$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft File: wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json) Hash identifier: ijRAahGBCwkGJvaSakzLUFHgKqY9NuexyN9RFA4jXwQ= Subject key identifier: B5:9C:12:A0:4B:81:3A:14:30:47:B2:7A:3E:75:D8:55:F9:36:57:A3 Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft Manifest number: 04D1 Signing time: Fri 03 May 2024 01:30:37 +0000 Manifest this update: Fri 03 May 2024 01:30:37 +0000 Manifest next update: Fri 10 May 2024 01:30:37 +0000 Files and hashes: 1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: M7YrC7Adzi5m//uSMGpw6G4Q0CoI9eeCc3zS8rMAXoU=) 2: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: it97aMVO7z/szOuRdoiZildMRkb16qoJyAaIBBrlycw=) 3: 96033290E15611EC9E14513DC4F9AE02.roa (hash: 9rUYZVVSecYKVgGZS3+LYYtxh4AnVM4o9EV4HsZiQko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Validity Not Before: May 3 01:30:37 2024 GMT Not After : May 10 01:30:37 2024 GMT Subject: CN=66343e3d-4ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:ba:16:5c:af:8e:71:b4:4e:6b:36:1f:9a: d1:c9:4a:95:d7:aa:65:1f:e1:79:32:b9:ca:ca:09: 81:87:5f:a9:4e:29:99:e6:fe:a0:0a:87:7b:16:c7: 94:b8:78:d2:7d:21:bc:94:4f:db:ad:77:1f:b8:33: cd:c3:76:5f:7c:78:5b:27:6e:c2:b6:94:41:70:39: 0e:82:d0:ea:74:02:70:42:1c:a3:05:09:b6:a6:e5: 08:51:49:b9:12:60:af:f3:da:45:53:6f:3d:0f:f4: 1e:3d:67:0a:7a:5e:f1:ac:fa:41:3b:22:08:5b:54: a2:f0:1d:29:fe:09:5f:40:59:1e:32:9f:c0:18:fa: ee:cf:59:52:43:03:d6:35:37:34:52:ff:5e:6a:90: 65:36:4a:04:30:94:3e:31:ca:04:dd:00:83:eb:60: ca:75:a4:a1:83:6a:aa:0c:1d:b6:99:ae:4f:f6:37: fe:68:3c:25:cb:38:93:80:ab:38:df:3c:04:7c:1e: 2a:11:56:26:89:01:0e:c8:b8:95:dd:0b:62:39:9e: 6f:29:c3:77:cd:d1:13:c8:33:92:53:4b:14:b9:74: de:b3:ec:f4:e5:69:d0:ea:52:14:8e:fb:01:c6:b3: d6:40:2f:5a:d9:68:a8:61:95:5d:4c:1c:c0:d5:50: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:12:A0:4B:81:3A:14:30:47:B2:7A:3E:75:D8:55:F9:36:57:A3 X509v3 Authority Key Identifier: keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0f:01:3f:ed:48:f9:3a:91:2b:8b:0a:4e:2c:8c:9d:01:f5: c9:17:73:28:de:f5:77:c2:f7:ad:79:ad:c3:74:e5:90:a9:c5: 50:1d:9c:7b:63:2f:52:83:c0:80:00:47:03:66:f3:e4:fd:5c: 46:76:de:1e:29:1c:0e:41:e0:a1:e7:a1:9f:48:08:84:93:9d: e7:ae:ee:f2:2b:5a:29:d3:2f:89:9c:2e:1d:a7:36:e5:0f:3f: ea:28:da:b3:35:15:e4:46:3e:24:4d:ef:d7:e0:67:90:5a:e7: 19:06:01:9f:18:58:f1:86:87:e9:38:1f:82:17:01:aa:05:00: 5c:4f:9e:3d:5c:bc:ce:45:83:2c:03:31:c2:a1:8b:78:98:1b: cf:b4:99:ac:a2:d3:01:af:ba:fc:3a:b9:73:c2:ff:44:72:8e: 9d:c6:15:4e:53:81:62:90:f1:f8:2e:0b:ea:95:18:9d:b1:7f: 67:bb:c0:29:4e:d4:1a:98:41:b6:b5:69:88:26:02:a7:40:2e: 11:e8:8c:57:74:10:78:cd:1c:4c:59:73:eb:87:1e:bd:05:b5: 9c:b6:27:58:e3:45:2a:68:21:b8:13:87:80:bb:e4:1b:ad:fb: 38:fb:a1:dc:b3:71:2b:d6:3d:d5:1f:be:50:42:b5:17:33:46: 7a:b0:8f:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5RUUxMTAvBgNVBAUTKEMwQjE2MDM5QzQ2Q0RGMEM4OEQ5QTc0QTgyRDlFNDU5 QTNBOENBRTYwHhcNMjQwNTAzMDEzMDM3WhcNMjQwNTEwMDEzMDM3WjAYMRYwFAYD VQQDEw02NjM0M2UzZC00ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRK6FlyvjnG0Tms2H5rRyUqV16plH+F5MrnKygmBh1+pTimZ5v6gCod7FseU uHjSfSG8lE/brXcfuDPNw3ZffHhbJ27CtpRBcDkOgtDqdAJwQhyjBQm2puUIUUm5 EmCv89pFU289D/QePWcKel7xrPpBOyIIW1Si8B0p/glfQFkeMp/AGPruz1lSQwPW NTc0Uv9eapBlNkoEMJQ+McoE3QCD62DKdaShg2qqDB22ma5P9jf+aDwlyziTgKs4 3zwEfB4qEVYmiQEOyLiV3QtiOZ5vKcN3zdETyDOSU0sUuXTes+z05WnQ6lIUjvsB xrPWQC9a2WioYZVdTBzA1VD1TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWcEqBL gToUMEeyej512FX5NlejMB8GA1UdIwQYMBaAFMCxYDnEbN8MiNmnSoLZ5FmjqMrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlFRS9BMDhCNkE1Q0Qz NkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3eUkyYWRLZ3Rua1dhT295 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMRmdPY1JzM3d5STJhZEtndG5rV2FPb3l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTlFRS9BMDhCNkE1Q0QzNkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3 eUkyYWRLZ3Rua1dhT295dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4DwE/7Uj5OpEriwpOLIydAfXJF3Mo3vV3wvetea3DdOWQqcVQHZx7 Yy9Sg8CAAEcDZvPk/VxGdt4eKRwOQeCh56GfSAiEk53nru7yK1op0y+JnC4dpzbl Dz/qKNqzNRXkRj4kTe/X4GeQWucZBgGfGFjxhofpOB+CFwGqBQBcT549XLzORYMs AzHCoYt4mBvPtJmsotMBr7r8Orlzwv9Eco6dxhVOU4FikPH4LgvqlRidsX9nu8Ap TtQamEG2tWmIJgKnQC4R6IxXdBB4zRxMWXPrhx69BbWctidY40UqaCG4E4eAu+Qb rfs4+6Hcs3Er1j3VH75QQrUXM0Z6sI9l -----END CERTIFICATE-----Generated at Fri May 3 03:10:52 2024 by rpki-client on console-ams.rpki-client.org