$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: Q0hms1BO31UeZCW3Y6vvOGW/706M97yTXK2uZxHP7kA= Subject key identifier: 0D:B8:FB:53:06:41:C9:CE:A5:77:E3:BB:0B:09:6E:B5:02:BC:4D:1C Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: F8 Signing time: Sun 05 May 2024 05:49:08 +0000 Manifest this update: Sun 05 May 2024 05:49:08 +0000 Manifest next update: Sun 12 May 2024 05:49:08 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: 149rfgg2zRH1z3PEO/aoz/Ao1F9xqm/Z4GnxVXe3bD0=) 2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: hvk9nQQbcOJqLgQQZvLF8paoDnj52btLFufQE/7r/Q0=) 3: 2027AAD6D61C11EDAB348D50C4F9AE02.roa (hash: PzhVooG/3hI891mwHixw+jObdeVt50Ru6Jq3SmD3Hvk=) 4: 669F81ECC19E11ED9703E456C4F9AE02.roa (hash: m6XiuJs3pbAGixYyBlP0zdgEX1/NL3vC7CknnokyCZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: May 5 05:49:08 2024 GMT Not After : May 12 05:49:08 2024 GMT Subject: CN=66371dd4-5cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:28:11:f4:00:9b:ed:19:90:eb:db:d4:b1: 07:ee:36:ed:12:b3:c5:c7:27:55:d4:1d:d9:de:21: bb:d7:89:c5:7b:7b:94:82:98:9c:30:12:49:df:fd: 68:37:3a:9b:3a:97:22:84:75:52:42:8b:b6:b1:d2: aa:2b:c8:0a:61:1f:7f:cc:d0:c5:20:27:da:da:08: 81:ae:dc:d1:71:a9:15:78:22:b4:1a:16:37:75:e7: b6:77:86:b1:39:e2:f3:80:5f:81:a7:a9:2b:5a:89: 7a:5e:a1:79:65:51:b6:c6:42:30:6a:1c:99:31:32: 12:61:56:7b:6a:a1:9a:73:1c:e2:14:b1:15:7e:ad: 86:d6:0f:7c:e2:62:35:90:d8:c9:ea:d4:27:6d:37: f9:e6:f4:1f:8e:87:ce:3e:59:ed:d0:90:30:ed:8e: b6:a0:5c:ff:d3:f4:c1:7f:a8:16:cc:8b:96:c7:65: c8:47:e3:0e:68:5b:54:89:e8:a1:d4:94:a4:9e:6f: 05:12:8d:4b:c1:29:79:e9:72:ff:74:1e:b1:6a:02: 1e:13:98:27:e2:42:63:5d:e5:13:35:8e:39:78:1f: d6:c6:77:79:ce:4a:6f:f5:b1:72:17:12:39:f7:01: de:3e:aa:f2:39:07:5e:e5:3e:7d:80:fb:5f:19:19: 1e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B8:FB:53:06:41:C9:CE:A5:77:E3:BB:0B:09:6E:B5:02:BC:4D:1C X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0b:43:f3:21:32:9a:8e:81:f1:da:ec:8a:00:e7:7f:6d:58: 43:10:fb:78:cd:f9:87:12:c1:45:7d:39:c2:30:00:6a:fa:33: 6d:bd:f7:e7:b8:8a:73:44:d2:35:cd:9c:f2:08:f6:d3:d4:ae: 92:15:7f:1d:a4:85:96:1e:06:45:fe:2a:69:09:19:18:e3:81: c3:d9:69:1d:49:e6:48:90:82:de:07:af:76:b2:92:06:5d:49: 2a:2b:65:b0:c2:46:5c:a4:bf:69:f7:e6:b8:e2:b4:66:65:60: c0:af:8b:20:b8:ce:8c:10:64:85:25:c4:4d:a4:53:54:08:5b: 1b:81:c5:0d:ac:a6:dd:f8:79:cd:a8:b9:fc:be:58:a3:86:90: 78:6c:e6:9e:c7:71:87:51:dd:24:e9:2a:e1:f1:d2:7d:af:01: b7:86:47:42:c2:11:fd:85:40:21:68:d4:d0:1a:c0:3b:02:ae: 28:88:95:38:55:d3:b9:11:7e:7d:d9:16:f2:1e:72:70:7b:4a: a3:3e:6a:db:b7:44:01:20:a8:64:e4:44:a0:4b:84:fa:ba:8a: b8:2b:ec:e0:a8:aa:35:87:dc:c0:6d:21:15:a5:36:9e:47:2e: 77:84:cc:0f:71:c1:43:05:13:d8:26:a9:d0:c6:4c:aa:8e:96: fb:26:64:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjQwNTA1MDU0OTA4WhcNMjQwNTEyMDU0OTA4WjAYMRYwFAYD VQQDEw02NjM3MWRkNC01Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCgoEfQAm+0ZkOvb1LEH7jbtErPFxydV1B3Z3iG714nFe3uUgpicMBJJ3/1o NzqbOpcihHVSQou2sdKqK8gKYR9/zNDFICfa2giBrtzRcakVeCK0GhY3dee2d4ax OeLzgF+Bp6krWol6XqF5ZVG2xkIwahyZMTISYVZ7aqGacxziFLEVfq2G1g984mI1 kNjJ6tQnbTf55vQfjofOPlnt0JAw7Y62oFz/0/TBf6gWzIuWx2XIR+MOaFtUieih 1JSknm8FEo1LwSl56XL/dB6xagIeE5gn4kJjXeUTNY45eB/Wxnd5zkpv9bFyFxI5 9wHePqryOQde5T59gPtfGRkeXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA24+1MG QcnOpXfjuwsJbrUCvE0cMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9C0PzITKajoHx2uyKAOd/bVhDEPt4zfmHEsFFfTnCMABq+jNtvffn uIpzRNI1zZzyCPbT1K6SFX8dpIWWHgZF/ippCRkY44HD2WkdSeZIkILeB692spIG XUkqK2WwwkZcpL9p9+a44rRmZWDAr4sguM6MEGSFJcRNpFNUCFsbgcUNrKbd+HnN qLn8vlijhpB4bOaex3GHUd0k6Srh8dJ9rwG3hkdCwhH9hUAhaNTQGsA7Aq4oiJU4 VdO5EX592RbyHnJwe0qjPmrbt0QBIKhk5ESgS4T6uoq4K+zgqKo1h9zAbSEVpTae Ry53hMwPccFDBRPYJqnQxkyqjpb7JmSI -----END CERTIFICATE-----Generated at Sun May 5 08:39:15 2024 by rpki-client on console-fra.rpki-client.org