$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: STvp+5tJr1YYk3ILeNM2n2X8UQR03poJj7GiutDsK4o= Subject key identifier: 98:D8:38:6B:9E:26:DC:CF:3F:56:01:AA:52:F1:C0:B9:50:9B:E8:A4 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0F32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0F21 Signing time: Fri 22 Nov 2024 17:36:09 +0000 Manifest this update: Fri 22 Nov 2024 17:36:08 +0000 Manifest next update: Fri 29 Nov 2024 17:36:08 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: xHBKx43QfPw6VmIu4MBGX/jmGLj/9RKAHRn71mJBuIE=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: YHNqmFypXejYYf+P9MpoCxPuczYJ30DL11bIt5OGM0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3890 (0xf32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Nov 22 17:36:08 2024 GMT Not After : Nov 29 17:36:08 2024 GMT Subject: CN=6740c109-e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:02:02:a7:a2:ab:89:b7:1c:b2:d8:3f:7e: 84:4a:93:65:5c:f6:f0:e7:4f:eb:8d:63:46:e0:53: 4d:b7:96:31:67:1a:08:d5:a3:1c:81:91:89:77:e3: ab:6d:30:ed:a4:2a:f0:02:e6:5e:0a:30:dc:66:2c: 65:4f:9d:ac:0c:7d:e6:77:25:91:c0:1b:28:2f:75: 01:6b:d1:e3:9a:6f:65:09:cb:4e:4f:f7:ad:a4:de: 5e:ee:82:f9:2d:98:1b:81:d1:2c:f3:97:bf:05:b2: ce:5e:71:19:ad:d2:a2:84:41:11:05:57:a7:85:92: 8f:a9:7a:9d:24:5c:aa:ef:41:14:65:55:31:c4:8a: be:6f:c8:2c:3c:3b:72:7c:da:d8:7a:43:9d:eb:b2: 9a:31:1e:91:24:b7:53:63:de:7a:8c:1b:55:a5:d1: 9a:88:bd:81:56:64:dd:79:89:5b:d0:6b:65:9d:1c: 3d:a2:45:a7:a0:ce:d1:64:59:62:ff:c1:1c:2b:62: 03:27:c9:f6:82:b8:46:ea:cf:ac:01:7f:9d:0e:5e: 04:30:eb:17:cd:fc:48:b2:21:31:e7:c2:ec:2e:c9: 13:95:c2:d9:49:51:a1:40:8c:32:47:35:a6:1b:19: b1:56:b5:2f:b0:19:ef:0f:6e:f7:dc:00:c9:14:00: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:38:6B:9E:26:DC:CF:3F:56:01:AA:52:F1:C0:B9:50:9B:E8:A4 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7c:8a:14:40:17:67:e5:7f:a5:44:85:78:38:ea:e4:60:04: 77:7c:79:97:93:0b:ff:25:43:e1:6e:19:ad:77:49:d7:24:c7: 17:26:ca:1a:20:ac:5a:a5:ef:04:e5:58:3f:06:01:d2:c1:56: 09:db:d9:bd:40:f6:af:a7:71:9f:fb:6b:29:eb:56:b3:67:41: 45:62:dc:0a:32:f3:47:07:04:10:c6:e7:a2:0b:99:d6:31:52: 91:14:6c:bf:2a:a2:dd:4d:a7:11:21:6e:94:0a:bb:5e:44:eb: 67:0b:5e:85:2a:0c:3d:cd:88:b8:ce:fa:c2:55:ec:04:b1:57: 25:a9:66:62:f4:29:50:1c:0a:fb:8c:23:b8:a2:da:a4:dc:fc: 4e:e4:6c:7a:ce:44:ec:82:ae:65:5d:5b:db:4c:7f:1e:04:a8: 43:e5:37:ca:10:d3:b4:1f:31:aa:2a:0f:6b:9d:f2:30:9a:1a: 29:2e:4f:32:63:44:df:b1:3c:01:2e:38:c1:3d:0e:de:47:31: ea:06:5f:4f:1f:94:6d:52:22:60:26:6c:63:f0:93:a0:64:05: f5:3b:30:09:8c:10:b4:d2:af:ce:4d:65:f4:cb:ff:75:6f:86: b7:af:d5:1f:1b:48:da:49:0d:86:67:e7:9c:c2:16:78:0f:c1: 54:90:b9:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjQxMTIyMTczNjA4WhcNMjQxMTI5MTczNjA4WjAYMRYwFAYD VQQDEw02NzQwYzEwOS1lNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgECAqeiq4m3HLLYP36ESpNlXPbw50/rjWNG4FNNt5YxZxoI1aMcgZGJd+Or bTDtpCrwAuZeCjDcZixlT52sDH3mdyWRwBsoL3UBa9Hjmm9lCctOT/etpN5e7oL5 LZgbgdEs85e/BbLOXnEZrdKihEERBVenhZKPqXqdJFyq70EUZVUxxIq+b8gsPDty fNrYekOd67KaMR6RJLdTY956jBtVpdGaiL2BVmTdeYlb0GtlnRw9okWnoM7RZFli /8EcK2IDJ8n2grhG6s+sAX+dDl4EMOsXzfxIsiEx58LsLskTlcLZSVGhQIwyRzWm GxmxVrUvsBnvD2733ADJFADMVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjYOGue JtzPP1YBqlLxwLlQm+ikMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALfIoUQBdn5X+lRIV4OOrkYAR3fHmXkwv/JUPhbhmtd0nXJMcXJsoa IKxape8E5Vg/BgHSwVYJ29m9QPavp3Gf+2sp61azZ0FFYtwKMvNHBwQQxueiC5nW MVKRFGy/KqLdTacRIW6UCrteROtnC16FKgw9zYi4zvrCVewEsVclqWZi9ClQHAr7 jCO4otqk3PxO5Gx6zkTsgq5lXVvbTH8eBKhD5TfKENO0HzGqKg9rnfIwmhopLk8y Y0TfsTwBLjjBPQ7eRzHqBl9PH5RtUiJgJmxj8JOgZAX1OzAJjBC00q/OTWX0y/91 b4a3r9UfG0jaSQ2GZ+ecwhZ4D8FUkLl6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org