$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: 3QIrwOIYc4VqmDkWxJ346CWZi3NavMyXCZ2k0gkc/P4= Subject key identifier: 25:04:E4:64:CF:E0:26:E0:6B:43:02:B9:88:D7:6B:12:5F:EB:CE:BC Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: 2E Signing time: Fri 17 May 2024 08:33:31 +0000 Manifest this update: Fri 17 May 2024 08:33:30 +0000 Manifest next update: Fri 24 May 2024 08:33:30 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: obTJ+x+YayDCxRkwtpm6LytZDaPurnyTMvLPZOtjZGE=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: WEHBvskgD+7pAwM51UvYkvJPxMc31VB5wYczhy7vxrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Validity Not Before: May 17 08:33:30 2024 GMT Not After : May 24 08:33:30 2024 GMT Subject: CN=6647165b-8cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:2a:a6:70:ff:8b:1f:7c:28:e1:6b:9d:03: c2:ac:17:9e:79:28:cb:16:81:05:1e:11:c5:8a:9f: 45:44:e7:e2:9e:3d:4f:c1:c4:88:1c:7d:8b:4b:7c: b7:02:86:c4:dc:bd:f0:eb:3c:d2:8e:f0:5b:84:3d: de:f5:e5:e3:cd:a9:30:19:00:4e:67:de:09:b3:1d: 3f:53:18:77:fc:52:fc:0b:93:96:92:b5:bc:97:01: af:3c:07:f1:cf:7e:20:27:46:8f:40:6e:96:0b:1f: 14:b4:ea:32:d3:2b:ad:b6:cd:29:6c:fb:84:f7:3c: 4b:d3:73:7b:1d:c3:0a:2d:9d:82:32:6f:dc:18:36: 1c:6f:3f:b2:81:db:db:1e:f0:fd:70:40:94:e0:55: 49:15:d1:9c:59:ec:78:2e:bd:79:76:4c:72:82:2b: d2:ae:7c:5b:3a:f9:c3:dc:eb:3d:ad:64:dc:ac:38: f1:ba:8a:eb:d4:d8:38:f3:d2:8a:45:d3:2d:b4:ce: 21:8b:82:7f:d4:34:e1:01:cc:cd:eb:aa:de:45:f7: 45:8d:24:38:6b:9b:41:d5:c4:fb:77:6c:cd:d8:e7: fe:45:9d:6c:8e:8e:d6:cc:c9:f0:77:a4:94:67:49: cc:51:68:60:4a:de:9f:12:9b:ba:54:61:7a:45:bc: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:04:E4:64:CF:E0:26:E0:6B:43:02:B9:88:D7:6B:12:5F:EB:CE:BC X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a2:c6:33:04:a7:e4:e8:51:e8:98:c0:af:7c:41:99:50:00: 88:ea:34:0d:23:7a:58:77:fb:ad:73:3e:6c:74:e4:20:49:02: c4:5a:4d:37:2b:5f:45:88:0f:81:f8:0a:01:77:36:14:2b:98: 80:7f:5f:ab:17:8e:27:db:8a:b9:0b:d1:b3:55:6a:95:42:fc: ac:4d:af:bc:67:4b:18:3b:d7:6e:47:24:32:3c:ac:0a:99:bf: d0:f6:67:0f:0d:9c:86:dc:a6:19:51:91:a0:26:5e:6f:df:06: 04:82:a1:a3:0c:6a:3c:ac:c6:d5:d6:40:11:06:22:69:f8:81: 2c:c9:3a:1e:9a:33:14:d6:3e:ef:8d:55:99:e5:a9:dc:52:de: 6b:68:d3:31:17:d7:a7:82:f9:77:e2:85:a3:ef:c4:c5:50:86: 73:73:74:88:9c:b4:de:b3:76:22:47:69:fb:4e:70:48:9a:14: f3:7c:a4:02:b0:e5:6c:df:24:f3:b9:3d:3d:f1:5a:c8:8b:84: a4:75:b2:73:c7:e1:17:31:f5:09:15:9c:2f:25:d9:a0:9b:c2: 01:0b:8c:ce:76:f8:3e:da:df:72:a0:38:53:a8:7e:ee:7f:63: ad:47:34:ab:bf:6d:8b:3e:05:85:ed:00:d0:dc:0a:4e:9f:19: 1d:18:ee:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEIyQjExMC8GA1UEBRMoQzA5RURGNUI2OTVFMDQ3OTJDMzUxNEY0OThGNEJCMTQ0 NzA5NkVGNzAeFw0yNDA1MTcwODMzMzBaFw0yNDA1MjQwODMzMzBaMBgxFjAUBgNV BAMTDTY2NDcxNjViLThjYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfSiqmcP+LH3wo4WudA8KsF555KMsWgQUeEcWKn0VE5+KePU/BxIgcfYtLfLcC hsTcvfDrPNKO8FuEPd715ePNqTAZAE5n3gmzHT9TGHf8UvwLk5aStbyXAa88B/HP fiAnRo9AbpYLHxS06jLTK622zSls+4T3PEvTc3sdwwotnYIyb9wYNhxvP7KB29se 8P1wQJTgVUkV0ZxZ7HguvXl2THKCK9KufFs6+cPc6z2tZNysOPG6iuvU2Djz0opF 0y20ziGLgn/UNOEBzM3rqt5F90WNJDhrm0HVxPt3bM3Y5/5FnWyOjtbMyfB3pJRn ScxRaGBK3p8Sm7pUYXpFvLldAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJQTkZM/g JuBrQwK5iNdrEl/rzrwwHwYDVR0jBBgwFoAUwJ7fW2leBHksNRT0mPS7FEcJbvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QjJCLzlCODIwNkQ0Q0Y5 QzExRUVBRjM0NDY1RkM0RjlBRTAyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd0o3ZlcybGVCSGtzTlJUMG1QUzdGRWNKYnZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QjJCLzlCODIwNkQ0Q0Y5QzExRUVBRjM0NDY1RkM0RjlBRTAyL3dKN2ZXMmxlQkhr c05SVDBtUFM3RkVjSmJ2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEiixjMEp+ToUeiYwK98QZlQAIjqNA0jelh3+61zPmx05CBJAsRaTTcr X0WID4H4CgF3NhQrmIB/X6sXjifbirkL0bNVapVC/KxNr7xnSxg7125HJDI8rAqZ v9D2Zw8NnIbcphlRkaAmXm/fBgSCoaMMajysxtXWQBEGImn4gSzJOh6aMxTWPu+N VZnlqdxS3mto0zEX16eC+XfihaPvxMVQhnNzdIictN6zdiJHaftOcEiaFPN8pAKw 5WzfJPO5PT3xWsiLhKR1snPH4Rcx9QkVnC8l2aCbwgELjM52+D7a33KgOFOofu5/ Y61HNKu/bYs+BYXtANDcCk6fGR0Y7ig= -----END CERTIFICATE-----Generated at Fri May 17 10:59:14 2024 by rpki-client on console-ams.rpki-client.org