$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: xapH9j823V4QcLeleFJ1F3V7phsvvGklR8yPQJxm49s= Subject key identifier: 9F:85:0F:83:E0:B6:83:47:6B:82:82:27:E0:B4:D7:47:72:4D:59:83 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 0848 Signing time: Thu 02 May 2024 21:49:24 +0000 Manifest this update: Thu 02 May 2024 21:49:23 +0000 Manifest next update: Thu 09 May 2024 21:49:23 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: QQYB1T9YZdYadX0o1KHqT0oi5a15+DqDDZRuNsqAlPU=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: 17hpvxMSjtQePmhVyR39FiPD8SMvOv4PQNceC7ad9jo=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: DLgk/aAbys+BHUbM00Kk8wdZoY7yynf+AIo3v9dwEog=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: TSg3FcqUe8p3xEuIzBsr4QB4/ANA6z6swx+zkWjwaK0=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: 3Dik/OvnzaDMWKCwltL+C4K5s3w3EsfYVOeWUSSaqfM=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: 2Hr6PLVOg0G2Zq+jyMRiF2YFY0RnBVvMSLchOJswLI8=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: HHF+6q1D+r8lGLgsseh0sJDPUPIkzAO0xFWeHRcJmzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: May 2 21:49:23 2024 GMT Not After : May 9 21:49:23 2024 GMT Subject: CN=66340a63-d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:0e:ba:7d:77:e9:a9:7b:af:8e:bc:7f:a4: d7:fa:b1:03:36:ba:f7:6b:0e:0c:b5:20:f8:14:8d: 6c:da:7e:b0:9c:05:1b:e9:61:6e:18:22:fa:fd:27: ae:81:1a:9a:53:ec:f2:2e:e5:76:57:41:3a:58:49: e3:fb:1d:74:79:69:ef:0f:cf:d1:f2:53:d5:b4:3f: 81:c0:ee:85:1c:ae:d7:0c:4d:bd:d7:d7:3c:d5:be: 12:7c:76:1c:f1:9a:d3:4c:45:58:2a:95:a2:df:89: cd:91:04:98:7d:4f:64:58:27:28:c2:22:6f:a3:ff: 43:54:f5:d5:c6:77:74:fc:1f:c4:18:f2:71:06:f6: 8c:c4:97:c8:ea:0c:05:69:84:aa:dc:8a:11:4b:88: 1a:1b:10:39:5c:0f:5d:0b:26:94:86:79:b4:c7:a7: e9:09:be:9e:14:7a:07:7a:fb:15:cb:af:99:8b:81: a4:26:fa:47:43:b3:af:f1:95:3d:d5:e6:4a:4f:a6: d8:bf:ec:5a:84:a9:0c:a9:01:1b:16:34:56:0b:9e: 49:f3:47:4b:b3:f3:8e:57:50:3a:fd:89:ec:3d:d3: 27:5a:6e:20:13:50:36:dd:4b:bf:d1:d2:f5:48:c0: ef:b3:76:6b:4a:e9:d6:c7:69:a0:45:d4:c5:fc:17: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:85:0F:83:E0:B6:83:47:6B:82:82:27:E0:B4:D7:47:72:4D:59:83 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:62:c4:c1:c9:66:2c:9d:42:af:a8:cd:e8:54:32:02:de:5d: db:51:29:99:3a:6c:e1:e5:c2:12:b1:b8:cc:a8:a0:aa:63:e0: cd:08:fb:1d:47:db:12:a8:57:58:be:58:bb:83:74:72:d2:d2: ff:f1:c9:00:0c:25:ea:63:e4:98:a7:aa:3e:dd:11:1c:54:cb: 82:ae:e6:62:b5:c0:96:fb:9f:cc:b3:f3:81:98:04:86:f5:33: eb:58:9d:4e:84:1b:e9:37:30:30:23:10:16:08:e9:f6:e4:a3: 4f:03:57:e4:eb:c9:6f:ff:fd:da:de:5a:a6:36:e9:40:4c:77: f9:7c:d3:65:6f:1b:e8:81:0e:25:bc:cd:ea:63:34:8f:8c:fb: 6a:6e:5e:09:a9:fa:36:8f:b7:72:e4:d2:6d:86:36:64:9b:34: e0:d4:a3:08:13:21:78:55:4e:78:e4:82:c0:f9:ea:6d:63:05: 7c:bf:69:b9:d9:9f:8b:6c:13:04:ee:2a:15:76:96:81:36:d4: 17:01:3c:69:1b:34:aa:86:2b:1d:8e:71:2f:70:3d:80:4d:bb: 56:42:25:a0:88:19:16:47:95:df:0b:2e:a8:7e:d8:02:ac:9f: a5:1e:28:c6:34:34:27:ec:99:ca:bc:5f:18:b9:74:cf:c8:8a: 82:f4:78:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjQwNTAyMjE0OTIzWhcNMjQwNTA5MjE0OTIzWjAYMRYwFAYD VQQDEw02NjM0MGE2My1kMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyUOun136al7r468f6TX+rEDNrr3aw4MtSD4FI1s2n6wnAUb6WFuGCL6/Seu gRqaU+zyLuV2V0E6WEnj+x10eWnvD8/R8lPVtD+BwO6FHK7XDE2919c81b4SfHYc 8ZrTTEVYKpWi34nNkQSYfU9kWCcowiJvo/9DVPXVxnd0/B/EGPJxBvaMxJfI6gwF aYSq3IoRS4gaGxA5XA9dCyaUhnm0x6fpCb6eFHoHevsVy6+Zi4GkJvpHQ7Ov8ZU9 1eZKT6bYv+xahKkMqQEbFjRWC55J80dLs/OOV1A6/YnsPdMnWm4gE1A23Uu/0dL1 SMDvs3ZrSunWx2mgRdTF/BduAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+FD4Pg toNHa4KCJ+C010dyTVmDMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2YsTByWYsnUKvqM3oVDIC3l3bUSmZOmzh5cISsbjMqKCqY+DNCPsd R9sSqFdYvli7g3Ry0tL/8ckADCXqY+SYp6o+3REcVMuCruZitcCW+5/Ms/OBmASG 9TPrWJ1OhBvpNzAwIxAWCOn25KNPA1fk68lv//3a3lqmNulATHf5fNNlbxvogQ4l vM3qYzSPjPtqbl4Jqfo2j7dy5NJthjZkmzTg1KMIEyF4VU545ILA+eptYwV8v2m5 2Z+LbBME7ioVdpaBNtQXATxpGzSqhisdjnEvcD2ATbtWQiWgiBkWR5XfCy6oftgC rJ+lHijGNDQn7JnKvF8YuXTPyIqC9Hgt -----END CERTIFICATE-----Generated at Thu May 2 23:03:15 2024 by rpki-client on console-fra.rpki-client.org