$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: lIk7G+pcl96Ty9SV2xBjbEpe1bvHSb2c/4uZQ0m6wkg= Subject key identifier: 71:3D:03:F3:53:1D:CF:58:99:C9:6B:74:69:0D:3B:08:F9:D7:8E:F0 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1E41 Signing time: Sun 28 Apr 2024 16:24:45 +0000 Manifest this update: Sun 28 Apr 2024 16:24:45 +0000 Manifest next update: Sun 05 May 2024 16:24:45 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: e3W+7+dyqIJEgT8uPGxNfNny9/K0CIorTc0Xw7WlDaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7745 (0x1e41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Apr 28 16:24:45 2024 GMT Not After : May 5 16:24:45 2024 GMT Subject: CN=662e784d-a168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:e7:13:d7:6e:0d:0b:2b:98:df:a4:ec:de: b1:99:60:6f:d7:f1:be:3f:72:2e:36:70:5d:a5:e5: 8e:60:d6:48:a3:d7:02:98:3d:6e:6c:2f:26:d2:fe: 8d:11:1c:fb:13:ff:68:1b:c9:d3:f2:b4:f3:32:f2: 15:9c:bd:54:2f:16:d5:3f:10:cd:c4:07:29:db:01: 9f:cb:4e:46:fd:20:b3:00:80:5b:cf:6a:0d:4b:fb: cc:6f:97:15:c5:81:d9:f0:9f:6a:7a:c0:1a:96:ad: 2e:7f:0a:e8:2e:00:da:eb:81:8b:c6:cf:aa:15:2d: 79:2d:4c:ff:96:a1:24:aa:a1:7c:da:c9:f4:43:9d: e7:9f:1c:4a:58:41:00:f0:07:51:46:53:0d:14:1b: b5:3f:7d:10:95:73:3a:ca:2a:a9:93:b5:f5:9a:c7: cc:0e:8d:a1:28:ad:4b:2e:73:f6:cb:4c:75:b2:aa: 1c:12:c4:41:65:ef:a7:45:69:75:f1:e0:b9:17:af: c9:f1:b5:c8:34:af:d7:45:bf:cd:b9:79:16:6c:df: 65:29:38:f7:a0:35:45:f3:10:51:83:f4:a2:1c:dd: eb:97:b5:89:60:16:c7:27:6d:98:46:a0:93:7e:4a: 6b:ee:b8:0d:3c:f5:ec:7f:48:86:46:82:a0:bb:0b: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:03:F3:53:1D:CF:58:99:C9:6B:74:69:0D:3B:08:F9:D7:8E:F0 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ec:37:63:70:9c:7c:40:59:fb:0f:b0:72:2e:f2:73:41:04: ef:10:c2:3a:85:82:cd:d4:8d:1e:94:3b:4a:0b:9e:6d:7a:cb: 5e:93:dc:48:60:40:10:d6:6d:3c:ed:3c:ad:47:63:f9:cc:2f: 2b:80:e7:3c:fb:37:79:ac:b4:b8:6e:b7:a2:6c:7a:64:1d:9e: 28:c1:b5:26:9d:64:6e:36:9a:5c:14:07:2b:48:f0:9a:e6:67: c1:a3:74:92:fa:b9:46:e5:70:92:27:21:cb:c5:96:5b:f2:94: e6:59:60:f7:b0:4b:7b:2c:40:75:69:74:2a:bb:4c:13:a9:00: 03:07:69:e4:d9:a8:c8:06:15:f4:65:ed:21:d6:f6:c4:53:f1: e6:5a:d0:08:b7:be:5b:4b:c6:30:8f:36:66:c2:3b:d8:43:08: d9:06:f2:d6:fe:bd:0f:73:89:67:cf:ba:7a:a1:1d:2e:d6:db: 97:68:6c:fd:d2:f2:f2:91:82:00:a9:32:c1:31:8a:b4:65:17: 59:86:bf:31:4c:e0:1a:1c:c3:05:bb:40:34:97:65:25:7b:3e: eb:33:a8:2b:24:4a:a4:be:98:6c:6a:d7:24:43:ae:ba:36:62: 1f:4b:62:6c:a7:d1:31:f3:82:87:38:06:ba:59:64:1b:f7:b7: 4a:16:cd:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjQwNDI4MTYyNDQ1WhcNMjQwNTA1MTYyNDQ1WjAYMRYwFAYD VQQDEw02NjJlNzg0ZC1hMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnovnE9duDQsrmN+k7N6xmWBv1/G+P3IuNnBdpeWOYNZIo9cCmD1ubC8m0v6N ERz7E/9oG8nT8rTzMvIVnL1ULxbVPxDNxAcp2wGfy05G/SCzAIBbz2oNS/vMb5cV xYHZ8J9qesAalq0ufwroLgDa64GLxs+qFS15LUz/lqEkqqF82sn0Q53nnxxKWEEA 8AdRRlMNFBu1P30QlXM6yiqpk7X1msfMDo2hKK1LLnP2y0x1sqocEsRBZe+nRWl1 8eC5F6/J8bXINK/XRb/NuXkWbN9lKTj3oDVF8xBRg/SiHN3rl7WJYBbHJ22YRqCT fkpr7rgNPPXsf0iGRoKguwuZ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE9A/NT Hc9YmclrdGkNOwj5147wMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF7DdjcJx8QFn7D7ByLvJzQQTvEMI6hYLN1I0elDtKC55testek9xI YEAQ1m087TytR2P5zC8rgOc8+zd5rLS4breibHpkHZ4owbUmnWRuNppcFAcrSPCa 5mfBo3SS+rlG5XCSJyHLxZZb8pTmWWD3sEt7LEB1aXQqu0wTqQADB2nk2ajIBhX0 Ze0h1vbEU/HmWtAIt75bS8YwjzZmwjvYQwjZBvLW/r0Pc4lnz7p6oR0u1tuXaGz9 0vLykYIAqTLBMYq0ZRdZhr8xTOAaHMMFu0A0l2Ulez7rM6grJEqkvphsatckQ666 NmIfS2Jsp9Ex84KHOAa6WWQb97dKFs07 -----END CERTIFICATE-----Generated at Sun Apr 28 19:01:34 2024 by rpki-client on console-fra.rpki-client.org