$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: WG/pBNWqcq+qp2Nng0asq5Az8v84m1VJCuA+nWdmbrQ= Subject key identifier: 2D:6D:BA:8E:76:F8:CB:58:43:80:B9:9D:2D:D8:AA:73:08:AA:71:A9 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0AB8 Signing time: Mon 06 May 2024 20:18:44 +0000 Manifest this update: Mon 06 May 2024 20:18:44 +0000 Manifest next update: Mon 13 May 2024 20:18:44 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: f+EfHegSOBKRQc/xRwbG1GfjuPC4NKp15gjBswESqRo=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: HA8b7O0J4U/fVhELFxa2fc2iFFbl1YKY12nGF5DR6EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: May 6 20:18:44 2024 GMT Not After : May 13 20:18:44 2024 GMT Subject: CN=66393b24-7639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:c8:28:07:2a:9e:fb:7c:2f:0e:db:18:1a: 37:3e:35:f9:2f:27:fa:37:5d:84:13:94:1b:f3:de: 4c:6d:9a:80:43:ee:f3:0f:9a:80:37:0c:3f:a2:de: 0e:4f:64:4c:7b:28:48:cd:24:43:b6:c8:4c:86:0f: ea:a6:78:c0:0d:6b:eb:22:63:59:dd:aa:f3:5f:e1: d5:82:93:c3:c3:a8:33:ff:45:3b:1f:01:1a:91:9f: 98:7e:a4:4f:70:6e:c1:1d:11:e6:d4:01:57:39:d3: e5:63:3d:d4:d3:ce:18:31:0f:71:18:75:90:76:62: ac:91:aa:e6:c6:cd:03:de:07:39:98:4c:22:34:8d: 89:96:ac:99:74:cf:0a:c1:b5:19:76:c1:46:5b:1c: 20:f2:0a:3c:f2:4d:fb:f7:4b:87:db:2d:0b:3e:1f: 19:ab:57:ab:c7:fe:af:71:69:c4:bd:b3:35:dd:97: 7e:7b:2b:b5:0f:b6:46:77:4e:52:af:a9:b2:10:9c: 2d:be:04:93:67:74:28:b0:39:a8:8b:32:2a:e2:1a: b9:64:26:72:34:3d:c3:ed:6e:74:58:53:d8:a2:76: 26:0c:29:53:a3:ae:68:e7:29:c2:83:1e:a0:5e:54: b4:b4:a2:86:f8:c5:7c:5e:dd:73:81:6e:be:75:5f: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6D:BA:8E:76:F8:CB:58:43:80:B9:9D:2D:D8:AA:73:08:AA:71:A9 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:14:d9:e4:05:c6:42:30:a4:43:12:3d:84:02:a0:ba:b5:c2: 6d:32:3f:9e:5e:14:da:3f:a6:0f:79:dd:88:c4:6b:f8:e3:0c: 2c:85:db:b1:30:40:a8:05:6f:7b:8b:10:f1:66:34:b6:e9:03: 4f:8b:5c:00:1e:1b:16:37:82:0c:4d:19:6b:f2:65:4b:c4:88: a8:9c:68:99:3e:bc:34:e7:6e:41:98:4d:ba:78:b3:c6:dd:76: db:38:c1:32:34:ea:f0:db:37:1d:bc:94:b0:4c:07:b8:ca:a2: 0d:29:05:86:b0:8e:c7:11:8d:59:85:57:5f:c1:22:a0:0e:0c: bb:a1:60:06:47:75:6a:66:be:a6:04:c0:5e:9e:f5:65:81:c4: 10:ba:4d:02:07:73:37:56:a7:b1:94:85:3d:74:c6:82:86:ef: 23:97:d5:ca:35:ed:62:b4:70:22:23:ae:64:db:f0:e7:a2:6b: 3d:68:95:36:12:a2:a1:cc:a7:67:8d:40:40:97:73:58:c1:a9: fb:c1:56:de:8c:f6:bc:70:a9:c8:6b:ad:44:12:73:a1:7d:9c: a4:cd:a6:4b:6d:66:f8:44:9a:2f:e7:26:af:05:a0:fa:a8:7e: 13:27:62:b5:04:0b:86:92:f8:b7:23:47:ef:64:d6:f6:7b:62: d2:5e:3e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjQwNTA2MjAxODQ0WhcNMjQwNTEzMjAxODQ0WjAYMRYwFAYD VQQDEw02NjM5M2IyNC03NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti3IKAcqnvt8Lw7bGBo3PjX5Lyf6N12EE5Qb895MbZqAQ+7zD5qANww/ot4O T2RMeyhIzSRDtshMhg/qpnjADWvrImNZ3arzX+HVgpPDw6gz/0U7HwEakZ+YfqRP cG7BHRHm1AFXOdPlYz3U084YMQ9xGHWQdmKskarmxs0D3gc5mEwiNI2JlqyZdM8K wbUZdsFGWxwg8go88k3790uH2y0LPh8Zq1erx/6vcWnEvbM13Zd+eyu1D7ZGd05S r6myEJwtvgSTZ3QosDmoizIq4hq5ZCZyND3D7W50WFPYonYmDClTo65o5ynCgx6g XlS0tKKG+MV8Xt1zgW6+dV/3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1tuo52 +MtYQ4C5nS3YqnMIqnGpMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVFNnkBcZCMKRDEj2EAqC6tcJtMj+eXhTaP6YPed2IxGv44wwshdux MECoBW97ixDxZjS26QNPi1wAHhsWN4IMTRlr8mVLxIionGiZPrw0525BmE26eLPG 3XbbOMEyNOrw2zcdvJSwTAe4yqINKQWGsI7HEY1ZhVdfwSKgDgy7oWAGR3VqZr6m BMBenvVlgcQQuk0CB3M3VqexlIU9dMaChu8jl9XKNe1itHAiI65k2/Dnoms9aJU2 EqKhzKdnjUBAl3NYwan7wVbejPa8cKnIa61EEnOhfZykzaZLbWb4RJov5yavBaD6 qH4TJ2K1BAuGkvi3I0fvZNb2e2LSXj79 -----END CERTIFICATE-----Generated at Mon May 6 22:41:02 2024 by rpki-client on console-ams.rpki-client.org