$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: 6sWUMVLHi1FyBxgOpTlyrYlt83wj5Lt7oIDNtdbij0I= Subject key identifier: AB:9A:2A:C4:B8:82:72:53:D0:98:52:E7:4E:19:1C:E3:C0:10:8A:89 Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2BCD Signing time: Thu 02 May 2024 16:04:22 +0000 Manifest this update: Thu 02 May 2024 16:04:22 +0000 Manifest next update: Thu 09 May 2024 16:04:22 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: FcZkF1y0zzsdH6uvpjnQzXV9yG+lNHh2t3fuFFa/1jA=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: /yUA18EbY34rtN5Siqyvkw233jzFwojqk/HqHecOdsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: May 2 16:04:22 2024 GMT Not After : May 9 16:04:22 2024 GMT Subject: CN=6633b986-8522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:dd:d8:f8:78:90:a4:2b:89:62:52:33:50: 92:77:fa:fd:b6:8a:71:88:c8:07:2c:8f:7c:6e:f5: cd:1c:08:ba:af:88:0d:6b:8a:78:fc:d1:4c:e3:e5: 3b:27:a9:ce:df:9d:33:77:ff:79:b1:3c:69:b9:50: cf:99:6d:87:3d:9d:69:f7:51:5c:f8:7a:d1:9f:79: b1:22:57:7a:2d:11:cf:8a:e8:34:a6:36:8a:9d:a5: 8b:1b:16:28:51:45:4c:fc:7e:6f:fd:1f:0a:60:7d: 09:e1:31:5a:ae:b6:79:c9:c9:32:58:f5:c7:a8:29: d9:7a:5e:f2:f4:ee:85:97:86:7a:e3:25:eb:7a:72: 46:64:86:a5:08:ca:57:a5:f8:5d:f4:9e:f3:66:3b: d0:41:7c:ca:fd:40:c8:90:57:77:97:be:4b:2e:d2: 82:1f:6e:c5:9e:27:fd:e5:18:0a:18:c6:bd:60:17: 92:a2:25:f5:31:d8:4c:b8:bb:04:9b:06:03:9d:2f: 86:f6:a9:b5:a8:52:a2:02:8f:33:43:1f:fe:94:20: ce:76:8f:6e:30:78:32:b0:0a:6d:18:49:b8:6a:d5: 25:6a:27:77:0a:96:5d:98:ab:87:46:eb:8a:2a:0d: fb:87:61:1d:68:1e:a0:51:fe:66:af:3e:dc:22:24: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:2A:C4:B8:82:72:53:D0:98:52:E7:4E:19:1C:E3:C0:10:8A:89 X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:12:a1:3a:58:54:43:85:c0:f9:af:b0:c9:f9:ff:1c:a6:8f: f7:71:9d:7e:b4:d4:37:c9:ed:f4:71:fa:e4:ee:09:8e:50:cf: 5d:ea:bb:64:88:cd:c0:1d:1b:53:8c:c9:8f:f7:e9:89:6f:30: cc:83:e0:84:bf:7d:a7:02:47:ad:0c:d6:71:8e:8b:69:a2:08: 68:06:73:38:66:b3:63:34:cb:fe:47:d7:be:80:28:5f:68:ad: ed:55:65:17:73:d0:73:2f:ae:a8:a3:f6:45:c6:e7:9b:8a:e2: a2:c7:ea:c8:76:ca:df:9d:a6:55:88:c9:4b:26:6f:19:3a:0e: ba:28:42:4e:a1:34:9b:de:5a:49:42:ff:12:66:56:32:c1:9e: 17:1c:da:12:8c:1a:35:33:75:c6:5e:bd:8e:80:57:77:d6:40: bb:48:f6:95:77:ba:33:4d:cf:61:f0:19:38:36:9f:33:be:2b: dc:e5:ec:70:bb:5a:21:58:e2:b1:61:64:ae:57:ae:bc:eb:75: 32:2a:c4:5b:62:38:2a:45:df:4e:21:0f:e5:5e:ee:d7:03:d8: e5:d8:bc:37:02:6f:bf:44:fe:60:b6:2a:67:c2:cf:1d:e7:55: 10:34:0f:eb:ba:25:d1:34:95:b6:07:dd:4a:ce:ae:3d:a7:db: c2:cd:82:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjQwNTAyMTYwNDIyWhcNMjQwNTA5MTYwNDIyWjAYMRYwFAYD VQQDEw02NjMzYjk4Ni04NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bzd2Ph4kKQriWJSM1CSd/r9topxiMgHLI98bvXNHAi6r4gNa4p4/NFM4+U7 J6nO350zd/95sTxpuVDPmW2HPZ1p91Fc+HrRn3mxIld6LRHPiug0pjaKnaWLGxYo UUVM/H5v/R8KYH0J4TFarrZ5yckyWPXHqCnZel7y9O6Fl4Z64yXrenJGZIalCMpX pfhd9J7zZjvQQXzK/UDIkFd3l75LLtKCH27Fnif95RgKGMa9YBeSoiX1MdhMuLsE mwYDnS+G9qm1qFKiAo8zQx/+lCDOdo9uMHgysAptGEm4atUlaid3CpZdmKuHRuuK Kg37h2EdaB6gUf5mrz7cIiSfqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuaKsS4 gnJT0JhS504ZHOPAEIqJMB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOEqE6WFRDhcD5r7DJ+f8cpo/3cZ1+tNQ3ye30cfrk7gmOUM9d6rtk iM3AHRtTjMmP9+mJbzDMg+CEv32nAketDNZxjotpoghoBnM4ZrNjNMv+R9e+gChf aK3tVWUXc9BzL66oo/ZFxuebiuKix+rIdsrfnaZViMlLJm8ZOg66KEJOoTSb3lpJ Qv8SZlYywZ4XHNoSjBo1M3XGXr2OgFd31kC7SPaVd7ozTc9h8Bk4Np8zvivc5exw u1ohWOKxYWSuV66863UyKsRbYjgqRd9OIQ/lXu7XA9jl2Lw3Am+/RP5gtipnws8d 51UQNA/ruiXRNJW2B91Kzq49p9vCzYJl -----END CERTIFICATE-----Generated at Thu May 2 17:18:56 2024 by rpki-client on console-ams.rpki-client.org