$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: xHzCtRU+UE/nY/aQpfsYi8ZTpQgXfMFBTFH/jFcJ+/4= Subject key identifier: F6:9E:0A:C9:25:C3:64:4D:8C:50:17:36:9F:24:5A:C2:A0:19:58:4C Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0295 Signing time: Wed 01 May 2024 03:58:08 +0000 Manifest this update: Wed 01 May 2024 03:58:08 +0000 Manifest next update: Wed 08 May 2024 03:58:08 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: pkZcsNii2xTG9PwEm5uburYfTtHt3yYxwk0iT22NBZE=) 2: 64DF1E90EE3F11ECA9E43485C4F9AE02.roa (hash: 0PO2fVIhMZEmKgQgCO0J3yYS+wga5JuzsgC0gHb4Qp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: May 1 03:58:08 2024 GMT Not After : May 8 03:58:08 2024 GMT Subject: CN=6631bdd0-aeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:87:04:d1:58:eb:70:9d:00:d8:25:8b:11: 11:69:96:1c:7b:f1:e3:f3:02:92:97:3d:75:63:9f: c9:cf:08:95:fd:a4:13:e4:6a:06:57:f2:67:00:f2: 97:4f:dc:82:1e:03:9f:ca:55:60:15:a8:40:65:40: ba:fe:b4:7d:41:1e:13:0e:bc:3b:ac:c0:00:75:c5: a4:60:a8:1b:de:33:82:e4:7f:4d:aa:fc:fa:85:ab: ba:e2:80:bd:81:bb:9b:84:7f:d1:8a:16:ce:a5:14: 60:d9:42:6e:43:72:de:94:ed:e1:56:e1:2f:19:b7: 89:fb:f0:fa:8a:0c:26:70:79:66:e6:06:34:48:40: 40:03:7c:5b:48:bd:d9:b4:4a:b3:f1:22:2a:92:00: 11:2b:ff:fc:e5:1f:f0:8d:6e:b3:f6:11:44:66:0d: d5:ad:19:43:55:6c:ed:40:5d:93:38:35:fe:e5:31: ed:61:c5:ce:8e:db:54:10:97:71:6c:2d:d0:a4:0c: 93:d9:63:22:bd:29:27:39:3d:d7:cd:19:06:9c:49: 0c:e4:83:5e:c9:a8:4b:61:52:83:b8:78:0a:e3:93: 9e:ac:c5:67:5c:53:bb:73:86:f1:03:3f:a1:96:ea: 69:d1:2a:6e:15:f6:f3:1a:e9:90:b6:9b:f9:ad:e6: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:0A:C9:25:C3:64:4D:8C:50:17:36:9F:24:5A:C2:A0:19:58:4C X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:57:3f:97:00:be:04:0c:34:a2:ca:14:27:de:65:f0:9b:ef: 18:db:96:89:67:d1:03:12:58:94:f2:c4:07:7e:84:81:72:6b: d1:f4:53:14:dd:59:d2:c1:28:9e:9a:7a:8d:0b:f3:99:41:21: 81:43:74:47:47:95:c9:9d:83:fb:c3:e7:73:c0:06:85:6e:61: d7:4e:56:38:61:ce:00:0e:7d:01:58:78:55:f1:bf:2e:33:01: 89:47:16:15:0d:dd:88:c4:28:7b:6b:ac:04:6d:f6:f9:37:55: 22:67:c6:4c:10:f8:56:59:b1:49:4a:f1:c3:b3:c9:fe:be:33: f0:5f:59:cf:cd:01:29:0d:b5:a6:12:06:44:09:df:e5:62:03: 60:ce:40:6a:91:40:55:ee:3e:c9:11:0d:67:b7:13:a6:50:ff: 95:1e:ef:c6:83:b1:a5:ba:9d:02:51:b0:c0:ac:fd:73:c8:6e: bf:99:1a:4d:b8:e7:1a:e0:19:20:86:49:d4:6a:62:01:aa:75: 14:74:0e:36:75:9a:79:e1:07:37:64:e0:39:c8:94:a5:c4:90: d2:77:be:c9:e2:9d:96:4a:da:87:e7:3b:37:9e:68:39:c5:a8: 66:7c:f0:79:b0:e8:40:49:18:aa:f8:e1:ab:07:cf:5b:55:4d: e7:83:a1:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjQwNTAxMDM1ODA4WhcNMjQwNTA4MDM1ODA4WjAYMRYwFAYD VQQDEw02NjMxYmRkMC1hZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZCHBNFY63CdANglixERaZYce/Hj8wKSlz11Y5/JzwiV/aQT5GoGV/JnAPKX T9yCHgOfylVgFahAZUC6/rR9QR4TDrw7rMAAdcWkYKgb3jOC5H9Nqvz6hau64oC9 gbubhH/RihbOpRRg2UJuQ3LelO3hVuEvGbeJ+/D6igwmcHlm5gY0SEBAA3xbSL3Z tEqz8SIqkgARK//85R/wjW6z9hFEZg3VrRlDVWztQF2TODX+5THtYcXOjttUEJdx bC3QpAyT2WMivSknOT3XzRkGnEkM5INeyahLYVKDuHgK45OerMVnXFO7c4bxAz+h lupp0SpuFfbzGumQtpv5rea3uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaeCskl w2RNjFAXNp8kWsKgGVhMMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Vz+XAL4EDDSiyhQn3mXwm+8Y25aJZ9EDEliU8sQHfoSBcmvR9FMU 3VnSwSiemnqNC/OZQSGBQ3RHR5XJnYP7w+dzwAaFbmHXTlY4Yc4ADn0BWHhV8b8u MwGJRxYVDd2IxCh7a6wEbfb5N1UiZ8ZMEPhWWbFJSvHDs8n+vjPwX1nPzQEpDbWm EgZECd/lYgNgzkBqkUBV7j7JEQ1ntxOmUP+VHu/Gg7Glup0CUbDArP1zyG6/mRpN uOca4BkghknUamIBqnUUdA42dZp54Qc3ZOA5yJSlxJDSd77J4p2WStqH5zs3nmg5 xahmfPB5sOhASRiq+OGrB89bVU3ng6Ei -----END CERTIFICATE-----Generated at Wed May 1 05:59:12 2024 by rpki-client on console-fra.rpki-client.org