$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json) Hash identifier: +HuxerIcRsDeGZ+9Tcx2M0GtLJ0+GkK0BjqBzupOSQw= Subject key identifier: 9A:4E:BD:88:B4:D3:A1:51:63:38:0F:5A:D1:4E:55:21:BC:31:1B:E4 Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft Manifest number: 057A Signing time: Fri 22 Nov 2024 22:49:54 +0000 Manifest this update: Fri 22 Nov 2024 22:49:53 +0000 Manifest next update: Fri 29 Nov 2024 22:49:53 +0000 Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: S20ORhw/fi4mOOyQn3izrWJWC6K9UKrHZGiUQiAhxEk=) 2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: +jdUATyzrg608TDOhz1zYfT+JhyRhNUXrYXFBCFtcqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: Nov 22 22:49:53 2024 GMT Not After : Nov 29 22:49:53 2024 GMT Subject: CN=67410a92-a0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:31:ca:bc:29:25:2e:cf:5c:34:07:b2:bf: 3e:d1:24:34:e1:ab:5a:b2:a5:08:65:25:42:61:27: d6:c9:59:0d:b8:36:be:b8:c3:95:72:a0:f9:dc:4e: cf:d3:0b:fe:63:60:43:81:4f:4d:23:60:25:41:5e: 93:f8:0c:f8:a6:c5:4b:34:7e:02:6e:86:d5:f6:d3: 00:d4:29:c3:28:13:a9:2b:9e:18:56:6c:b1:b7:d4: b0:18:51:f9:11:47:8c:35:a9:64:93:14:f9:46:30: 25:93:bc:31:ac:a2:8a:02:e5:4d:0d:c6:11:7a:ec: aa:0d:6a:8d:d0:67:c3:2b:43:14:d3:ec:d4:9f:90: a0:a7:c3:c3:3f:f5:11:c0:03:05:31:94:59:83:b7: f4:6e:b2:52:21:92:2a:0f:59:db:9d:57:a8:3a:be: 0c:82:61:ef:11:8c:34:bb:8c:3c:c1:29:62:6c:19: 19:c3:31:0d:15:05:6f:a2:fd:af:f5:96:cf:c4:f4: 22:42:b0:d3:67:f0:a1:64:b3:6c:18:99:d8:dc:71: bc:09:c3:d5:d4:be:c3:98:86:ca:ad:00:1e:0f:1f: fc:c0:c2:06:73:90:97:16:c8:11:3b:b9:9b:3b:65: 34:6e:af:a9:02:1c:90:c6:33:f7:c7:8d:6e:02:d6: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4E:BD:88:B4:D3:A1:51:63:38:0F:5A:D1:4E:55:21:BC:31:1B:E4 X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:8b:80:ad:d9:61:4d:7c:3d:32:be:b3:02:31:a9:9f:58: 18:34:d5:59:f2:28:00:88:26:2d:0c:3f:d4:30:4c:81:2c:bc: 62:4a:31:9d:19:a3:bc:a8:82:17:ad:b7:52:e5:e9:0a:f6:2d: 4b:d5:22:8c:eb:af:50:43:be:50:07:9d:5a:f3:bb:e9:59:ab: b3:d4:80:18:37:8f:54:6d:ff:45:2e:8d:1e:93:11:43:57:ad: 58:ef:1d:de:94:15:33:70:06:21:4d:4c:9d:72:84:87:c9:b8: 4f:55:14:9a:c7:17:44:30:d8:ba:28:43:96:cf:33:02:35:7a: 08:5e:2b:29:22:90:03:e5:33:76:2e:99:2f:c9:98:7e:d5:e8: ea:f3:1e:c0:4b:23:c2:da:46:59:fa:59:79:be:38:7c:bf:71: a8:6b:10:b4:0e:e1:51:0c:07:50:b2:f4:cf:d9:07:36:0e:a4: 07:77:09:21:f7:c9:0f:e8:af:a9:2f:80:19:4e:6f:32:ce:9d: 02:7a:84:23:44:5c:ab:07:63:56:10:32:cd:92:3a:0a:85:03: 61:45:d8:c7:70:f8:1a:f7:30:ec:7e:78:a9:29:37:76:7c:2d: 5d:46:de:ad:a0:19:77:5e:3f:70:ed:f4:c2:0f:26:d2:a0:93: 40:a6:1d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjQxMTIyMjI0OTUzWhcNMjQxMTI5MjI0OTUzWjAYMRYwFAYD VQQDEw02NzQxMGE5Mi1hMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkQ4xyrwpJS7PXDQHsr8+0SQ04atasqUIZSVCYSfWyVkNuDa+uMOVcqD53E7P 0wv+Y2BDgU9NI2AlQV6T+Az4psVLNH4CbobV9tMA1CnDKBOpK54YVmyxt9SwGFH5 EUeMNalkkxT5RjAlk7wxrKKKAuVNDcYReuyqDWqN0GfDK0MU0+zUn5Cgp8PDP/UR wAMFMZRZg7f0brJSIZIqD1nbnVeoOr4MgmHvEYw0u4w8wSlibBkZwzENFQVvov2v 9ZbPxPQiQrDTZ/ChZLNsGJnY3HG8CcPV1L7DmIbKrQAeDx/8wMIGc5CXFsgRO7mb O2U0bq+pAhyQxjP3x41uAtZL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpOvYi0 06FRYzgPWtFOVSG8MRvkMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVe4uArdlhTXw9Mr6zAjGpn1gYNNVZ8igAiCYtDD/UMEyBLLxiSjGd GaO8qIIXrbdS5ekK9i1L1SKM669QQ75QB51a87vpWauz1IAYN49Ubf9FLo0ekxFD V61Y7x3elBUzcAYhTUydcoSHybhPVRSaxxdEMNi6KEOWzzMCNXoIXispIpAD5TN2 LpkvyZh+1ejq8x7ASyPC2kZZ+ll5vjh8v3GoaxC0DuFRDAdQsvTP2Qc2DqQHdwkh 98kP6K+pL4AZTm8yzp0CeoQjRFyrB2NWEDLNkjoKhQNhRdjHcPga9zDsfnipKTd2 fC1dRt6toBl3Xj9w7fTCDybSoJNAph3R -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org