$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json) Hash identifier: CpZ90pB5khg5+IIaZh2ysrMwrHRKt/jh/ZZ/6PBNe8s= Subject key identifier: 21:BF:E7:AC:53:3E:84:15:0D:B7:B9:D7:E6:10:61:DA:9E:47:12:A5 Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5 Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft Manifest number: 0A46 Signing time: Tue 30 Apr 2024 20:44:29 +0000 Manifest this update: Tue 30 Apr 2024 20:44:28 +0000 Manifest next update: Tue 07 May 2024 20:44:28 +0000 Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: U/j0doP+NTxybhgFjrrpjtdNKyZL8adtMhM3BT1AUO0=) 2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: 7/xTj0hWgFoZxHiobIJ1SZYazXXBJG8VrDqlWC2SosA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5 Validity Not Before: Apr 30 20:44:28 2024 GMT Not After : May 7 20:44:28 2024 GMT Subject: CN=6631582c-98f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:48:b7:3a:3a:ad:25:d2:f3:c5:75:26:bf: 94:77:ac:85:93:1d:2d:44:16:7a:fb:cb:16:10:6f: 8f:b4:fb:79:e8:ea:5e:75:5b:b6:09:67:2c:70:e2: 19:76:c5:4b:09:a0:c6:84:5a:be:78:f4:ed:56:f7: a6:77:27:76:cd:a0:07:29:d0:b6:ba:d7:df:f1:85: 6b:0c:8a:d5:7d:2c:c5:67:66:e1:c5:f9:02:4c:4b: 94:4a:86:7a:ed:e1:fa:67:c2:36:4d:ca:6a:55:59: 1d:b9:55:d2:a2:d2:a4:1a:06:07:f4:ab:5c:a1:2b: 64:b0:19:05:79:b4:97:d5:f1:52:4f:aa:e5:df:23: dc:97:6e:bd:fd:86:2d:79:b6:95:00:bc:76:c4:12: 00:cf:32:f9:67:92:22:8b:f1:57:17:4c:b9:0e:56: 82:b5:52:13:24:b5:0b:90:3f:ea:c3:59:3e:6b:f5: 79:dc:61:9e:f8:f0:c7:14:b3:9e:88:c7:a4:55:2b: ae:07:a8:3c:8e:cc:93:84:3f:e2:b3:86:6c:93:8d: e1:b9:76:7d:2b:c7:e7:03:34:42:f5:0c:14:ba:9c: 67:9c:a7:0b:de:a4:ca:bd:37:41:8e:b9:4f:03:8b: 67:2a:64:61:4c:eb:4f:14:8e:39:0f:07:8b:e1:27: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:E7:AC:53:3E:84:15:0D:B7:B9:D7:E6:10:61:DA:9E:47:12:A5 X509v3 Authority Key Identifier: keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a6:51:31:49:8f:c6:88:60:a2:f2:8f:3b:34:3b:fa:0b:ab: 40:3d:7d:86:bf:e6:1c:d2:bb:ca:5e:ce:40:53:12:a8:38:4e: fc:05:6b:f6:53:24:58:da:c4:dc:0d:d9:1c:4d:19:9b:82:10: 83:e7:5e:b5:be:75:a4:68:d4:b1:ae:48:4c:00:68:ac:b0:02: 8b:36:ab:72:8b:3f:4f:94:aa:a9:60:0a:bc:f2:fc:26:2c:2b: 99:d1:33:96:04:ab:43:e4:ff:da:72:10:d1:ea:bc:de:94:c7: b0:5d:59:66:28:14:5e:dc:42:fc:c1:29:e3:f6:b6:a5:16:6c: f7:11:eb:ce:ee:5d:80:cf:f4:52:bf:82:1f:14:18:0b:95:cc: a5:73:5b:b4:1c:c7:7f:32:41:75:50:b7:6a:26:4b:6a:7d:19: 5a:13:22:95:29:48:ca:ba:f4:44:4f:12:67:76:88:f6:aa:94: 78:7e:4c:c9:60:61:c1:23:2c:26:e9:b9:6a:3c:17:54:0e:c4: ff:6a:0d:fa:f0:ee:41:e5:42:e1:33:04:bb:86:ba:b3:bc:08: e6:92:aa:d9:24:d8:a1:a9:ba:e8:94:7f:64:d5:d8:fc:9e:20: d5:a5:f0:0d:a1:1b:5c:ed:bb:cf:64:b2:86:a3:65:c5:8e:65: 3d:fd:55:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNTMxMTAvBgNVBAUTKEZGMEIxNTQ2RDg0QzBEOTM1NTkwNUI2Q0EyOTNFMjVC NDQwOTQ4QzUwHhcNMjQwNDMwMjA0NDI4WhcNMjQwNTA3MjA0NDI4WjAYMRYwFAYD VQQDEw02NjMxNTgyYy05OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qNItzo6rSXS88V1Jr+Ud6yFkx0tRBZ6+8sWEG+PtPt56OpedVu2CWcscOIZ dsVLCaDGhFq+ePTtVvemdyd2zaAHKdC2utff8YVrDIrVfSzFZ2bhxfkCTEuUSoZ6 7eH6Z8I2TcpqVVkduVXSotKkGgYH9KtcoStksBkFebSX1fFST6rl3yPcl269/YYt ebaVALx2xBIAzzL5Z5Iii/FXF0y5DlaCtVITJLULkD/qw1k+a/V53GGe+PDHFLOe iMekVSuuB6g8jsyThD/is4Zsk43huXZ9K8fnAzRC9QwUupxnnKcL3qTKvTdBjrlP A4tnKmRhTOtPFI45DweL4SfZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG/56xT PoQVDbe51+YQYdqeRxKlMB8GA1UdIwQYMBaAFP8LFUbYTA2TVZBbbKKT4ltECUjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY1My9DRDA2MjE3NjQw RjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURaTlZrRnRzb3BQaVcwUUpT TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193c1ZSdGhNRFpOVmtGdHNvcFBpVzBRSlNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY1My9DRDA2MjE3NjQwRjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURa TlZrRnRzb3BQaVcwUUpTTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBplExSY/GiGCi8o87NDv6C6tAPX2Gv+Yc0rvKXs5AUxKoOE78BWv2 UyRY2sTcDdkcTRmbghCD5161vnWkaNSxrkhMAGissAKLNqtyiz9PlKqpYAq88vwm LCuZ0TOWBKtD5P/achDR6rzelMewXVlmKBRe3EL8wSnj9ralFmz3EevO7l2Az/RS v4IfFBgLlcylc1u0HMd/MkF1ULdqJktqfRlaEyKVKUjKuvRETxJndoj2qpR4fkzJ YGHBIywm6blqPBdUDsT/ag368O5B5ULhMwS7hrqzvAjmkqrZJNihqbrolH9k1dj8 niDVpfANoRtc7bvPZLKGo2XFjmU9/VVn -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:02 2024 by rpki-client on console-fra.rpki-client.org