$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: F0al1rq1p90tXYl+VsdGlHWwD4jMHvOrbXIaedDgbqA= Subject key identifier: 62:8B:A3:C6:52:49:8B:9F:3D:01:CA:43:64:79:CF:AD:70:87:E0:6A Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 077D Signing time: Sat 04 May 2024 22:24:17 +0000 Manifest this update: Sat 04 May 2024 22:24:16 +0000 Manifest next update: Sat 11 May 2024 22:24:16 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: ExY+oeDA7sIE4FlVes2820ZmqpO68QjGzkeOuGrQmiQ=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: U8EB6upYFrJ4UfMW5CZQh628uac/PqerE0Ocy3lzW3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: May 4 22:24:16 2024 GMT Not After : May 11 22:24:16 2024 GMT Subject: CN=6636b591-b6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:ff:c9:ef:6c:2c:2f:75:42:45:a4:ea:51: 98:65:6d:ec:bd:89:fe:d6:f2:a8:04:57:ad:46:53: 17:b3:ad:eb:0e:49:3d:9a:51:a9:22:fc:57:58:7f: 23:c6:79:74:e4:b4:61:17:c9:a3:a2:24:f0:5e:8b: ce:8d:98:42:81:ec:01:6b:c0:0f:e8:b5:30:77:cd: 7a:7d:3e:a7:57:c8:a8:8a:fe:9d:fc:54:2f:87:15: 46:37:7f:47:f6:d0:91:d2:e7:a0:10:3c:20:8a:dc: ff:41:1f:b6:96:c1:db:30:0c:fa:d3:c1:f7:58:5e: 3e:59:c7:b7:7c:4c:d8:da:7b:0c:ab:c9:8d:e7:cc: 6e:5a:bf:4e:84:e9:65:8a:e1:fa:6a:0d:a4:a9:03: 55:cf:56:32:c9:4d:ef:39:2d:52:48:fe:69:29:04: 7a:8a:01:29:6e:00:62:24:ab:6c:92:0e:2d:7b:d5: 79:7c:8e:bf:81:5d:93:01:5c:f9:f5:a0:c9:50:dd: 9c:bb:7d:0a:18:76:5f:4e:21:f8:19:d4:75:d3:5a: b7:be:61:5a:66:25:8f:d4:6d:38:ea:a6:f7:a5:7c: e4:3f:1d:41:6c:5f:34:21:75:8d:e0:25:d3:71:5c: 05:c5:46:48:18:6c:d5:64:f0:49:25:32:41:a8:c6: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8B:A3:C6:52:49:8B:9F:3D:01:CA:43:64:79:CF:AD:70:87:E0:6A X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2b:4b:0f:f3:28:41:e9:00:93:66:4e:30:25:3f:ae:7b:bb: 57:7d:f4:9a:24:e2:0f:c2:00:62:32:5c:66:13:4f:14:6d:54: a6:44:1d:b6:c2:df:8d:17:de:d7:f4:a1:e4:af:43:92:5f:9c: 99:fc:f3:c6:d9:7e:44:a5:f1:e6:eb:19:8e:fd:55:fb:22:15: b8:c6:b6:69:26:4f:9f:8b:61:9b:c7:96:2f:29:8a:fa:d4:7b: 34:b5:68:3f:31:60:d2:e3:ae:ba:97:6f:b1:dd:ed:da:d4:cb: de:86:ef:70:86:21:7f:0d:8b:44:0f:6d:b6:ab:3a:44:c3:4b: 84:b8:bf:f5:ff:ac:9d:d6:cb:ba:24:28:3d:00:b3:c0:44:0d: eb:f8:ad:ab:a9:22:71:11:c4:7f:fd:e3:2e:01:90:a9:3e:46: 3b:c6:44:26:e6:67:67:9b:f4:a2:2a:3e:8c:ab:1c:85:06:39: 74:3e:7c:17:38:41:50:3c:95:e6:fe:3f:53:2a:ad:1b:4d:36: 4e:19:6b:4c:f9:11:f4:9e:ac:2d:70:25:a9:b6:4b:27:d8:e3: 60:97:85:e9:8c:14:31:b1:be:f7:15:64:c6:ae:fd:a4:74:95: c7:18:a3:15:fb:14:3a:3b:36:53:aa:1f:bb:f8:2a:f2:04:03: c8:92:f1:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjQwNTA0MjIyNDE2WhcNMjQwNTExMjIyNDE2WjAYMRYwFAYD VQQDEw02NjM2YjU5MS1iNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApir/ye9sLC91QkWk6lGYZW3svYn+1vKoBFetRlMXs63rDkk9mlGpIvxXWH8j xnl05LRhF8mjoiTwXovOjZhCgewBa8AP6LUwd816fT6nV8ioiv6d/FQvhxVGN39H 9tCR0uegEDwgitz/QR+2lsHbMAz608H3WF4+Wce3fEzY2nsMq8mN58xuWr9OhOll iuH6ag2kqQNVz1YyyU3vOS1SSP5pKQR6igEpbgBiJKtskg4te9V5fI6/gV2TAVz5 9aDJUN2cu30KGHZfTiH4GdR101q3vmFaZiWP1G046qb3pXzkPx1BbF80IXWN4CXT cVwFxUZIGGzVZPBJJTJBqMaySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKLo8ZS SYufPQHKQ2R5z61wh+BqMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNK0sP8yhB6QCTZk4wJT+ue7tXffSaJOIPwgBiMlxmE08UbVSmRB22 wt+NF97X9KHkr0OSX5yZ/PPG2X5EpfHm6xmO/VX7IhW4xrZpJk+fi2Gbx5YvKYr6 1Hs0tWg/MWDS4666l2+x3e3a1Mvehu9whiF/DYtED222qzpEw0uEuL/1/6yd1su6 JCg9ALPARA3r+K2rqSJxEcR//eMuAZCpPkY7xkQm5mdnm/SiKj6MqxyFBjl0PnwX OEFQPJXm/j9TKq0bTTZOGWtM+RH0nqwtcCWptksn2ONgl4XpjBQxsb73FWTGrv2k dJXHGKMV+xQ6OzZTqh+7+CryBAPIkvHj -----END CERTIFICATE-----Generated at Sun May 5 00:14:47 2024 by rpki-client on console-ams.rpki-client.org