$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json) Hash identifier: zK7rZ1h+XBXtwxzbdYRDgdf2ODvE1IWX1oERmj6DwJI= Subject key identifier: 95:4F:67:0F:4C:65:75:BE:1D:33:E1:59:27:B4:0B:F1:B6:C5:F5:81 Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft Manifest number: 0510 Signing time: Sun 05 May 2024 01:13:36 +0000 Manifest this update: Sun 05 May 2024 01:13:36 +0000 Manifest next update: Sun 12 May 2024 01:13:36 +0000 Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: QBn8MCyyMjHJLuZRNl4TzHX5HXPZydN0DjGBCSvfysI=) 2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: CfZetZA42d5dkmUhh3hoOTpu+QF5rdj8o8i+L84sgLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: May 5 01:13:36 2024 GMT Not After : May 12 01:13:36 2024 GMT Subject: CN=6636dd40-fa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:39:c8:53:d1:25:35:e0:10:2b:38:94:71:2e: bb:2e:07:b0:d3:ca:8d:1b:ef:c1:bf:50:8d:fd:26: 1a:8a:bd:e4:91:c5:18:cf:dd:c8:4d:79:bc:ac:2c: 45:b3:cf:ca:c5:c7:78:82:83:b7:cf:a0:58:39:8b: cd:d3:fe:34:a9:54:9e:ae:9b:f2:89:d3:6d:f2:35: ed:0f:f5:fe:06:a0:0d:29:08:d6:7d:a1:6e:13:6f: 26:7d:47:9c:4d:6f:cb:f4:42:37:40:8c:df:5e:0f: fd:8b:21:69:e2:c9:3e:3d:a7:ee:a6:af:34:c7:6f: d5:b9:27:ec:c8:e2:31:19:83:0f:26:7c:a3:a5:b9: 94:b0:57:45:7e:f5:eb:c0:8c:9d:68:d8:c4:0f:a1: 47:12:20:11:ec:6f:9c:50:e2:34:f9:54:69:93:7c: 1d:37:40:d0:84:22:65:41:8f:46:93:36:71:63:de: f6:c5:de:5b:0e:5d:08:37:b5:e5:69:e4:ea:78:bf: 40:d4:b5:57:19:35:90:97:9c:cf:7f:91:d0:8b:f1: 3e:19:a9:54:8e:6c:5f:6b:4e:51:0c:5b:37:3f:4a: 76:5b:0d:ac:a0:45:47:ce:1c:77:a1:10:03:0a:bf: d2:15:14:fd:de:a3:b5:89:07:cd:c8:bb:73:16:a4: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4F:67:0F:4C:65:75:BE:1D:33:E1:59:27:B4:0B:F1:B6:C5:F5:81 X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:33:85:2a:1b:99:28:ae:0a:3d:f7:91:b4:ae:a2:7e:22:7b: 35:cf:4b:41:ff:23:0f:0f:99:63:45:32:20:21:69:ac:87:a9: 79:20:ef:bc:c0:3a:4a:00:81:20:3f:a1:bd:82:43:28:f4:b9: 2f:8d:81:84:e6:30:de:0a:bc:f7:c1:be:02:7b:0e:bf:d0:fb: c5:d9:c3:fb:9c:f5:62:bc:c5:b7:f8:55:2e:4d:ce:1c:32:77: b3:a9:cc:0e:77:e4:1b:21:9b:1d:de:1c:85:16:dc:52:9e:d2: 33:9e:42:f6:22:88:8e:14:8b:bf:e8:6f:24:90:9d:1e:c2:bf: 91:9d:d3:17:70:cd:cc:e6:33:21:4a:9f:f7:aa:30:d8:e2:57: 91:ae:0e:b9:6e:c9:f7:b2:56:65:b0:d6:b4:b6:f0:d7:03:6d: 6a:5b:03:e4:36:c1:d0:8c:4b:2c:68:96:d6:63:30:01:66:dc: b5:20:c6:09:a7:a2:2c:77:3d:0a:f5:8d:7c:55:ff:0c:ec:d1: 73:eb:0e:83:cf:e4:b2:4d:41:a8:32:b9:de:ec:3a:7f:5e:5d: af:88:96:89:8e:1a:47:06:6c:5a:8f:04:d2:bd:51:36:20:fb: 4d:2c:dd:42:7d:c6:7b:39:08:f3:5b:7d:ba:f2:35:b7:5b:ed: 54:03:c8:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjQwNTA1MDExMzM2WhcNMjQwNTEyMDExMzM2WjAYMRYwFAYD VQQDEw02NjM2ZGQ0MC1mYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5znIU9ElNeAQKziUcS67Lgew08qNG+/Bv1CN/SYair3kkcUYz93ITXm8rCxF s8/Kxcd4goO3z6BYOYvN0/40qVSerpvyidNt8jXtD/X+BqANKQjWfaFuE28mfUec TW/L9EI3QIzfXg/9iyFp4sk+Pafupq80x2/VuSfsyOIxGYMPJnyjpbmUsFdFfvXr wIydaNjED6FHEiAR7G+cUOI0+VRpk3wdN0DQhCJlQY9GkzZxY972xd5bDl0IN7Xl aeTqeL9A1LVXGTWQl5zPf5HQi/E+GalUjmxfa05RDFs3P0p2Ww2soEVHzhx3oRAD Cr/SFRT93qO1iQfNyLtzFqSIAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVPZw9M ZXW+HTPhWSe0C/G2xfWBMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEM4UqG5korgo995G0rqJ+Ins1z0tB/yMPD5ljRTIgIWmsh6l5IO+8 wDpKAIEgP6G9gkMo9LkvjYGE5jDeCrz3wb4Cew6/0PvF2cP7nPVivMW3+FUuTc4c MnezqcwOd+QbIZsd3hyFFtxSntIznkL2IoiOFIu/6G8kkJ0ewr+RndMXcM3M5jMh Sp/3qjDY4leRrg65bsn3slZlsNa0tvDXA21qWwPkNsHQjEssaJbWYzABZty1IMYJ p6Isdz0K9Y18Vf8M7NFz6w6Dz+SyTUGoMrne7Dp/Xl2viJaJjhpHBmxajwTSvVE2 IPtNLN1CfcZ7OQjzW3268jW3W+1UA8i0 -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org