$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: Wx7G8joBPV8sz7Y5y9zzZVuGJFr4uWpyhzJn+PAjmrs= Subject key identifier: 62:FA:ED:9D:DD:57:31:7E:02:52:F0:23:DC:0E:55:06:64:7A:29:E7 Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0A76 Signing time: Fri 22 Nov 2024 19:23:29 +0000 Manifest this update: Fri 22 Nov 2024 19:23:29 +0000 Manifest next update: Fri 29 Nov 2024 19:23:29 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: dZRJxvWOSBBOihi3sLF8esqNKaNS4p1XnY8RykFCS0U=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: dvoU6rv4WmyJLk9iRDJv4tzFR57evRNSLVJVzcM3I5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Nov 22 19:23:29 2024 GMT Not After : Nov 29 19:23:29 2024 GMT Subject: CN=6740da31-dc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:17:e9:e8:80:fe:c8:10:91:fe:ec:db:f7:24: 9b:03:05:7f:36:9d:2e:1b:0c:eb:19:cf:ff:39:8f: c9:d8:65:66:14:db:7d:cf:59:72:11:78:bd:db:19: 74:08:74:cb:8c:05:f5:a9:31:61:5c:f2:3b:1a:c3: da:08:9b:18:af:f0:9b:48:2e:bd:2a:d4:48:6a:85: 23:2a:ac:11:e8:9e:8c:ec:55:ad:e5:dc:03:ad:a9: b4:89:2e:98:15:36:4b:f2:c1:ed:ff:f3:8d:e9:4f: 72:e2:ae:d8:f7:92:b8:b6:ab:be:cf:ab:c2:ac:7a: 0b:ce:e7:21:00:41:b3:3c:f2:43:54:4e:12:76:e1: 89:85:9e:d8:e0:b1:c7:b6:03:55:1b:13:f9:de:a2: 05:10:96:de:83:1b:b4:16:35:6a:6e:68:e1:5f:f7: f6:4c:5b:c6:85:20:5d:61:c2:44:8e:e9:3a:f5:8a: 37:30:c8:b9:5c:d9:9d:ab:72:72:ad:73:58:ba:e3: ee:a7:75:49:7c:40:a6:ca:9b:eb:1e:69:72:0d:19: fa:17:da:da:34:4f:85:30:e1:76:fe:cb:b3:06:4e: 15:e8:88:45:29:63:6a:bb:d4:d0:9e:88:18:cb:68: 90:5b:9f:b1:ae:3e:f1:d4:4e:c4:5a:f0:da:3a:d4: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FA:ED:9D:DD:57:31:7E:02:52:F0:23:DC:0E:55:06:64:7A:29:E7 X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:02:b0:f8:7b:c4:c1:b9:5c:5b:57:0b:7d:40:60:8e:46:61: 51:6d:78:56:bf:4f:de:f8:dc:77:18:c1:04:55:16:13:ce:23: 6d:13:8f:5c:49:39:27:77:f6:87:10:ab:8f:a2:dd:3a:f5:89: c6:3d:0a:d0:34:11:19:22:97:a4:ad:be:74:6d:c9:6f:c6:91: bc:7b:79:e9:65:51:9f:53:4e:d0:08:1d:0e:64:f2:c8:5e:f1: de:86:4e:7e:10:fc:48:6c:45:1b:66:5c:80:4d:3c:9b:97:c0: ed:b1:7b:75:bd:4a:79:09:50:c6:ba:5a:10:13:a0:76:1a:c7: ef:7c:cb:db:70:e2:89:0c:c3:ca:e1:07:d4:ae:46:ef:18:49: 28:e1:2c:3e:66:3a:41:da:fa:31:bd:00:28:39:5c:b6:ae:3c: 29:38:0a:ca:65:84:d3:56:e6:ef:e9:ec:08:69:3a:60:3c:9b: ef:89:49:ca:f7:34:ad:b0:ef:7b:5d:1a:f5:2f:39:fa:89:cb: 42:c8:1d:f6:d1:b9:fd:c5:4e:81:3e:cb:3d:d7:29:55:f4:59: ac:60:1f:6e:6b:82:9d:78:fc:b4:3a:43:1a:f3:77:fb:f2:cd: a0:80:74:42:0c:f3:3d:82:d3:48:32:26:6a:0b:39:f8:c5:e3: dc:e3:7b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjQxMTIyMTkyMzI5WhcNMjQxMTI5MTkyMzI5WjAYMRYwFAYD VQQDEw02NzQwZGEzMS1kYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Rfp6ID+yBCR/uzb9ySbAwV/Np0uGwzrGc//OY/J2GVmFNt9z1lyEXi92xl0 CHTLjAX1qTFhXPI7GsPaCJsYr/CbSC69KtRIaoUjKqwR6J6M7FWt5dwDram0iS6Y FTZL8sHt//ON6U9y4q7Y95K4tqu+z6vCrHoLzuchAEGzPPJDVE4SduGJhZ7Y4LHH tgNVGxP53qIFEJbegxu0FjVqbmjhX/f2TFvGhSBdYcJEjuk69Yo3MMi5XNmdq3Jy rXNYuuPup3VJfECmypvrHmlyDRn6F9raNE+FMOF2/suzBk4V6IhFKWNqu9TQnogY y2iQW5+xrj7x1E7EWvDaOtRsSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL67Z3d VzF+AlLwI9wOVQZkeinnMB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcArD4e8TBuVxbVwt9QGCORmFRbXhWv0/e+Nx3GMEEVRYTziNtE49c STknd/aHEKuPot069YnGPQrQNBEZIpekrb50bclvxpG8e3npZVGfU07QCB0OZPLI XvHehk5+EPxIbEUbZlyATTybl8DtsXt1vUp5CVDGuloQE6B2GsfvfMvbcOKJDMPK 4QfUrkbvGEko4Sw+ZjpB2voxvQAoOVy2rjwpOArKZYTTVubv6ewIaTpgPJvviUnK 9zStsO97XRr1Lzn6ictCyB320bn9xU6BPss91ylV9FmsYB9ua4KdePy0OkMa83f7 8s2ggHRCDPM9gtNIMiZqCzn4xePc43vs -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org