$ rpki-client -vvf rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft File: Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft (raw, json) Hash identifier: qIGSC9GJzo+8x5vkNTJLQRnp3mw3SUkuYXzgotWvyfE= Subject key identifier: D1:D1:2B:8A:F8:61:78:0A:1F:D2:B9:23:79:F3:1E:87:5D:E2:BA:38 Authority key identifier: 5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A Certificate issuer: /CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A Certificate serial: 33CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft Manifest number: 33C1 Signing time: Fri 26 Apr 2024 15:02:20 +0000 Manifest this update: Fri 26 Apr 2024 15:02:19 +0000 Manifest next update: Fri 03 May 2024 15:02:19 +0000 Files and hashes: 1: Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl (hash: FpOcus7T3gxYEgd3a0fcnatzEevwBqDn3iFAILkzr9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13259 (0x33cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A311/serialNumber=5A1E2E398C306EF1DFF4C06EFCAAF6E34263B12A Validity Not Before: Apr 26 15:02:19 2024 GMT Not After : May 3 15:02:19 2024 GMT Subject: CN=662bc1fc-b09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e2:55:0a:e0:60:eb:27:70:bb:43:b4:a6:55: 26:49:00:0d:7b:46:f9:07:b2:82:06:c8:3a:5f:d5: dd:cf:65:59:b4:84:2e:50:90:43:af:02:c7:61:2c: 8f:35:3a:c1:fb:ec:4d:3b:05:63:c7:05:36:6d:77: b6:87:bb:97:c9:3b:8b:53:57:7e:21:ab:82:ce:25: 17:9d:b9:de:c9:55:89:2b:6b:59:fd:eb:a9:4a:3f: f8:31:d0:3e:d4:dd:07:b1:c3:17:a6:b4:f7:d3:f6: 96:88:9b:af:42:3c:8f:ef:83:21:b6:f8:fa:af:72: a3:65:ac:fa:d1:8b:9a:be:ab:64:36:3b:49:14:7a: 62:82:3d:de:94:e9:1e:d2:68:5a:83:9c:0a:4b:f7: 30:36:03:33:21:82:51:53:d8:da:c6:31:82:14:64: fd:df:28:24:49:9b:74:76:87:af:9e:5f:66:3e:27: c5:65:63:6c:1a:18:5d:69:b3:81:48:d8:52:62:8e: ac:4a:7a:9b:d7:ba:ff:fa:4a:f5:86:ad:f6:8f:d9: fb:23:9b:88:30:38:e7:ad:22:ec:be:71:82:02:b8: 0e:d1:0b:fc:20:f3:17:bd:3b:a8:d8:52:43:e7:1e: 27:23:01:af:e9:6b:c1:0d:cf:b5:e8:76:ae:88:a7: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D1:2B:8A:F8:61:78:0A:1F:D2:B9:23:79:F3:1E:87:5D:E2:BA:38 X509v3 Authority Key Identifier: keyid:5A:1E:2E:39:8C:30:6E:F1:DF:F4:C0:6E:FC:AA:F6:E3:42:63:B1:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A311/3E6F858C1D9911E28510DC8308B02CD2/Wh4uOYwwbvHf9MBu_Kr240JjsSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fa:23:f9:1b:31:24:74:c3:81:08:ce:01:b1:a0:1a:57:19: 1d:ff:1e:28:98:62:42:ea:9c:3d:92:97:5b:70:0e:ba:a6:46: 66:a5:ac:04:f4:11:53:4e:9f:f3:e8:cc:f0:28:bc:d3:b5:fb: f1:c0:c3:f7:33:ab:b6:30:a8:2f:92:32:b0:be:4d:f6:52:1f: 2b:3e:6f:c5:0e:9a:b8:a2:09:44:16:3e:26:65:5c:7d:15:00: 00:c8:65:91:ad:d0:4c:35:af:c1:1d:e2:41:65:96:3f:c4:80: 3f:e3:03:18:00:a8:80:62:e4:a1:43:3c:a2:fa:a1:2a:a5:fc: a2:d9:bd:3f:05:39:cb:51:9d:39:60:c9:dc:17:2d:a3:35:4e: 97:6f:28:bc:bc:8e:54:cc:d9:fe:54:77:d1:7a:a1:10:a6:48: 06:70:96:49:5d:d8:0d:85:bf:78:be:75:90:c7:31:ee:e7:17: c2:e5:86:15:69:3a:37:9f:db:33:5c:17:b4:c1:83:de:57:01: ad:84:1c:3a:cf:dc:19:f3:c2:7d:19:20:9e:f7:ac:5e:fb:d3: f1:ec:4c:6e:a5:97:ef:36:3c:9e:54:15:6b:a8:b8:00:ae:d7: d1:16:7c:86:0e:e9:1d:62:df:6b:bb:af:42:89:4e:e5:35:04: f5:78:c3:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzMTExMTAvBgNVBAUTKDVBMUUyRTM5OEMzMDZFRjFERkY0QzA2RUZDQUFGNkUz NDI2M0IxMkEwHhcNMjQwNDI2MTUwMjE5WhcNMjQwNTAzMTUwMjE5WjAYMRYwFAYD VQQDEw02NjJiYzFmYy1iMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OJVCuBg6ydwu0O0plUmSQANe0b5B7KCBsg6X9Xdz2VZtIQuUJBDrwLHYSyP NTrB++xNOwVjxwU2bXe2h7uXyTuLU1d+IauCziUXnbneyVWJK2tZ/eupSj/4MdA+ 1N0HscMXprT30/aWiJuvQjyP74Mhtvj6r3KjZaz60YuavqtkNjtJFHpigj3elOke 0mhag5wKS/cwNgMzIYJRU9jaxjGCFGT93ygkSZt0doevnl9mPifFZWNsGhhdabOB SNhSYo6sSnqb17r/+kr1hq32j9n7I5uIMDjnrSLsvnGCArgO0Qv8IPMXvTuo2FJD 5x4nIwGv6WvBDc+16HauiKcNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHRK4r4 YXgKH9K5I3nzHodd4ro4MB8GA1UdIwQYMBaAFFoeLjmMMG7x3/TAbvyq9uNCY7Eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTMxMS8zRTZGODU4QzFE OTkxMUUyODUxMERDODMwOEIwMkNEMi9XaDR1T1l3d2J2SGY5TUJ1X0tyMjQwSmpz U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doNHVPWXd3YnZIZjlNQnVfS3IyNDBKanNTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTMxMS8zRTZGODU4QzFEOTkxMUUyODUxMERDODMwOEIwMkNEMi9XaDR1T1l3d2J2 SGY5TUJ1X0tyMjQwSmpzU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW+iP5GzEkdMOBCM4BsaAaVxkd/x4omGJC6pw9kpdbcA66pkZmpawE 9BFTTp/z6MzwKLzTtfvxwMP3M6u2MKgvkjKwvk32Uh8rPm/FDpq4oglEFj4mZVx9 FQAAyGWRrdBMNa/BHeJBZZY/xIA/4wMYAKiAYuShQzyi+qEqpfyi2b0/BTnLUZ05 YMncFy2jNU6Xbyi8vI5UzNn+VHfReqEQpkgGcJZJXdgNhb94vnWQxzHu5xfC5YYV aTo3n9szXBe0wYPeVwGthBw6z9wZ88J9GSCe96xe+9Px7ExupZfvNjyeVBVrqLgA rtfRFnyGDukdYt9ru69CiU7lNQT1eMOG -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:23 2024 by rpki-client on console-ams.rpki-client.org