$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft File: wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json) Hash identifier: Bnq2zC85zU2hieZKEhCi16nanGn1JfZ0uZCH5+eK0V0= Subject key identifier: 87:18:90:86:93:D1:77:DF:EF:B2:A8:92:B9:A2:C7:EB:5D:44:04:D9 Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft Manifest number: 33C5 Signing time: Sat 04 May 2024 15:18:08 +0000 Manifest this update: Sat 04 May 2024 15:18:07 +0000 Manifest next update: Sat 11 May 2024 15:18:07 +0000 Files and hashes: 1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: OCk+s49IBi5LhUYOwn6a8mq0WCB+aIbNnEaeNwoyNbw=) 2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: 3xaP1FZo67Yaho9QdbBkNW6sNljBy/BqAUMBjOBp8ZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Validity Not Before: May 4 15:18:07 2024 GMT Not After : May 11 15:18:07 2024 GMT Subject: CN=663651b0-06a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:ce:75:36:06:ba:90:a4:65:ec:0f:4a:34: b2:52:3a:df:51:fd:51:3e:60:dc:7d:88:5e:0d:2b: 1b:13:e4:8f:e5:c0:28:91:1b:c1:a2:8d:30:c0:0d: 01:27:cd:fa:31:b9:09:d8:8d:fd:1f:0d:43:7f:95: 30:f6:cc:65:3a:c0:df:98:e2:cc:cb:a6:95:7f:95: 13:eb:ba:9c:4e:ae:23:ab:94:2c:45:eb:6a:a5:4a: af:78:ea:03:6c:0f:50:6f:ad:92:31:a9:b6:82:13: 93:98:75:85:46:07:ef:c2:03:e5:72:83:82:cb:02: f6:b3:67:e9:2b:31:79:4c:43:eb:de:c1:6f:76:7c: 39:4b:a1:52:61:4c:21:a3:c2:9a:f9:e3:43:7b:c7: e9:ed:92:12:7d:17:2e:ab:d9:11:7b:b9:87:cb:04: 53:26:c7:1a:9d:a2:36:19:92:85:3b:ea:e8:63:8d: b5:f2:6e:24:f8:87:09:82:ee:e8:0f:ec:63:2e:94: 6a:c8:3f:fb:ad:ea:20:c0:0b:54:82:6f:5c:ba:cf: 4b:09:bf:aa:d2:a3:b5:75:8e:27:77:1a:d4:1f:f4: b3:d9:36:af:d9:65:cb:41:50:36:57:6f:38:f9:5c: 87:f8:65:7f:16:bf:01:f1:1c:11:e7:a8:12:f7:fa: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:18:90:86:93:D1:77:DF:EF:B2:A8:92:B9:A2:C7:EB:5D:44:04:D9 X509v3 Authority Key Identifier: keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fb:ad:f5:ee:a0:bf:30:41:ca:13:39:45:50:1b:f5:03:cd: 6b:ae:38:19:40:c9:46:81:48:b1:c2:97:09:37:f5:68:6c:9f: c3:b3:8e:c6:6e:c5:0f:f2:83:82:f6:da:f9:b7:88:bc:20:7b: b8:c0:b3:b2:66:31:0e:7b:ea:48:b1:64:a2:9f:3c:2f:47:93: 1e:53:9e:2a:71:ee:64:3e:57:53:f9:9e:79:eb:3b:4a:73:9b: 4e:2d:ef:04:2b:e2:5b:4b:8b:61:22:b5:28:23:f3:72:90:d5: 3f:16:24:25:0d:9c:9e:02:88:ac:0d:b6:52:d2:97:37:2a:64: 6a:14:53:f1:75:33:f0:ac:9e:24:a9:5c:79:81:58:18:44:bd: 89:5b:3d:f4:3e:42:9e:1f:bf:38:11:7d:e0:c5:7a:cc:b6:41: 52:01:14:a0:9f:97:3d:e3:50:0a:48:0a:17:64:07:16:fd:31: 62:ea:30:29:5a:a3:af:e1:fd:77:9a:2c:f3:48:6f:03:cb:50: c1:bf:9b:7a:0a:5a:6c:15:66:6f:dc:51:ce:17:e9:83:37:9a: f9:a6:36:ba:23:9b:81:36:e2:2c:13:c0:51:57:57:a1:8e:80: 5b:99:8d:18:90:e1:ef:3e:f9:23:93:75:3e:47:27:70:23:40: 98:b3:e6:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NUExMTAvBgNVBAUTKEMxNDIyQTBDNENGRjI0OEQ1MTczNThFQkRGN0I0RTgw MkJBQ0MwRTcwHhcNMjQwNTA0MTUxODA3WhcNMjQwNTExMTUxODA3WjAYMRYwFAYD VQQDEw02NjM2NTFiMC0wNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQrOdTYGupCkZewPSjSyUjrfUf1RPmDcfYheDSsbE+SP5cAokRvBoo0wwA0B J836MbkJ2I39Hw1Df5Uw9sxlOsDfmOLMy6aVf5UT67qcTq4jq5QsRetqpUqveOoD bA9Qb62SMam2ghOTmHWFRgfvwgPlcoOCywL2s2fpKzF5TEPr3sFvdnw5S6FSYUwh o8Ka+eNDe8fp7ZISfRcuq9kRe7mHywRTJscanaI2GZKFO+roY4218m4k+IcJgu7o D+xjLpRqyD/7reogwAtUgm9cus9LCb+q0qO1dY4ndxrUH/Sz2Tav2WXLQVA2V284 +VyH+GV/Fr8B8RwR56gS9/qt8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcYkIaT 0Xff77Kokrmix+tdRATZMB8GA1UdIwQYMBaAFMFCKgxM/ySNUXNY6997ToArrMDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ1QS8xRTQ0OEE0ODFE QTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJMVJjMWpyMzN0T2dDdXN3 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVSXFERXpfSkkxUmMxanIzM3RPZ0N1c3dPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ1QS8xRTQ0OEE0ODFEQTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJ MVJjMWpyMzN0T2dDdXN3T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg+6317qC/MEHKEzlFUBv1A81rrjgZQMlGgUixwpcJN/VobJ/Ds47G bsUP8oOC9tr5t4i8IHu4wLOyZjEOe+pIsWSinzwvR5MeU54qce5kPldT+Z556ztK c5tOLe8EK+JbS4thIrUoI/NykNU/FiQlDZyeAoisDbZS0pc3KmRqFFPxdTPwrJ4k qVx5gVgYRL2JWz30PkKeH784EX3gxXrMtkFSARSgn5c941AKSAoXZAcW/TFi6jAp WqOv4f13mizzSG8Dy1DBv5t6ClpsFWZv3FHOF+mDN5r5pja6I5uBNuIsE8BRV1eh joBbmY0YkOHvPvkjk3U+RydwI0CYs+bj -----END CERTIFICATE-----Generated at Sat May 4 15:45:50 2024 by rpki-client on console-fra.rpki-client.org