$ rpki-client -vvf rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft File: wngM_VepmGmT2_bA1r3u92tFGXI.mft (raw, json) Hash identifier: GNfLEpfEFQKNwUHyfBkeETRxdIvGHRBDbBcfVSLSOoY= Subject key identifier: 57:AD:C9:BA:BC:DB:0F:C9:F8:1E:5B:1F:B9:56:86:A4:8E:17:F3:09 Authority key identifier: C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72 Certificate issuer: /CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972 Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft Manifest number: 0989 Signing time: Sat 04 May 2024 21:06:52 +0000 Manifest this update: Sat 04 May 2024 21:06:52 +0000 Manifest next update: Sat 11 May 2024 21:06:52 +0000 Files and hashes: 1: wngM_VepmGmT2_bA1r3u92tFGXI.crl (hash: kD0JttuNFWMHMe24RBJZNvSxGFu1gNQfJMU9hYW314s=) 2: 828FBA521E3511EB800DB148C4F9AE02.roa (hash: dW+PPyZEVjiQXWgMvB9PV5Jcw1YsFY0mLG1eQh2cTC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E007B/serialNumber=C2780CFD57A9986993DBF6C0D6BDEEF76B451972 Validity Not Before: May 4 21:06:52 2024 GMT Not After : May 11 21:06:52 2024 GMT Subject: CN=6636a36c-074b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:a1:29:16:09:fa:e5:75:74:9d:d9:fe:bf: d7:98:f8:1a:24:10:9c:a8:0f:e2:36:c1:66:24:d7: 20:80:65:0c:4b:82:92:c4:06:3b:1e:b2:fe:c0:cf: 3b:2b:c2:7f:67:cf:70:3e:0d:94:73:6d:6b:a3:50: e1:15:e7:fb:e9:ae:03:33:07:26:77:b2:9f:9c:d8: b8:3e:3c:4b:fe:14:8a:bd:f7:48:3b:c2:f4:40:1e: eb:0b:90:84:15:1f:a0:4d:75:3a:9b:f8:a6:43:7b: 4d:ec:0a:3d:dd:b6:95:2f:55:06:de:32:6b:a6:05: e9:9b:64:17:39:ae:da:a7:b0:46:91:f7:ec:2a:f7: d4:1e:26:e6:6e:89:63:b2:72:94:be:e1:7d:83:d2: 5f:2c:d6:a0:51:6e:cb:f1:1a:4d:d0:63:94:ee:b0: 0e:a1:59:ac:af:e8:e7:3b:f8:e2:51:bb:42:de:ab: ec:23:8a:45:fe:d0:6b:db:26:bb:76:1f:5a:62:d2: 09:f7:ba:76:2c:e3:ff:cf:28:b0:de:aa:c6:46:9b: 26:0c:58:57:f0:5b:d5:d4:0b:a6:0a:0a:8a:45:c6: 5e:83:2e:16:aa:c5:eb:70:c9:39:82:c4:d6:ed:fc: 45:e2:35:e0:07:c5:c1:1d:a7:ef:f9:b1:3c:d7:af: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:C9:BA:BC:DB:0F:C9:F8:1E:5B:1F:B9:56:86:A4:8E:17:F3:09 X509v3 Authority Key Identifier: keyid:C2:78:0C:FD:57:A9:98:69:93:DB:F6:C0:D6:BD:EE:F7:6B:45:19:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wngM_VepmGmT2_bA1r3u92tFGXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E007B/09DE3482671311EAA4D26753C4F9AE02/wngM_VepmGmT2_bA1r3u92tFGXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:07:95:3b:42:4a:8b:ba:a9:ef:10:7c:a8:b5:0d:4a:f7:1a: 7d:6e:66:1a:44:44:d1:74:73:a8:72:31:a2:12:3d:66:ea:1e: c7:78:89:0a:79:6e:26:25:47:8b:d1:34:51:a4:7e:7e:0c:a1: f2:72:d0:2f:5a:d0:37:43:16:86:ef:72:51:e9:24:2a:f4:b2: 3c:71:d0:96:7d:78:97:d7:dd:ad:f2:6a:b8:af:7c:a5:f6:50: 05:8c:b9:c5:e7:43:47:3b:f6:7b:69:e7:c8:8a:57:95:98:fb: e2:d5:49:f3:8a:19:9f:31:2d:bd:c0:18:b4:63:6d:f4:b2:ea: 8c:3d:0b:88:e0:13:ba:bc:0b:70:32:6e:72:7f:a7:fa:8e:a7: fd:d1:99:c1:a5:8e:23:c7:ca:36:6b:50:da:1d:11:10:c9:03: 6b:89:a5:8c:28:ef:38:9c:3f:92:02:5d:6d:5c:ba:5e:00:18: 49:ad:6c:27:a6:c4:c6:4d:90:ee:66:53:1f:59:c4:1a:c8:61: e5:11:cf:2a:97:89:a5:45:ed:cc:15:bc:3b:6d:e4:eb:ed:e0: 37:f2:39:09:63:c6:1f:71:07:87:a2:a6:a3:e4:d8:b1:5b:78: 52:90:ee:bd:af:a9:b6:90:e3:47:80:af:1a:b3:5e:03:87:1c: 43:f8:37:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwN0IxMTAvBgNVBAUTKEMyNzgwQ0ZENTdBOTk4Njk5M0RCRjZDMEQ2QkRFRUY3 NkI0NTE5NzIwHhcNMjQwNTA0MjEwNjUyWhcNMjQwNTExMjEwNjUyWjAYMRYwFAYD VQQDEw02NjM2YTM2Yy0wNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmChKRYJ+uV1dJ3Z/r/XmPgaJBCcqA/iNsFmJNcggGUMS4KSxAY7HrL+wM87 K8J/Z89wPg2Uc21ro1DhFef76a4DMwcmd7KfnNi4PjxL/hSKvfdIO8L0QB7rC5CE FR+gTXU6m/imQ3tN7Ao93baVL1UG3jJrpgXpm2QXOa7ap7BGkffsKvfUHibmbolj snKUvuF9g9JfLNagUW7L8RpN0GOU7rAOoVmsr+jnO/jiUbtC3qvsI4pF/tBr2ya7 dh9aYtIJ97p2LOP/zyiw3qrGRpsmDFhX8FvV1AumCgqKRcZegy4WqsXrcMk5gsTW 7fxF4jXgB8XBHafv+bE816+zJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFetybq8 2w/J+B5bH7lWhqSOF/MJMB8GA1UdIwQYMBaAFMJ4DP1XqZhpk9v2wNa97vdrRRly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDA3Qi8wOURFMzQ4MjY3 MTMxMUVBQTREMjY3NTNDNEY5QUUwMi93bmdNX1ZlcG1HbVQyX2JBMXIzdTkydEZH WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duZ01fVmVwbUdtVDJfYkExcjN1OTJ0RkdYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDA3Qi8wOURFMzQ4MjY3MTMxMUVBQTREMjY3NTNDNEY5QUUwMi93bmdNX1ZlcG1H bVQyX2JBMXIzdTkydEZHWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyB5U7QkqLuqnvEHyotQ1K9xp9bmYaRETRdHOocjGiEj1m6h7HeIkK eW4mJUeL0TRRpH5+DKHyctAvWtA3QxaG73JR6SQq9LI8cdCWfXiX192t8mq4r3yl 9lAFjLnF50NHO/Z7aefIileVmPvi1UnzihmfMS29wBi0Y230suqMPQuI4BO6vAtw Mm5yf6f6jqf90ZnBpY4jx8o2a1DaHREQyQNriaWMKO84nD+SAl1tXLpeABhJrWwn psTGTZDuZlMfWcQayGHlEc8ql4mlRe3MFbw7beTr7eA38jkJY8YfcQeHoqaj5Nix W3hSkO69r6m2kONHgK8as14DhxxD+Del -----END CERTIFICATE-----Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org