$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: hOSxL9thEoApVXfwC/rwaDbZbvuPYTghOhn/seusu7Q= Subject key identifier: A1:9D:5D:F8:A4:E2:B9:DC:77:B9:DA:D5:EC:40:DB:72:66:39:1B:72 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0ABE Signing time: Fri 22 Nov 2024 19:11:49 +0000 Manifest this update: Fri 22 Nov 2024 19:11:48 +0000 Manifest next update: Fri 29 Nov 2024 19:11:48 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: 1ffNQxCRMjxonGR4EyxvsL07hLabGvSHWv9+hQeKedI=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: AeTLEvIImEeEIFDLcyyzsKZIqpZz08BSLMKw6j/d4o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: Nov 22 19:11:48 2024 GMT Not After : Nov 29 19:11:48 2024 GMT Subject: CN=6740d774-83b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:60:ff:68:aa:db:79:b9:4f:31:df:a3:a6: ac:09:d4:53:cd:f7:9b:a0:8b:f8:b9:e1:1d:a5:84: 05:65:18:30:b0:00:08:e8:05:88:46:5f:de:3f:7d: 25:d1:b0:4b:a7:79:6c:09:2c:1e:61:c8:cc:2d:cc: aa:7a:ce:72:bc:b7:5b:b5:d3:10:9a:68:6c:d6:99: 77:ab:1b:55:97:8f:f7:be:00:37:26:21:85:f1:6c: 8d:21:ef:8c:cc:d1:8c:2c:d5:76:90:3d:a0:7a:78: c0:f1:30:38:98:2d:c1:7e:89:5f:6c:49:9d:39:73: ad:96:2d:08:1b:e0:c8:fb:9c:2d:11:15:0b:e6:fd: c6:a9:46:b4:1a:bb:87:f4:92:97:c8:13:6c:fb:d0: 3d:af:64:ae:39:38:99:93:2a:e1:cb:a7:4b:4e:cd: 05:03:72:cb:d0:86:60:c4:b5:3e:fa:e7:4e:f8:61: 63:1b:ff:20:31:2a:0c:7a:21:3d:1e:7a:d9:a7:fb: dd:f1:bf:69:e3:4d:42:ce:3d:63:ae:72:71:a5:5d: 8c:68:ae:15:b2:98:4c:e3:f0:d5:37:7e:77:2a:bd: e2:df:6a:b2:25:9e:8f:55:cc:fe:b2:27:cd:51:45: 6d:c0:38:2c:9e:28:b6:ad:8b:21:7c:e8:1a:36:d5: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9D:5D:F8:A4:E2:B9:DC:77:B9:DA:D5:EC:40:DB:72:66:39:1B:72 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:16:ff:57:2a:6b:2d:0f:ef:63:b8:16:79:ab:cb:05:21:5f: 70:54:e8:55:54:a2:28:b8:55:5e:7d:f3:c8:2b:c7:48:63:b4: 69:e3:9f:5a:62:de:b9:04:cc:12:d5:62:6e:dd:ab:e2:69:85: 0d:5e:ed:14:d5:6b:e4:84:44:14:90:f3:94:d0:3e:ee:8a:72: 95:a2:00:41:c5:96:c2:3b:d5:08:e0:81:49:a0:8e:51:4a:31: b6:31:03:a0:34:ab:4a:da:2b:d9:19:09:d3:46:b6:ea:de:41: ea:10:b3:77:bb:2e:ec:df:d4:3d:9f:3f:cf:6a:16:c0:ef:13: 38:eb:66:ee:3a:44:ef:99:e6:eb:ad:e3:8e:db:bb:04:bb:c2: d5:28:f5:45:62:ba:e2:a5:b2:ae:8d:df:c0:00:29:6c:67:5e: a6:dc:ee:db:05:c8:0b:48:7a:5c:08:79:50:0e:84:13:67:d4: 98:b6:9c:80:96:91:03:fa:c6:9e:46:bd:c0:f7:20:a9:df:2a: 23:ec:94:de:02:b1:6f:37:e4:76:3d:0f:ab:3c:b5:8c:42:7f: ed:ff:75:e2:10:7e:9c:43:3d:e4:fc:cc:0b:2d:8d:02:e5:a9: 63:a4:a7:f6:f3:91:7b:66:7f:0e:ab:44:3d:6c:78:0a:99:0e: 44:85:01:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjQxMTIyMTkxMTQ4WhcNMjQxMTI5MTkxMTQ4WjAYMRYwFAYD VQQDEw02NzQwZDc3NC04M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoRg/2iq23m5TzHfo6asCdRTzfeboIv4ueEdpYQFZRgwsAAI6AWIRl/eP30l 0bBLp3lsCSweYcjMLcyqes5yvLdbtdMQmmhs1pl3qxtVl4/3vgA3JiGF8WyNIe+M zNGMLNV2kD2genjA8TA4mC3BfolfbEmdOXOtli0IG+DI+5wtERUL5v3GqUa0GruH 9JKXyBNs+9A9r2SuOTiZkyrhy6dLTs0FA3LL0IZgxLU++udO+GFjG/8gMSoMeiE9 HnrZp/vd8b9p401Czj1jrnJxpV2MaK4VsphM4/DVN353Kr3i32qyJZ6PVcz+sifN UUVtwDgsnii2rYshfOgaNtU2KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGdXfik 4rncd7na1exA23JmORtyMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwFv9XKmstD+9juBZ5q8sFIV9wVOhVVKIouFVeffPIK8dIY7Rp459a Yt65BMwS1WJu3aviaYUNXu0U1WvkhEQUkPOU0D7uinKVogBBxZbCO9UI4IFJoI5R SjG2MQOgNKtK2ivZGQnTRrbq3kHqELN3uy7s39Q9nz/PahbA7xM462buOkTvmebr reOO27sEu8LVKPVFYrripbKujd/AAClsZ16m3O7bBcgLSHpcCHlQDoQTZ9SYtpyA lpED+saeRr3A9yCp3yoj7JTeArFvN+R2PQ+rPLWMQn/t/3XiEH6cQz3k/MwLLY0C 5aljpKf285F7Zn8Oq0Q9bHgKmQ5EhQEW -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org