$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft (raw, json) Hash identifier: 4KO5+vqi5WL24R+faP7D3re8eNtaJ0CTO7bwPNAo/f4= Subject key identifier: 0E:1F:A6:30:BB:EA:F6:2A:E1:FA:84:99:CF:D9:F9:59:8F:09:69:02 Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft Manifest number: 021F Signing time: Sun 05 May 2024 04:13:09 +0000 Manifest this update: Sun 05 May 2024 04:13:09 +0000 Manifest next update: Sun 12 May 2024 04:13:09 +0000 Files and hashes: 1: WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl (hash: KuR6aGoa/Ix3DDMMt7cEIh9Srq4C/48/veH09vevbFg=) 2: 2CCD56C8E33D11ECA430C25AC4F9AE02.roa (hash: U86p5u71TOWjIBSjWoG1eT1xUhAaYR+Xro7PSSd38QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Validity Not Before: May 5 04:13:09 2024 GMT Not After : May 12 04:13:09 2024 GMT Subject: CN=66370755-f585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:e2:51:ac:33:24:52:95:fb:48:87:b2:bb: 1e:01:3f:a2:2a:28:fd:bc:ff:ce:0d:40:dd:a3:dc: 35:63:c1:3e:0d:47:ff:9a:18:dc:9c:a0:ab:73:d3: c2:44:fb:f4:eb:93:15:ce:86:e8:c9:3e:10:5d:79: a8:d0:44:7b:26:e1:a9:fe:28:7a:7e:2a:08:a5:76: 98:5f:56:30:9a:12:0a:97:89:97:dd:f0:52:1f:e9: a4:7e:86:dc:1f:88:0b:75:49:4a:28:50:7b:b9:32: 5b:84:06:a7:4a:67:cd:5a:e3:e3:ea:3d:bd:10:0d: c2:95:f8:31:e3:72:a1:39:a8:c3:85:0f:2e:37:81: 78:79:9e:27:32:1c:f4:ce:1e:b1:d5:ca:f8:b7:4a: 09:1c:ee:93:62:c1:6a:d2:b1:c6:07:7d:01:c8:ee: cf:02:cb:2c:03:5c:38:53:db:3b:73:7b:2f:b6:1d: 62:a3:38:1b:86:d5:18:fc:d4:04:ca:b1:6d:70:78: 4a:96:a8:da:7a:dd:18:54:e3:ac:cf:1b:dd:10:c1: 72:8a:a2:5b:58:20:0f:e5:d8:dd:2c:ac:a8:eb:14: 2b:f7:2e:d6:dc:62:27:fd:87:fa:af:61:cb:0d:f2: 71:a4:96:f1:7e:81:18:17:99:46:ff:8c:87:30:d7: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:A6:30:BB:EA:F6:2A:E1:FA:84:99:CF:D9:F9:59:8F:09:69:02 X509v3 Authority Key Identifier: keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:22:98:fe:5d:7f:6c:31:6c:e8:7e:16:1b:d6:6e:bd:ec:bb: 24:5a:9e:fe:65:0b:d1:93:f8:36:be:6b:a5:c4:61:f2:2c:9b: 4c:11:f2:64:84:c3:15:55:9c:e0:08:3f:96:7d:1e:aa:99:92: e1:44:67:66:ee:f1:a7:db:9f:bc:e1:b7:a7:6d:00:74:64:0f: fe:35:9a:c8:0c:5e:d2:b3:ec:8e:0e:3a:07:f8:58:36:64:11: 06:82:07:1d:a4:82:1f:f8:52:6a:0a:ea:78:7a:df:0d:03:8b: 08:03:45:ba:ca:04:7a:d8:a4:df:4a:47:1d:87:bd:4f:06:1f: 2e:fb:7b:f2:16:c9:95:9c:cf:3b:a1:2d:26:45:13:3a:ff:29: e2:6f:f7:06:96:1e:c2:ba:6c:dd:9b:25:b4:07:22:44:01:b3: 03:5f:9c:f9:f0:bf:b9:8e:6f:02:fd:4a:81:52:95:39:ed:35: 45:1a:ff:af:8e:86:91:c3:68:bd:12:52:4b:76:7f:13:11:15: 3a:0b:e8:8a:d2:d2:bd:ea:78:97:ba:78:19:ee:02:ab:30:57: be:47:ff:d4:7d:0c:8f:c9:95:d6:fb:20:31:6b:d5:98:de:7e: a9:ab:f4:c0:8e:6c:26:e2:95:4a:81:93:59:da:2a:89:cb:9c: 7c:f2:3b:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD QzY2NjQ4OEQwHhcNMjQwNTA1MDQxMzA5WhcNMjQwNTEyMDQxMzA5WjAYMRYwFAYD VQQDEw02NjM3MDc1NS1mNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNTiUawzJFKV+0iHsrseAT+iKij9vP/ODUDdo9w1Y8E+DUf/mhjcnKCrc9PC RPv065MVzoboyT4QXXmo0ER7JuGp/ih6fioIpXaYX1YwmhIKl4mX3fBSH+mkfobc H4gLdUlKKFB7uTJbhAanSmfNWuPj6j29EA3Clfgx43KhOajDhQ8uN4F4eZ4nMhz0 zh6x1cr4t0oJHO6TYsFq0rHGB30ByO7PAsssA1w4U9s7c3svth1iozgbhtUY/NQE yrFtcHhKlqjaet0YVOOszxvdEMFyiqJbWCAP5djdLKyo6xQr9y7W3GIn/Yf6r2HL DfJxpJbxfoEYF5lG/4yHMNfLQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4fpjC7 6vYq4fqEmc/Z+VmPCWkCMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IxRC9CQTY0RDA2NkUzMzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2 ZzNjUHF1Rk5kWFhNWm1TSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBIpj+XX9sMWzofhYb1m697LskWp7+ZQvRk/g2vmulxGHyLJtMEfJk hMMVVZzgCD+WfR6qmZLhRGdm7vGn25+84benbQB0ZA/+NZrIDF7Ss+yODjoH+Fg2 ZBEGggcdpIIf+FJqCup4et8NA4sIA0W6ygR62KTfSkcdh71PBh8u+3vyFsmVnM87 oS0mRRM6/ynib/cGlh7CumzdmyW0ByJEAbMDX5z58L+5jm8C/UqBUpU57TVFGv+v joaRw2i9ElJLdn8TERU6C+iK0tK96niXungZ7gKrMFe+R//UfQyPyZXW+yAxa9WY 3n6pq/TAjmwm4pVKgZNZ2iqJy5x88jvW -----END CERTIFICATE-----Generated at Sun May 5 05:30:51 2024 by rpki-client on console-ams.rpki-client.org