$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: xo00qYnfsoJt8nYTwgBTqBHj5/UHZDb7vvjaE6zM2EA= Subject key identifier: 36:1A:22:A6:C6:73:68:DE:11:E2:5C:DD:D1:45:B3:DA:3A:61:45:E4 Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: D5 Signing time: Tue 07 May 2024 06:04:40 +0000 Manifest this update: Tue 07 May 2024 06:04:40 +0000 Manifest next update: Tue 14 May 2024 06:04:40 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: 8+DWlBPbIcXrx/Ll3YA3AnKs2MpQXl5Nujx/lOF6+6I=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8u6b4a4SL7qo5uF/JaMZJ60i8FGnfKqe4W4pbpnaB3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: May 7 06:04:40 2024 GMT Not After : May 14 06:04:40 2024 GMT Subject: CN=6639c478-7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:76:6d:ec:e8:17:c6:53:90:e5:10:a6:05: 15:09:87:75:b3:63:34:64:4a:c6:3e:00:4c:f3:c5: 69:3a:7f:8d:d9:ab:da:0a:a6:e2:4c:1b:be:3e:f1: d0:7f:8a:05:fd:c7:22:fc:0e:51:5a:dd:35:51:6b: d7:77:2a:98:6e:b1:80:ba:d1:ca:8f:b7:8f:20:a4: d1:35:11:5d:4f:a6:a6:e4:39:c0:dd:b4:fc:64:b6: 3d:56:67:cf:2c:9a:76:8d:8f:f1:96:b3:ed:bb:56: a3:86:75:ae:9c:26:a8:d1:8a:98:d3:ee:37:f5:60: c7:54:a1:49:92:64:22:23:5a:53:54:52:ec:4b:e2: 6c:f7:79:b4:81:c1:1e:46:54:c2:77:1b:62:9d:7e: 2d:1e:14:67:50:1d:d3:8a:5d:af:15:e4:e6:50:94: b9:ba:95:80:53:18:3d:9a:1e:a0:5f:63:9d:f9:06: bd:c8:73:58:68:1e:2f:b3:2b:a3:db:24:e8:cb:d3: 17:65:74:39:2e:6c:16:65:39:53:1a:3d:20:93:1a: 84:5d:4b:40:50:d7:5f:99:ab:21:6a:30:67:bd:27: 0d:e8:25:ed:0f:80:5d:26:ac:df:5b:80:f9:76:38: bf:6b:cc:76:ae:31:e9:33:13:8e:42:b1:37:56:86: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1A:22:A6:C6:73:68:DE:11:E2:5C:DD:D1:45:B3:DA:3A:61:45:E4 X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a1:f4:73:80:b8:0c:97:f5:ef:3a:de:57:10:6a:cb:c8:55: ed:76:09:ea:d8:3a:76:d0:06:87:85:6a:87:e5:1a:84:3c:8a: af:91:f2:88:22:bb:6f:90:cd:69:a2:41:85:46:12:ac:d1:e5: 6a:10:06:5a:b8:08:9f:91:35:62:f7:df:03:c2:1e:59:6c:1e: b7:b6:11:5e:d1:ed:21:b8:e9:7b:48:69:0e:14:e1:6b:3f:1c: ac:e1:22:00:30:94:ec:49:e0:71:cf:17:c8:5d:1e:30:ee:0b: d3:c9:93:09:9b:82:4a:76:97:82:0d:23:06:dd:fb:42:24:de: 96:ae:94:9d:22:08:dd:c5:bf:97:26:0f:e7:14:d3:9c:6f:41: 9e:7b:88:91:c3:16:fc:0e:21:68:6d:ea:19:0f:c5:14:86:b3: a0:ef:91:59:25:c6:2a:ab:3d:37:12:11:b7:52:98:96:79:3b: cc:26:42:5a:00:7a:9b:81:39:91:77:22:a7:fa:e0:96:ec:87: da:cb:c0:fa:ae:dd:b1:f6:e4:e8:dc:6a:65:e9:89:fb:4b:57: b9:0e:01:41:e5:da:dc:70:1e:17:80:2f:37:5e:f0:69:0b:0f: 91:4d:ad:09:59:2b:c1:5e:13:0f:40:4a:d4:0c:89:3d:91:44: ac:63:04:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjQwNTA3MDYwNDQwWhcNMjQwNTE0MDYwNDQwWjAYMRYwFAYD VQQDEw02NjM5YzQ3OC03MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGh2bezoF8ZTkOUQpgUVCYd1s2M0ZErGPgBM88VpOn+N2avaCqbiTBu+PvHQ f4oF/cci/A5RWt01UWvXdyqYbrGAutHKj7ePIKTRNRFdT6am5DnA3bT8ZLY9VmfP LJp2jY/xlrPtu1ajhnWunCao0YqY0+439WDHVKFJkmQiI1pTVFLsS+Js93m0gcEe RlTCdxtinX4tHhRnUB3Til2vFeTmUJS5upWAUxg9mh6gX2Od+Qa9yHNYaB4vsyuj 2yToy9MXZXQ5LmwWZTlTGj0gkxqEXUtAUNdfmashajBnvScN6CXtD4BdJqzfW4D5 dji/a8x2rjHpMxOOQrE3VoZKTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYaIqbG c2jeEeJc3dFFs9o6YUXkMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmofRzgLgMl/XvOt5XEGrLyFXtdgnq2Dp20AaHhWqH5RqEPIqvkfKI IrtvkM1pokGFRhKs0eVqEAZauAifkTVi998Dwh5ZbB63thFe0e0huOl7SGkOFOFr Pxys4SIAMJTsSeBxzxfIXR4w7gvTyZMJm4JKdpeCDSMG3ftCJN6WrpSdIgjdxb+X Jg/nFNOcb0Gee4iRwxb8DiFobeoZD8UUhrOg75FZJcYqqz03EhG3UpiWeTvMJkJa AHqbgTmRdyKn+uCW7Ifay8D6rt2x9uTo3Gpl6Yn7S1e5DgFB5drccB4XgC83XvBp Cw+RTa0JWSvBXhMPQErUDIk9kUSsYwQ8 -----END CERTIFICATE-----Generated at Tue May 7 07:01:24 2024 by rpki-client on console-fra.rpki-client.org