$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9925/E9BFDF9A8EBF11EB8892877FC4F9AE02/wf9rgmWLvreoxOaST5--FQUgKhw.mft File: wf9rgmWLvreoxOaST5--FQUgKhw.mft (raw, json) Hash identifier: iMUb9wcivSFhJjTyJk+VeZTGqNK4ctY38cR6Bk2dm1s= Subject key identifier: 04:84:9E:0F:E6:B0:1F:79:F5:7F:83:E5:D8:D8:C0:11:49:E0:87:D3 Authority key identifier: C1:FF:6B:82:65:8B:BE:B7:A8:C4:E6:92:4F:9F:BE:15:05:20:2A:1C Certificate issuer: /CN=A91E9925/serialNumber=C1FF6B82658BBEB7A8C4E6924F9FBE1505202A1C Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wf9rgmWLvreoxOaST5--FQUgKhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9925/E9BFDF9A8EBF11EB8892877FC4F9AE02/wf9rgmWLvreoxOaST5--FQUgKhw.mft Manifest number: 057B Signing time: Fri 03 May 2024 00:43:48 +0000 Manifest this update: Fri 03 May 2024 00:43:48 +0000 Manifest next update: Fri 10 May 2024 00:43:48 +0000 Files and hashes: 1: wf9rgmWLvreoxOaST5--FQUgKhw.crl (hash: K9Iyi3JHiG4Qyd6cI1hrTjh5vfGkZ2QB6l8GKyFsYFc=) 2: 39EB3CA08EEB11EB8B952A3CC4F9AE02.roa (hash: QRaDHXz02qY4t1WAHrdiVBd0L3kERvBYA+eCyMWOaM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9925/E9BFDF9A8EBF11EB8892877FC4F9AE02/wf9rgmWLvreoxOaST5--FQUgKhw.crl rsync://rpki.apnic.net/member_repository/A91E9925/E9BFDF9A8EBF11EB8892877FC4F9AE02/wf9rgmWLvreoxOaST5--FQUgKhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wf9rgmWLvreoxOaST5--FQUgKhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9925/serialNumber=C1FF6B82658BBEB7A8C4E6924F9FBE1505202A1C Validity Not Before: May 3 00:43:48 2024 GMT Not After : May 10 00:43:48 2024 GMT Subject: CN=66343344-36e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:fb:44:cc:62:2a:47:ef:93:35:ae:0a:aa: 3a:b6:9e:f3:e3:7e:99:11:d9:55:67:31:bf:c9:cc: 36:22:e7:f3:42:75:e3:33:e1:e6:00:6a:20:9d:c9: 00:78:61:c0:97:93:97:8a:b1:5c:df:b1:da:e8:26: d8:23:1c:f3:39:64:7b:e8:62:ec:84:29:8e:1e:f4: 44:72:c3:b0:a5:56:5e:b1:d2:11:e5:c6:4d:33:59: 5b:18:36:4f:b8:1d:70:79:74:ad:9d:c9:f5:84:22: 83:8b:87:aa:26:ea:44:ea:83:41:80:be:ce:a3:ec: 32:23:ef:4e:8c:66:19:af:b0:b4:d2:b1:ee:0d:d7: f2:b7:e7:23:17:44:56:d9:cd:84:fe:1f:a6:42:58: bb:39:a7:33:eb:25:1d:c0:d1:9b:17:a3:2c:ad:43: 9d:fa:1b:ee:e6:72:25:7d:7e:0e:fd:09:27:79:ec: da:65:7e:19:d5:6c:74:b0:3b:ce:51:8a:ab:1a:af: dd:82:76:96:01:75:a4:4a:95:1c:56:42:86:a5:f4: e0:0f:95:72:1d:87:2f:85:9d:22:6d:72:68:d7:51: 2d:8a:50:36:18:04:ba:86:a7:9a:a9:31:79:2d:3f: 15:dc:78:a7:9c:0b:e4:3e:07:9e:ae:4f:a6:4b:1c: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:84:9E:0F:E6:B0:1F:79:F5:7F:83:E5:D8:D8:C0:11:49:E0:87:D3 X509v3 Authority Key Identifier: keyid:C1:FF:6B:82:65:8B:BE:B7:A8:C4:E6:92:4F:9F:BE:15:05:20:2A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9925/E9BFDF9A8EBF11EB8892877FC4F9AE02/wf9rgmWLvreoxOaST5--FQUgKhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wf9rgmWLvreoxOaST5--FQUgKhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9925/E9BFDF9A8EBF11EB8892877FC4F9AE02/wf9rgmWLvreoxOaST5--FQUgKhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:30:5c:91:fe:89:a9:2c:57:7d:dd:43:db:65:c0:2e:4d:c1: 91:98:4e:05:ca:d6:51:fb:6e:81:d5:43:86:71:3e:1e:13:d1: 42:39:5e:ba:84:cd:84:b5:df:5d:aa:fa:1b:17:d6:92:23:72: 93:09:bc:2f:28:42:f9:9b:b1:0f:59:c2:7e:37:77:f0:a9:64: 03:1d:8f:eb:3f:eb:69:12:64:46:ff:fa:2f:1b:50:90:79:20: bc:1c:3e:6a:43:54:61:d1:24:1e:59:04:d6:0d:2c:80:05:a2: 76:4a:2e:a3:0c:9a:76:02:52:60:30:3f:97:34:6f:f0:ae:0c: b2:8a:af:79:a6:52:6f:e2:7f:60:e4:69:bb:70:ab:23:65:3e: 2d:32:86:c2:6f:36:78:f6:a3:ef:81:84:68:4c:9a:fd:ad:89: 70:68:10:27:41:85:7e:c9:7a:f4:3e:ef:97:50:5f:7a:d2:a6: f3:6e:e8:12:11:a3:d1:49:98:a1:97:8a:4e:d7:53:27:f6:f9: c2:be:61:ba:ef:14:06:ea:82:8f:f9:59:f2:d0:da:49:69:1e: 58:43:7e:17:99:89:6a:e8:1d:f1:54:61:9c:28:39:ad:e7:f6: c1:c8:73:a5:75:62:cc:00:f1:e8:2e:0c:72:ae:19:08:08:4a: 9c:dc:6d:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk5MjUxMTAvBgNVBAUTKEMxRkY2QjgyNjU4QkJFQjdBOEM0RTY5MjRGOUZCRTE1 MDUyMDJBMUMwHhcNMjQwNTAzMDA0MzQ4WhcNMjQwNTEwMDA0MzQ4WjAYMRYwFAYD VQQDEw02NjM0MzM0NC0zNmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubr7RMxiKkfvkzWuCqo6tp7z436ZEdlVZzG/ycw2IufzQnXjM+HmAGognckA eGHAl5OXirFc37Ha6CbYIxzzOWR76GLshCmOHvREcsOwpVZesdIR5cZNM1lbGDZP uB1weXStncn1hCKDi4eqJupE6oNBgL7Oo+wyI+9OjGYZr7C00rHuDdfyt+cjF0RW 2c2E/h+mQli7Oacz6yUdwNGbF6MsrUOd+hvu5nIlfX4O/QkneezaZX4Z1Wx0sDvO UYqrGq/dgnaWAXWkSpUcVkKGpfTgD5VyHYcvhZ0ibXJo11EtilA2GAS6hqeaqTF5 LT8V3HinnAvkPgeerk+mSxyzkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASEng/m sB959X+D5djYwBFJ4IfTMB8GA1UdIwQYMBaAFMH/a4Jli763qMTmkk+fvhUFICoc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTkyNS9FOUJGREY5QThF QkYxMUVCODg5Mjg3N0ZDNEY5QUUwMi93ZjlyZ21XTHZyZW94T2FTVDUtLUZRVWdL aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dmOXJnbVdMdnJlb3hPYVNUNS0tRlFVZ0tody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTkyNS9FOUJGREY5QThFQkYxMUVCODg5Mjg3N0ZDNEY5QUUwMi93ZjlyZ21XTHZy ZW94T2FTVDUtLUZRVWdLaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNMFyR/ompLFd93UPbZcAuTcGRmE4FytZR+26B1UOGcT4eE9FCOV66 hM2Etd9dqvobF9aSI3KTCbwvKEL5m7EPWcJ+N3fwqWQDHY/rP+tpEmRG//ovG1CQ eSC8HD5qQ1Rh0SQeWQTWDSyABaJ2Si6jDJp2AlJgMD+XNG/wrgyyiq95plJv4n9g 5Gm7cKsjZT4tMobCbzZ49qPvgYRoTJr9rYlwaBAnQYV+yXr0Pu+XUF960qbzbugS EaPRSZihl4pO11Mn9vnCvmG67xQG6oKP+Vny0NpJaR5YQ34XmYlq6B3xVGGcKDmt 5/bByHOldWLMAPHoLgxyrhkICEqc3G3i -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org