$ rpki-client -vvf rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft File: W2r-ya7p6tTclkY7oanLJyM9bf8.mft (raw, json) Hash identifier: HdA8HIGWJBEqR9cdDmT6cC/F25fn0fV5hjsw5WnwANA= Subject key identifier: 3E:53:A7:2F:1F:BD:CF:E9:D9:D9:B2:92:AD:ED:98:B0:DD:A2:0C:BE Authority key identifier: 5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF Certificate issuer: /CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft Manifest number: 33C0 Signing time: Thu 02 May 2024 15:05:06 +0000 Manifest this update: Thu 02 May 2024 15:05:06 +0000 Manifest next update: Thu 09 May 2024 15:05:06 +0000 Files and hashes: 1: W2r-ya7p6tTclkY7oanLJyM9bf8.crl (hash: Bj34Zpn4uoeq41ihFkVEf2CiottBaFlz/8KUsETVs5o=) 2: 1317969A55B711EBAAFF6E4DC4F9AE02.roa (hash: 0/Hc5K1w8OkTHoPK8WTx8jl0NjN7Zuseuef0lKYhInE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D81D4/serialNumber=5B6AFEC9AEE9EAD4DC96463BA1A9CB27233D6DFF Validity Not Before: May 2 15:05:06 2024 GMT Not After : May 9 15:05:06 2024 GMT Subject: CN=6633aba2-dd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:a8:64:0d:48:2b:fa:d3:ad:73:30:b8:ff: 0e:d0:df:bb:6e:75:20:d1:41:24:7b:6b:04:b6:e3: 5d:ad:8b:0a:a7:c3:99:e2:35:8e:89:74:39:66:ac: 60:d5:6a:5f:0f:be:24:c1:87:0e:68:16:0c:c6:2a: c5:c4:e1:d2:d4:8e:71:12:df:78:df:23:29:3a:d4: 2b:53:16:68:c3:3b:5c:56:db:3c:a8:2b:e8:3d:0c: ed:7a:c9:db:c9:0c:b6:06:fb:63:76:74:ef:b0:f2: 4e:68:c6:c3:76:23:7b:a1:fc:0c:c5:98:0d:58:07: 6c:90:97:dd:16:a1:cb:63:d9:14:cb:b2:7d:9c:18: 01:d3:d0:7a:f4:d9:d7:87:df:35:61:f4:72:18:71: ff:8d:48:d4:e0:43:b4:1a:7f:ca:67:a3:1f:4b:d7: e3:4d:78:eb:08:5e:7c:76:1d:ce:0b:c8:a9:0e:c5: 3f:82:83:c9:89:64:7d:03:d7:9e:a4:f4:e9:70:c4: 8c:e6:20:6b:a2:da:2c:ce:bf:5a:7f:8e:11:d1:a1: b5:7f:4b:fc:11:b9:c8:3d:f1:69:31:50:8a:3f:89: 6c:2c:46:34:2f:a6:dc:ab:3c:e3:7b:8b:a5:7d:df: 45:6f:e0:a1:50:30:51:08:db:a6:01:95:b2:51:8f: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:A7:2F:1F:BD:CF:E9:D9:D9:B2:92:AD:ED:98:B0:DD:A2:0C:BE X509v3 Authority Key Identifier: keyid:5B:6A:FE:C9:AE:E9:EA:D4:DC:96:46:3B:A1:A9:CB:27:23:3D:6D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2r-ya7p6tTclkY7oanLJyM9bf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D81D4/DAE382AA1D9A11E288D06C8808B02CD2/W2r-ya7p6tTclkY7oanLJyM9bf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:28:ec:8a:5f:1b:ec:eb:f8:41:75:a0:26:a1:71:73:e3:6e: fb:87:4d:5a:b7:c9:0e:b6:d2:c0:f0:c4:b7:6a:f1:b8:3d:e3: 4c:97:a2:10:9e:e9:bf:fe:27:55:c3:70:80:9e:b5:e8:fa:e7: d1:54:0a:76:54:30:7c:11:42:4f:1d:bc:88:ef:cf:f9:2e:4c: b7:40:94:20:00:45:b4:45:cf:2d:a4:f6:f2:e4:56:0b:71:43: fc:72:86:ef:cb:7b:22:2d:cc:8c:20:21:07:fc:4c:32:ef:36: 6b:58:a6:63:68:9a:c4:72:f7:1f:db:df:49:c2:f0:8f:89:1f: 11:e9:9a:23:f2:a8:35:c2:eb:03:f2:9b:6d:35:62:0c:c2:4a: 5b:0a:9b:8d:f3:ca:2f:68:0d:5c:bb:2b:a1:89:a5:ef:fb:dd: 26:36:7a:69:b0:ff:6f:16:fb:a5:e9:3f:12:00:4b:f6:bd:bf: 94:e6:b8:2e:97:63:c1:0b:53:3c:9e:e0:c3:e3:fa:fd:1d:ac: 4a:e8:90:be:d1:99:54:f9:6e:aa:40:39:04:89:13:5c:27:f8: 58:e8:8c:ca:88:f2:52:af:44:27:5e:32:e1:ca:e5:1e:8b:de: 64:70:10:fb:15:be:3f:e3:78:ae:cd:42:37:57:f1:2b:b2:a1: 1c:b3:7f:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxRDQxMTAvBgNVBAUTKDVCNkFGRUM5QUVFOUVBRDREQzk2NDYzQkExQTlDQjI3 MjMzRDZERkYwHhcNMjQwNTAyMTUwNTA2WhcNMjQwNTA5MTUwNTA2WjAYMRYwFAYD VQQDEw02NjMzYWJhMi1kZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT+oZA1IK/rTrXMwuP8O0N+7bnUg0UEke2sEtuNdrYsKp8OZ4jWOiXQ5Zqxg 1WpfD74kwYcOaBYMxirFxOHS1I5xEt943yMpOtQrUxZowztcVts8qCvoPQztesnb yQy2BvtjdnTvsPJOaMbDdiN7ofwMxZgNWAdskJfdFqHLY9kUy7J9nBgB09B69NnX h981YfRyGHH/jUjU4EO0Gn/KZ6MfS9fjTXjrCF58dh3OC8ipDsU/goPJiWR9A9ee pPTpcMSM5iBrotoszr9af44R0aG1f0v8EbnIPfFpMVCKP4lsLEY0L6bcqzzje4ul fd9Fb+ChUDBRCNumAZWyUY+5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5Tpy8f vc/p2dmykq3tmLDdogy+MB8GA1UdIwQYMBaAFFtq/smu6erU3JZGO6GpyycjPW3/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODFENC9EQUUzODJBQTFE OUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0VGNsa1k3b2FuTEp5TTli ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cyci15YTdwNnRUY2xrWTdvYW5MSnlNOWJmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODFENC9EQUUzODJBQTFEOUExMUUyODhEMDZDODgwOEIwMkNEMi9XMnIteWE3cDZ0 VGNsa1k3b2FuTEp5TTliZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9KOyKXxvs6/hBdaAmoXFz4277h01at8kOttLA8MS3avG4PeNMl6IQ num//idVw3CAnrXo+ufRVAp2VDB8EUJPHbyI78/5Lky3QJQgAEW0Rc8tpPby5FYL cUP8cobvy3siLcyMICEH/Ewy7zZrWKZjaJrEcvcf299JwvCPiR8R6Zoj8qg1wusD 8pttNWIMwkpbCpuN88ovaA1cuyuhiaXv+90mNnppsP9vFvul6T8SAEv2vb+U5rgu l2PBC1M8nuDD4/r9HaxK6JC+0ZlU+W6qQDkEiRNcJ/hY6IzKiPJSr0QnXjLhyuUe i95kcBD7Fb4/43iuzUI3V/ErsqEcs3+C -----END CERTIFICATE-----Generated at Thu May 2 17:43:50 2024 by rpki-client on console-fra.rpki-client.org