$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: 4v1EqEDBY8CX/IZ9P4p5IMnoExYzTeoyn+tSDrCU4sM= Subject key identifier: 31:66:14:FD:3B:ED:7C:4F:0C:CB:70:C0:BE:5B:18:22:4F:00:58:EE Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 77 Signing time: Wed 15 May 2024 07:28:22 +0000 Manifest this update: Wed 15 May 2024 07:28:21 +0000 Manifest next update: Wed 22 May 2024 07:28:21 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: Td7iVrN7kfbYtdtMammq+sDErlnUOOXtamHVmFaQsiM=) 2: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: /TjW9AO7ISejU8TRY0ge1bQ+z/b39cY+4y6EmVLDEL0=) 3: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: 0GmwzEvjQkpIQOKVrUCegjL2exFdSiExkQmTbC5jqtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: May 15 07:28:21 2024 GMT Not After : May 22 07:28:21 2024 GMT Subject: CN=66446416-b9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:b3:67:fc:56:dc:f5:dd:25:11:5e:62:49: 67:93:98:a7:8d:08:19:86:93:44:6e:5f:e1:cf:18: f2:e4:3e:ed:75:0d:08:a2:6b:33:2f:55:80:4c:b6: f0:b3:08:63:d4:44:8d:8a:88:ef:6e:47:91:0d:2d: bc:ac:9f:b9:a5:c8:98:2d:78:c2:19:80:20:e4:c3: 59:5f:4b:30:14:10:45:6e:a3:7c:e2:67:e2:8a:67: b2:f3:d1:3a:30:a5:dd:30:da:c2:f0:0c:5e:61:a0: ee:d5:33:31:0a:f7:50:aa:aa:0d:1f:89:1b:3f:b2: 3a:69:35:16:de:cd:4c:e7:cd:01:64:14:1e:15:f5: 82:72:93:b4:71:3d:99:c8:9f:7e:ef:59:c5:a5:9c: f9:b6:ef:40:6c:0a:f3:7b:14:8c:28:08:13:1a:f8: 7e:3b:56:cc:54:fc:07:8b:31:36:7b:87:af:05:7e: b8:df:1b:d5:43:dc:7e:3c:46:2b:86:ac:8d:87:dd: 82:ed:05:6f:29:1d:09:84:59:e6:5b:09:8e:4b:a0: 18:9e:97:da:80:a2:ad:e2:98:bf:d6:ed:88:f1:a1: 14:53:b5:c5:db:45:d5:21:cd:c4:a1:b8:fd:b1:64: 20:9e:cf:e3:b3:07:42:62:58:be:86:61:61:69:b4: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:14:FD:3B:ED:7C:4F:0C:CB:70:C0:BE:5B:18:22:4F:00:58:EE X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:04:a7:63:8f:75:95:d5:d4:9f:e5:88:66:2e:1c:47:06:c5: 5c:78:ce:57:96:57:bd:62:f6:31:55:e7:dd:9a:a9:5f:e2:76: 8e:ed:13:60:ca:06:83:8a:1c:33:43:17:00:e6:84:14:05:53: 17:08:8c:60:e2:5c:da:84:58:b1:53:0e:f8:13:9c:34:a3:c9: 8e:90:9b:7d:c2:42:f4:c8:2a:96:5b:25:9e:bf:2d:23:fe:de: b2:1a:42:ac:68:f8:06:0c:2a:a1:14:57:99:ae:d6:7b:f6:87: d9:82:95:18:5a:71:67:0d:50:9f:17:8c:d1:5f:2c:4a:bf:eb: 00:91:e4:e7:d7:8e:b8:31:53:83:d9:10:12:e8:1c:72:84:85: 17:7c:d8:3c:b1:39:e9:8f:f6:b1:23:b8:39:be:42:49:93:bc: 79:1e:16:a2:75:7f:31:2e:92:d1:b8:f7:29:b1:4c:62:ec:f7: 3e:50:84:24:c7:ea:7f:17:e8:1a:74:d3:62:87:af:a2:56:b4: 0d:7d:39:7b:4e:95:a6:34:95:ee:55:97:d6:6e:c5:66:03:50: ca:b0:71:e2:e9:da:bf:24:72:57:11:87:7f:b5:6b:51:0b:30: c7:1c:68:24:63:c2:25:97:00:1f:38:fc:52:a5:66:6e:14:74: 20:b9:5e:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkY2MjExMC8GA1UEBRMoNTgzQ0JDN0JDOTY2MTQ1NzkwQzlGNkYyMjM2ODhBREFG RTVBRDNCODAeFw0yNDA1MTUwNzI4MjFaFw0yNDA1MjIwNzI4MjFaMBgxFjAUBgNV BAMTDTY2NDQ2NDE2LWI5Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoFrNn/Fbc9d0lEV5iSWeTmKeNCBmGk0RuX+HPGPLkPu11DQiiazMvVYBMtvCz CGPURI2KiO9uR5ENLbysn7mlyJgteMIZgCDkw1lfSzAUEEVuo3ziZ+KKZ7Lz0Tow pd0w2sLwDF5hoO7VMzEK91Cqqg0fiRs/sjppNRbezUznzQFkFB4V9YJyk7RxPZnI n37vWcWlnPm270BsCvN7FIwoCBMa+H47VsxU/AeLMTZ7h68FfrjfG9VD3H48RiuG rI2H3YLtBW8pHQmEWeZbCY5LoBiel9qAoq3imL/W7YjxoRRTtcXbRdUhzcShuP2x ZCCez+OzB0JiWL6GYWFptDhxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMWYU/Tvt fE8My3DAvlsYIk8AWO4wHwYDVR0jBBgwFoAUWDy8e8lmFFeQyfbyI2iK2v5a07gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRjYyLzExRjREOEQwNjI2 MjExRUU4MEJDODU1REM0RjlBRTAyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0R5OGU4bG1GRmVReWZieUkyaUsydjVhMDdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RjYyLzExRjREOEQwNjI2MjExRUU4MEJDODU1REM0RjlBRTAyL1dEeThlOGxtRkZl UXlmYnlJMmlLMnY1YTA3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4Ep2OPdZXV1J/liGYuHEcGxVx4zleWV71i9jFV592aqV/ido7tE2DK BoOKHDNDFwDmhBQFUxcIjGDiXNqEWLFTDvgTnDSjyY6Qm33CQvTIKpZbJZ6/LSP+ 3rIaQqxo+AYMKqEUV5mu1nv2h9mClRhacWcNUJ8XjNFfLEq/6wCR5OfXjrgxU4PZ EBLoHHKEhRd82DyxOemP9rEjuDm+QkmTvHkeFqJ1fzEuktG49ymxTGLs9z5QhCTH 6n8X6Bp002KHr6JWtA19OXtOlaY0le5Vl9ZuxWYDUMqwceLp2r8kclcRh3+1a1EL MMccaCRjwiWXAB84/FKlZm4UdCC5Xo4= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org