$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft File: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft (raw, json) Hash identifier: CTQxnBMZU6VvAeD58PIB8HCwpbqc3f0oA63tX4y9iek= Subject key identifier: 50:A2:76:73:F5:3C:F9:3B:13:D7:69:D5:EC:0A:03:64:3A:58:7F:35 Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Certificate serial: 12EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft Manifest number: 12DE Signing time: Fri 22 Nov 2024 17:03:13 +0000 Manifest this update: Fri 22 Nov 2024 17:03:13 +0000 Manifest next update: Fri 29 Nov 2024 17:03:13 +0000 Files and hashes: 1: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl (hash: JXs+zJOELCesYnnRny3ScEUm/AHMgV7CXF19V3BFiWE=) 2: A4A123AE910F11EBA9F7B639C4F9AE02.roa (hash: oZ+tmJpj+3ObATVrfcAk/wfoxKUb98KJ7Fg8c/+eqLU=) 3: AD1B7E40A5C511E8A9B85134C4F9AE02.roa (hash: G/+aMcdn4Jk49lhNesVyUlNP1/Jmx6JWIxijg1iwB7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4843 (0x12eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Validity Not Before: Nov 22 17:03:13 2024 GMT Not After : Nov 29 17:03:13 2024 GMT Subject: CN=6740b951-e945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:0c:9c:00:4a:9f:dd:ee:f6:55:db:b9:c0: 90:29:9e:f2:f8:f8:72:d7:6c:52:6d:8d:1e:85:3b: b4:dd:f6:cc:6e:6e:48:fd:ca:74:f5:ed:84:4c:29: fa:61:e5:02:77:0e:21:ef:fd:f9:1e:a8:15:3d:1d: 09:a3:74:95:08:0c:b6:4c:8e:0b:33:75:37:83:9e: 51:e4:fb:45:6c:78:4d:e7:34:21:72:51:fd:c4:2b: 80:34:d3:23:a9:7c:cf:f2:a9:d6:fa:8b:c5:b4:ec: ed:c8:c5:d6:f6:0b:30:60:be:d7:09:56:a4:00:d5: 90:03:07:12:56:5f:53:bd:cc:56:b6:53:1f:56:be: 0f:4b:77:15:7b:33:63:87:5a:d9:40:bd:17:91:c4: 59:da:14:2f:22:fb:2b:63:5e:2b:00:e9:8b:81:6e: 74:23:5e:44:c4:66:82:32:a0:bc:fd:2b:42:b9:01: 34:06:fb:b8:2a:0a:38:67:7f:ae:e2:6d:ca:a6:6e: 27:ea:7c:b9:d3:46:df:61:a8:60:13:af:3f:93:67: 9a:7a:66:0a:bd:95:cb:0a:19:17:bf:10:66:85:c8: 88:d1:d6:7e:e5:c6:71:b8:a1:37:6b:fb:23:c0:26: cd:e7:83:23:d7:85:41:69:67:19:e5:6d:4f:cd:84: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A2:76:73:F5:3C:F9:3B:13:D7:69:D5:EC:0A:03:64:3A:58:7F:35 X509v3 Authority Key Identifier: keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:79:2f:70:cd:4b:95:88:b5:cc:ce:9d:ae:d2:ad:3a:e6:d9: cd:58:af:1c:4d:d3:c0:60:b3:27:51:85:55:54:98:00:f0:19: 3d:e3:e1:65:e8:71:0b:9e:44:84:92:fb:ad:af:6e:21:b0:22: f0:91:19:3b:d9:0c:c4:e8:fc:b8:15:c2:34:e6:62:49:06:4c: 5d:28:83:9e:ef:06:ac:86:2e:72:d4:b0:cd:8e:3b:4e:c3:f3: 79:49:62:5e:44:b1:a1:97:19:0c:13:d2:fc:bc:b6:af:ee:c5: ab:7f:8f:84:61:eb:f9:29:a4:77:f6:25:b5:ea:f9:30:90:ee: 53:2c:03:9a:76:7b:d0:ad:53:ef:53:0b:32:f6:cd:9b:b0:f3: c0:0f:16:fe:e1:1e:65:30:2b:18:b5:72:be:03:0f:20:1d:1c: 1e:b6:7f:9b:57:1d:4f:e8:72:15:14:d1:02:0e:a6:23:fa:09: ab:a5:3e:3c:a8:11:57:df:49:92:53:16:99:6f:51:cb:9f:a1: e9:24:4f:53:72:1e:ad:75:9b:24:95:81:0b:f5:03:2f:f3:32: 72:9b:63:7c:21:d6:f7:93:56:76:a1:60:2f:0f:bd:3f:02:5b: e2:ff:af:7b:42:e2:1a:87:da:62:63:23:83:eb:64:3d:5d:3b: 66:80:83:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4OUQxMTAvBgNVBAUTKEMzOTYzMDVEMDJEMkY4ODVGM0ZBREVENTNBQzMxMEYy MUJEMDU0ODcwHhcNMjQxMTIyMTcwMzEzWhcNMjQxMTI5MTcwMzEzWjAYMRYwFAYD VQQDEw02NzQwYjk1MS1lOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylQMnABKn93u9lXbucCQKZ7y+Phy12xSbY0ehTu03fbMbm5I/cp09e2ETCn6 YeUCdw4h7/35HqgVPR0Jo3SVCAy2TI4LM3U3g55R5PtFbHhN5zQhclH9xCuANNMj qXzP8qnW+ovFtOztyMXW9gswYL7XCVakANWQAwcSVl9TvcxWtlMfVr4PS3cVezNj h1rZQL0XkcRZ2hQvIvsrY14rAOmLgW50I15ExGaCMqC8/StCuQE0Bvu4Kgo4Z3+u 4m3Kpm4n6ny500bfYahgE68/k2eaemYKvZXLChkXvxBmhciI0dZ+5cZxuKE3a/sj wCbN54Mj14VBaWcZ5W1PzYRdGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCidnP1 PPk7E9dp1ewKA2Q6WH81MB8GA1UdIwQYMBaAFMOWMF0C0viF8/re1TrDEPIb0FSH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg5RC85Njc0QUZDOEE1 QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1JWHotdDdWT3NNUThodlFW SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1WXdYUUxTLUlYei10N1ZPc01ROGh2UVZJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg5RC85Njc0QUZDOEE1QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1J WHotdDdWT3NNUThodlFWSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6eS9wzUuViLXMzp2u0q065tnNWK8cTdPAYLMnUYVVVJgA8Bk94+Fl 6HELnkSEkvutr24hsCLwkRk72QzE6Py4FcI05mJJBkxdKIOe7washi5y1LDNjjtO w/N5SWJeRLGhlxkME9L8vLav7sWrf4+EYev5KaR39iW16vkwkO5TLAOadnvQrVPv Uwsy9s2bsPPADxb+4R5lMCsYtXK+Aw8gHRwetn+bVx1P6HIVFNECDqYj+gmrpT48 qBFX30mSUxaZb1HLn6HpJE9Tch6tdZsklYEL9QMv8zJym2N8Idb3k1Z2oWAvD70/ Alvi/697QuIah9piYyOD62Q9XTtmgINy -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org