$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: z99cj0pcBIRIDuDxOfQzbQppcYuH+i3zB5YrZc23obw= Subject key identifier: 36:EA:C8:16:78:0E:39:B3:51:ED:E0:4A:3D:11:AD:81:82:1C:DF:B0 Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: 0134 Signing time: Sat 23 Nov 2024 02:46:42 +0000 Manifest this update: Sat 23 Nov 2024 02:46:41 +0000 Manifest next update: Sat 30 Nov 2024 02:46:41 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: jGTeqaCzJR0kDQAsJ6GmBWV8bEi5qtGJHiiy0/H1MOU=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: S559gsIWXVd6S5Op4XFYguV0V2ZXge3n4rHa7okd57c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: Nov 23 02:46:41 2024 GMT Not After : Nov 30 02:46:41 2024 GMT Subject: CN=67414212-29a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:42:23:4f:95:ec:50:5d:e7:a0:16:f7:ba: 6b:66:b4:10:42:b7:e9:57:ce:50:4c:92:03:22:a0: 99:04:0c:6d:2b:4d:31:9b:36:19:fb:14:34:ec:8c: 38:8a:ef:9a:76:d6:e8:b2:f5:4b:f7:58:36:95:eb: 1e:4f:80:20:59:d8:63:ba:b3:49:f4:e0:92:4a:f0: e5:01:79:d0:8d:b1:d7:9f:c1:c1:6c:07:a6:5d:78: 02:f0:51:09:1e:94:10:28:8c:20:58:ae:a5:ca:af: d8:94:c8:bd:23:ba:52:c0:e1:de:6b:f7:19:ed:bc: d4:1b:bc:d6:f8:04:5e:7e:c5:1a:d8:c0:71:3b:ba: b6:f1:82:18:01:cb:3a:a3:ba:ad:01:94:35:49:c8: 7b:e9:1d:90:18:1d:04:61:7d:4a:62:42:26:40:3d: 95:0a:37:13:7b:ef:6c:8a:e5:12:7e:34:8b:04:e5: 25:5c:9d:c6:55:0a:8a:67:76:74:8a:e1:7b:b2:7b: da:bb:ec:09:5c:a0:03:fd:46:a2:00:8a:16:20:dd: 67:7d:bb:84:96:3c:77:eb:f0:5f:e8:bc:fb:60:aa: 22:9e:e0:f8:85:64:24:2c:94:b0:82:9b:2f:f3:2b: 6a:5a:49:48:ef:64:ff:d4:af:0e:91:7b:5e:94:ec: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:C8:16:78:0E:39:B3:51:ED:E0:4A:3D:11:AD:81:82:1C:DF:B0 X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ea:82:4f:af:7e:2a:ab:2c:df:9c:02:83:39:91:10:68:8a: 1a:5c:6c:db:98:c6:31:19:20:57:85:b4:35:01:11:60:95:ef: 0b:68:01:60:e7:d9:24:5f:9b:a0:d8:54:a9:2e:f9:07:b3:1b: 19:5c:4d:4e:d2:c2:07:c6:71:00:21:34:c6:e1:10:bf:33:33: fe:3c:f2:d5:e7:45:b5:71:cd:eb:3a:3b:54:d0:c9:39:ad:c0: 01:26:aa:73:48:a6:7d:d9:95:e3:51:0d:55:4a:ab:75:d5:46: 08:3b:85:aa:32:32:ea:f6:97:16:89:01:48:f4:5d:fd:59:4c: 7c:ab:4b:52:21:67:70:d8:7e:e6:fc:12:81:2e:a9:d0:f7:45: 2e:42:34:a2:9e:98:e9:39:2c:a5:b9:a5:ce:1e:bc:72:c5:da: d7:79:5a:62:65:ef:b6:58:7e:95:dd:60:cd:18:ad:78:ec:16: 45:4d:91:13:23:37:57:22:d5:bf:f9:bb:00:25:24:1a:e7:d1: 66:45:11:7c:2c:12:90:81:3f:37:5b:29:0c:6b:83:34:46:74: 8f:a5:10:65:e9:1f:8d:a0:e3:68:e1:11:5f:f2:81:26:a9:a7: 34:a4:46:d0:f2:6b:ce:e6:69:b5:e0:52:36:b4:25:58:7a:c7: 6a:4c:5a:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjQxMTIzMDI0NjQxWhcNMjQxMTMwMDI0NjQxWjAYMRYwFAYD VQQDEw02NzQxNDIxMi0yOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vtCI0+V7FBd56AW97prZrQQQrfpV85QTJIDIqCZBAxtK00xmzYZ+xQ07Iw4 iu+adtbosvVL91g2leseT4AgWdhjurNJ9OCSSvDlAXnQjbHXn8HBbAemXXgC8FEJ HpQQKIwgWK6lyq/YlMi9I7pSwOHea/cZ7bzUG7zW+ARefsUa2MBxO7q28YIYAcs6 o7qtAZQ1Sch76R2QGB0EYX1KYkImQD2VCjcTe+9siuUSfjSLBOUlXJ3GVQqKZ3Z0 iuF7snvau+wJXKAD/UaiAIoWIN1nfbuEljx36/Bf6Lz7YKoinuD4hWQkLJSwgpsv 8ytqWklI72T/1K8OkXtelOyDqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbqyBZ4 DjmzUe3gSj0RrYGCHN+wMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH6oJPr34qqyzfnAKDOZEQaIoaXGzbmMYxGSBXhbQ1ARFgle8LaAFg 59kkX5ug2FSpLvkHsxsZXE1O0sIHxnEAITTG4RC/MzP+PPLV50W1cc3rOjtU0Mk5 rcABJqpzSKZ92ZXjUQ1VSqt11UYIO4WqMjLq9pcWiQFI9F39WUx8q0tSIWdw2H7m /BKBLqnQ90UuQjSinpjpOSyluaXOHrxyxdrXeVpiZe+2WH6V3WDNGK147BZFTZET IzdXItW/+bsAJSQa59FmRRF8LBKQgT83WykMa4M0RnSPpRBl6R+NoONo4RFf8oEm qac0pEbQ8mvO5mm14FI2tCVYesdqTFpm -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org