$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: lw7v6pUE00Omun1gXjUNZU8tvkKlaXyerxU31T0lhNI= Subject key identifier: D6:92:84:4E:1B:28:47:F9:B8:6E:5E:28:7D:17:46:86:84:F4:C4:C1 Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0A8D Signing time: Sat 04 May 2024 20:25:00 +0000 Manifest this update: Sat 04 May 2024 20:24:59 +0000 Manifest next update: Sat 11 May 2024 20:24:59 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: gg5Xzj7nJFbPBFTY7PdhCTfif/JwbotHDDkYSBU2Lro=) 2: DE36A97E33E911EA818BA21BC4F9AE02.roa (hash: itPIGyWcvX5kyZiYnciz4IhJ9d27THArOHdKWDgeClc=) 3: DDA375B433E911EA818BA21BC4F9AE02.roa (hash: HnTBs0uJc7B2wZIC0p6EsmCtE1h1nepd2rRBNKI7CVA=) 4: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: XiZfAWFkjoqFW9ua9fCc03HXRleBI1XvTHdjfLUylPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: May 4 20:24:59 2024 GMT Not After : May 11 20:24:59 2024 GMT Subject: CN=6636999c-c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:19:f3:f9:b8:ae:bd:d1:b8:57:c2:7d:4f:dd: 80:2c:14:c7:0b:8a:b2:ef:c3:bb:2c:b9:50:4c:b3: f8:34:ad:95:0b:5c:ff:6c:42:32:f2:b8:b6:be:84: 1f:cd:e9:7d:35:cb:c7:be:13:32:75:7d:bc:54:75: 63:20:a0:6c:14:42:69:35:30:15:77:f9:0b:59:48: d4:5e:ee:73:43:5f:4b:62:ed:c9:3f:ed:1b:a6:39: 67:5f:80:7f:47:ef:e3:75:29:8f:cc:7b:ad:db:d6: d5:b6:25:da:5e:39:b9:cf:3a:68:00:38:fd:a9:5c: 79:2c:b6:18:90:29:e6:97:8e:88:81:cc:a6:17:2d: fa:4b:90:8c:cb:a8:e2:de:e8:88:8a:39:f8:41:6f: 55:89:73:a2:e2:f1:98:97:c5:c2:79:17:4c:20:20: 75:ae:57:b1:a9:ce:e4:1a:4b:06:13:11:ab:a8:32: 73:58:17:66:60:27:46:cc:ec:46:91:4d:7e:e5:29: 3a:d5:f2:f9:96:3f:30:5b:87:1e:71:6a:ee:f4:ea: 2a:f7:6d:12:0c:e8:1d:33:cd:f7:f9:20:24:78:b7: 7c:9b:4b:31:b1:a1:ef:a8:e3:e3:01:1d:21:f5:9e: da:bf:c1:c9:c2:b6:f0:c6:fc:4d:06:7c:c7:92:4b: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:84:4E:1B:28:47:F9:B8:6E:5E:28:7D:17:46:86:84:F4:C4:C1 X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0a:7e:6b:80:32:85:bf:fa:df:01:71:f1:4b:53:8d:0a:63: df:5a:47:06:ae:ba:ce:96:24:d8:38:e2:03:71:81:12:3f:8d: 19:b6:09:53:53:51:86:1f:91:6d:be:a1:84:b2:65:47:9e:59: bd:7b:fa:d3:af:9a:18:fd:97:5d:83:89:b1:c8:b9:49:02:5a: dc:63:0f:ee:36:f2:aa:e0:26:1c:fa:05:20:e7:05:35:bd:b5: 25:4e:1b:98:ea:50:4f:10:91:f9:d8:bb:03:fc:d9:c0:12:15: b0:ac:30:df:c0:0e:e7:83:07:50:b1:75:2a:94:29:bb:dd:7a: 69:b9:da:ec:61:d5:1e:6d:8f:2a:f9:a1:59:63:ae:57:1b:47: 69:01:3a:e0:9d:e1:3c:77:69:ac:92:2a:4f:27:cd:54:e5:78: 1f:24:ac:2c:4d:25:80:72:1a:2a:6c:40:21:be:07:ee:f3:7e: 84:9a:f8:d0:71:73:36:e7:16:20:77:da:77:66:1d:cc:4d:e0: d3:0d:d8:b1:91:a5:08:ff:db:aa:de:4c:fc:9a:a6:26:45:ad: 77:dd:ad:02:86:95:e9:98:6c:fe:e1:8b:de:57:d0:e1:8c:86: ff:61:b9:54:88:a5:dc:a8:68:e5:c3:ad:03:e6:62:2a:a8:b6: 49:8a:4d:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjQwNTA0MjAyNDU5WhcNMjQwNTExMjAyNDU5WjAYMRYwFAYD VQQDEw02NjM2OTk5Yy1jMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hnz+biuvdG4V8J9T92ALBTHC4qy78O7LLlQTLP4NK2VC1z/bEIy8ri2voQf zel9NcvHvhMydX28VHVjIKBsFEJpNTAVd/kLWUjUXu5zQ19LYu3JP+0bpjlnX4B/ R+/jdSmPzHut29bVtiXaXjm5zzpoADj9qVx5LLYYkCnml46IgcymFy36S5CMy6ji 3uiIijn4QW9ViXOi4vGYl8XCeRdMICB1rlexqc7kGksGExGrqDJzWBdmYCdGzOxG kU1+5Sk61fL5lj8wW4cecWru9Ooq920SDOgdM833+SAkeLd8m0sxsaHvqOPjAR0h 9Z7av8HJwrbwxvxNBnzHkktpOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaShE4b KEf5uG5eKH0XRoaE9MTBMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRCn5rgDKFv/rfAXHxS1ONCmPfWkcGrrrOliTYOOIDcYESP40ZtglT U1GGH5FtvqGEsmVHnlm9e/rTr5oY/Zddg4mxyLlJAlrcYw/uNvKq4CYc+gUg5wU1 vbUlThuY6lBPEJH52LsD/NnAEhWwrDDfwA7ngwdQsXUqlCm73XppudrsYdUebY8q +aFZY65XG0dpATrgneE8d2mskipPJ81U5XgfJKwsTSWAchoqbEAhvgfu836EmvjQ cXM25xYgd9p3Zh3MTeDTDdixkaUI/9uq3kz8mqYmRa133a0ChpXpmGz+4YveV9Dh jIb/YblUiKXcqGjlw60D5mIqqLZJik02 -----END CERTIFICATE-----Generated at Sat May 4 21:19:30 2024 by rpki-client on console-ams.rpki-client.org