$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: GiYvz2oxdSK/82FM6xQUl/8iSx1DuDabryRzrFGmWGU= Subject key identifier: A2:41:E3:41:84:E6:EF:3F:ED:20:60:32:B4:AF:DB:7E:D4:60:E3:F2 Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 059A Signing time: Fri 22 Nov 2024 22:44:28 +0000 Manifest this update: Fri 22 Nov 2024 22:44:27 +0000 Manifest next update: Fri 29 Nov 2024 22:44:27 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: G7SUVQOndE5Ja3edCAhBZerBBsxdubYxZUg+RhkWh0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: Nov 22 22:44:27 2024 GMT Not After : Nov 29 22:44:27 2024 GMT Subject: CN=6741094c-ceaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:1a:c4:52:dd:55:de:f6:5c:cd:1d:ec:0f: ee:7a:56:16:fd:f7:7b:33:e6:41:49:11:08:94:55: 56:94:c1:02:98:09:be:f0:34:1c:9d:96:14:d0:0c: b1:49:88:a1:a0:a1:13:d5:a6:8b:36:e6:18:fb:aa: 69:9a:18:db:9e:b9:54:0c:1a:15:f0:16:97:37:a7: 88:ef:aa:e2:f6:bd:c3:ab:66:3e:38:71:ca:43:9b: 08:6b:2b:8b:5f:99:22:62:44:46:af:eb:be:0d:7f: eb:87:5f:5d:45:a2:7f:a1:f9:5e:62:48:c1:e1:ed: 96:8f:d6:ab:3d:1a:84:0f:ca:21:f0:9d:d2:ae:23: b8:9c:3e:c7:f1:c6:d3:50:85:45:9c:f5:54:e1:c7: bd:a5:8b:88:6e:19:df:e0:19:30:00:81:e2:59:a7: 1f:89:f4:b6:9d:d7:c8:ce:19:f7:d9:04:39:16:d8: a5:65:ac:d7:82:3c:d5:83:3d:3d:c8:df:3c:bf:89: 17:9e:5e:c5:63:ee:e1:e0:3b:a2:ab:af:46:fc:9b: 11:36:10:00:00:c7:fe:89:38:ca:48:d2:e7:3a:f7: 6b:48:f3:8e:4e:e8:90:c4:7b:18:75:35:e6:95:56: 5e:0e:f4:48:c4:f9:48:35:c1:e6:64:26:83:e0:a0: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:41:E3:41:84:E6:EF:3F:ED:20:60:32:B4:AF:DB:7E:D4:60:E3:F2 X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:09:ac:ac:0f:f6:db:e9:ae:e0:1e:d6:7c:db:70:95:c6:cf: 29:80:11:3b:4c:c5:e0:8a:a5:07:78:1d:11:fa:a5:84:08:83: 30:f4:6e:c5:33:49:96:dd:8e:9c:5f:92:da:6b:6f:53:9f:0d: 2e:f5:cb:06:97:6a:31:c8:8b:2b:6e:b8:84:6e:4d:6e:c0:b2: a6:4d:3d:2c:e0:8f:d7:45:b8:fb:f1:82:b2:4c:c8:93:f1:01: 3c:3b:1a:02:e9:73:cd:fe:a6:bb:4a:17:09:57:79:76:38:5e: 32:28:ad:23:e1:b9:46:30:a5:c7:3e:2c:e3:3d:a8:45:80:a1: 3d:7c:df:36:68:f3:83:35:ba:d1:bd:99:ef:26:27:d6:22:de: 7d:c2:4d:03:b0:13:b8:d4:22:3c:72:83:b3:75:b6:c7:2f:16: 80:f8:2f:76:95:ad:38:db:f1:7f:35:9a:8b:66:c8:21:e1:03: e8:c7:40:71:31:30:ac:70:51:f8:2f:64:33:e2:3a:bc:2e:10: 8a:69:5d:d0:df:2d:d2:fb:dc:60:1b:b1:83:15:26:77:16:3d: f5:b4:dd:b7:05:a5:da:c4:ff:fb:0b:53:0d:a3:e8:3e:1c:8e: 2c:c7:06:86:1a:e6:91:eb:6f:ee:49:ee:bd:76:be:5e:75:cb: 17:49:e3:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjQxMTIyMjI0NDI3WhcNMjQxMTI5MjI0NDI3WjAYMRYwFAYD VQQDEw02NzQxMDk0Yy1jZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YwaxFLdVd72XM0d7A/uelYW/fd7M+ZBSREIlFVWlMECmAm+8DQcnZYU0Ayx SYihoKET1aaLNuYY+6ppmhjbnrlUDBoV8BaXN6eI76ri9r3Dq2Y+OHHKQ5sIayuL X5kiYkRGr+u+DX/rh19dRaJ/ofleYkjB4e2Wj9arPRqED8oh8J3SriO4nD7H8cbT UIVFnPVU4ce9pYuIbhnf4BkwAIHiWacfifS2ndfIzhn32QQ5FtilZazXgjzVgz09 yN88v4kXnl7FY+7h4Duiq69G/JsRNhAAAMf+iTjKSNLnOvdrSPOOTuiQxHsYdTXm lVZeDvRIxPlINcHmZCaD4KD6rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJB40GE 5u8/7SBgMrSv237UYOPyMB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWCaysD/bb6a7gHtZ823CVxs8pgBE7TMXgiqUHeB0R+qWECIMw9G7F M0mW3Y6cX5Laa29Tnw0u9csGl2oxyIsrbriEbk1uwLKmTT0s4I/XRbj78YKyTMiT 8QE8OxoC6XPN/qa7ShcJV3l2OF4yKK0j4blGMKXHPizjPahFgKE9fN82aPODNbrR vZnvJifWIt59wk0DsBO41CI8coOzdbbHLxaA+C92la042/F/NZqLZsgh4QPox0Bx MTCscFH4L2Qz4jq8LhCKaV3Q3y3S+9xgG7GDFSZ3Fj31tN23BaXaxP/7C1MNo+g+ HI4sxwaGGuaR62/uSe69dr5edcsXSePw -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org