$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: MitBarDGp68tkiPYhbbcBXToCOA1nNyObv7JNJGeUvE= Subject key identifier: 65:EF:43:45:E6:56:8E:2D:F2:16:E0:67:10:93:3E:E9:40:48:5F:3F Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 01A7 Signing time: Sat 01 Jun 2024 05:50:47 +0000 Manifest this update: Sat 01 Jun 2024 05:50:47 +0000 Manifest next update: Sat 08 Jun 2024 05:50:47 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: ou8aXsscCAwVPB6nfoEsOxPivTwGnvYYg6/SBtilUNo=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: wIiTlgjGYw/GgiDbkbEV5PsTMcyG6vgWt/UNipW+wJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Jun 1 05:50:47 2024 GMT Not After : Jun 8 05:50:47 2024 GMT Subject: CN=665ab6b7-c3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:fc:35:07:2f:e6:9c:c0:f3:23:80:96:60: bf:56:00:fe:85:f6:15:7b:f2:e5:73:eb:73:9c:98: 6f:43:65:85:53:78:ef:fb:a7:b8:b6:e0:a1:e0:89: 8f:33:52:19:29:59:33:e0:6c:18:83:39:fa:4a:ce: 74:20:09:6a:c2:8a:6c:49:cb:e6:22:55:ff:dd:d8: d8:39:0a:3b:03:04:de:41:0a:20:de:58:d8:d0:c5: af:90:56:3f:3f:ed:bb:7b:25:a7:79:21:41:47:65: 9e:2f:c6:ff:63:4a:68:7e:e2:f3:a2:45:5b:72:b0: 27:21:1c:9c:60:de:0b:30:79:c7:dc:ab:e0:8d:5f: 42:66:02:69:2f:41:1d:54:3e:8e:4a:3b:9b:c7:dd: 2c:82:82:50:d3:4b:d6:b1:d8:22:a8:b4:99:45:c4: b3:0c:47:16:8c:25:fb:1b:89:37:4d:24:4b:73:47: 8f:c6:11:37:a2:35:da:5f:4c:2b:cc:3a:61:86:16: 84:3f:08:6a:93:fb:18:be:7f:ce:a5:e6:84:bb:cf: 5b:46:fe:1f:dd:ca:d9:27:d0:4e:b0:56:d0:17:f7: a2:6f:97:70:2a:e4:42:fc:f4:c0:0e:58:2c:97:79: 79:e5:88:e1:c0:82:31:39:1a:6e:23:64:0f:cc:40: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EF:43:45:E6:56:8E:2D:F2:16:E0:67:10:93:3E:E9:40:48:5F:3F X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:be:ad:06:c3:02:62:fe:98:7c:5d:64:cb:97:76:40:d2:fa: 2e:b2:f0:40:7c:c7:d1:9f:43:df:c2:05:32:f4:21:d8:48:9c: 22:f8:93:8e:08:cc:e7:0c:be:7d:5a:1d:b1:2a:02:cc:88:1b: d3:eb:f6:b4:0f:f0:d0:6c:5d:bf:4d:0a:b2:b1:6a:32:a3:83: 94:8d:dc:22:85:1c:11:e7:2e:1f:8b:ce:bb:22:25:f0:11:77: e5:67:0a:a8:da:d2:b4:2e:8f:77:31:11:45:0a:60:ba:c8:1f: 67:2f:1d:c4:8b:ce:6f:d6:75:f2:02:50:4c:f3:4d:30:10:0a: 76:6a:ff:29:1d:b7:2e:1f:14:eb:8c:63:6c:0d:ae:f8:46:33: d8:2f:f4:7e:bb:d2:68:0a:47:f9:cf:5b:2e:5f:be:9b:db:8d: 72:c6:de:4e:96:df:bd:62:5f:fc:b0:8a:e0:d4:dc:f0:96:39: fe:84:4d:47:be:ff:07:9f:b2:f3:73:98:53:70:ad:70:d5:e7: e4:1e:1d:9e:a6:c8:5c:ac:80:cf:c4:a7:e8:1a:8f:7f:6c:63: f0:7d:b9:db:fc:c8:58:c8:12:2f:19:7c:8c:d4:c4:39:08:46: 72:40:93:52:90:7e:65:92:c9:73:ca:6f:e4:09:5f:02:e7:6f: a9:b0:71:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjQwNjAxMDU1MDQ3WhcNMjQwNjA4MDU1MDQ3WjAYMRYwFAYD VQQDEw02NjVhYjZiNy1jM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHX8NQcv5pzA8yOAlmC/VgD+hfYVe/Llc+tznJhvQ2WFU3jv+6e4tuCh4ImP M1IZKVkz4GwYgzn6Ss50IAlqwopsScvmIlX/3djYOQo7AwTeQQog3ljY0MWvkFY/ P+27eyWneSFBR2WeL8b/Y0pofuLzokVbcrAnIRycYN4LMHnH3KvgjV9CZgJpL0Ed VD6OSjubx90sgoJQ00vWsdgiqLSZRcSzDEcWjCX7G4k3TSRLc0ePxhE3ojXaX0wr zDphhhaEPwhqk/sYvn/OpeaEu89bRv4f3crZJ9BOsFbQF/eib5dwKuRC/PTADlgs l3l55YjhwIIxORpuI2QPzEDapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXvQ0Xm Vo4t8hbgZxCTPulASF8/MB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcvq0GwwJi/ph8XWTLl3ZA0vousvBAfMfRn0PfwgUy9CHYSJwi+JOO CMznDL59Wh2xKgLMiBvT6/a0D/DQbF2/TQqysWoyo4OUjdwihRwR5y4fi867IiXw EXflZwqo2tK0Lo93MRFFCmC6yB9nLx3Ei85v1nXyAlBM800wEAp2av8pHbcuHxTr jGNsDa74RjPYL/R+u9JoCkf5z1suX76b241yxt5Olt+9Yl/8sIrg1Nzwljn+hE1H vv8Hn7Lzc5hTcK1w1efkHh2epshcrIDPxKfoGo9/bGPwfbnb/MhYyBIvGXyM1MQ5 CEZyQJNSkH5lkslzym/kCV8C52+psHHb -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:24 2024 by rpki-client on console-ams.rpki-client.org