$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json) Hash identifier: BHqdPK1mdXNXI1DUHcIyrQnwg60FR9E7lmnCSsFbnok= Subject key identifier: 46:6E:45:06:B1:EF:62:36:BD:33:73:F5:D9:02:F5:AA:0E:2F:A0:7A Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft Manifest number: 48 Signing time: Sat 23 Nov 2024 05:17:26 +0000 Manifest this update: Sat 23 Nov 2024 05:17:26 +0000 Manifest next update: Sat 30 Nov 2024 05:17:26 +0000 Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: PnuML7mCKUNoDJNpmOpXBGCdzDzmnE45SJTkQU6thHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Validity Not Before: Nov 23 05:17:26 2024 GMT Not After : Nov 30 05:17:26 2024 GMT Subject: CN=67416566-c851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:c2:82:a4:80:4c:c0:9c:cc:77:28:ef:f5: 05:15:54:ff:9c:f1:2d:55:4e:b5:31:94:d0:a3:de: 56:39:84:d3:9e:ab:c7:92:7f:52:4d:3c:90:d9:45: 47:cc:be:21:20:2a:84:a9:e7:4e:ed:5a:20:43:3d: 77:97:2b:07:41:26:cd:84:d5:a5:89:49:1e:22:4c: c2:e9:91:67:1c:26:25:ca:4d:5c:91:0f:80:65:23: 6f:bf:b4:db:95:06:27:38:7c:f9:da:1c:80:a3:38: 3c:35:e9:5d:6b:cb:7c:a7:9a:8a:65:f5:f2:36:6e: 79:ca:89:98:f2:e1:5f:78:9f:e2:80:00:63:d5:2a: 64:f4:88:c7:cb:49:cb:55:88:a7:94:86:b6:dc:ea: ae:e2:58:e4:d5:1a:2f:1a:ee:c7:53:7b:69:b7:19: e8:72:94:22:89:7b:a3:7b:cf:ff:cc:b0:ce:24:d5: b5:6a:69:44:0a:d1:14:d1:30:90:3c:f4:37:24:4f: 12:b8:d0:87:43:a3:54:ea:61:b7:15:bb:cd:9a:07: cd:21:92:1f:f9:14:b8:f9:4d:ea:d3:fa:32:27:3a: b8:69:4d:0e:9a:6d:59:a7:dc:91:c9:6d:6f:31:97: a2:bd:45:65:b7:3f:7b:bb:84:47:25:11:bc:23:b4: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6E:45:06:B1:EF:62:36:BD:33:73:F5:D9:02:F5:AA:0E:2F:A0:7A X509v3 Authority Key Identifier: keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d7:0f:1a:37:89:38:e0:0c:4a:70:03:90:50:30:38:5c:19: 4a:7a:21:1e:ad:a3:e9:96:cb:8d:e2:da:41:81:4a:63:73:cd: d6:1b:e8:f6:29:4d:be:a8:38:e7:86:b9:04:6b:03:6a:21:c9: af:5f:b9:fd:41:4d:1c:6f:36:09:74:ea:ef:c9:9f:e5:9c:c1: 5d:94:4b:38:f1:fa:46:b7:d0:e1:d0:52:48:3b:f6:3b:a0:38: 32:c4:06:25:dd:77:32:6c:d2:aa:be:ba:13:05:44:bf:05:d2: e3:9d:03:97:b0:bc:c2:e2:2a:8c:25:51:b3:ed:fe:4c:ba:7f: f0:26:be:dc:f0:1c:de:25:34:49:e8:55:02:d0:37:2d:fb:33: 94:f0:05:67:30:2f:0f:35:e6:f2:1b:50:d7:a4:84:42:a2:20: eb:c1:fd:74:40:e8:c0:a7:a6:b2:94:3d:7f:b5:41:86:bf:ca: 51:fe:77:b6:94:b0:b3:3b:8a:5d:41:83:0a:5f:16:7b:58:68: 1a:01:00:b5:ba:24:fa:2b:2b:30:91:2e:a9:ff:5a:77:6e:a5: b0:de:12:af:fb:96:d8:7a:86:5c:a3:5a:84:50:02:75:89:b4: 23:cd:7e:20:e1:9b:fc:6c:b1:39:88:f5:85:55:a5:b6:7a:4b: 4e:a0:eb:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUY3MzExMC8GA1UEBRMoQzEzQzlBRTM1QzI3QzMxMDMwRTAyNDI4NzNCQTJENUE3 MzVENzgxMTAeFw0yNDExMjMwNTE3MjZaFw0yNDExMzAwNTE3MjZaMBgxFjAUBgNV BAMTDTY3NDE2NTY2LWM4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5LMKCpIBMwJzMdyjv9QUVVP+c8S1VTrUxlNCj3lY5hNOeq8eSf1JNPJDZRUfM viEgKoSp507tWiBDPXeXKwdBJs2E1aWJSR4iTMLpkWccJiXKTVyRD4BlI2+/tNuV Bic4fPnaHICjODw16V1ry3ynmopl9fI2bnnKiZjy4V94n+KAAGPVKmT0iMfLSctV iKeUhrbc6q7iWOTVGi8a7sdTe2m3GehylCKJe6N7z//MsM4k1bVqaUQK0RTRMJA8 9DckTxK40IdDo1TqYbcVu82aB80hkh/5FLj5TerT+jInOrhpTQ6abVmn3JHJbW8x l6K9RWW3P3u7hEclEbwjtAPNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURm5FBrHv Yja9M3P12QL1qg4voHowHwYDVR0jBBgwFoAUwTya41wnwxAw4CQoc7otWnNdeBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjczLzc2REY3NkVFM0Qw NzExRUZCNUM5RUMyNEM0RjlBRTAyL3dUeWE0MXdud3hBdzRDUW9jN290V25OZGVC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1R5YTQxd253eEF3NENRb2M3b3RXbk5kZUJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx RjczLzc2REY3NkVFM0QwNzExRUZCNUM5RUMyNEM0RjlBRTAyL3dUeWE0MXdud3hB dzRDUW9jN290V25OZGVCRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMPXDxo3iTjgDEpwA5BQMDhcGUp6IR6to+mWy43i2kGBSmNzzdYb6PYp Tb6oOOeGuQRrA2ohya9fuf1BTRxvNgl06u/Jn+WcwV2USzjx+ka30OHQUkg79jug ODLEBiXddzJs0qq+uhMFRL8F0uOdA5ewvMLiKowlUbPt/ky6f/AmvtzwHN4lNEno VQLQNy37M5TwBWcwLw815vIbUNekhEKiIOvB/XRA6MCnprKUPX+1QYa/ylH+d7aU sLM7il1BgwpfFntYaBoBALW6JPorKzCRLqn/WndupbDeEq/7lth6hlyjWoRQAnWJ tCPNfiDhm/xssTmI9YVVpbZ6S06g61Q= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org