$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft File: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft (raw, json) Hash identifier: NbkAFBxodoIn/WAMv51gD76V+YnYfqFmJNWWOl1w+4E= Subject key identifier: F5:19:93:1B:2A:D0:2C:EC:B3:48:0C:95:14:A3:99:A6:00:D8:BF:20 Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 Certificate issuer: /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft Manifest number: 30 Signing time: Fri 17 May 2024 08:35:12 +0000 Manifest this update: Fri 17 May 2024 08:35:11 +0000 Manifest next update: Fri 24 May 2024 08:35:11 +0000 Files and hashes: 1: wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl (hash: B3xPl6N4Fsp+E+b9Prz/thdt3heSCBeb50mjlyiUw9g=) 2: F007DD9AD14B11EEAB2B5281C4F9AE02.roa (hash: wd14w0lW4XH6kG1+QNgR8vCyKObixV7tjrATg+oVgqg=) 3: 998461D4D14E11EEBD6E0D11C4F9AE02.roa (hash: TkMxlHrE0FDAXno5w4Am4I9lFw+C+8vsvPyLVoqbib0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Validity Not Before: May 17 08:35:11 2024 GMT Not After : May 24 08:35:11 2024 GMT Subject: CN=664716c0-33a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:6b:1a:1a:54:7c:20:e7:27:d0:e5:dd:28: b5:15:1f:4a:f9:dd:43:32:73:12:68:77:8f:0f:02: 77:bb:23:36:3e:34:2f:9c:bc:5b:35:ee:36:4e:cb: 51:41:d8:80:30:df:15:fb:af:a6:d5:c7:b1:cc:75: e4:54:51:87:4d:4b:0d:f1:40:58:2b:4a:17:61:90: 64:3e:87:ca:64:65:a5:dd:a4:b3:1c:91:5a:f7:1e: 33:01:f4:05:dd:15:48:ac:02:79:d7:68:8a:8e:71: 84:9c:8f:6b:a8:ad:50:c3:57:72:87:d3:1d:ed:62: a0:e5:eb:69:62:0b:ad:47:45:2a:e1:f6:00:59:b1: 9e:22:cd:30:7b:be:f2:b7:f1:63:b9:84:8f:0c:51: c4:3f:a2:01:20:bd:3a:0c:c7:bf:83:ff:3f:e6:7d: 04:f4:8a:09:69:4a:87:19:55:d6:77:f7:85:f3:f8: 7c:da:a5:10:50:1a:34:57:74:06:eb:2f:eb:de:d9: 3e:b9:2f:eb:8c:33:ea:c1:77:9c:61:0c:37:64:03: 93:35:c8:e9:7f:c5:3c:87:2b:91:49:1c:73:da:a5: 95:9a:1c:57:fc:e0:b9:ec:17:6d:04:9e:65:52:2e: b6:81:1f:62:d1:d2:25:c8:f6:e7:4d:f3:a4:4f:7d: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:19:93:1B:2A:D0:2C:EC:B3:48:0C:95:14:A3:99:A6:00:D8:BF:20 X509v3 Authority Key Identifier: keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6a:fb:cf:e2:12:93:a2:f3:0a:07:7f:ef:9e:0d:6e:cb:67: 9b:2b:54:52:1b:74:a3:29:7b:07:49:0c:5f:ee:4f:3c:77:75: 62:ad:c4:d6:e1:75:98:18:70:76:f2:c1:4f:ad:ba:b2:46:12: 3d:7b:3e:1a:0c:94:1e:fb:27:55:af:45:da:a6:c9:cb:57:75: 4a:97:b8:55:50:8f:16:28:18:59:36:95:69:50:52:aa:e8:a5: 13:4e:0f:3e:9f:c7:f0:4c:bb:dd:9c:be:4f:a5:bb:5c:88:e5: f4:41:63:48:12:5d:67:8e:2e:53:4b:22:45:16:99:2a:97:be: 89:4f:a9:45:a8:6c:26:f4:4a:50:13:3f:f2:30:04:d6:0e:df: f1:3e:67:d9:04:46:2b:b3:25:3f:2f:aa:82:c9:7b:fe:1c:2e: 87:fb:45:d7:52:ff:96:94:7c:0f:a6:3a:7f:c1:14:f8:fd:7f: 6d:0d:2c:e8:1d:1f:04:d0:fb:14:38:7f:91:cc:2b:ce:8f:29: fc:64:17:db:5c:49:c9:ec:72:c4:92:31:09:52:d3:5b:c0:9e: b7:07:5c:6f:ff:7d:85:6e:d0:fe:c7:0f:c7:df:bb:a0:f5:32: b5:a5:43:17:ca:71:1d:19:d5:df:e9:95:2d:6d:7d:ba:5b:e3: b3:6d:88:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzI5MjExMC8GA1UEBRMoQzJGQzY0NDg1NjRFQzY1MjZCOTFCMkZFMjNCNEZENTgz NDJEMjBGNDAeFw0yNDA1MTcwODM1MTFaFw0yNDA1MjQwODM1MTFaMBgxFjAUBgNV BAMTDTY2NDcxNmMwLTMzYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9mGsaGlR8IOcn0OXdKLUVH0r53UMycxJod48PAne7IzY+NC+cvFs17jZOy1FB 2IAw3xX7r6bVx7HMdeRUUYdNSw3xQFgrShdhkGQ+h8pkZaXdpLMckVr3HjMB9AXd FUisAnnXaIqOcYScj2uorVDDV3KH0x3tYqDl62liC61HRSrh9gBZsZ4izTB7vvK3 8WO5hI8MUcQ/ogEgvToMx7+D/z/mfQT0iglpSocZVdZ394Xz+HzapRBQGjRXdAbr L+ve2T65L+uMM+rBd5xhDDdkA5M1yOl/xTyHK5FJHHPapZWaHFf84LnsF20EnmVS LraBH2LR0iXI9udN86RPfcZXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9RmTGyrQ LOyzSAyVFKOZpgDYvyAwHwYDVR0jBBgwFoAUwvxkSFZOxlJrkbL+I7T9WDQtIPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MjkyLzAzQjg4QURBRDE0 QTExRUU5OURFMkI1MkM0RjlBRTAyL3d2eGtTRlpPeGxKcmtiTC1JN1Q5V0RRdElQ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3Z4a1NGWk94bEpya2JMLUk3VDlXRFF0SVBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MjkyLzAzQjg4QURBRDE0QTExRUU5OURFMkI1MkM0RjlBRTAyL3d2eGtTRlpPeGxK cmtiTC1JN1Q5V0RRdElQUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlq+8/iEpOi8woHf++eDW7LZ5srVFIbdKMpewdJDF/uTzx3dWKtxNbh dZgYcHbywU+turJGEj17PhoMlB77J1WvRdqmyctXdUqXuFVQjxYoGFk2lWlQUqro pRNODz6fx/BMu92cvk+lu1yI5fRBY0gSXWeOLlNLIkUWmSqXvolPqUWobCb0SlAT P/IwBNYO3/E+Z9kERiuzJT8vqoLJe/4cLof7RddS/5aUfA+mOn/BFPj9f20NLOgd HwTQ+xQ4f5HMK86PKfxkF9tcScnscsSSMQlS01vAnrcHXG//fYVu0P7HD8ffu6D1 MrWlQxfKcR0Z1d/plS1tfbpb47NtiDw= -----END CERTIFICATE-----Generated at Fri May 17 10:59:13 2024 by rpki-client on console-ams.rpki-client.org