$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: zL5osG6E7o03FXefMjMyZTI/Sg+3ofe5hUlcfGiu9ec= Subject key identifier: 26:AA:C3:33:7E:DF:41:04:BA:31:E5:18:C4:75:F6:ED:F5:47:9E:92 Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 04E9 Signing time: Fri 03 May 2024 01:24:23 +0000 Manifest this update: Fri 03 May 2024 01:24:23 +0000 Manifest next update: Fri 10 May 2024 01:24:23 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: +9sId5iUbqQFKDHYAa9xDQLmsO3NOSNZxv7yHU4lHaI=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: Uz4HXvqGssuPE8rQ4AQM1SNspVzHLX+/sQbvg64mXw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: May 3 01:24:23 2024 GMT Not After : May 10 01:24:23 2024 GMT Subject: CN=66343cc7-0cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:2e:66:1b:1c:d5:98:4f:60:f6:51:fa:ca: fb:87:5e:66:52:ef:7e:67:15:bb:09:a1:24:8d:19: 16:40:0b:87:e5:43:06:56:62:b1:c4:b1:49:b3:c3: c4:57:43:5c:73:fe:6c:f6:b1:d4:8c:22:68:22:14: e5:05:77:49:8e:2a:7f:52:16:2f:fd:ba:91:81:8f: 14:5e:89:08:d5:20:c4:67:7d:40:d7:6b:5d:6e:8b: b9:0e:ea:fa:69:cc:b3:b1:24:4c:a3:57:20:55:3d: c2:86:74:7b:88:4f:7b:a5:fe:25:37:e4:ee:f9:f5: c7:4d:51:f1:94:95:8b:23:86:81:f4:94:81:31:75: 72:d0:0e:83:f7:ec:bc:62:6d:01:df:ba:f2:8a:ec: c3:dc:e5:b9:d6:c4:26:f4:8a:eb:ad:1a:45:8a:18: a2:45:08:27:b6:b6:a2:63:78:16:e4:b5:c7:4b:ec: 9f:5d:2b:07:fd:91:5f:3e:2e:0e:0d:56:d7:59:96: 45:64:ac:61:3f:fb:06:5d:3e:94:47:a0:6b:56:63: df:b4:a2:16:35:7c:45:5a:fb:88:d2:c1:fd:64:52: f8:f6:85:81:fd:d4:e5:0e:2e:79:b4:49:7a:6b:1e: a7:85:b9:1b:15:23:ab:1b:a6:22:65:15:34:28:5d: 95:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AA:C3:33:7E:DF:41:04:BA:31:E5:18:C4:75:F6:ED:F5:47:9E:92 X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:eb:ed:25:96:4d:de:4e:ed:d6:e9:1d:7e:21:da:4f:6f:54: d0:88:64:4e:34:26:9a:c0:52:6f:d4:92:60:8a:98:5b:50:b6: e4:00:5b:b6:16:44:70:bf:f3:43:a2:6e:99:af:80:28:83:bc: bd:cf:e5:41:ca:d5:40:e8:d4:43:17:90:86:e3:7e:42:8d:c1: 12:f5:12:b4:51:4d:59:cd:c3:63:7c:be:19:14:40:5a:0f:99: 95:83:94:f8:43:61:5f:7c:0c:33:16:3a:4b:88:66:7a:8e:cc: 39:b8:8d:bc:82:d2:9d:74:3a:61:af:a1:ed:6b:19:f4:d3:b5: 47:48:11:bc:00:ab:83:4e:23:ba:21:07:90:7f:1b:f5:6c:77: 58:d8:37:51:69:cf:d9:50:02:a9:1d:a3:8c:2c:1e:fe:01:55: 31:23:2c:2c:98:1e:2c:3e:25:b2:04:91:18:42:42:80:1a:4f: 6b:cd:f9:b0:71:91:ca:1c:20:c4:6f:5e:c6:c4:aa:f7:83:cb: 0c:80:52:d5:11:08:1f:a1:af:a5:06:d8:cf:e9:ec:75:9d:85: 3d:25:15:36:67:90:8d:86:0c:39:eb:bb:da:45:d9:60:24:34: 88:4c:f3:38:35:c7:4e:26:29:1c:fd:33:55:e1:b6:cc:43:a0: ee:62:43:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjQwNTAzMDEyNDIzWhcNMjQwNTEwMDEyNDIzWjAYMRYwFAYD VQQDEw02NjM0M2NjNy0wY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aUuZhsc1ZhPYPZR+sr7h15mUu9+ZxW7CaEkjRkWQAuH5UMGVmKxxLFJs8PE V0Ncc/5s9rHUjCJoIhTlBXdJjip/UhYv/bqRgY8UXokI1SDEZ31A12tdbou5Dur6 acyzsSRMo1cgVT3ChnR7iE97pf4lN+Tu+fXHTVHxlJWLI4aB9JSBMXVy0A6D9+y8 Ym0B37ryiuzD3OW51sQm9IrrrRpFihiiRQgntraiY3gW5LXHS+yfXSsH/ZFfPi4O DVbXWZZFZKxhP/sGXT6UR6BrVmPftKIWNXxFWvuI0sH9ZFL49oWB/dTlDi55tEl6 ax6nhbkbFSOrG6YiZRU0KF2VGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaqwzN+ 30EEujHlGMR19u31R56SMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv6+0llk3eTu3W6R1+IdpPb1TQiGRONCaawFJv1JJgiphbULbkAFu2 FkRwv/NDom6Zr4Aog7y9z+VBytVA6NRDF5CG435CjcES9RK0UU1ZzcNjfL4ZFEBa D5mVg5T4Q2FffAwzFjpLiGZ6jsw5uI28gtKddDphr6Htaxn007VHSBG8AKuDTiO6 IQeQfxv1bHdY2DdRac/ZUAKpHaOMLB7+AVUxIywsmB4sPiWyBJEYQkKAGk9rzfmw cZHKHCDEb17GxKr3g8sMgFLVEQgfoa+lBtjP6ex1nYU9JRU2Z5CNhgw567vaRdlg JDSITPM4NcdOJikc/TNV4bbMQ6DuYkPl -----END CERTIFICATE-----Generated at Fri May 3 04:45:31 2024 by rpki-client on console-fra.rpki-client.org