$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft File: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft (raw, json) Hash identifier: +FIhjjT/EsZXhFV+1NdxhctbyYtpi0jIojA5DLhXDLg= Subject key identifier: 4F:17:3A:DE:26:F3:85:9C:FF:E5:29:02:23:4B:8D:54:D1:8D:14:08 Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft Manifest number: 0422 Signing time: Sun 19 May 2024 02:01:52 +0000 Manifest this update: Sun 19 May 2024 02:01:52 +0000 Manifest next update: Sun 26 May 2024 02:01:52 +0000 Files and hashes: 1: wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl (hash: vitKjX4cZip7KxhOXoCsfwC3cxgo3qlvTBD9vALSSTg=) 2: 387C18C819B811EC841B010DC4F9AE02.roa (hash: GxhpaHWVA+apjH7tj9zQvnn6mDwA0anish7RKDqU+l4=) 3: 7273624619B511EC98D2A883C4F9AE02.roa (hash: M4PSP6XjxPVhe+drtMTrhopXxpIQ79bS62rvbFtsvvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Validity Not Before: May 19 02:01:52 2024 GMT Not After : May 26 02:01:52 2024 GMT Subject: CN=66495d90-2f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:51:eb:2a:f2:f4:4b:39:8b:b8:fa:6f:e1: 9d:b0:4a:c3:07:b6:e3:63:ee:38:2b:ed:f6:0f:60: cb:ba:2a:0b:1d:6e:ee:01:30:71:75:c6:fe:96:cb: 76:96:57:cd:a6:72:3c:f9:0d:97:e9:ff:5e:6c:91: 3b:10:2f:06:79:8d:81:57:5c:ce:88:aa:11:1b:8f: 10:05:08:10:22:ed:14:8e:40:3d:4e:d7:23:6f:f0: 12:aa:04:87:df:bd:1e:60:dc:d6:bd:e7:6f:03:ce: 3f:21:e7:bc:ee:e5:d1:73:03:71:c2:20:34:b9:6b: d6:36:da:60:1b:0e:75:2f:e4:59:0b:0a:cc:e0:51: 6b:4f:6f:32:c8:b9:dc:e2:d9:ed:11:68:60:73:c6: 5e:17:d9:4e:9b:70:5d:43:75:79:1d:a2:57:7c:b1: 3d:b6:f6:0a:6a:1e:99:c7:ff:fd:30:ca:e4:74:c4: 38:36:f0:cb:a9:3a:de:69:36:68:50:4e:72:37:81: 33:31:46:ee:f2:be:62:65:43:73:cc:68:43:0e:8b: a3:6e:6e:96:e8:20:26:c3:94:fb:92:9c:11:e7:7b: 4d:bb:7d:9c:65:d7:67:71:5e:f9:4b:de:1b:b3:dd: 5c:aa:6d:aa:3c:d5:d8:8a:4d:38:9c:1b:7f:78:44: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:3A:DE:26:F3:85:9C:FF:E5:29:02:23:4B:8D:54:D1:8D:14:08 X509v3 Authority Key Identifier: keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9f:6c:05:b0:63:3a:55:7b:34:a5:b8:e6:b6:27:dc:5a:3c: 73:c9:34:f8:a8:03:6f:c7:2f:03:cc:69:12:13:f9:4c:ff:c1: cc:43:56:ec:93:cb:01:27:ff:98:b5:ea:ed:8a:a2:3b:78:08: 2e:d9:0b:fe:af:30:39:ff:04:1f:6b:ba:77:10:1e:41:74:b4: 63:ef:5d:c4:49:37:2d:51:5d:5a:56:27:25:7b:a4:ae:f6:a6: 5d:e4:2e:2b:30:4e:42:80:11:79:fb:5b:84:b6:8e:9e:c1:8b: b8:d5:c3:db:4f:92:9c:3c:e5:d9:ae:81:47:d7:ee:f4:73:1b: a9:99:aa:be:79:ad:f6:f3:f3:78:11:42:92:61:f8:6c:17:1e: 97:19:a7:6c:13:8f:4a:74:b7:c4:68:ce:ed:7c:af:2e:6e:d0: 02:f3:7d:9d:6f:64:27:61:32:b4:e6:58:d8:ea:47:17:27:15: 3f:39:4c:f6:b0:8c:a2:93:c1:3a:8e:fd:dc:dc:ac:30:39:41: a3:67:87:17:60:07:04:29:fb:ee:2a:ff:59:eb:7e:69:4f:48: 83:c2:39:87:a2:f2:1f:70:05:3d:4a:f5:98:cf:c5:39:5c:a1: 1e:f7:99:a9:c2:9e:b7:37:8d:ea:d5:84:f1:6d:8d:2b:44:0f: db:a6:98:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1 QUY0QjgwNTkwHhcNMjQwNTE5MDIwMTUyWhcNMjQwNTI2MDIwMTUyWjAYMRYwFAYD VQQDEw02NjQ5NWQ5MC0yZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh5R6yry9Es5i7j6b+GdsErDB7bjY+44K+32D2DLuioLHW7uATBxdcb+lst2 llfNpnI8+Q2X6f9ebJE7EC8GeY2BV1zOiKoRG48QBQgQIu0UjkA9Ttcjb/ASqgSH 370eYNzWvedvA84/Iee87uXRcwNxwiA0uWvWNtpgGw51L+RZCwrM4FFrT28yyLnc 4tntEWhgc8ZeF9lOm3BdQ3V5HaJXfLE9tvYKah6Zx//9MMrkdMQ4NvDLqTreaTZo UE5yN4EzMUbu8r5iZUNzzGhDDoujbm6W6CAmw5T7kpwR53tNu32cZddncV75S94b s91cqm2qPNXYik04nBt/eET3tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8XOt4m 84Wc/+UpAiNLjVTRjRQIMB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5 QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDkzMS9EMUQzMkI2RTE5QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFF c1ZIdU9NQ0ppSXBhOUxnRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZn2wFsGM6VXs0pbjmtifcWjxzyTT4qANvxy8DzGkSE/lM/8HMQ1bs k8sBJ/+YtertiqI7eAgu2Qv+rzA5/wQfa7p3EB5BdLRj713ESTctUV1aVicle6Su 9qZd5C4rME5CgBF5+1uEto6ewYu41cPbT5KcPOXZroFH1+70cxupmaq+ea328/N4 EUKSYfhsFx6XGadsE49KdLfEaM7tfK8ubtAC832db2QnYTK05ljY6kcXJxU/OUz2 sIyik8E6jv3c3KwwOUGjZ4cXYAcEKfvuKv9Z635pT0iDwjmHovIfcAU9SvWYz8U5 XKEe95mpwp63N43q1YTxbY0rRA/bppiP -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org