$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: DIiC3Q1SAZmqzh10HKjfkZJQ2uF0SZz4TMYcvW6EhGk= Subject key identifier: 50:65:CD:C7:4D:BA:22:55:E1:22:F7:C6:03:25:2F:A4:10:E0:46:A9 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 59 Signing time: Tue 21 May 2024 07:50:50 +0000 Manifest this update: Tue 21 May 2024 07:50:49 +0000 Manifest next update: Tue 28 May 2024 07:50:49 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: m8DT7Y3woyF2ZxbAsgDbZTXdqaKrBjGqr26T89m4yzA=) 2: 7D9A528A990E11EE87118E20C4F9AE02.roa (hash: iaqtPE7/e/3g4lNfhjgSYmN548vGrlJdRh9cx3zzzvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: May 21 07:50:49 2024 GMT Not After : May 28 07:50:49 2024 GMT Subject: CN=664c5259-1f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7d:af:dc:b0:73:24:68:8a:37:eb:9b:ea:93: 2b:fc:b6:35:80:2d:d7:5d:47:b2:b4:c5:c9:41:3e: 71:ef:5d:59:4f:52:75:53:b6:99:f0:6a:21:89:5d: f5:07:71:20:93:e2:d2:d8:b3:45:a9:4a:fd:93:95: 12:22:57:7f:02:b4:81:6e:5c:b5:d8:c2:0c:f1:d8: ea:71:53:3a:b0:e0:47:a3:b7:f7:f0:07:f1:bc:fa: ab:3b:3f:9a:98:40:c0:ad:ee:ea:94:43:bb:d2:09: dd:73:62:de:b5:32:51:7b:66:b5:e9:ec:e6:c5:3c: c7:2b:0c:5c:21:b2:11:e5:a0:b4:18:40:38:5e:c6: 16:cf:8c:16:a9:53:b3:dc:b4:8b:f7:38:08:34:04: 9a:d1:1b:b0:e2:3b:50:2e:24:09:31:2a:0d:88:51: 8e:61:1c:a2:43:05:9f:d4:16:9f:ed:c7:ba:07:59: f8:53:8d:09:c5:40:ce:e3:bb:6e:5f:28:c7:9f:80: 13:94:e1:f0:3c:d9:74:1a:d4:1d:19:b0:39:04:f3: c6:89:00:66:d2:32:0a:78:5d:47:16:1b:49:44:c1: 64:30:c8:b1:b5:25:74:b3:6b:ba:e0:56:c2:31:de: 95:3c:ac:45:9d:d9:82:01:85:37:5d:f1:7b:1b:3f: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:65:CD:C7:4D:BA:22:55:E1:22:F7:C6:03:25:2F:A4:10:E0:46:A9 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:84:b8:9e:69:0d:18:53:65:66:cd:cd:62:8f:4b:0a:db:f7: 9d:09:fa:8f:b4:28:79:74:4a:c3:26:8c:db:47:5e:74:0c:e5: 50:61:39:37:8c:f4:b0:c3:2f:e6:81:b6:e3:54:de:52:c2:7f: af:f0:ff:86:d5:1c:a7:ec:61:5d:4f:52:59:29:0b:47:17:e5: 10:94:26:50:1a:ba:1b:29:84:10:d9:fe:7d:8b:42:58:f6:e9: 56:be:b1:63:c6:81:d6:2e:82:e7:17:0c:20:3b:40:67:bd:44: 4b:d5:4d:c3:40:8b:34:d4:ac:b1:97:0a:71:94:0a:6c:6d:a5: 41:eb:9c:3d:c0:2a:82:1d:04:de:63:39:cc:07:18:d6:1a:96: be:4e:2d:9e:83:12:c3:56:4e:54:23:85:b8:ec:4a:d6:43:82: 31:32:74:0f:5a:d8:c9:7f:9e:a9:03:7f:6f:7c:3d:22:80:d7: 39:98:0a:c6:8c:c9:2a:a4:50:ed:c4:6e:1f:27:fc:da:6c:5b: 86:e9:da:07:fe:1a:ee:af:85:5e:4a:8f:29:8f:ba:92:c6:89: 8a:b1:55:71:9d:21:ce:cd:f1:13:18:eb:ec:f7:02:1a:bb:5f: 2c:82:c1:c4:f7:c7:55:06:76:d6:90:7f:a2:6b:c0:43:8a:ff: cb:d8:63:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTVBMjExMC8GA1UEBRMoNUI1OUZDQjY1MzQxRkQzMzc4OUJGQkFGQTk2MzdERjBD RTQwNERBQjAeFw0yNDA1MjEwNzUwNDlaFw0yNDA1MjgwNzUwNDlaMBgxFjAUBgNV BAMTDTY2NGM1MjU5LTFmMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzfa/csHMkaIo365vqkyv8tjWALdddR7K0xclBPnHvXVlPUnVTtpnwaiGJXfUH cSCT4tLYs0WpSv2TlRIiV38CtIFuXLXYwgzx2OpxUzqw4Eejt/fwB/G8+qs7P5qY QMCt7uqUQ7vSCd1zYt61MlF7ZrXp7ObFPMcrDFwhshHloLQYQDhexhbPjBapU7Pc tIv3OAg0BJrRG7DiO1AuJAkxKg2IUY5hHKJDBZ/UFp/tx7oHWfhTjQnFQM7ju25f KMefgBOU4fA82XQa1B0ZsDkE88aJAGbSMgp4XUcWG0lEwWQwyLG1JXSza7rgVsIx 3pU8rEWd2YIBhTdd8XsbP+ePAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUGXNx026 IlXhIvfGAyUvpBDgRqkwHwYDVR0jBBgwFoAUW1n8tlNB/TN4m/uvqWN98M5ATasw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNUEyLzNFMTY0MTY4OThG NjExRUVCQkYxRjQxN0M0RjlBRTAyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRh cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVzFuOHRsTkJfVE40bV91dnFXTjk4TTVBVGFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NUEyLzNFMTY0MTY4OThGNjExRUVCQkYxRjQxN0M0RjlBRTAyL1cxbjh0bE5CX1RO NG1fdXZxV045OE01QVRhcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI2EuJ5pDRhTZWbNzWKPSwrb950J+o+0KHl0SsMmjNtHXnQM5VBhOTeM 9LDDL+aBtuNU3lLCf6/w/4bVHKfsYV1PUlkpC0cX5RCUJlAauhsphBDZ/n2LQlj2 6Va+sWPGgdYugucXDCA7QGe9REvVTcNAizTUrLGXCnGUCmxtpUHrnD3AKoIdBN5j OcwHGNYalr5OLZ6DEsNWTlQjhbjsStZDgjEydA9a2Ml/nqkDf298PSKA1zmYCsaM ySqkUO3Ebh8n/NpsW4bp2gf+Gu6vhV5KjymPupLGiYqxVXGdIc7N8RMY6+z3Ahq7 XyyCwcT3x1UGdtaQf6JrwEOK/8vYY5M= -----END CERTIFICATE-----Generated at Tue May 21 08:39:03 2024 by rpki-client on console-fra.rpki-client.org