$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: LvI+LbX9cOmkkLUnj8R4l1IFg/hPm3uAaMKdmo5w7pw= Subject key identifier: B7:3C:A0:C1:00:77:00:66:D0:17:23:BD:50:66:AC:1D:6A:4A:7D:E5 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0A56 Signing time: Sat 04 May 2024 20:33:07 +0000 Manifest this update: Sat 04 May 2024 20:33:06 +0000 Manifest next update: Sat 11 May 2024 20:33:06 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: h4ABDVHm6FHFtgRi+f62HG+bzNGe3JBCk+PGdhocQ8g=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: S9zx5CiH6xXQ+1EyPFtETah4qsiyHMulRyPskFyA3kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: May 4 20:33:06 2024 GMT Not After : May 11 20:33:06 2024 GMT Subject: CN=66369b83-77fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:f1:ba:93:be:35:9e:a0:f9:fe:57:2e:6c: da:44:6b:32:06:47:13:42:2e:e1:ec:e9:29:7f:73: c7:4e:ab:fa:52:f8:f9:ce:11:cf:0f:c4:5a:1e:47: e3:d1:c9:3f:ed:08:bb:97:42:e1:f4:e0:6f:39:c5: e4:06:77:21:ab:ac:42:68:4d:fd:b8:13:5b:fd:08: 9d:12:5a:7c:6f:fa:aa:1e:8a:14:02:d4:72:4f:37: ef:e6:d9:33:54:84:67:2e:4b:0a:a9:42:39:97:01: 36:1f:63:67:ad:f8:9e:f3:ad:d3:b3:cf:17:fb:e7: 60:d3:6b:23:b4:74:e4:dd:59:55:a5:cc:25:f6:d6: 63:1f:00:13:dc:a8:88:e3:64:19:57:ff:09:e6:a1: 97:e3:e4:b8:26:bb:dc:fc:65:04:ce:64:25:9d:a0: 38:d4:32:94:3f:0b:08:13:98:d6:27:32:47:c0:f2: 64:0f:8d:4d:1e:be:4d:d7:98:ca:30:09:6b:b6:0f: e0:78:28:d6:57:0e:65:f0:e0:c5:5f:58:82:9f:2e: cf:1c:5e:2a:36:3a:62:f1:a2:6e:35:f4:58:00:f8: fa:8e:25:c8:78:3b:dc:6a:1a:86:8a:8e:f5:ce:61: ce:9d:b8:0e:6a:6d:30:a0:7c:8c:90:e9:4c:28:bd: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3C:A0:C1:00:77:00:66:D0:17:23:BD:50:66:AC:1D:6A:4A:7D:E5 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:c6:bb:f3:57:0d:51:fe:8b:46:62:4d:cd:2f:87:7d:52: af:af:00:37:5a:17:6e:11:bd:c3:3d:85:e0:8b:96:9d:8b:5a: 96:10:65:77:8d:43:e2:7e:cd:3c:3f:f8:f1:3c:cf:31:29:ef: 1b:a9:8d:71:9a:21:86:a9:05:18:43:fd:15:95:ac:a5:5b:3e: d3:f7:03:78:0b:f8:31:d0:87:d8:eb:de:b1:45:90:fc:7a:ef: 95:08:3b:1c:e8:8f:0c:de:0c:9d:97:f3:87:dc:0d:ef:66:44: eb:a4:06:ad:79:89:9f:a9:aa:f7:d8:39:07:1f:d9:a2:57:fb: bf:f4:7d:c5:c8:ce:1c:7d:e1:00:a5:d1:82:d7:9c:19:e8:0c: 9e:a5:4b:17:c2:48:4e:db:b4:bb:86:75:af:4d:78:f4:b5:b7: 6f:a0:21:c2:f0:f7:85:4f:12:77:65:2f:23:b6:08:ca:32:92: dd:3c:37:6f:d2:32:c8:4b:f5:17:91:46:55:f1:4f:d7:e5:76: 6d:3e:5c:12:23:38:a5:95:01:e4:f6:73:14:1b:ef:13:27:7d: 50:15:de:26:11:f9:81:d7:c0:82:75:3a:b0:16:0f:3a:1a:ea: 39:30:47:22:af:28:df:9e:24:77:1f:d7:49:31:eb:a0:23:2b: 73:ed:01:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjQwNTA0MjAzMzA2WhcNMjQwNTExMjAzMzA2WjAYMRYwFAYD VQQDEw02NjM2OWI4My03N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHvxupO+NZ6g+f5XLmzaRGsyBkcTQi7h7Okpf3PHTqv6Uvj5zhHPD8RaHkfj 0ck/7Qi7l0Lh9OBvOcXkBnchq6xCaE39uBNb/QidElp8b/qqHooUAtRyTzfv5tkz VIRnLksKqUI5lwE2H2Nnrfie863Ts88X++dg02sjtHTk3VlVpcwl9tZjHwAT3KiI 42QZV/8J5qGX4+S4Jrvc/GUEzmQlnaA41DKUPwsIE5jWJzJHwPJkD41NHr5N15jK MAlrtg/geCjWVw5l8ODFX1iCny7PHF4qNjpi8aJuNfRYAPj6jiXIeDvcahqGio71 zmHOnbgOam0woHyMkOlMKL0pUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc8oMEA dwBm0BcjvVBmrB1qSn3lMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZY8a781cNUf6LRmJNzS+HfVKvrwA3WhduEb3DPYXgi5adi1qWEGV3 jUPifs08P/jxPM8xKe8bqY1xmiGGqQUYQ/0VlaylWz7T9wN4C/gx0IfY696xRZD8 eu+VCDsc6I8M3gydl/OH3A3vZkTrpAateYmfqar32DkHH9miV/u/9H3FyM4cfeEA pdGC15wZ6AyepUsXwkhO27S7hnWvTXj0tbdvoCHC8PeFTxJ3ZS8jtgjKMpLdPDdv 0jLIS/UXkUZV8U/X5XZtPlwSIzillQHk9nMUG+8TJ31QFd4mEfmB18CCdTqwFg86 Guo5MEciryjfniR3H9dJMeugIytz7QHB -----END CERTIFICATE-----Generated at Sat May 4 21:19:30 2024 by rpki-client on console-ams.rpki-client.org