$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: QvBFEZ4Pna56JMT35H8PvtdKgaFQ/FTBjfJLsidOMsA= Subject key identifier: 1A:88:2D:20:EE:3B:9F:DA:34:C8:80:9B:23:31:E0:09:6B:7D:5A:4B Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 13F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 1773 Signing time: Sun 28 Apr 2024 17:28:06 +0000 Manifest this update: Sun 28 Apr 2024 17:28:05 +0000 Manifest next update: Sun 05 May 2024 17:28:05 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: N5t2MiZS+ZuMaJijrn76lLByOo+fvfUHc/oYOkIYidY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5110 (0x13f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Apr 28 17:28:05 2024 GMT Not After : May 5 17:28:05 2024 GMT Subject: CN=662e8726-32af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:dc:23:a3:36:00:2b:d9:e4:56:62:d6:0a: 56:6b:e7:12:2a:f2:9a:4f:6b:c7:f8:ce:43:92:01: e4:3e:f2:b0:1c:19:92:0e:18:4f:2a:1b:f5:a6:99: f5:95:1d:1a:c9:66:96:d8:1a:02:08:07:58:fb:2c: fd:19:50:04:30:61:cf:43:b5:55:ae:b8:d3:27:0c: 4e:93:50:b2:2f:bb:f4:10:eb:f1:44:c2:21:bf:04: f9:3e:24:8f:36:5e:26:f4:95:01:e7:76:ef:4d:01: 4f:c3:d3:06:13:50:b3:ab:1d:ba:d5:94:82:77:fa: da:db:33:c0:50:b6:5e:87:6f:5c:25:c1:9d:55:64: 3d:13:56:4c:83:56:c8:66:2e:0c:fd:cd:98:48:e2: 57:75:fb:19:6e:bb:cb:cf:9b:0c:2f:6e:4f:38:c3: a1:2e:b9:d0:4a:10:0b:7a:d5:61:66:06:68:a0:27: 66:70:53:e2:a2:6f:54:1a:69:e4:c9:7e:49:aa:60: d4:c1:9c:bb:53:32:f7:96:5f:8e:99:2e:cb:bd:e3: 11:4a:93:0d:50:f7:85:de:dd:a3:f9:2f:89:9d:15: 74:00:61:e0:ad:7c:61:4b:40:1f:f6:72:c3:18:9b: fb:27:75:48:c9:5e:f7:36:fd:44:3d:37:d6:aa:7d: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:88:2D:20:EE:3B:9F:DA:34:C8:80:9B:23:31:E0:09:6B:7D:5A:4B X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fd:0d:20:82:b1:a8:e8:81:76:fb:02:01:11:51:51:e5:66: f5:15:01:aa:eb:ff:d0:5b:06:70:85:ca:49:a6:77:17:e8:44: 5f:51:ff:db:1b:07:d7:ec:83:43:0e:ab:0f:a3:9e:ee:4d:6c: 85:20:dc:f6:91:61:48:5a:21:2e:c8:de:ab:8d:fa:c2:4a:a4: 52:3c:c4:e7:80:d9:7b:a5:40:5d:39:2d:32:06:cf:a5:aa:ee: 81:b1:2c:82:0d:16:fc:6d:ee:b8:a5:6d:24:5a:f0:b9:b4:12: 9e:6f:e9:d1:53:18:55:d1:34:12:0d:b8:58:17:48:89:fc:c8: de:16:88:73:f2:79:fb:00:fd:8b:6f:64:c2:10:f7:79:6a:b3: 5d:14:43:46:96:1b:fa:8c:5f:f1:bf:70:a7:ef:3e:86:92:a1: a1:13:dc:57:d1:97:88:16:f4:d4:13:ea:1c:e1:34:b7:37:14: 23:dd:44:9e:50:15:7f:20:5d:91:e0:50:7f:b0:e2:54:c0:ea: b2:50:8b:c3:ae:c4:64:5b:ff:50:77:bb:e1:ed:30:a7:65:c1: dd:ab:ec:20:11:ca:55:9e:ef:65:af:1e:ba:5a:ab:60:92:eb: 02:58:1d:a5:c4:eb:62:2c:36:fd:23:10:29:c4:cb:8b:87:cb: 34:78:a0:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjQwNDI4MTcyODA1WhcNMjQwNTA1MTcyODA1WjAYMRYwFAYD VQQDEw02NjJlODcyNi0zMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkncI6M2ACvZ5FZi1gpWa+cSKvKaT2vH+M5DkgHkPvKwHBmSDhhPKhv1ppn1 lR0ayWaW2BoCCAdY+yz9GVAEMGHPQ7VVrrjTJwxOk1CyL7v0EOvxRMIhvwT5PiSP Nl4m9JUB53bvTQFPw9MGE1Czqx261ZSCd/ra2zPAULZeh29cJcGdVWQ9E1ZMg1bI Zi4M/c2YSOJXdfsZbrvLz5sML25POMOhLrnQShALetVhZgZooCdmcFPiom9UGmnk yX5JqmDUwZy7UzL3ll+OmS7LveMRSpMNUPeF3t2j+S+JnRV0AGHgrXxhS0Af9nLD GJv7J3VIyV73Nv1EPTfWqn1bIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqILSDu O5/aNMiAmyMx4AlrfVpLMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq/Q0ggrGo6IF2+wIBEVFR5Wb1FQGq6//QWwZwhcpJpncX6ERfUf/b GwfX7INDDqsPo57uTWyFINz2kWFIWiEuyN6rjfrCSqRSPMTngNl7pUBdOS0yBs+l qu6BsSyCDRb8be64pW0kWvC5tBKeb+nRUxhV0TQSDbhYF0iJ/MjeFohz8nn7AP2L b2TCEPd5arNdFENGlhv6jF/xv3Cn7z6GkqGhE9xX0ZeIFvTUE+oc4TS3NxQj3USe UBV/IF2R4FB/sOJUwOqyUIvDrsRkW/9Qd7vh7TCnZcHdq+wgEcpVnu9lrx66Wqtg kusCWB2lxOtiLDb9IxApxMuLh8s0eKDA -----END CERTIFICATE-----Generated at Sun Apr 28 19:01:39 2024 by rpki-client on console-fra.rpki-client.org