15:99:3e:9b:6a:c9:bd:de:27:e1:5c:47:58: 81:f7:d5:37:39:cb:2f:f8:ba:41:9b:bb:30:38:62: 9b:c8:f5:71:5a:d7:44:7c:ae:21:e0:66:6b:6d:1d: 1d:80:89:2c:4a:88:8e:ab:a8:d5:63:e6:7d:ca:7d: 00:87:4b:f6:76:86:be:a7:d0:4e:96:c4:c8:b2:1e: af:b5:44:10:f9:f5:93:e2:4b:5b:9c:f3:a4:b2:c3: 87:24:a8:60:79:43:e7:2c:c7:2a:5f:26:0d:94:bb: 70:23:4b:f3:00:07:7e:f0:f4:a2:fe:55:6e:e3:a2: 11:03:c3:13:f2:63:1b:e6:99:bb:fe:ff:b0:e6:e3: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:19:D9:9C:8A:1E:11:B6:D8:CF:0C:E7:06:FC:6D:F5:DB:66:8D X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:0d:db:3e:b5:95:8b:c4:54:f5:9a:0b:a9:62:06:78:5e: 8c:ac:08:8e:e9:65:21:2b:b9:79:48:82:6c:80:d0:0f:98:a7: e9:fa:c1:c5:04:15:39:f5:56:fc:57:fd:e2:9c:67:9b:92:09: 63:a9:96:bb:7c:42:70:7b:69:d7:8a:74:37:56:31:c2:c2:dd: fa:47:8d:e8:b9:12:9c:87:b3:b4:c9:91:2c:27:99:a1:51:3d: d0:81:0d:0a:f9:6b:29:c4:ad:7e:78:8c:a3:27:74:74:d5:6a: 51:bc:e7:8a:72:e3:d2:e8:73:08:d4:d5:d4:0b:7a:bd:20:59: 91:b5:50:ff:79:36:28:aa:5a:5f:db:11:22:4c:ab:b3:d4:73: a0:07:a8:e8:1c:0f:9b:ac:0f:0f:8f:fe:3d:bf:47:50:4c:f7: 7b:47:21:cc:48:9c:71:c7:d0:3e:88:84:5d:71:4e:01:02:a4: 5e:78:c9:6c:b3:f2:15:6b:9b:77:0b:99:7f:89:8c:26:d5:80: 96:27:be:12:ed:05:cd:a3:41:4a:2a:6f:0d:17:f3:4e:70:f4: 67:51:1a:7b:62:4f:20:d6:9c:c6:8e:28:4b:2a:85:8b:4e:6d: f6:e6:07:b3:cb:a6:0d:0a:90:ce:d8:1f:47:70:34:64:16:fa: 30:b0:5b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjQwNDI0MTgyMzM4WhcNMjQwNTAxMTgyMzM4WjAYMRYwFAYD VQQDEw02NjI5NGUyYS0zYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ/awpDWJdKLFhavoQPw+KJ0QELE3WV4Eheaz/z8Gm+/9aZ379P9ZRdVO72x XPhlQbjRmOc2Q6bL/wfBSK6VRgOIsMqUrSjOVcBaJdJb2kTqZ5YNfrcYWNq6Szqg dthg7dfvBsck16SgCaDDcZV+/5zZ2cxnWANu2xWZPptqyb3eJ+FcR1iB99U3Ocsv +LpBm7swOGKbyPVxWtdEfK4h4GZrbR0dgIksSoiOq6jVY+Z9yn0Ah0v2doa+p9BO lsTIsh6vtUQQ+fWT4ktbnPOkssOHJKhgeUPnLMcqXyYNlLtwI0vzAAd+8PSi/lVu 46IRA8MT8mMb5pm7/v+w5uPM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcbGdmc ih4RttjPDOcG/G3122aNMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLUw3bPrWVi8RU9ZoLqWIGeF6MrAiO6WUhK7l5SIJsgNAPmKfp+sHF BBU59Vb8V/3inGebkgljqZa7fEJwe2nXinQ3VjHCwt36R43ouRKch7O0yZEsJ5mh UT3QgQ0K+WspxK1+eIyjJ3R01WpRvOeKcuPS6HMI1NXUC3q9IFmRtVD/eTYoqlpf 2xEiTKuz1HOgB6joHA+brA8Pj/49v0dQTPd7RyHMSJxxx9A+iIRdcU4BAqReeMls s/IVa5t3C5l/iYwm1YCWJ74S7QXNo0FKKm8NF/NOcPRnURp7Yk8g1pzGjihLKoWL Tm325gezy6YNCpDO2B9HcDRkFvowsFuM -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:49 2024 by rpki-client on console-fra.rpki-client.org