$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json) Hash identifier: W/tBt64coIyMgc0TZNZOqQloG+TeZ/KWo04+QAyF0Dk= Subject key identifier: 68:BA:12:CF:5A:EF:93:FC:01:F3:62:38:40:A4:42:5A:E9:67:E2:BE Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 181D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft Manifest number: 1816 Signing time: Thu 02 May 2024 17:01:02 +0000 Manifest this update: Thu 02 May 2024 17:01:02 +0000 Manifest next update: Thu 09 May 2024 17:01:02 +0000 Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: O+TQqk5cj+aNnX6hvvCD3S9CXQcy6ulz7VLvdBwu7c8=) 2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: 1EJUO4DjT9jY9XfMKn0QnO76OngmdociHxy/agN9wXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6173 (0x181d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: May 2 17:01:02 2024 GMT Not After : May 9 17:01:02 2024 GMT Subject: CN=6633c6ce-b41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:f7:10:9a:98:7d:a3:c0:b4:7d:65:bb:e1: 4b:96:19:fb:4b:e5:09:cc:2b:a4:c3:35:7d:8a:9b: b1:52:50:2d:cb:c3:ef:d9:9e:08:c0:d4:bd:0f:ce: 73:51:d8:0b:67:dc:bd:39:dd:f1:0f:c3:a4:4f:f3: 19:d1:95:ae:2b:28:b7:1f:1e:ed:3b:2f:e3:5e:e2: 9f:cd:b5:cf:69:61:16:40:a1:4b:f9:39:bd:ad:bf: 27:2d:dc:67:63:69:e8:bb:b7:33:f5:66:87:a8:6e: b4:0a:a9:6e:4a:a3:1e:c1:b8:39:93:54:44:e3:14: a3:51:6d:86:33:2c:75:41:a1:0d:58:18:27:21:80: bf:2b:d2:18:a7:5a:99:31:56:15:25:7d:2e:10:30: 8d:25:c5:aa:53:b3:57:e6:ea:65:1f:4a:2d:61:f6: 28:d7:9a:b4:c2:26:59:22:f7:ee:d7:17:5a:64:80: c9:14:38:3b:42:76:76:c0:f2:e0:75:3a:4b:8f:4a: f6:9d:61:28:79:0a:b5:41:39:a0:ab:0a:cc:86:97: a5:d9:31:68:88:c8:ef:58:a1:51:fa:1f:bf:5e:23: 67:72:45:c7:d3:90:4d:c6:6b:9f:12:b4:b5:e9:db: c7:df:d4:9b:96:c0:10:e1:46:41:1f:33:46:c6:c1: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:12:CF:5A:EF:93:FC:01:F3:62:38:40:A4:42:5A:E9:67:E2:BE X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c7:b9:36:59:3f:46:d8:ed:c8:bd:ac:74:3e:c4:7e:f6:8e: 69:75:74:4a:2b:71:67:23:45:d1:f9:b6:df:f0:8a:00:c8:ed: 7d:e0:93:df:b4:29:df:13:19:8a:94:06:f1:10:d6:6b:59:1b: a8:1d:2f:b3:1b:81:dd:a4:71:82:a2:64:92:b9:7f:51:d6:22: 3c:ad:ad:6f:14:b1:1a:ff:c1:e0:27:ed:09:d0:64:f8:d6:88: c8:29:93:e8:fc:25:cf:c3:fc:83:02:5e:35:f4:65:59:b8:de: b8:5a:fa:55:9b:30:21:f8:ad:f9:b9:6f:37:e4:b7:87:52:f3: 18:f5:e6:7a:04:10:b3:7a:46:3d:0a:ab:e3:a6:1b:ba:16:06: 4f:68:00:45:77:6f:47:0c:53:ed:ca:77:8d:03:cf:2f:a2:54: 1f:de:ee:4f:13:11:2e:66:02:0b:15:8c:52:c7:97:1f:bb:ce: 75:7d:c8:6f:dc:04:14:92:b0:c3:97:3a:88:53:dc:6c:d3:c4: 1b:b6:8d:e8:74:0a:b1:07:e6:5a:80:6a:f7:b2:94:b0:de:69: e0:44:5e:9d:ea:0b:8f:6d:7f:d1:08:35:be:93:51:ad:22:64: 59:43:87:0c:c1:78:c4:c4:27:88:48:d1:38:2c:2b:0f:2c:4e: 41:9f:e3:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjQwNTAyMTcwMTAyWhcNMjQwNTA5MTcwMTAyWjAYMRYwFAYD VQQDEw02NjMzYzZjZS1iNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0or3EJqYfaPAtH1lu+FLlhn7S+UJzCukwzV9ipuxUlAty8Pv2Z4IwNS9D85z UdgLZ9y9Od3xD8OkT/MZ0ZWuKyi3Hx7tOy/jXuKfzbXPaWEWQKFL+Tm9rb8nLdxn Y2nou7cz9WaHqG60CqluSqMewbg5k1RE4xSjUW2GMyx1QaENWBgnIYC/K9IYp1qZ MVYVJX0uEDCNJcWqU7NX5uplH0otYfYo15q0wiZZIvfu1xdaZIDJFDg7QnZ2wPLg dTpLj0r2nWEoeQq1QTmgqwrMhpel2TFoiMjvWKFR+h+/XiNnckXH05BNxmufErS1 6dvH39SblsAQ4UZBHzNGxsEskwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi6Es9a 75P8AfNiOECkQlrpZ+K+MB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t SU9zSnFyTGVyV0EwdUNqcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHx7k2WT9G2O3Ivax0PsR+9o5pdXRKK3FnI0XR+bbf8IoAyO194JPf tCnfExmKlAbxENZrWRuoHS+zG4HdpHGComSSuX9R1iI8ra1vFLEa/8HgJ+0J0GT4 1ojIKZPo/CXPw/yDAl419GVZuN64WvpVmzAh+K35uW835LeHUvMY9eZ6BBCzekY9 Cqvjphu6FgZPaABFd29HDFPtyneNA88volQf3u5PExEuZgILFYxSx5cfu851fchv 3AQUkrDDlzqIU9xs08Qbto3odAqxB+ZagGr3spSw3mngRF6d6guPbX/RCDW+k1Gt ImRZQ4cMwXjExCeISNE4LCsPLE5Bn+N3 -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org