$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: zS4qzy11IfgUynNyShIDJ5D6dfUeBOhXsmE0kTrBU8U= Subject key identifier: F8:62:80:79:B8:CD:1D:03:3F:F0:9E:3A:19:F6:D2:49:71:70:0B:85 Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 06C4 Signing time: Thu 02 May 2024 23:09:14 +0000 Manifest this update: Thu 02 May 2024 23:09:14 +0000 Manifest next update: Thu 09 May 2024 23:09:14 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: pgNL/dH7nUdEbOk9TIfztdAaybdMB+tNyGhw9aTKR4s=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: 3wNb3uSGFUj7TW3YjO/Fo/zuSwyAaLBEKGkKhGdXIAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: May 2 23:09:14 2024 GMT Not After : May 9 23:09:14 2024 GMT Subject: CN=66341d1a-d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:d7:99:63:10:de:94:bc:73:52:22:a6:c1: a4:1f:a6:53:82:2d:67:a2:57:2a:9a:e1:cf:e9:ef: 12:78:09:7e:df:de:44:85:2d:65:32:48:3c:49:54: ed:11:ff:0f:e3:d0:45:74:ca:b5:c0:8e:af:24:51: ee:cb:dc:55:9a:37:2b:d6:34:b1:90:8a:5a:28:62: a5:3e:e5:bb:20:fa:a8:85:bc:5a:72:9a:fb:f3:aa: 94:03:01:c7:2f:3a:78:f9:8f:d1:ca:5f:4d:0e:3e: fd:76:0f:a1:fb:8c:5c:4a:93:4a:4c:0e:51:4e:84: 7a:d0:39:20:59:d9:f6:b0:60:83:14:f6:f6:a8:af: 6d:56:99:76:7d:f4:f3:2f:b0:38:c6:5c:6f:f7:a2: e8:d6:b0:bb:55:a2:e4:e9:56:66:d9:42:83:3a:1f: 72:f9:db:b7:72:86:0c:12:36:c8:2d:02:ed:94:6a: 32:f1:6c:22:b9:e9:4a:35:6f:03:d4:2b:ab:32:9c: ac:62:a6:a8:76:65:be:dc:9d:13:cb:90:5f:04:54: 96:32:54:13:de:80:c1:83:89:25:25:e5:67:86:83: 9c:16:cb:ff:d8:b1:ae:f9:2a:cb:b1:7e:08:0d:44: a8:ef:2e:74:42:a0:86:98:b7:54:5b:aa:4c:89:10: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:80:79:B8:CD:1D:03:3F:F0:9E:3A:19:F6:D2:49:71:70:0B:85 X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:34:d0:3c:04:58:e2:d3:4f:93:0a:47:42:1f:8a:e8:f5:e0: 31:3b:d0:1e:ac:1a:cb:87:1c:6f:b5:4a:c5:e6:72:ab:19:ca: 10:69:aa:cb:4e:97:8d:54:af:70:44:42:a0:5f:b3:32:a7:53: 8f:f2:ba:aa:84:4b:cd:d2:73:99:12:e3:6b:1e:9b:2d:c7:b2: 83:7c:55:b7:53:a1:fa:04:c1:0b:12:23:09:0b:c4:66:e4:d1: 02:83:6c:94:ca:46:b9:a6:3b:60:b9:af:a3:f4:3d:39:87:7a: 37:2d:41:d6:44:f4:8c:25:72:8f:60:9b:c4:01:f4:be:10:6d: 6e:23:3a:26:4a:a4:5e:3b:13:8f:ff:7f:11:dd:6c:0c:d0:1c: 28:db:ae:f4:72:25:53:fa:0a:3a:f3:46:c1:01:08:23:f2:49: a3:19:85:0c:65:ff:7b:29:6b:00:93:89:26:aa:f7:ee:a7:3e: 39:18:fb:05:92:1d:fa:a8:50:f1:6d:5f:96:2f:1d:41:a8:b5: c7:2a:0b:9b:7e:87:99:77:be:dd:53:d5:6d:ef:d2:58:5a:b1: c6:fb:ad:11:f6:be:9b:07:49:7f:d6:3f:3d:47:b1:3e:7e:c6: c3:83:1e:79:82:fb:58:b5:a2:eb:03:72:26:62:ec:3a:11:e6: 24:3e:5c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjQwNTAyMjMwOTE0WhcNMjQwNTA5MjMwOTE0WjAYMRYwFAYD VQQDEw02NjM0MWQxYS1kMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmTXmWMQ3pS8c1IipsGkH6ZTgi1nolcqmuHP6e8SeAl+395EhS1lMkg8SVTt Ef8P49BFdMq1wI6vJFHuy9xVmjcr1jSxkIpaKGKlPuW7IPqohbxacpr786qUAwHH Lzp4+Y/Ryl9NDj79dg+h+4xcSpNKTA5RToR60DkgWdn2sGCDFPb2qK9tVpl2ffTz L7A4xlxv96Lo1rC7VaLk6VZm2UKDOh9y+du3coYMEjbILQLtlGoy8WwiuelKNW8D 1CurMpysYqaodmW+3J0Ty5BfBFSWMlQT3oDBg4klJeVnhoOcFsv/2LGu+SrLsX4I DUSo7y50QqCGmLdUW6pMiRAFkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhigHm4 zR0DP/CeOhn20klxcAuFMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5NNA8BFji00+TCkdCH4ro9eAxO9AerBrLhxxvtUrF5nKrGcoQaarL TpeNVK9wREKgX7Myp1OP8rqqhEvN0nOZEuNrHpstx7KDfFW3U6H6BMELEiMJC8Rm 5NECg2yUyka5pjtgua+j9D05h3o3LUHWRPSMJXKPYJvEAfS+EG1uIzomSqReOxOP /38R3WwM0Bwo2670ciVT+go680bBAQgj8kmjGYUMZf97KWsAk4kmqvfupz45GPsF kh36qFDxbV+WLx1BqLXHKgubfoeZd77dU9Vt79JYWrHG+60R9r6bB0l/1j89R7E+ fsbDgx55gvtYtaLrA3ImYuw6EeYkPlxJ -----END CERTIFICATE-----Generated at Fri May 3 00:07:14 2024 by rpki-client on console-ams.rpki-client.org