$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: 5woUN22HPTKuX+ZoLcHMSMfHTa/NHl4nkBh22S9/Oe8= Subject key identifier: 5C:AB:D1:09:3C:6B:5A:1F:D9:66:95:A7:3F:A1:90:AB:72:68:3A:5B Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 04CC Signing time: Fri 03 May 2024 01:30:29 +0000 Manifest this update: Fri 03 May 2024 01:30:28 +0000 Manifest next update: Fri 10 May 2024 01:30:28 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: /71Su43ibuNUzmtyBzHgacEXOFS8TNS0qQM19mxbGe8=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: eZ0VmxXOP11xwIAOMdTqb1lUHDMDXhbutgz1qbxhGRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: May 3 01:30:28 2024 GMT Not After : May 10 01:30:28 2024 GMT Subject: CN=66343e34-7a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:d6:b9:35:55:24:a0:e5:29:46:79:ea:91: 54:6d:08:a0:fd:88:8b:64:a4:69:f1:da:79:8f:74: b7:5b:22:a8:01:5a:3f:ad:24:ae:17:44:f0:0b:70: de:ce:8d:70:54:59:84:c1:78:8a:bd:fc:98:2a:7d: 63:8c:f3:d1:81:83:76:28:8d:a7:cc:de:73:56:50: f4:2c:8f:f3:38:bc:6a:b7:6a:52:26:6f:4f:2f:d3: 0b:2a:69:b5:41:cc:98:75:bb:c4:83:a5:1c:d8:91: 02:e6:5b:82:1e:7f:a3:ad:da:3c:13:8f:d2:cf:e2: 02:d8:30:82:19:ce:f2:74:11:93:2e:d4:4b:59:45: b6:6e:46:5d:74:46:88:25:a0:b7:a3:7a:ca:14:c1: d8:b8:05:ea:c1:3e:5f:d5:04:eb:1d:31:3d:d2:d7: e6:92:89:94:a8:6f:3c:3b:9e:a0:81:c3:1f:45:9a: ae:7d:14:98:77:86:45:65:f5:c0:c9:7f:b9:34:62: 62:7c:53:d5:59:ea:14:9c:29:cd:9b:77:86:4b:d5: 9f:d8:b1:11:f0:c9:43:6d:2c:3a:2a:3d:a6:da:70: da:44:21:2a:9c:1e:b8:c9:1a:c5:56:79:9b:3e:43: c3:80:ae:09:91:dc:6a:2e:d2:62:43:8c:e0:de:a5: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AB:D1:09:3C:6B:5A:1F:D9:66:95:A7:3F:A1:90:AB:72:68:3A:5B X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d7:a9:53:d0:01:a9:60:ce:9f:d7:c0:7d:a6:ac:68:d5:60: 77:c2:2b:77:82:fe:23:f9:10:b1:76:5f:13:ae:c3:4d:f4:ba: 0b:48:0a:39:3b:76:87:bf:a7:c8:86:46:a5:bd:de:38:cd:44: 74:d5:15:46:45:07:98:6d:f8:b2:81:7f:75:40:1b:9a:89:8d: b5:f1:4d:83:01:2e:77:2e:89:26:a8:d3:7f:c9:7d:6a:7a:29: e4:f6:08:11:46:8b:94:b5:88:ec:4b:ab:42:55:3f:20:d2:f9: 81:aa:5b:6d:84:12:96:f1:98:bb:41:08:f9:e1:e4:fc:fd:5c: fc:10:d2:70:49:ce:84:99:de:85:8e:5e:3d:31:8a:54:f8:b6: 55:4d:22:36:d8:cf:f3:58:82:bb:25:da:c3:61:5c:c6:b3:8f: 9a:2a:6e:14:b2:2f:fe:93:9f:cf:fc:4c:cf:9f:2a:54:f2:45: 2f:20:94:e0:49:f9:a0:8e:9e:cc:c5:b5:fe:45:cc:a2:dd:cf: 59:9b:d5:31:cd:69:1f:2a:3a:0f:a7:4e:e0:5f:b2:48:8b:37: e9:8d:83:d5:67:18:66:73:59:7a:34:86:6d:63:2a:de:ac:12: df:4e:74:bd:cb:57:3e:59:e9:af:84:ef:68:14:5f:16:ea:07: f7:a0:ba:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjQwNTAzMDEzMDI4WhcNMjQwNTEwMDEzMDI4WjAYMRYwFAYD VQQDEw02NjM0M2UzNC03YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxbWuTVVJKDlKUZ56pFUbQig/YiLZKRp8dp5j3S3WyKoAVo/rSSuF0TwC3De zo1wVFmEwXiKvfyYKn1jjPPRgYN2KI2nzN5zVlD0LI/zOLxqt2pSJm9PL9MLKmm1 QcyYdbvEg6Uc2JEC5luCHn+jrdo8E4/Sz+IC2DCCGc7ydBGTLtRLWUW2bkZddEaI JaC3o3rKFMHYuAXqwT5f1QTrHTE90tfmkomUqG88O56ggcMfRZqufRSYd4ZFZfXA yX+5NGJifFPVWeoUnCnNm3eGS9Wf2LER8MlDbSw6Kj2m2nDaRCEqnB64yRrFVnmb PkPDgK4JkdxqLtJiQ4zg3qUytQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyr0Qk8 a1of2WaVpz+hkKtyaDpbMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA416lT0AGpYM6f18B9pqxo1WB3wit3gv4j+RCxdl8TrsNN9LoLSAo5 O3aHv6fIhkalvd44zUR01RVGRQeYbfiygX91QBuaiY218U2DAS53LokmqNN/yX1q eink9ggRRouUtYjsS6tCVT8g0vmBqltthBKW8Zi7QQj54eT8/Vz8ENJwSc6Emd6F jl49MYpU+LZVTSI22M/zWIK7JdrDYVzGs4+aKm4Usi/+k5/P/EzPnypU8kUvIJTg Sfmgjp7MxbX+Rcyi3c9Zm9UxzWkfKjoPp07gX7JIizfpjYPVZxhmc1l6NIZtYyre rBLfTnS9y1c+WemvhO9oFF8W6gf3oLqQ -----END CERTIFICATE-----Generated at Fri May 3 04:45:26 2024 by rpki-client on console-fra.rpki-client.org