$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: yDWBYn0GtCvpGNlmuk/uak6OF9SAUUycM2tUI2twoY4= Subject key identifier: AF:AE:19:5F:48:A2:19:67:CB:5B:28:9D:6F:95:10:D5:68:A2:4C:63 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 04A1 Signing time: Fri 03 May 2024 01:40:39 +0000 Manifest this update: Fri 03 May 2024 01:40:38 +0000 Manifest next update: Fri 10 May 2024 01:40:38 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: VDCeRKhERgdh5ZZ4nu+UaJtD6xmV6+dN5oZUqabiYAA=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: L6syG/DU8pQWTn+BvOaIlndDQ6lYytfpaRl28DKM+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: May 3 01:40:38 2024 GMT Not After : May 10 01:40:38 2024 GMT Subject: CN=66344096-99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:fc:dc:a9:39:22:7e:f5:7b:55:10:13:fb: 93:e0:17:1f:e9:3e:aa:ca:79:66:53:29:05:3c:4f: 7a:7e:fc:8c:dd:cf:9a:d4:93:0d:9c:38:90:cd:a7: b8:21:b3:4d:fa:61:55:95:ee:37:59:23:bc:28:ec: ec:d5:f6:c7:7f:83:77:6a:19:c1:12:2f:52:f2:f2: 0f:aa:06:ac:64:bd:2d:ea:b7:0a:48:9a:13:fb:4f: e0:75:f2:66:3c:8d:7f:4f:22:ec:83:ab:ae:29:39: 57:b6:fc:51:9a:39:42:39:0f:8c:b4:35:ad:97:7e: 96:06:3f:11:45:80:10:4f:e7:a8:1a:b6:2d:f4:1c: 1a:1c:af:c6:32:27:2f:bb:e3:2c:28:b7:0a:f8:a6: 7b:db:84:e2:7e:3a:ce:c8:85:55:ac:b5:2b:5e:8e: b0:6f:93:98:28:44:18:0e:3c:6c:b4:ac:c7:74:49: fd:10:33:9d:ea:6b:aa:f5:86:93:b2:3e:3f:06:36: 66:52:0c:7d:7e:0f:0e:56:4f:da:cd:b1:9f:37:c0: 68:15:80:c2:0a:36:e0:f3:9a:1d:9a:53:61:67:7a: 3b:12:76:c1:cf:4c:1c:f5:55:0d:b4:6f:ab:bf:19: 7d:46:b7:84:dc:c3:8d:9f:81:4e:fc:5e:4f:b2:b1: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AE:19:5F:48:A2:19:67:CB:5B:28:9D:6F:95:10:D5:68:A2:4C:63 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:4e:13:0e:6a:53:af:c5:0d:23:0d:e0:b2:a9:5f:a4:ce:34: c4:20:86:db:51:c4:97:c4:de:db:88:78:c6:68:ad:c7:1c:64: 8d:0d:db:9b:fb:da:3d:6b:73:ab:13:88:87:68:2f:6c:d2:75: 79:d4:5c:ca:dd:53:15:a5:43:b7:f3:36:db:db:a0:07:1d:93: c3:19:51:13:9e:8a:2c:24:b4:4b:3a:ae:bd:fa:52:83:de:ae: 1a:27:89:a6:d4:39:5c:33:ae:c6:d8:9b:22:1c:b4:4f:a6:43: 72:49:0c:f5:2e:79:ee:a0:15:21:cf:49:2d:60:65:ca:9c:cf: 5a:89:ee:80:8d:38:62:4f:05:35:96:23:81:44:2f:f0:e0:9e: 14:4a:91:aa:d5:1c:14:e6:07:de:15:f3:17:e7:37:8d:34:6b: 6d:0d:08:09:41:33:59:24:75:58:2e:d5:1d:29:1a:b8:55:bb: cf:0c:2a:d2:62:05:56:9c:0b:2f:cb:bd:62:da:14:1d:22:ed: 47:3c:1a:ff:f9:74:90:60:05:ad:35:69:b9:75:ca:25:24:f0: 83:d7:39:92:3d:93:7a:fc:59:6f:bb:7c:de:a3:d6:2d:32:38: 83:9b:5e:1e:ee:b1:22:66:88:93:56:35:57:78:d8:13:8c:72: 12:d3:8c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjQwNTAzMDE0MDM4WhcNMjQwNTEwMDE0MDM4WjAYMRYwFAYD VQQDEw02NjM0NDA5Ni05OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPj83Kk5In71e1UQE/uT4Bcf6T6qynlmUykFPE96fvyM3c+a1JMNnDiQzae4 IbNN+mFVle43WSO8KOzs1fbHf4N3ahnBEi9S8vIPqgasZL0t6rcKSJoT+0/gdfJm PI1/TyLsg6uuKTlXtvxRmjlCOQ+MtDWtl36WBj8RRYAQT+eoGrYt9BwaHK/GMicv u+MsKLcK+KZ724TifjrOyIVVrLUrXo6wb5OYKEQYDjxstKzHdEn9EDOd6muq9YaT sj4/BjZmUgx9fg8OVk/azbGfN8BoFYDCCjbg85odmlNhZ3o7EnbBz0wc9VUNtG+r vxl9RreE3MONn4FO/F5PsrHWkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+uGV9I ohlny1sonW+VENVookxjMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsThMOalOvxQ0jDeCyqV+kzjTEIIbbUcSXxN7biHjGaK3HHGSNDdub +9o9a3OrE4iHaC9s0nV51FzK3VMVpUO38zbb26AHHZPDGVETnoosJLRLOq69+lKD 3q4aJ4mm1DlcM67G2JsiHLRPpkNySQz1LnnuoBUhz0ktYGXKnM9aie6AjThiTwU1 liOBRC/w4J4USpGq1RwU5gfeFfMX5zeNNGttDQgJQTNZJHVYLtUdKRq4VbvPDCrS YgVWnAsvy71i2hQdIu1HPBr/+XSQYAWtNWm5dcolJPCD1zmSPZN6/Flvu3zeo9Yt MjiDm14e7rEiZoiTVjVXeNgTjHIS04xE -----END CERTIFICATE-----Generated at Fri May 3 04:45:23 2024 by rpki-client on console-fra.rpki-client.org