$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: AC3xqjbMyqqTZJscx90Q9sucDddBX8sOr//nhCCE/Vs= Subject key identifier: A0:5A:57:1B:45:EC:90:F1:6F:64:B1:68:23:90:43:CE:5B:BE:E4:D8 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0B4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0B3A Signing time: Thu 02 May 2024 19:51:28 +0000 Manifest this update: Thu 02 May 2024 19:51:28 +0000 Manifest next update: Thu 09 May 2024 19:51:28 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: Jcu0RxE0YR51JbzSTWf67jxU9ukRT91QLy2a86AkO3Y=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: c0jeJK9QAPrhoHAkb65StqU7qp272k5edHZrKw0cT9s=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5WuLHxmG8IWJX07luYYTcBfHJi95efpMQlBpweMImOc=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: hdDK9bB387XmiOfI09xup4zeZ5o4crSOg7jbYJEcLb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: May 2 19:51:28 2024 GMT Not After : May 9 19:51:28 2024 GMT Subject: CN=6633eec0-e514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:1a:7a:47:97:49:85:e8:38:b4:d9:14:61: c5:9f:96:f2:d1:a0:19:3c:71:19:e4:80:e5:e3:6d: 41:84:cd:be:7c:4f:32:f7:89:ad:84:ae:65:2a:fe: 27:44:94:7f:b1:78:a2:d2:00:90:57:45:6d:56:13: 2e:ff:59:e8:09:96:7d:6b:e6:9a:75:79:ae:a6:0e: 17:4b:43:9f:48:ac:f8:b6:d3:40:11:48:48:ea:33: 7c:20:83:00:9d:f8:94:35:23:8e:e7:77:2f:76:4f: 7f:66:36:1f:79:28:32:be:08:0b:d2:ea:10:51:4a: 5e:cf:5b:8a:10:0b:5c:82:33:99:78:af:c9:d3:5d: 7f:81:0b:5b:0f:45:7c:fc:bf:19:0f:93:df:d0:45: ac:13:c0:83:13:78:ba:a8:19:04:62:f1:1d:45:08: e7:d3:72:80:54:85:28:85:81:8a:62:b4:0a:23:ef: 5d:9f:62:9f:c6:32:d7:f3:36:49:ce:fc:16:fd:5f: 5e:4d:c8:6a:11:91:b7:d7:16:a2:5a:6c:97:31:bd: c9:f7:35:1d:6e:30:10:00:06:a9:b5:12:af:fe:77: 5c:08:d4:8a:08:2d:c9:e8:f8:8a:08:72:3e:09:0f: 73:ce:73:09:7f:30:28:6e:5d:f6:4d:16:e3:6a:f1: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5A:57:1B:45:EC:90:F1:6F:64:B1:68:23:90:43:CE:5B:BE:E4:D8 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:31:7b:d1:3e:71:06:94:a1:4e:5f:7c:bb:78:0f:1a:0c:79: be:33:e3:82:8e:35:b7:12:3f:7f:3f:61:dc:43:61:bd:71:c1: 52:3d:5e:2a:31:0a:bb:c4:42:59:a5:2a:c9:e7:7a:f2:c2:ff: ab:a0:85:8a:0a:54:d6:47:3c:84:c3:81:61:33:32:7c:0a:85: 36:93:5b:ef:4e:58:9f:e1:46:23:14:2c:b1:3f:3a:14:e3:66: 3d:6c:1d:d6:44:6c:49:39:96:f1:e0:8a:fa:96:91:da:b2:3d: c7:96:18:1b:c9:97:6f:cd:6c:1c:41:a1:17:25:8d:bf:47:60: 79:89:40:66:9a:7a:e6:0f:f6:ce:c4:1f:d2:20:c8:d1:69:b8: 26:97:12:1c:50:e4:e1:40:38:f2:10:f2:c9:d4:da:b7:90:a4: 09:77:17:64:58:6b:4b:aa:b8:12:47:5c:e2:a9:eb:e9:91:f1: 9c:f1:a6:6b:23:bd:ba:4a:df:83:25:74:85:17:79:c8:32:41: 00:3b:be:8e:9a:25:0e:7e:84:83:96:ca:30:a8:77:95:e2:bf: 69:1c:4b:83:7c:39:61:b2:17:e1:ea:a0:5b:a2:f5:2d:c8:b8: c6:d4:ba:a8:ea:0a:fa:b8:cb:ee:81:28:43:30:3c:a0:cd:b1: 8f:df:c9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjQwNTAyMTk1MTI4WhcNMjQwNTA5MTk1MTI4WjAYMRYwFAYD VQQDEw02NjMzZWVjMC1lNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10oaekeXSYXoOLTZFGHFn5by0aAZPHEZ5IDl421BhM2+fE8y94mthK5lKv4n RJR/sXii0gCQV0VtVhMu/1noCZZ9a+aadXmupg4XS0OfSKz4ttNAEUhI6jN8IIMA nfiUNSOO53cvdk9/ZjYfeSgyvggL0uoQUUpez1uKEAtcgjOZeK/J011/gQtbD0V8 /L8ZD5Pf0EWsE8CDE3i6qBkEYvEdRQjn03KAVIUohYGKYrQKI+9dn2KfxjLX8zZJ zvwW/V9eTchqEZG31xaiWmyXMb3J9zUdbjAQAAaptRKv/ndcCNSKCC3J6PiKCHI+ CQ9zznMJfzAobl32TRbjavHPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBaVxtF 7JDxb2SxaCOQQ85bvuTYMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQMXvRPnEGlKFOX3y7eA8aDHm+M+OCjjW3Ej9/P2HcQ2G9ccFSPV4q MQq7xEJZpSrJ53rywv+roIWKClTWRzyEw4FhMzJ8CoU2k1vvTlif4UYjFCyxPzoU 42Y9bB3WRGxJOZbx4Ir6lpHasj3HlhgbyZdvzWwcQaEXJY2/R2B5iUBmmnrmD/bO xB/SIMjRabgmlxIcUOThQDjyEPLJ1Nq3kKQJdxdkWGtLqrgSR1ziqevpkfGc8aZr I726St+DJXSFF3nIMkEAO76OmiUOfoSDlsowqHeV4r9pHEuDfDlhshfh6qBbovUt yLjG1Lqo6gr6uMvugShDMDygzbGP38n3 -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org