$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft File: WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json) Hash identifier: 4siGglLhgMtuXA3ba2lp1zQfEptkbKA7f4+eorOo2zE= Subject key identifier: F3:E5:61:7D:25:5D:92:BA:0B:EA:1B:4C:1A:C6:27:D3:F9:CF:0A:9C Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C Certificate issuer: /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Certificate serial: 3420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft Manifest number: 3420 Signing time: Fri 22 Nov 2024 15:06:35 +0000 Manifest this update: Fri 22 Nov 2024 15:06:34 +0000 Manifest next update: Fri 29 Nov 2024 15:06:34 +0000 Files and hashes: 1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: q0Gitf71oMK6R/7kGjaX63jc7xsnEGlFrkjmaGBj2xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Validity Not Before: Nov 22 15:06:34 2024 GMT Not After : Nov 29 15:06:34 2024 GMT Subject: CN=67409dfa-9111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:4a:37:55:35:a7:c6:2f:d3:bc:d5:c6:e7: 1c:03:5a:65:e2:9b:9a:5b:13:0b:52:24:7e:0d:e9: 50:bc:5a:63:91:4d:49:42:ec:85:c1:0c:91:08:59: 9b:ea:92:a6:f0:3d:46:9e:9e:1c:65:b1:c1:18:9f: a8:13:73:94:8e:ab:74:82:57:c0:b9:6f:e4:79:1a: 71:c3:41:b8:63:9f:a7:69:c7:de:f8:ae:7c:38:a4: 47:bc:c0:2a:8c:7c:29:1b:fd:03:0d:d6:b1:2d:93: dc:42:8c:0e:cd:6c:a3:8f:d1:66:3e:03:1b:f8:fa: 21:c4:f5:c8:be:9b:48:29:07:02:0e:b2:25:31:c2: 78:09:c9:2b:56:f9:03:37:f5:bd:72:55:72:7f:8a: 3e:a3:62:1f:f3:49:d0:74:53:c6:ed:a2:59:59:59: f7:a6:5f:ed:75:a1:47:dc:bf:b7:f8:92:7f:86:53: 6a:a6:3d:aa:20:3c:10:77:58:5f:fd:c4:29:ab:92: ad:27:f5:6c:5a:74:06:7d:1a:7e:86:04:f7:3d:48: b0:1c:2f:00:8f:6a:c2:05:f6:e6:7e:88:2f:b6:46: 7a:79:59:91:60:9a:48:84:92:07:dc:b9:2c:1b:a9: 10:3a:04:04:1b:d2:36:6e:b4:c1:57:7d:57:c6:e5: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:61:7D:25:5D:92:BA:0B:EA:1B:4C:1A:C6:27:D3:F9:CF:0A:9C X509v3 Authority Key Identifier: keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ce:db:02:4c:aa:93:df:19:66:6f:4c:6f:d0:db:4f:74:38: 5b:0d:a7:33:1c:5d:0c:6e:31:b4:78:af:4c:e6:51:ac:06:46: cc:65:c8:18:40:2a:ee:37:b4:0f:92:11:35:c3:8b:b3:12:79: 92:6e:55:fb:a0:61:22:a8:01:c7:e9:09:a4:cd:e5:91:11:60: 9c:7a:cd:eb:7a:fa:df:a1:5b:b0:10:4a:33:c3:d6:1a:7d:03: 22:34:87:ab:a7:3b:f5:bd:de:cd:87:77:f7:63:bf:57:e9:5d: 2f:9a:9b:94:11:f7:7d:61:59:fd:06:28:2c:f4:f3:ce:00:69: c5:9f:c1:83:7c:93:8f:ef:90:07:69:ea:af:af:c3:43:45:9f: 56:af:fc:bd:fa:72:a4:2b:a3:20:b2:df:38:85:d4:29:f1:fc: bc:04:bf:08:34:57:aa:02:34:b9:77:05:30:13:aa:4e:10:86: e6:28:65:29:f6:39:f3:fb:cc:c4:92:9d:d7:d2:08:65:2a:01: 0b:2f:00:69:d9:45:ae:31:5b:97:a6:37:1a:70:97:c1:7b:e5: d6:0e:bc:21:bd:83:88:3e:4b:a5:9a:4b:18:87:a2:a9:4d:71: ec:ae:46:7d:e2:15:83:bf:9f:c8:bd:64:27:08:e3:d9:ed:d4: 5f:57:75:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYxQzYxMTAvBgNVBAUTKDU4NTcxOTg3NkMxRjlBMjBGREVCOEUwNEMzRDY5MzdB NUFDQUE1N0MwHhcNMjQxMTIyMTUwNjM0WhcNMjQxMTI5MTUwNjM0WjAYMRYwFAYD VQQDEw02NzQwOWRmYS05MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUxKN1U1p8Yv07zVxuccA1pl4puaWxMLUiR+DelQvFpjkU1JQuyFwQyRCFmb 6pKm8D1Gnp4cZbHBGJ+oE3OUjqt0glfAuW/keRpxw0G4Y5+nacfe+K58OKRHvMAq jHwpG/0DDdaxLZPcQowOzWyjj9FmPgMb+PohxPXIvptIKQcCDrIlMcJ4CckrVvkD N/W9clVyf4o+o2If80nQdFPG7aJZWVn3pl/tdaFH3L+3+JJ/hlNqpj2qIDwQd1hf /cQpq5KtJ/VsWnQGfRp+hgT3PUiwHC8Aj2rCBfbmfogvtkZ6eVmRYJpIhJIH3Lks G6kQOgQEG9I2brTBV31XxuXncQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPlYX0l XZK6C+obTBrGJ9P5zwqcMB8GA1UdIwQYMBaAFFhXGYdsH5og/euOBMPWk3payqV8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjFDNi8zN0JEQUFDQzFE QTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1pRDk2NDRFdzlhVGVscktw WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGY1poMndmbWlEOTY0NEV3OWFUZWxyS3BYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjFDNi8zN0JEQUFDQzFEQTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1p RDk2NDRFdzlhVGVscktwWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOztsCTKqT3xlmb0xv0NtPdDhbDaczHF0MbjG0eK9M5lGsBkbMZcgY QCruN7QPkhE1w4uzEnmSblX7oGEiqAHH6QmkzeWREWCces3revrfoVuwEEozw9Ya fQMiNIerpzv1vd7Nh3f3Y79X6V0vmpuUEfd9YVn9Bigs9PPOAGnFn8GDfJOP75AH aeqvr8NDRZ9Wr/y9+nKkK6Mgst84hdQp8fy8BL8INFeqAjS5dwUwE6pOEIbmKGUp 9jnz+8zEkp3X0ghlKgELLwBp2UWuMVuXpjcacJfBe+XWDrwhvYOIPkulmksYh6Kp TXHsrkZ94hWDv5/IvWQnCOPZ7dRfV3Xz -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org