$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: yEJzEWOibGVwST1MS6GhlgC8fumRPCRzkZSOCKujx2o= Subject key identifier: A5:56:2A:BF:BD:A2:8B:C5:4A:B8:9A:E1:B9:CF:D6:B6:1A:FC:24:8E Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 1921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 1912 Signing time: Thu 02 May 2024 16:55:42 +0000 Manifest this update: Thu 02 May 2024 16:55:42 +0000 Manifest next update: Thu 09 May 2024 16:55:42 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: DjcNKH9u/EHqrtR/pxW0pDEX6OpzCzdQfdXA58G4BHo=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: 229M5wQ79kMkp7IyMNbQzPN9ua0MSiyhRdYezXrdYlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6433 (0x1921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: May 2 16:55:42 2024 GMT Not After : May 9 16:55:42 2024 GMT Subject: CN=6633c58e-4ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:ca:84:d5:3e:6f:f8:64:cd:18:4d:96:10: 33:b3:cb:cc:77:b5:de:51:4d:f2:e0:84:0a:ce:b0: 72:6f:08:05:ac:fa:17:69:47:b7:75:3a:51:7a:a7: ae:13:dc:15:5b:20:20:05:e1:b9:82:9c:39:41:e1: 64:83:93:4b:d0:43:2c:c6:e8:22:a3:84:9d:f1:8c: 16:d8:70:3c:b0:1e:39:7e:ed:07:9e:2c:2a:0f:4e: 99:47:c5:6c:eb:22:b0:8d:3c:1c:34:cc:4c:0a:93: f3:54:44:4f:a0:ed:89:5a:e3:8f:ac:4f:7f:97:d8: 66:28:be:4e:a5:d8:8c:2c:35:fc:d7:79:bb:01:b2: c8:74:3c:fe:4d:db:26:ac:9c:23:ee:ff:24:fd:1a: c6:39:ce:9a:e2:f3:72:53:c6:29:b2:11:c9:75:22: b1:f0:fb:b6:af:cc:64:8c:f3:fc:d1:af:e4:6a:80: 6b:f5:4a:f3:cf:ec:37:8d:f1:db:80:33:d3:42:ea: 99:8a:c3:94:2b:0e:ef:51:18:4b:e7:99:ef:bc:ca: 7f:56:5c:46:68:e8:1d:2f:3c:73:2f:4c:2b:da:ce: bc:cd:ed:79:be:15:7f:74:58:e1:b1:76:22:fd:b0: bb:74:13:5f:f5:b7:19:f3:d0:26:d3:07:0d:e0:a3: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:56:2A:BF:BD:A2:8B:C5:4A:B8:9A:E1:B9:CF:D6:B6:1A:FC:24:8E X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:2a:27:9e:3d:e8:f6:9b:a8:64:88:87:db:73:46:fd:e9: ca:93:6f:2e:1a:b2:0a:1b:97:64:3d:0a:3c:11:11:04:42:d9: 57:27:16:60:ba:6e:9c:de:3d:5f:8b:ba:bc:01:60:2d:b5:29: 91:f4:ac:e2:4f:d8:ba:5e:b5:c3:6d:18:67:da:4c:28:50:b1: ce:56:c7:cd:22:d0:4f:5c:6b:39:f0:8f:2f:b1:a3:c5:38:53: 5f:8a:37:a1:6a:6e:04:ba:47:0f:68:df:d9:f8:ef:5c:15:c6: a9:b0:16:06:e7:0b:4c:ce:25:26:34:cc:2a:a2:70:66:e9:7b: 11:99:bc:fc:aa:31:7f:87:39:91:7a:b9:1e:44:83:5c:e1:99: 77:55:09:2c:d9:0e:b9:c3:80:f7:6d:b7:a1:15:62:b1:c9:ac: 28:d6:55:66:25:16:7c:19:47:be:28:c6:1e:db:86:fb:7e:50: 2b:d9:8e:86:af:98:6b:b2:ba:6b:7b:ce:27:3e:f2:e9:2d:a1: 78:79:83:b1:f5:13:15:ef:8d:1b:d9:f4:0e:f1:44:e8:f5:22: d9:37:00:ea:b1:48:a9:eb:81:93:73:7c:f6:38:a1:d1:d3:f7: 5c:db:3d:6b:b7:07:bf:9b:7f:d8:ed:5f:13:f6:6f:e8:60:46: c4:1d:a8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjQwNTAyMTY1NTQyWhcNMjQwNTA5MTY1NTQyWjAYMRYwFAYD VQQDEw02NjMzYzU4ZS00ZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rbKhNU+b/hkzRhNlhAzs8vMd7XeUU3y4IQKzrBybwgFrPoXaUe3dTpReqeu E9wVWyAgBeG5gpw5QeFkg5NL0EMsxugio4Sd8YwW2HA8sB45fu0HniwqD06ZR8Vs 6yKwjTwcNMxMCpPzVERPoO2JWuOPrE9/l9hmKL5OpdiMLDX813m7AbLIdDz+Tdsm rJwj7v8k/RrGOc6a4vNyU8YpshHJdSKx8Pu2r8xkjPP80a/kaoBr9Urzz+w3jfHb gDPTQuqZisOUKw7vURhL55nvvMp/VlxGaOgdLzxzL0wr2s68ze15vhV/dFjhsXYi /bC7dBNf9bcZ89Am0wcN4KMJXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVWKr+9 oovFSria4bnP1rYa/CSOMB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzsionnj3o9puoZIiH23NG/enKk28uGrIKG5dkPQo8EREEQtlXJxZg um6c3j1fi7q8AWAttSmR9KziT9i6XrXDbRhn2kwoULHOVsfNItBPXGs58I8vsaPF OFNfijeham4EukcPaN/Z+O9cFcapsBYG5wtMziUmNMwqonBm6XsRmbz8qjF/hzmR erkeRINc4Zl3VQks2Q65w4D3bbehFWKxyawo1lVmJRZ8GUe+KMYe24b7flAr2Y6G r5hrsrpre84nPvLpLaF4eYOx9RMV740b2fQO8UTo9SLZNwDqsUip64GTc3z2OKHR 0/dc2z1rtwe/m3/Y7V8T9m/oYEbEHagT -----END CERTIFICATE-----Generated at Thu May 2 20:05:01 2024 by rpki-client on console-ams.rpki-client.org