$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: Yu64kJ9hF+xz4MduGnNSWoqZ0ly5Qari7lfO0hPmsXg= Subject key identifier: 8F:94:4A:72:4B:53:A2:9F:A3:D1:19:52:5E:45:26:5F:80:9B:12:B8 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 19D8 Signing time: Thu 02 May 2024 17:11:22 +0000 Manifest this update: Thu 02 May 2024 17:11:21 +0000 Manifest next update: Thu 09 May 2024 17:11:21 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: 22im81iXfPEG2ghgpMXJuUuOY+z8Zn3plWZXU+Mc5Kw=) 2: E328AA42736E11ECAC882873C4F9AE02.roa (hash: B8T6qteReQBChdEYY8jZTYWuVxLCQ23sfPctCOIdxxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: May 2 17:11:21 2024 GMT Not After : May 9 17:11:21 2024 GMT Subject: CN=6633c939-c273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:84:d0:89:77:e0:a5:b1:4b:91:9b:d1:85: 94:b0:31:9e:a4:1a:02:92:bb:1d:5b:b2:e4:c3:b1: af:e8:49:c8:c1:c9:52:e7:d0:56:58:3d:af:1b:ec: e1:28:f0:0e:c6:e5:d9:77:df:61:fa:07:74:bb:ec: a7:37:d6:d4:1d:66:7c:af:2e:07:de:0a:f1:d3:f7: 24:fa:2a:b6:67:c8:46:e4:3c:48:db:7a:04:e9:52: b0:28:18:61:c1:29:e5:b9:32:c3:c7:74:27:45:dd: f4:94:a4:ea:d5:9a:9b:b8:07:4f:57:6a:af:53:46: e7:31:fe:60:9d:0c:99:9c:c1:3d:04:de:f0:a6:18: 8d:b5:54:c9:8a:a7:6e:cb:0d:cd:15:b6:f2:c3:aa: ac:fa:2f:c7:18:b7:a9:44:61:b1:ce:3d:ef:cb:a5: 86:2c:20:df:92:fd:9d:d2:62:53:61:60:c5:9f:b5: ca:72:a7:25:d5:f7:dc:d5:fd:d0:e2:6f:09:aa:c9: 86:9b:fe:24:ea:2a:e4:2e:9c:da:0a:da:fe:2d:ee: 0a:b6:72:70:38:ed:28:c4:da:5c:8f:f0:b4:b9:24: f2:16:dd:c0:2c:04:14:10:58:58:78:f7:1b:df:8b: bf:c2:cb:65:c0:2a:fb:9c:e5:68:49:ca:09:73:82: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:4A:72:4B:53:A2:9F:A3:D1:19:52:5E:45:26:5F:80:9B:12:B8 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:36:3f:8e:22:56:e6:40:a6:2b:f5:69:1e:1d:c1:1e:96:69: 5c:3c:17:9d:cf:7e:54:b1:5f:da:14:3b:e6:64:3f:87:84:7a: 88:05:60:32:19:2f:82:7b:a4:32:b7:77:25:27:7f:79:a2:35: 25:91:54:33:fb:59:1e:e0:cb:20:10:1c:ba:17:d8:74:d6:ec: a3:b5:d8:7c:65:b1:ac:71:93:cd:75:fd:52:6c:26:6a:44:97: 8c:f4:85:da:42:53:17:f1:bf:b4:73:6e:1d:77:2e:e7:1a:5d: 3e:6c:c0:00:bc:ad:71:80:47:2f:c5:f1:4d:36:89:38:19:b3: 7e:ec:db:fc:f4:fb:f4:56:54:20:bf:c5:24:7e:59:83:65:67: cb:90:ff:b3:e3:eb:50:6e:3d:33:21:18:1b:90:29:b3:35:af: 83:1c:0f:58:b6:f0:4c:50:db:41:78:e2:e9:11:90:5e:07:07: 4e:b7:0c:ae:0c:de:ac:49:9f:7c:b9:9e:57:49:0a:d3:d4:7d: 28:f1:bf:77:3a:38:ca:dc:59:f3:37:7c:a2:1f:10:5f:61:21: 59:ae:a0:b7:d3:67:9c:91:cf:1e:ec:af:44:29:c3:d8:0b:6b: e5:61:84:53:6e:97:f9:5f:24:5f:7d:4f:12:cc:c1:70:69:90: 05:a0:2c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjQwNTAyMTcxMTIxWhcNMjQwNTA5MTcxMTIxWjAYMRYwFAYD VQQDEw02NjMzYzkzOS1jMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA216E0Il34KWxS5Gb0YWUsDGepBoCkrsdW7Lkw7Gv6EnIwclS59BWWD2vG+zh KPAOxuXZd99h+gd0u+ynN9bUHWZ8ry4H3grx0/ck+iq2Z8hG5DxI23oE6VKwKBhh wSnluTLDx3QnRd30lKTq1ZqbuAdPV2qvU0bnMf5gnQyZnME9BN7wphiNtVTJiqdu yw3NFbbyw6qs+i/HGLepRGGxzj3vy6WGLCDfkv2d0mJTYWDFn7XKcqcl1ffc1f3Q 4m8JqsmGm/4k6irkLpzaCtr+Le4KtnJwOO0oxNpcj/C0uSTyFt3ALAQUEFhYePcb 34u/wstlwCr7nOVoScoJc4ItQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+USnJL U6Kfo9EZUl5FJl+AmxK4MB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Nj+OIlbmQKYr9WkeHcEelmlcPBedz35UsV/aFDvmZD+HhHqIBWAy GS+Ce6Qyt3clJ395ojUlkVQz+1ke4MsgEBy6F9h01uyjtdh8ZbGscZPNdf1SbCZq RJeM9IXaQlMX8b+0c24ddy7nGl0+bMAAvK1xgEcvxfFNNok4GbN+7Nv89Pv0VlQg v8UkflmDZWfLkP+z4+tQbj0zIRgbkCmzNa+DHA9YtvBMUNtBeOLpEZBeBwdOtwyu DN6sSZ98uZ5XSQrT1H0o8b93OjjK3FnzN3yiHxBfYSFZrqC302eckc8e7K9EKcPY C2vlYYRTbpf5XyRffU8SzMFwaZAFoCy1 -----END CERTIFICATE-----Generated at Thu May 2 20:50:34 2024 by rpki-client on console-fra.rpki-client.org