$ rpki-client -vvf rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft File: wrYFvbTytu0rBR3EKy6AP7YHjk0.mft (raw, json) Hash identifier: 7a40wKpaTy2wX6y/DmuAa2F+wDyO2nqkX4HglrZe6Y4= Subject key identifier: C4:4E:F2:13:A1:F0:3E:38:3E:CC:4A:12:EB:C9:82:83:F4:0B:24:43 Authority key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D Certificate issuer: /CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft Manifest number: 017B Signing time: Sun 05 May 2024 04:52:21 +0000 Manifest this update: Sun 05 May 2024 04:52:21 +0000 Manifest next update: Sun 12 May 2024 04:52:21 +0000 Files and hashes: 1: wrYFvbTytu0rBR3EKy6AP7YHjk0.crl (hash: JY81jEJesvXmKhpDFkJ44EGBDAZoHtAxwz3Xz8kr59o=) 2: 11AA6C3E22A111ED848DF584C4F9AE02.roa (hash: 1uFlebZA519OqpXoM4QXBxmovSoHUvM3q5yLtoaHh3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Validity Not Before: May 5 04:52:21 2024 GMT Not After : May 12 04:52:21 2024 GMT Subject: CN=66371085-c310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:79:c1:e5:86:0e:a2:c6:34:52:3d:3c:c2:ba: d4:a5:c2:75:5e:a6:cc:f8:c8:15:6e:22:0b:8f:96: d8:5c:38:24:bf:60:b3:9c:a5:69:79:a3:21:63:71: ce:2c:94:80:d2:3b:7a:43:6b:fe:24:51:55:91:de: 8a:97:6d:e0:fa:83:86:6b:29:d0:f7:d1:11:5d:eb: 4f:ad:4e:e9:91:80:b7:01:64:4b:e7:ca:6a:a7:d8: 64:4b:70:09:6c:01:2f:d4:5b:76:9e:44:f8:04:1a: 2d:81:b8:42:0b:a7:a7:5a:2e:44:02:e3:98:60:dc: 9f:ca:ca:46:cd:cb:9d:ca:5a:38:1c:7f:ef:90:5e: af:5b:f6:ea:5a:ae:31:0e:38:ec:c1:e4:e3:02:48: 9b:cd:7d:40:ac:bc:5f:0f:87:f5:99:d7:8c:e8:b0: 29:90:26:b0:a4:d8:51:09:01:8a:9f:e3:22:9a:68: 42:14:78:d4:4f:fd:fb:f3:d4:1b:ab:0e:8e:26:4e: 69:c3:98:c9:e6:dc:7f:df:23:2f:45:a8:79:e9:34: ff:fe:bb:1b:d3:76:d9:71:a1:f0:90:0e:81:7b:70: 3f:bf:a1:63:31:49:62:41:1e:e9:db:c9:46:c0:49: 7e:41:18:0b:0a:18:c6:bc:70:3f:c4:69:7e:e8:e0: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4E:F2:13:A1:F0:3E:38:3E:CC:4A:12:EB:C9:82:83:F4:0B:24:43 X509v3 Authority Key Identifier: keyid:C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:77:eb:74:32:c1:0e:31:b3:8c:3b:a2:e9:0f:01:89:4c:96: 6a:db:34:56:ad:fb:b4:82:7d:a3:54:b8:b2:7f:d2:9c:62:2e: 4c:06:53:42:a2:e4:50:50:f0:64:24:28:e4:de:89:94:de:d9: 7b:36:1c:19:bc:98:de:00:83:30:87:5d:24:cc:40:b8:61:13: bd:61:2b:ad:1e:32:df:77:e7:67:2e:d5:0b:8a:ee:c6:09:73: d0:b9:60:71:fd:df:bb:2e:8a:d2:41:50:29:a9:31:79:f6:2b: 80:b0:e5:b0:6c:6b:60:0d:9c:b0:84:f8:df:10:7c:e6:96:57: 61:5f:66:d3:c8:c6:98:02:8e:02:fd:77:ea:6d:a5:40:c4:e9: 7c:a3:f9:2d:0c:95:cf:13:25:c8:e9:bb:3e:35:ab:83:0e:15: 95:d1:52:b0:63:fa:fc:70:cd:56:d5:cd:97:3b:46:23:90:07: bf:61:c9:3a:6b:a7:70:b0:02:06:e7:1e:d9:37:77:ec:fd:7b: 57:64:e6:e0:ff:44:ec:72:59:2e:60:cd:d8:58:1d:6d:99:be: 07:5f:63:31:30:7e:ef:4e:55:66:fd:91:34:6a:a5:77:83:6e: 89:27:bf:74:dc:27:fe:1e:36:38:47:f7:26:9e:3b:6c:80:da: d4:0a:bb:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5MkExMTAvBgNVBAUTKEMyQjYwNUJEQjRGMkI2RUQyQjA1MURDNDJCMkU4MDNG QjYwNzhFNEQwHhcNMjQwNTA1MDQ1MjIxWhcNMjQwNTEyMDQ1MjIxWjAYMRYwFAYD VQQDEw02NjM3MTA4NS1jMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HnB5YYOosY0Uj08wrrUpcJ1XqbM+MgVbiILj5bYXDgkv2CznKVpeaMhY3HO LJSA0jt6Q2v+JFFVkd6Kl23g+oOGaynQ99ERXetPrU7pkYC3AWRL58pqp9hkS3AJ bAEv1Ft2nkT4BBotgbhCC6enWi5EAuOYYNyfyspGzcudylo4HH/vkF6vW/bqWq4x DjjsweTjAkibzX1ArLxfD4f1mdeM6LApkCawpNhRCQGKn+MimmhCFHjUT/3789Qb qw6OJk5pw5jJ5tx/3yMvRah56TT//rsb03bZcaHwkA6Be3A/v6FjMUliQR7p28lG wEl+QRgLChjGvHA/xGl+6ODYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRO8hOh 8D44PsxKEuvJgoP0CyRDMB8GA1UdIwQYMBaAFMK2Bb208rbtKwUdxCsugD+2B45N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjkyQS80ODlFMEYwQzIy OUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1MHJCUjNFS3k2QVA3WUhq azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyWUZ2YlR5dHUwckJSM0VLeTZBUDdZSGprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjkyQS80ODlFMEYwQzIyOUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1 MHJCUjNFS3k2QVA3WUhqazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAd+t0MsEOMbOMO6LpDwGJTJZq2zRWrfu0gn2jVLiyf9KcYi5MBlNC ouRQUPBkJCjk3omU3tl7NhwZvJjeAIMwh10kzEC4YRO9YSutHjLfd+dnLtULiu7G CXPQuWBx/d+7LorSQVApqTF59iuAsOWwbGtgDZywhPjfEHzmlldhX2bTyMaYAo4C /XfqbaVAxOl8o/ktDJXPEyXI6bs+NauDDhWV0VKwY/r8cM1W1c2XO0YjkAe/Yck6 a6dwsAIG5x7ZN3fs/XtXZObg/0TsclkuYM3YWB1tmb4HX2MxMH7vTlVm/ZE0aqV3 g26JJ7903Cf+HjY4R/cmnjtsgNrUCrsK -----END CERTIFICATE-----Generated at Sun May 5 05:30:52 2024 by rpki-client on console-ams.rpki-client.org