$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: kG1fFDt/7xo6FWSbT7icmu9hNIjecD6lk3zDX49IPzw= Subject key identifier: 93:E2:4B:28:03:B3:B7:80:2A:48:E2:CC:5C:3B:78:83:5C:91:06:3A Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: 37 Signing time: Wed 15 May 2024 08:28:45 +0000 Manifest this update: Wed 15 May 2024 08:28:44 +0000 Manifest next update: Wed 22 May 2024 08:28:44 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: dDhG0MSBHRvHX/hjq2Xc+BDyFQIP6NnUU8M980cPgCY=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: vdjvb/3ZRx74eaLttznaQOdBXcHEfYOyZXwsd4KdeBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: May 15 08:28:44 2024 GMT Not After : May 22 08:28:44 2024 GMT Subject: CN=6644723d-4bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:cd:b6:72:9a:31:97:fb:27:2c:b8:5d:11: 47:55:7b:47:33:1b:7b:93:af:6b:2d:43:e5:38:25: 5a:6f:d3:db:85:ab:39:86:f8:bf:81:d4:e9:00:b2: f3:ce:19:91:cb:5e:14:10:67:7f:77:4e:02:2d:70: 7d:2c:aa:f4:f7:6d:25:ef:40:f6:d5:be:63:a8:3d: 50:20:77:3d:4e:d3:79:43:1d:47:10:8d:b6:49:56: 71:f1:39:69:1a:56:3c:32:b3:25:8b:d5:20:93:54: 4e:6b:f1:68:5f:06:05:ca:e6:00:3c:0c:32:94:b3: 3a:21:56:3c:94:13:a0:a1:10:5d:3e:ed:90:b2:02: fd:66:fd:21:8f:e3:88:fa:8d:a5:09:2a:c9:0e:d2: 1d:be:a4:d0:dc:76:b9:7c:0e:4a:91:f4:8b:9d:5c: b7:3f:88:46:c3:a5:7f:21:5f:ca:b5:54:54:7e:89: 30:c6:38:02:b9:e5:f0:2f:5c:59:12:9a:70:e4:d3: 40:53:c6:bc:d0:e5:d0:8b:43:b0:08:48:9d:40:f8: b7:10:eb:c4:8c:c0:59:f1:a4:42:d2:e0:8a:6e:9e: 50:9f:53:ca:ec:fe:a7:0f:77:8e:9b:01:2c:9b:9c: 10:3e:80:50:50:f3:df:35:79:94:14:40:62:f5:14: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E2:4B:28:03:B3:B7:80:2A:48:E2:CC:5C:3B:78:83:5C:91:06:3A X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bb:d4:c8:a0:a0:2e:e5:4b:85:15:df:8c:b3:25:25:74:c5: c2:25:34:c8:0b:e5:6c:08:05:45:1e:3c:fd:05:55:7a:46:ba: 4f:fe:16:4e:d0:d1:60:b6:fa:30:b3:7d:8e:2f:0f:f8:4e:33: 91:95:ee:83:4f:32:1e:fc:4e:93:09:bf:ed:6d:7f:7b:17:0b: c9:56:93:67:07:e3:47:bd:89:41:81:84:bb:99:c5:96:d4:17: dd:c4:f4:da:aa:a7:1a:3d:89:74:1e:58:ba:a4:4f:22:8a:65: 22:30:ca:e6:a4:82:5d:b0:7f:24:19:27:e3:ad:e7:d6:9f:a0: 4b:52:2c:c3:28:9a:46:69:cf:26:24:c8:51:8a:73:ad:8c:9c: 03:2b:84:e5:ba:f3:a9:b4:61:c9:d0:99:c7:3b:5a:52:cf:56: 58:06:7d:37:4a:9d:2c:01:63:80:b2:fd:6e:4a:4c:f3:c0:7e: 46:c2:a2:38:8f:05:e4:44:3c:b8:da:ee:14:4a:bd:3e:ff:a5: 07:5f:de:bd:1b:ea:67:89:93:5b:8e:9d:a4:4d:b0:16:df:62: 8e:e5:43:98:1f:63:fd:c6:f0:62:7c:d7:53:af:e7:ea:1e:ab: f6:f5:6e:7c:61:f3:d1:08:6c:bc:dd:0a:4c:3c:63:22:43:7d: 49:a0:6d:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTY3RjExMC8GA1UEBRMoQzIxMTJGNDRENDQ1OEYxODVDREI5QUQ5QTkxQUY4Mjkw NjQ4OUNDNjAeFw0yNDA1MTUwODI4NDRaFw0yNDA1MjIwODI4NDRaMBgxFjAUBgNV BAMTDTY2NDQ3MjNkLTRiZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4s822cpoxl/snLLhdEUdVe0czG3uTr2stQ+U4JVpv09uFqzmG+L+B1OkAsvPO GZHLXhQQZ393TgItcH0sqvT3bSXvQPbVvmOoPVAgdz1O03lDHUcQjbZJVnHxOWka VjwysyWL1SCTVE5r8WhfBgXK5gA8DDKUszohVjyUE6ChEF0+7ZCyAv1m/SGP44j6 jaUJKskO0h2+pNDcdrl8DkqR9IudXLc/iEbDpX8hX8q1VFR+iTDGOAK55fAvXFkS mnDk00BTxrzQ5dCLQ7AISJ1A+LcQ68SMwFnxpELS4IpunlCfU8rs/qcPd46bASyb nBA+gFBQ8981eZQUQGL1FLwHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk+JLKAOz t4AqSOLMXDt4g1yRBjowHwYDVR0jBBgwFoAUwhEvRNRFjxhc25rZqRr4KQZInMYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjdGLzg3QzM0NTRDQzQ1 RjExRUU4MjgxQ0M3REM0RjlBRTAyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5N WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2hFdlJOUkZqeGhjMjVyWnFScjRLUVpJbk1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjdGLzg3QzM0NTRDQzQ1RjExRUU4MjgxQ0M3REM0RjlBRTAyL3doRXZSTlJGanho YzI1clpxUnI0S1FaSW5NWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE671MigoC7lS4UV34yzJSV0xcIlNMgL5WwIBUUePP0FVXpGuk/+Fk7Q 0WC2+jCzfY4vD/hOM5GV7oNPMh78TpMJv+1tf3sXC8lWk2cH40e9iUGBhLuZxZbU F93E9Nqqpxo9iXQeWLqkTyKKZSIwyuakgl2wfyQZJ+Ot59afoEtSLMMomkZpzyYk yFGKc62MnAMrhOW686m0YcnQmcc7WlLPVlgGfTdKnSwBY4Cy/W5KTPPAfkbCojiP BeREPLja7hRKvT7/pQdf3r0b6meJk1uOnaRNsBbfYo7lQ5gfY/3G8GJ811Ov5+oe q/b1bnxh89EIbLzdCkw8YyJDfUmgbbw= -----END CERTIFICATE-----Generated at Wed May 15 09:28:15 2024 by rpki-client on console-fra.rpki-client.org