$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: rVUYtAYRwCT/VSER8alo/URe9acTSRz2D8oVtnMjiM8= Subject key identifier: D3:03:C6:0C:32:C9:56:27:38:CB:AB:9A:8E:7E:0B:F6:EA:16:FB:20 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: FB Signing time: Fri 03 May 2024 05:42:35 +0000 Manifest this update: Fri 03 May 2024 05:42:34 +0000 Manifest next update: Fri 10 May 2024 05:42:34 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: hCZLfAl5hbDvOiwO+f4lIUPpgXb4C6j8mJgIQ+hA6Aw=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: CKaLCTd4F4dZmPq0DjBqP23YnYGXlc9buqXVc1NvzyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: May 3 05:42:34 2024 GMT Not After : May 10 05:42:34 2024 GMT Subject: CN=6634794a-99c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:19:c0:10:61:4c:c5:09:29:80:04:59:a1: 63:1e:ee:0a:ab:a2:cd:c9:34:fc:ec:d3:54:e5:93: 9c:0a:ef:43:89:1b:97:0a:32:ef:17:fe:c7:bb:73: c5:0a:92:ec:07:a7:33:1d:f9:d9:7a:79:f1:3b:cd: a5:e6:d9:fb:f4:16:24:28:a9:3f:18:17:15:7a:63: b0:c5:ad:8b:b2:d9:d0:b4:30:8a:2e:6a:f8:4f:68: 68:02:5d:f7:63:b4:d7:fe:7e:3f:6d:88:68:7b:a0: c0:12:24:33:57:cb:67:a9:6c:3f:e2:2d:18:7a:8b: 15:31:0a:26:60:47:5d:d7:b9:e6:20:44:44:fd:4e: 7f:d7:e9:a4:f9:87:4f:b1:3d:53:cf:bc:12:5a:9f: 40:2c:5b:bb:0a:3c:74:67:11:a6:ad:e7:d7:39:91: 30:14:75:a7:cb:1b:94:05:20:2c:a3:c4:73:ed:d4: 33:a3:55:b0:22:3c:c6:3d:ea:50:f7:98:60:11:60: f3:29:d4:4e:3d:0c:e6:b7:5c:2f:4a:f8:37:aa:4f: 55:48:16:fe:61:29:04:76:85:4f:42:09:8f:38:ff: 80:bf:22:7a:41:c1:31:ad:31:7a:de:7c:2a:1d:7b: e5:79:04:1f:af:da:26:9b:6d:19:da:f7:55:86:de: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:C6:0C:32:C9:56:27:38:CB:AB:9A:8E:7E:0B:F6:EA:16:FB:20 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:70:58:6a:bb:6b:8b:a6:d5:dd:9e:2c:c1:39:b2:74:83:c3: eb:d3:ed:97:ae:d1:09:f1:84:b5:48:91:0c:eb:bd:9c:ee:85: 21:3c:5d:38:2a:35:92:b0:a6:17:76:da:b8:68:f2:98:df:63: b1:c5:4f:43:4d:34:99:e5:01:68:8e:39:62:7f:ee:27:1b:38: f5:83:07:66:b7:b9:24:17:47:ba:5e:c9:20:cf:90:4b:4b:96: eb:1b:1a:a6:27:fc:d4:8b:5f:43:11:77:7a:b7:60:b0:21:ae: a9:96:e4:7b:b9:35:ce:5c:98:56:5a:90:43:97:04:48:1c:77: 5d:93:09:60:b5:b0:6c:8e:6d:78:4d:fc:92:3b:1c:c8:1e:33: 1a:91:1d:25:0c:5e:5d:25:b4:34:d4:00:da:a3:d0:d7:35:02: e4:1a:18:ed:e1:ac:8a:eb:58:6a:08:e0:23:e1:21:43:3e:fe: 4f:7f:06:0a:d3:27:af:42:e2:41:73:8b:5f:eb:2a:ad:0c:c6: 57:2e:24:11:4b:d0:77:59:0a:c3:54:6f:5b:2f:50:8b:32:0f: 8d:0a:5e:59:f3:8a:c3:96:12:d7:f2:d3:91:29:0d:f5:12:05: 29:2e:d3:b5:e3:0e:64:e5:d7:64:ef:db:ae:db:c1:da:38:a5: 6f:af:1d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjQwNTAzMDU0MjM0WhcNMjQwNTEwMDU0MjM0WjAYMRYwFAYD VQQDEw02NjM0Nzk0YS05OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4w8ZwBBhTMUJKYAEWaFjHu4Kq6LNyTT87NNU5ZOcCu9DiRuXCjLvF/7Hu3PF CpLsB6czHfnZennxO82l5tn79BYkKKk/GBcVemOwxa2LstnQtDCKLmr4T2hoAl33 Y7TX/n4/bYhoe6DAEiQzV8tnqWw/4i0YeosVMQomYEdd17nmIERE/U5/1+mk+YdP sT1Tz7wSWp9ALFu7Cjx0ZxGmrefXOZEwFHWnyxuUBSAso8Rz7dQzo1WwIjzGPepQ 95hgEWDzKdROPQzmt1wvSvg3qk9VSBb+YSkEdoVPQgmPOP+AvyJ6QcExrTF63nwq HXvleQQfr9omm20Z2vdVht5FnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMDxgwy yVYnOMurmo5+C/bqFvsgMB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCScFhqu2uLptXdnizBObJ0g8Pr0+2XrtEJ8YS1SJEM672c7oUhPF04 KjWSsKYXdtq4aPKY32OxxU9DTTSZ5QFojjlif+4nGzj1gwdmt7kkF0e6Xskgz5BL S5brGxqmJ/zUi19DEXd6t2CwIa6pluR7uTXOXJhWWpBDlwRIHHddkwlgtbBsjm14 TfySOxzIHjMakR0lDF5dJbQ01ADao9DXNQLkGhjt4ayK61hqCOAj4SFDPv5PfwYK 0yevQuJBc4tf6yqtDMZXLiQRS9B3WQrDVG9bL1CLMg+NCl5Z84rDlhLX8tORKQ31 EgUpLtO14w5k5ddk79uu28HaOKVvrx2I -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org