$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft File: -w-UodMQX3ZmLb2ELp0rA7ulkXE.mft (raw, json) Hash identifier: BwhQqOBByCadYrC6CP3dU/+ZnP1HjWYQDle+2DLZ2DI= Subject key identifier: 9D:94:49:5A:DE:0B:84:78:DE:F9:08:5D:2B:67:4D:CC:A7:5C:B6:26 Authority key identifier: FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71 Certificate issuer: /CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft Manifest number: 1D Signing time: Wed 15 May 2024 08:50:02 +0000 Manifest this update: Wed 15 May 2024 08:50:01 +0000 Manifest next update: Wed 22 May 2024 08:50:01 +0000 Files and hashes: 1: -w-UodMQX3ZmLb2ELp0rA7ulkXE.crl (hash: agd1JmmAOHg2/L7SKecvIFkIHJhSqoPTLBNOHZxLZP0=) 2: 61B828C0E80611EE9F467C0CC4F9AE02.roa (hash: KVdS+73pSTwIF+JX9NuJGR0Vw4GTmQp1JMzU7MCSuC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9427/serialNumber=FB0F94A1D3105F76662DBD842E9D2B03BBA59171 Validity Not Before: May 15 08:50:01 2024 GMT Not After : May 22 08:50:01 2024 GMT Subject: CN=6644773a-bc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:97:36:0b:e1:e9:db:0d:c2:86:92:7c:6a: c6:33:13:78:6e:6c:4b:d9:eb:84:b5:30:5a:4a:e9: a9:e2:98:2a:c7:7c:7b:e7:c5:2d:57:0d:74:08:d9: 83:cd:b1:77:52:0c:e6:d7:93:71:0c:38:27:3a:f7: 24:26:90:9e:a4:bb:f7:74:9c:47:b5:ba:2b:bb:ef: 59:0c:12:97:6c:84:3e:a5:ab:12:67:ca:6b:d1:6a: e4:6e:86:19:30:69:f1:db:64:1b:e7:42:c9:3d:82: 63:db:c8:bc:0b:e9:ae:5e:02:a1:d4:5e:0f:26:09: 50:3e:71:65:f7:4c:a5:30:67:c3:db:19:f5:5c:43: b5:28:7c:9c:13:30:21:9f:59:d3:36:4c:e6:4a:7b: 81:91:fb:7c:79:90:a1:cc:b5:0e:07:01:90:3c:a3: 1d:43:b4:18:a6:d8:44:c4:32:c2:c4:d4:f4:46:95: 31:19:82:3b:0c:57:30:1e:44:42:39:97:c0:f2:f2: d8:42:7f:5a:19:1f:dc:3e:83:14:82:4b:6e:82:49: cc:ab:90:31:3e:6d:81:cc:48:6f:0a:ad:3f:e8:d6: fd:0e:52:23:41:7e:ca:f1:03:f9:b3:fc:ca:38:39: b9:7a:0a:e0:b3:73:7e:ca:c7:d8:c8:88:c8:be:a8: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:49:5A:DE:0B:84:78:DE:F9:08:5D:2B:67:4D:CC:A7:5C:B6:26 X509v3 Authority Key Identifier: keyid:FB:0F:94:A1:D3:10:5F:76:66:2D:BD:84:2E:9D:2B:03:BB:A5:91:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w-UodMQX3ZmLb2ELp0rA7ulkXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9427/3A408886E80211EE8CA1AC31C4F9AE02/-w-UodMQX3ZmLb2ELp0rA7ulkXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:61:11:c6:80:bd:1b:48:45:d2:81:81:e2:57:b3:64:53:db: 46:20:3c:8a:67:e2:f9:12:8e:69:7d:65:35:c5:4f:e4:d1:a2: 53:d6:5c:d2:dd:a1:eb:94:ac:80:3d:2e:85:67:06:c3:9a:03: 0c:0a:31:80:fe:e0:2e:02:10:eb:92:b4:66:ef:b9:eb:86:ef: 90:2c:5e:79:f4:93:2e:9e:c1:8c:eb:06:ca:6c:3b:43:ff:9b: 11:28:68:f7:33:cc:d0:61:fc:c9:19:ea:7b:4c:a3:93:29:5d: 9c:44:73:11:a7:e2:e3:2c:5b:88:da:2e:d9:c2:fa:49:d0:30: 22:b0:35:e7:b7:e8:f5:3a:f7:76:6a:2a:0a:90:c2:4a:a2:17: a7:b0:74:f6:9f:65:83:4c:22:79:f5:1a:e5:38:4d:af:4b:6c: 85:18:e9:bd:55:3c:20:15:5a:5e:7d:bc:1a:a9:9a:05:51:ff: d6:de:ac:87:a3:ca:d5:2e:f3:de:24:85:73:02:38:27:16:c3: 2e:ee:10:d3:73:6a:cd:3b:e3:ba:3f:5e:0f:52:6c:00:7b:c5: 64:24:9e:88:6d:75:f4:f5:39:d7:89:e9:d9:f8:d9:5e:78:76: 3d:f1:3b:00:8c:0d:d3:04:ab:14:33:bb:9b:e1:df:f7:98:aa: 8a:8c:81:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTQyNzExMC8GA1UEBRMoRkIwRjk0QTFEMzEwNUY3NjY2MkRCRDg0MkU5RDJCMDNC QkE1OTE3MTAeFw0yNDA1MTUwODUwMDFaFw0yNDA1MjIwODUwMDFaMBgxFjAUBgNV BAMTDTY2NDQ3NzNhLWJjNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkfJc2C+Hp2w3ChpJ8asYzE3hubEvZ64S1MFpK6animCrHfHvnxS1XDXQI2YPN sXdSDObXk3EMOCc69yQmkJ6ku/d0nEe1uiu771kMEpdshD6lqxJnymvRauRuhhkw afHbZBvnQsk9gmPbyLwL6a5eAqHUXg8mCVA+cWX3TKUwZ8PbGfVcQ7UofJwTMCGf WdM2TOZKe4GR+3x5kKHMtQ4HAZA8ox1DtBim2ETEMsLE1PRGlTEZgjsMVzAeREI5 l8Dy8thCf1oZH9w+gxSCS26CScyrkDE+bYHMSG8KrT/o1v0OUiNBfsrxA/mz/Mo4 Obl6CuCzc37Kx9jIiMi+qD5rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnZRJWt4L hHje+QhdK2dNzKdctiYwHwYDVR0jBBgwFoAU+w+UodMQX3ZmLb2ELp0rA7ulkXEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NDI3LzNBNDA4ODg2RTgw MjExRUU4Q0ExQUMzMUM0RjlBRTAyLy13LVVvZE1RWDNabUxiMkVMcDByQTd1bGtY RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXctVW9kTVFYM1ptTGIyRUxwMHJBN3Vsa1hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NDI3LzNBNDA4ODg2RTgwMjExRUU4Q0ExQUMzMUM0RjlBRTAyLy13LVVvZE1RWDNa bUxiMkVMcDByQTd1bGtYRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAthEcaAvRtIRdKBgeJXs2RT20YgPIpn4vkSjml9ZTXFT+TRolPWXNLd oeuUrIA9LoVnBsOaAwwKMYD+4C4CEOuStGbvueuG75AsXnn0ky6ewYzrBspsO0P/ mxEoaPczzNBh/MkZ6ntMo5MpXZxEcxGn4uMsW4jaLtnC+knQMCKwNee36PU693Zq KgqQwkqiF6ewdPafZYNMInn1GuU4Ta9LbIUY6b1VPCAVWl59vBqpmgVR/9berIej ytUu894khXMCOCcWwy7uENNzas0747o/Xg9SbAB7xWQknohtdfT1OdeJ6dn42V54 dj3xOwCMDdMEqxQzu5vh3/eYqoqMgYY= -----END CERTIFICATE-----Generated at Wed May 15 09:28:13 2024 by rpki-client on console-fra.rpki-client.org