$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: 9SilZUphXS2l950/ZzGZfvA8FNmyE8MYIAV5FmQNMpY= Subject key identifier: 9F:ED:84:F6:1C:AA:DE:DA:C3:8B:0A:C4:FA:F7:B6:23:6E:67:2F:81 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 08B4 Signing time: Thu 02 May 2024 21:38:09 +0000 Manifest this update: Thu 02 May 2024 21:38:08 +0000 Manifest next update: Thu 09 May 2024 21:38:08 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: Xn5oldsUHFhCze2Bk2YG0+38rblX1IhfPq+wCtSP668=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: rU8ueRHigkcnrboSiyuAgDPtglpiwxpoV+xUGO9FxD4=) 3: 18CD11D6020D11EFB9644A64C4F9AE02.roa (hash: NlzEUVjfn+PAQJMHYZ5VQMa0DJkINcTEIJRpYhsAUg0=) 4: 7C3B57D48FBE11EA9797847DC4F9AE02.roa (hash: tVnphRRZgGFSH92354sv/OpGtYFdnNRhky6OfyETCg4=) 5: 7CD5A60E8FBE11EA9797847DC4F9AE02.roa (hash: 0N7KnyWQo6VcQUYOyNzJ4ZYibJk8iB5HaQ5JSpbobWM=) 6: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: ccG1BUs0i4CV7gjyI57tTXWxoo2ZO3TQ4gdTjDhcm5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: May 2 21:38:08 2024 GMT Not After : May 9 21:38:08 2024 GMT Subject: CN=663407c0-f8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:a2:fd:02:8b:b6:03:bf:1e:bb:9f:95:28: 5d:14:2f:a2:a9:04:d9:8d:52:67:8c:85:c8:d8:32: c7:50:9f:60:d8:27:07:08:75:09:00:85:23:1d:62: 07:77:85:05:a3:ad:53:a5:ac:74:3b:0e:c8:ec:05: 54:35:79:a7:cc:0e:d1:0e:cf:11:1b:c4:ab:cb:a7: ab:2d:94:4c:77:7f:46:9e:e1:e7:6a:9f:45:88:ce: 47:b8:b2:b6:f3:ef:99:4c:0b:91:46:af:ce:f3:22: 7d:04:96:cd:92:a2:a7:54:40:3a:6c:d9:05:d0:9c: 2b:84:e1:25:86:9b:db:a2:6b:06:de:af:46:f3:9a: f5:64:5c:98:d7:49:b7:88:40:9d:04:23:25:2c:e4: 79:b2:7f:26:f0:5f:a2:19:e1:80:58:3f:95:df:94: 51:64:16:9a:61:44:28:5b:10:b0:d0:56:02:7e:af: 1e:4e:4d:9f:f9:d5:e0:6c:ae:64:26:b2:69:47:7b: 48:b9:ce:51:a7:e0:aa:c6:21:1f:50:0f:36:68:2e: 98:db:2d:36:5a:ab:a6:e8:03:a1:a8:de:4c:ad:86: 08:02:8f:58:18:2a:57:8a:66:a0:a9:3e:32:51:f6: e0:2c:53:8e:95:66:c4:9f:72:c1:92:61:3f:a9:09: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:84:F6:1C:AA:DE:DA:C3:8B:0A:C4:FA:F7:B6:23:6E:67:2F:81 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:79:ec:8e:4b:69:dc:25:a5:8d:17:c1:b6:41:5f:99:49:dc: 36:6b:84:0d:44:0a:d8:21:ff:bf:c5:6f:5b:ae:5f:9f:03:47: 01:ff:a5:25:16:0e:22:ca:72:af:de:a8:60:9b:f8:a6:fd:48: 26:04:93:e3:96:f4:e7:a5:59:91:99:f0:a0:80:71:bb:2b:98: ea:f1:50:0f:1d:94:a5:de:a9:38:8c:4e:5f:e7:87:27:d8:df: 9c:97:d6:35:0c:d1:51:d6:c7:02:e4:27:91:2b:b6:b7:31:00: e4:af:b4:a6:20:6b:24:62:9b:e5:66:97:2f:e0:ec:5f:64:29: 6e:4a:86:d3:5f:03:67:cd:8b:f1:b7:60:0d:b1:e2:ba:02:bd: e3:ef:ac:8b:70:ce:8e:23:d8:4e:be:ec:4b:0a:7b:2c:a5:0d: d7:e9:2e:54:8d:15:9d:6d:63:5e:3a:4b:b4:26:b8:f3:ba:b1: 8e:cb:ba:f0:39:7f:a9:aa:04:4f:81:29:4c:77:16:e6:d0:7d: 26:36:d9:9a:28:f9:fe:2c:9a:98:39:8a:06:d6:da:aa:a6:97: 8d:ac:a2:be:2b:00:6a:5e:2d:98:78:7f:b9:39:87:8e:1d:3a: 0b:8a:4b:a7:46:29:ff:ab:e1:70:cf:05:88:09:2d:37:f7:00: a9:3f:8a:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjQwNTAyMjEzODA4WhcNMjQwNTA5MjEzODA4WjAYMRYwFAYD VQQDEw02NjM0MDdjMC1mOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Emi/QKLtgO/HruflShdFC+iqQTZjVJnjIXI2DLHUJ9g2CcHCHUJAIUjHWIH d4UFo61Tpax0Ow7I7AVUNXmnzA7RDs8RG8Sry6erLZRMd39GnuHnap9FiM5HuLK2 8++ZTAuRRq/O8yJ9BJbNkqKnVEA6bNkF0JwrhOElhpvbomsG3q9G85r1ZFyY10m3 iECdBCMlLOR5sn8m8F+iGeGAWD+V35RRZBaaYUQoWxCw0FYCfq8eTk2f+dXgbK5k JrJpR3tIuc5Rp+CqxiEfUA82aC6Y2y02Wqum6AOhqN5MrYYIAo9YGCpXimagqT4y UfbgLFOOlWbEn3LBkmE/qQmUhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/thPYc qt7aw4sKxPr3tiNuZy+BMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqeeyOS2ncJaWNF8G2QV+ZSdw2a4QNRArYIf+/xW9brl+fA0cB/6Ul Fg4iynKv3qhgm/im/UgmBJPjlvTnpVmRmfCggHG7K5jq8VAPHZSl3qk4jE5f54cn 2N+cl9Y1DNFR1scC5CeRK7a3MQDkr7SmIGskYpvlZpcv4OxfZCluSobTXwNnzYvx t2ANseK6Ar3j76yLcM6OI9hOvuxLCnsspQ3X6S5UjRWdbWNeOku0JrjzurGOy7rw OX+pqgRPgSlMdxbm0H0mNtmaKPn+LJqYOYoG1tqqppeNrKK+KwBqXi2YeH+5OYeO HToLikunRin/q+FwzwWICS039wCpP4pj -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org