$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft File: wtD9BoMuxNu3G5uxZbvylkCs72g.mft (raw, json) Hash identifier: digQ15EmnDCoKglKEghPz0dTNoHzQv29tb5y+ADoctY= Subject key identifier: 83:B0:AB:87:BA:25:09:9A:07:83:B4:47:29:12:2A:FE:A3:43:33:CA Authority key identifier: C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68 Certificate issuer: /CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68 Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft Manifest number: 060F Signing time: Sun 05 May 2024 00:01:49 +0000 Manifest this update: Sun 05 May 2024 00:01:49 +0000 Manifest next update: Sun 12 May 2024 00:01:49 +0000 Files and hashes: 1: wtD9BoMuxNu3G5uxZbvylkCs72g.crl (hash: vAuxuHlDfhdKdXR+9ztBAcFX7RJzINT8kfz4gpqfmo8=) 2: 339BE48C554111EBAE1AA47BC4F9AE02.roa (hash: qjVSrkRyvnMbrPeElNzTYnbOYThbM8dR4zsheJBUbFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.crl rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68 Validity Not Before: May 5 00:01:49 2024 GMT Not After : May 12 00:01:49 2024 GMT Subject: CN=6636cc6d-ee9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:59:44:91:72:f2:6c:8c:04:3b:8f:0b:80: 46:5e:17:b8:67:ec:7c:49:95:ae:76:f5:fd:e0:76: 5e:92:c1:9e:af:66:1a:c1:01:fc:87:86:24:79:cf: 29:3f:fe:a4:9f:d1:bc:51:7b:a2:76:4f:8a:03:9a: 4f:67:65:9f:51:68:f3:c2:17:80:7b:ea:96:00:9e: 59:c0:cd:15:34:77:70:c4:aa:87:2d:e9:cf:4a:66: 9d:7e:f0:ea:fd:55:7d:58:44:82:f4:63:37:e0:a0: b0:62:9d:71:bd:17:07:a4:f7:74:b9:4d:11:bd:d6: 3f:93:8f:d9:a2:5b:62:b7:0e:5e:46:81:29:2b:a7: ed:71:d6:55:31:d9:27:ec:5e:b0:2f:2a:fc:de:b8: 92:cf:19:cd:7d:e4:24:e2:cd:af:0d:44:1e:ee:ee: 54:73:b5:53:77:2b:91:0f:9f:dd:bb:a2:90:01:48: 15:a6:4d:68:75:5d:9f:6e:37:cc:b8:6f:54:c5:65: 4d:16:5f:78:ea:d3:b9:2d:78:09:09:4b:62:94:a9: 2a:85:a1:ac:7a:4a:69:27:f6:65:36:97:67:b3:f1: 21:a6:d1:1d:44:d7:90:ec:6d:2b:8d:11:89:f7:d5: 60:5d:f1:13:83:aa:4a:60:f9:90:7d:2c:8a:f8:94: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B0:AB:87:BA:25:09:9A:07:83:B4:47:29:12:2A:FE:A3:43:33:CA X509v3 Authority Key Identifier: keyid:C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5d:4a:6d:09:ce:ac:dc:24:07:df:ce:59:7c:29:f6:4e:d6: e0:c0:98:24:da:b1:f3:6c:b1:54:e2:12:83:b6:a6:1f:91:1d: 69:21:1d:e3:fd:44:99:29:0e:35:8b:e3:fc:fd:9f:e6:bc:30: 96:99:34:2d:09:11:78:7c:2e:7d:92:2d:9b:63:da:6c:80:ab: c4:e1:cc:97:17:13:d1:69:c7:05:1e:dd:1e:88:74:8e:08:7b: 95:db:2a:ab:20:d0:55:7c:c7:ff:1d:7f:dc:66:82:ab:08:b9: 98:36:c8:44:f7:2a:da:6b:7e:9a:e3:97:84:b0:73:c6:02:07: 0b:71:0a:fe:b4:84:f4:63:71:83:57:15:dc:07:07:f9:7d:2b: 6c:39:18:f4:55:38:c4:36:7b:9f:60:d7:7d:0d:7a:5e:a4:01: 80:12:09:38:15:d4:6e:09:7a:a0:50:85:e4:8c:32:1c:05:d2: 3c:90:5e:55:4b:4d:f8:00:da:6b:d1:4e:db:ea:1e:f7:a3:47: ef:3d:ed:1b:e7:ee:79:81:b7:8d:9e:77:dc:61:f8:79:e6:b3: bb:8a:a8:f0:3e:bb:bb:29:64:6c:7a:33:49:7f:3e:62:bb:87: e9:81:7c:1c:94:ec:2e:61:fb:f4:52:c8:49:80:54:f2:5b:01: 10:9d:e3:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEQTYxMTAvBgNVBAUTKEMyRDBGRDA2ODMyRUM0REJCNzFCOUJCMTY1QkJGMjk2 NDBBQ0VGNjgwHhcNMjQwNTA1MDAwMTQ5WhcNMjQwNTEyMDAwMTQ5WjAYMRYwFAYD VQQDEw02NjM2Y2M2ZC1lZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DZZRJFy8myMBDuPC4BGXhe4Z+x8SZWudvX94HZeksGer2YawQH8h4Ykec8p P/6kn9G8UXuidk+KA5pPZ2WfUWjzwheAe+qWAJ5ZwM0VNHdwxKqHLenPSmadfvDq /VV9WESC9GM34KCwYp1xvRcHpPd0uU0RvdY/k4/Zoltitw5eRoEpK6ftcdZVMdkn 7F6wLyr83riSzxnNfeQk4s2vDUQe7u5Uc7VTdyuRD5/du6KQAUgVpk1odV2fbjfM uG9UxWVNFl946tO5LXgJCUtilKkqhaGsekppJ/ZlNpdns/EhptEdRNeQ7G0rjRGJ 99VgXfETg6pKYPmQfSyK+JQ6hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOwq4e6 JQmaB4O0RykSKv6jQzPKMB8GA1UdIwQYMBaAFMLQ/QaDLsTbtxubsWW78pZArO9o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0RBNi84Q0EwMzcxMDU1 M0YxMUVCOTJDMTkxN0FDNEY5QUUwMi93dEQ5Qm9NdXhOdTNHNXV4WmJ2eWxrQ3M3 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d0RDlCb011eE51M0c1dXhaYnZ5bGtDczcyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0RBNi84Q0EwMzcxMDU1M0YxMUVCOTJDMTkxN0FDNEY5QUUwMi93dEQ5Qm9NdXhO dTNHNXV4WmJ2eWxrQ3M3MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOXUptCc6s3CQH385ZfCn2TtbgwJgk2rHzbLFU4hKDtqYfkR1pIR3j /USZKQ41i+P8/Z/mvDCWmTQtCRF4fC59ki2bY9psgKvE4cyXFxPRaccFHt0eiHSO CHuV2yqrINBVfMf/HX/cZoKrCLmYNshE9yraa36a45eEsHPGAgcLcQr+tIT0Y3GD VxXcBwf5fStsORj0VTjENnufYNd9DXpepAGAEgk4FdRuCXqgUIXkjDIcBdI8kF5V S034ANpr0U7b6h73o0fvPe0b5+55gbeNnnfcYfh55rO7iqjwPru7KWRsejNJfz5i u4fpgXwclOwuYfv0UshJgFTyWwEQneP6 -----END CERTIFICATE-----Generated at Sun May 5 01:22:25 2024 by rpki-client on console-fra.rpki-client.org