$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: WjnYEMHPdXqyNV8qaxpxD7kHnDmhdTMrSrujh6M2H18= Subject key identifier: FE:A8:18:E7:6E:2E:26:AE:C0:BE:EF:51:8E:B0:91:8A:21:F1:D9:1A Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: 0F Signing time: Wed 15 May 2024 09:00:15 +0000 Manifest this update: Wed 15 May 2024 09:00:15 +0000 Manifest next update: Wed 22 May 2024 09:00:15 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: 6LG8E/7TbrW/Bv0/r8E+A4UfuHgqDMSZSMyC9AO9Teo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 09:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: May 15 09:00:15 2024 GMT Not After : May 22 09:00:15 2024 GMT Subject: CN=6644799f-be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:ec:e4:60:df:26:ba:9d:7c:d3:95:de:36: a9:cd:38:49:64:a0:ea:16:43:c8:30:b6:d4:29:eb: 1f:8b:cc:e5:d0:f5:7b:38:2f:13:5f:88:34:75:e2: 34:ec:f9:b2:3c:a7:7c:4b:37:50:46:ab:53:ad:60: ae:b5:43:c0:6c:4a:93:1e:73:df:02:94:2b:30:39: 12:5f:5b:2c:10:96:3c:de:c5:b3:1e:50:c5:e7:e9: 66:d5:6b:36:86:e6:32:82:f7:0b:5e:d0:bf:07:8f: 10:b4:a4:2a:11:6a:a7:4c:12:2d:36:d6:ba:0b:e1: b6:7d:3b:5f:d4:fa:39:e6:7e:3c:7e:ca:02:77:89: 16:c4:48:f0:e9:dd:6a:40:51:f2:a5:d7:b8:82:c8: 1d:33:af:16:7e:65:43:d6:75:40:5c:0d:e9:da:b3: f8:b9:fa:46:4e:b0:e6:73:98:f8:c5:ee:53:f7:9a: 3a:45:07:77:8c:98:4b:eb:b4:ae:af:48:e2:28:f1: 82:cf:ce:04:1e:22:a4:2e:0b:6e:73:50:b6:3b:f9: 21:78:c8:36:93:97:1c:71:56:8b:43:fa:92:8c:db: 30:2a:d1:01:bd:7d:ba:5f:88:8f:8b:9a:eb:f5:6b: 89:05:45:1c:d3:41:bb:05:b0:9d:e9:89:84:1f:78: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A8:18:E7:6E:2E:26:AE:C0:BE:EF:51:8E:B0:91:8A:21:F1:D9:1A X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:56:ca:f0:6b:b5:0c:ac:aa:62:70:7d:9f:be:25:a4:76:e9: 9f:02:1d:6f:91:07:64:0c:fe:80:7c:8f:48:1c:3b:76:ad:8e: 05:eb:57:4f:44:e0:be:2f:87:1e:fb:27:78:16:d5:fa:1b:74: 2e:51:21:0c:1d:42:21:54:a5:c7:b5:45:27:9d:98:fa:c2:e5: 39:5c:92:e8:fa:02:5e:76:95:ef:13:e2:6e:5b:c9:cb:cd:30: 37:e7:ff:f7:86:f9:cf:16:5d:22:79:fb:64:db:a1:ec:09:28: d1:a0:9a:f1:28:c9:41:05:4d:ae:df:94:6f:e3:14:95:73:50: fe:64:5d:94:f9:d3:a2:b5:11:6e:98:19:dd:0c:eb:f4:71:e6: b5:c6:59:de:c8:be:c2:59:d2:e8:73:d0:17:e1:a0:10:91:d4: 71:fa:80:8c:5c:c1:04:3b:1b:6d:4c:6c:a2:fb:6e:0f:94:d4: 31:77:92:8b:5a:fd:ab:9a:78:ba:df:2e:70:27:10:03:ee:6c: 05:44:3f:10:fd:6b:b1:03:26:d0:41:50:4e:1a:cb:23:e7:1e: b4:0a:6b:81:1e:7c:db:22:aa:78:69:9d:ab:bc:20:91:f2:86: 0d:db:8c:f0:27:5d:1d:ef:22:5c:d9:27:08:01:a8:45:0c:28: 06:86:bd:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkY3QzExMC8GA1UEBRMoQzBFMzFCNUY0NUNGRTUyQkFDNUNFREI4RENDNkExQTMy MkY0NzA1RDAeFw0yNDA1MTUwOTAwMTVaFw0yNDA1MjIwOTAwMTVaMBgxFjAUBgNV BAMTDTY2NDQ3OTlmLWJlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOuezkYN8mup1805XeNqnNOElkoOoWQ8gwttQp6x+LzOXQ9Xs4LxNfiDR14jTs +bI8p3xLN1BGq1OtYK61Q8BsSpMec98ClCswORJfWywQljzexbMeUMXn6WbVazaG 5jKC9wte0L8HjxC0pCoRaqdMEi021roL4bZ9O1/U+jnmfjx+ygJ3iRbESPDp3WpA UfKl17iCyB0zrxZ+ZUPWdUBcDenas/i5+kZOsOZzmPjF7lP3mjpFB3eMmEvrtK6v SOIo8YLPzgQeIqQuC25zULY7+SF4yDaTlxxxVotD+pKM2zAq0QG9fbpfiI+Lmuv1 a4kFRRzTQbsFsJ3piYQfeJFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/qgY524u Jq7Avu9RjrCRiiHx2RowHwYDVR0jBBgwFoAUwOMbX0XP5SusXO243MahoyL0cF0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RjdDLzg2RjkxNjFDRkM1 QjExRUVBM0ZGOUQ0N0M0RjlBRTAyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNG MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd09NYlgwWFA1U3VzWE8yNDNNYWhveUwwY0YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RjdDLzg2RjkxNjFDRkM1QjExRUVBM0ZGOUQ0N0M0RjlBRTAyL3dPTWJYMFhQNVN1 c1hPMjQzTWFob3lMMGNGMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALFWyvBrtQysqmJwfZ++JaR26Z8CHW+RB2QM/oB8j0gcO3atjgXrV09E 4L4vhx77J3gW1fobdC5RIQwdQiFUpce1RSedmPrC5Tlckuj6Al52le8T4m5bycvN MDfn//eG+c8WXSJ5+2TboewJKNGgmvEoyUEFTa7flG/jFJVzUP5kXZT506K1EW6Y Gd0M6/Rx5rXGWd7IvsJZ0uhz0BfhoBCR1HH6gIxcwQQ7G21MbKL7bg+U1DF3kota /auaeLrfLnAnEAPubAVEPxD9a7EDJtBBUE4ayyPnHrQKa4EefNsiqnhpnau8IJHy hg3bjPAnXR3vIlzZJwgBqEUMKAaGvZ0= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org