$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json) Hash identifier: Drh01clOh/m2C0wweGd8ix6fYeho1LkFyyM1HSQU5q4= Subject key identifier: B8:7B:EB:2A:AD:CF:64:95:05:9E:05:C8:B9:D8:2E:8B:6F:75:6C:6D Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft Manifest number: 1046 Signing time: Thu 02 May 2024 21:01:54 +0000 Manifest this update: Thu 02 May 2024 21:01:53 +0000 Manifest next update: Thu 09 May 2024 21:01:53 +0000 Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: 3cRKMbngo5lqVVXqfMrMfTmVuAGU7hzG6dYmp+E92GQ=) 2: 336BA9301F3511EBA1BEA484C4F9AE02.roa (hash: YmQJVFgClUNZS8zoNTFsOSqkp6KCRISLG2h6fntHKcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: May 2 21:01:53 2024 GMT Not After : May 9 21:01:53 2024 GMT Subject: CN=6633ff42-6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:63:8e:47:42:db:1a:73:5d:47:d7:7b:ed: 1d:c5:60:5a:2b:99:d4:12:07:7d:c3:9f:c9:4c:1e: 08:6f:78:a0:80:b7:23:d3:b5:5e:14:e8:25:33:49: 49:69:2b:82:cd:24:24:a6:e2:f2:38:c1:ee:75:f0: e7:47:28:fa:ec:b8:a1:81:4f:d5:15:98:73:ab:00: 5b:9a:88:0b:b1:9e:33:e2:4b:94:f7:5a:97:60:8b: 64:0f:2f:31:4f:a2:83:04:d3:b1:60:70:2e:e9:ef: 98:6b:ad:81:c9:5e:c1:d9:a3:18:8f:47:88:05:d7: 1f:35:0d:2f:2d:1f:da:67:8a:6c:71:46:23:62:a2: 82:30:b0:4e:df:00:76:9c:af:17:ef:e7:ab:ba:48: 92:66:18:7b:24:a4:d4:33:68:20:da:d9:17:cd:2a: ce:e8:68:ee:69:23:e3:49:4d:04:d7:1c:f4:6d:71: 8f:18:57:3c:79:19:22:f7:0d:ce:fd:d4:d5:92:14: 23:f9:6a:95:71:5f:a6:38:c2:fb:ff:22:73:4b:fa: 3f:d7:6c:20:81:7d:8a:5e:f6:ea:13:61:67:d5:e2: 24:f6:d5:c6:92:dc:a7:9f:5b:3a:43:89:3e:bb:cc: 21:a0:42:7b:cf:75:5d:d1:5d:bb:42:c2:74:ed:92: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:EB:2A:AD:CF:64:95:05:9E:05:C8:B9:D8:2E:8B:6F:75:6C:6D X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:19:01:14:57:34:f1:2e:e8:72:08:64:15:dd:4d:b9:46:1d: b2:d3:b4:8e:a7:39:78:12:20:ea:05:3c:b6:fb:28:c5:24:d5: 9a:d5:e8:a6:08:4f:9e:f5:37:01:0f:93:6a:a0:ee:3f:f0:57: 7a:d0:f9:58:9c:ba:97:b7:c6:5f:0d:aa:5e:27:74:d9:1d:18: 6a:f3:38:a5:ed:d4:e8:0d:b0:ce:ef:c8:14:85:94:6f:2e:a7: 11:60:ac:7a:4c:61:04:73:46:c7:3c:ac:49:3c:43:cd:5f:0f: da:99:ed:95:d7:ab:4f:a6:71:dd:b7:47:7d:f2:6d:cb:93:ed: d1:fb:3c:35:90:47:84:8e:ee:27:eb:03:91:7f:75:ec:45:b3: 12:7d:51:fc:a0:bd:7d:0f:41:5d:2f:fe:5d:b6:01:82:13:46: f3:f8:88:65:dd:a1:0a:e4:eb:73:18:3a:84:a2:42:de:11:e1: ec:ff:e2:1b:6c:30:21:8e:58:15:24:30:08:67:34:81:18:38: cc:b6:5f:78:27:39:74:1d:ac:d7:10:eb:db:7e:12:33:d9:43: 4d:b3:fd:d1:b4:4d:63:fd:22:49:e8:07:19:5d:91:3d:c9:64: b5:00:39:03:95:eb:e6:4e:3d:8e:23:dd:fc:be:98:60:0a:a0: 8a:c2:b6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjQwNTAyMjEwMTUzWhcNMjQwNTA5MjEwMTUzWjAYMRYwFAYD VQQDEw02NjMzZmY0Mi02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWVjjkdC2xpzXUfXe+0dxWBaK5nUEgd9w5/JTB4Ib3iggLcj07VeFOglM0lJ aSuCzSQkpuLyOMHudfDnRyj67LihgU/VFZhzqwBbmogLsZ4z4kuU91qXYItkDy8x T6KDBNOxYHAu6e+Ya62ByV7B2aMYj0eIBdcfNQ0vLR/aZ4pscUYjYqKCMLBO3wB2 nK8X7+erukiSZhh7JKTUM2gg2tkXzSrO6GjuaSPjSU0E1xz0bXGPGFc8eRki9w3O /dTVkhQj+WqVcV+mOML7/yJzS/o/12wggX2KXvbqE2Fn1eIk9tXGktynn1s6Q4k+ u8whoEJ7z3Vd0V27QsJ07ZI4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh76yqt z2SVBZ4FyLnYLotvdWxtMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvGQEUVzTxLuhyCGQV3U25Rh2y07SOpzl4EiDqBTy2+yjFJNWa1eim CE+e9TcBD5NqoO4/8Fd60PlYnLqXt8ZfDapeJ3TZHRhq8zil7dToDbDO78gUhZRv LqcRYKx6TGEEc0bHPKxJPEPNXw/ame2V16tPpnHdt0d98m3Lk+3R+zw1kEeEju4n 6wORf3XsRbMSfVH8oL19D0FdL/5dtgGCE0bz+Ihl3aEK5OtzGDqEokLeEeHs/+Ib bDAhjlgVJDAIZzSBGDjMtl94Jzl0HazXEOvbfhIz2UNNs/3RtE1j/SJJ6AcZXZE9 yWS1ADkDlevmTj2OI938vphgCqCKwrbH -----END CERTIFICATE-----Generated at Thu May 2 22:13:22 2024 by rpki-client on console-fra.rpki-client.org