$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json) Hash identifier: sSB4jF1GMXI4yENTEuN0A4/ixdh+9rPwZkivYJUsPTY= Subject key identifier: D8:42:DE:A8:12:E5:64:BB:90:66:6B:42:AA:B1:7B:52:2C:D5:94:4C Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft Manifest number: F2 Signing time: Fri 03 May 2024 05:49:17 +0000 Manifest this update: Fri 03 May 2024 05:49:17 +0000 Manifest next update: Fri 10 May 2024 05:49:17 +0000 Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: FNaQcu02CgIl5bIgOfzc2faYsazUZvIjFsZQc4Is0Gw=) 2: 7FB6349E967111ED94CA8D6AC4F9AE02.roa (hash: E9dBaq/5J6cciY5dqYQ9FiLibte1QZNeSlwl7Fk7XdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Validity Not Before: May 3 05:49:17 2024 GMT Not After : May 10 05:49:17 2024 GMT Subject: CN=66347add-984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:e1:a6:f1:c7:8b:13:ee:1c:42:8b:07:6f: 76:be:9c:84:35:33:7a:33:33:a6:96:39:bf:0d:af: c1:83:57:f2:6e:37:65:9f:37:02:7f:40:7e:06:95: 0e:f8:90:f4:16:ca:a1:3c:4b:63:34:e5:e2:d2:f6: af:75:91:8f:c1:57:9f:47:7b:88:e7:4a:b5:6f:f6: 7a:af:12:e5:c5:19:62:42:3d:fa:58:b6:ec:82:15: 96:4b:11:03:4e:47:0b:0e:8c:44:09:1c:1a:a1:ba: 7e:36:49:01:f1:9a:ae:7d:92:97:ad:17:a7:99:11: e5:88:2b:84:27:11:90:11:5e:61:1f:1c:02:a5:79: bd:14:97:a2:b6:89:75:6b:f7:66:d7:11:15:ff:a9: 82:53:28:aa:c0:45:92:6d:8f:ba:cc:b4:4f:21:0d: 92:4c:24:75:4c:84:4d:21:a6:ec:78:8c:b0:da:78: 28:b1:eb:19:7b:77:8c:ab:4a:90:ba:99:49:05:51: 01:41:02:2b:83:8c:55:05:1a:e4:11:55:5f:88:20: d6:ae:3b:ca:51:69:15:c1:01:5f:f9:25:d0:ae:98: 31:10:06:cf:ed:2a:43:31:d6:2d:45:f2:19:12:83: ea:8a:cd:ad:08:23:c8:cf:02:13:bc:ad:da:5e:c0: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:DE:A8:12:E5:64:BB:90:66:6B:42:AA:B1:7B:52:2C:D5:94:4C X509v3 Authority Key Identifier: keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:9b:f7:7f:cd:40:23:e6:5c:3e:75:f2:f0:1b:cb:dd:14:ff: 99:a1:a2:c2:90:16:4b:06:6d:6e:9a:9d:b7:be:7d:9f:7d:f3: 00:2d:43:1d:a5:86:a9:84:eb:76:89:a3:3f:76:6d:2a:07:a0: f2:78:af:64:7f:c7:f8:81:48:ea:80:49:6c:0b:e2:b7:23:48: dd:28:f3:d1:a2:8f:e6:75:0b:08:1a:2f:38:62:0e:03:34:2f: 79:1a:4b:3c:15:90:03:58:4f:9e:74:63:86:8d:e0:a0:bc:11: de:04:9d:c0:a7:50:2a:58:c1:d1:db:da:1c:ce:9f:68:4e:00: 29:98:2b:08:35:5d:2b:8a:b0:6b:87:f5:6f:47:2d:cd:92:88: 72:dd:7e:62:15:f0:81:c4:6c:6f:8d:24:ed:4f:43:7f:af:27: 74:21:88:dd:77:31:73:a7:5b:87:ce:5d:d8:69:0e:93:ce:e1: b4:b5:7d:97:b1:79:c8:00:9f:17:5b:35:10:56:ce:51:82:11: a0:52:11:ab:ca:43:73:bd:16:d6:54:4e:55:7b:7f:60:c2:b9: 65:f9:58:c7:15:90:fd:c3:c9:b2:c5:ad:3b:4a:ff:d6:2d:f2: 95:b6:19:15:be:7a:b8:0a:e3:ce:f5:43:39:f0:2a:0b:48:e2: cb:5a:c6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0MUUxMTAvBgNVBAUTKEMxMzc2NEEwQTYzQTc3NjdGM0E0NzVEN0E4MUFFOERG MThBRkUwOEQwHhcNMjQwNTAzMDU0OTE3WhcNMjQwNTEwMDU0OTE3WjAYMRYwFAYD VQQDEw02NjM0N2FkZC05ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+nhpvHHixPuHEKLB292vpyENTN6MzOmljm/Da/Bg1fybjdlnzcCf0B+BpUO +JD0FsqhPEtjNOXi0vavdZGPwVefR3uI50q1b/Z6rxLlxRliQj36WLbsghWWSxED TkcLDoxECRwaobp+NkkB8ZqufZKXrRenmRHliCuEJxGQEV5hHxwCpXm9FJeitol1 a/dm1xEV/6mCUyiqwEWSbY+6zLRPIQ2STCR1TIRNIabseIyw2ngosesZe3eMq0qQ uplJBVEBQQIrg4xVBRrkEVVfiCDWrjvKUWkVwQFf+SXQrpgxEAbP7SpDMdYtRfIZ EoPqis2tCCPIzwITvK3aXsAFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhC3qgS 5WS7kGZrQqqxe1Is1ZRMMB8GA1UdIwQYMBaAFME3ZKCmOndn86R116ga6N8Yr+CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTQxRS9FRjFGQUQxODk2 NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQyZnpwSFhYcUJybzN4aXY0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUZGtvS1k2ZDJmenBIWFhxQnJvM3hpdjRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTQxRS9FRjFGQUQxODk2NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQy ZnpwSFhYcUJybzN4aXY0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgm/d/zUAj5lw+dfLwG8vdFP+ZoaLCkBZLBm1ump23vn2fffMALUMd pYaphOt2iaM/dm0qB6DyeK9kf8f4gUjqgElsC+K3I0jdKPPRoo/mdQsIGi84Yg4D NC95Gks8FZADWE+edGOGjeCgvBHeBJ3Ap1AqWMHR29oczp9oTgApmCsINV0rirBr h/VvRy3Nkohy3X5iFfCBxGxvjSTtT0N/ryd0IYjddzFzp1uHzl3YaQ6TzuG0tX2X sXnIAJ8XWzUQVs5RghGgUhGrykNzvRbWVE5Ve39gwrll+VjHFZD9w8myxa07Sv/W LfKVthkVvnq4CuPO9UM58CoLSOLLWsaF -----END CERTIFICATE-----Generated at Fri May 3 06:29:20 2024 by rpki-client on console-fra.rpki-client.org