$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: ym1WwMI3+yCYYLo5GMRqtxDmXLeqYlcHFvk70FucD/0= Subject key identifier: 91:A9:F5:3F:02:B2:B4:45:C9:F9:AF:FD:09:BA:E3:22:C8:CA:70:0B Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0AF8 Signing time: Fri 22 Nov 2024 19:05:14 +0000 Manifest this update: Fri 22 Nov 2024 19:05:13 +0000 Manifest next update: Fri 29 Nov 2024 19:05:13 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: nqrn4dAQI/3WaZrCwLPzLhL8FCaFnItrSlX3sVjYxkU=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Nov 22 19:05:13 2024 GMT Not After : Nov 29 19:05:13 2024 GMT Subject: CN=6740d5e9-b4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:12:5b:37:b5:16:25:22:7c:8f:49:29:71: a3:1f:ac:67:3b:34:30:52:82:b5:16:c6:c0:73:87: 16:c1:77:2f:8d:be:25:33:12:fc:e6:d1:58:30:48: 2c:4f:1c:b8:48:bd:d2:ea:27:2b:75:00:00:de:31: 48:eb:75:82:95:c3:12:5e:d1:20:d7:ce:83:39:13: 30:a0:40:86:18:1e:98:78:9c:ee:68:76:0f:3c:39: f2:68:aa:26:9b:05:0b:80:ef:0c:8e:fa:e6:aa:54: 84:d2:cd:d6:fa:3e:28:15:2c:20:76:5a:40:cd:b9: 4d:df:7d:6e:dd:bd:75:c4:30:e4:1f:06:ba:be:71: b5:04:f4:56:99:a9:ec:c2:13:98:7f:6d:04:26:23: 0f:a0:7d:9c:0a:55:1e:b9:46:65:ba:23:62:a1:a1: f9:e0:16:84:9c:e8:fc:86:1e:a7:45:d0:84:2d:3b: 3b:d3:4c:a4:e7:12:8a:1f:1d:d7:25:2c:45:2f:e5: 2a:40:82:ec:d3:9c:cf:e5:d4:d9:e0:f7:1b:b7:c7: b5:ec:0d:f2:a7:a7:13:94:9a:4d:d3:52:29:61:c7: 05:54:81:6b:1b:45:d9:7e:fa:ea:a5:cc:1f:ac:f2: 1a:24:f7:49:d4:fe:c4:03:80:04:a1:ed:cd:41:f4: 89:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A9:F5:3F:02:B2:B4:45:C9:F9:AF:FD:09:BA:E3:22:C8:CA:70:0B X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:10:ba:d4:cf:b5:92:4e:3e:64:80:dd:ef:86:26:08:d0:a0: 1d:eb:b2:9b:b4:66:ff:92:65:e9:cf:f8:c3:d6:e2:8b:bb:ba: 92:0e:56:50:39:1a:68:3a:01:6f:09:c4:a7:9d:0b:34:14:8d: ad:d4:e5:c6:91:28:e9:91:03:3e:c6:ae:68:e8:73:49:4f:db: 99:94:69:e3:88:67:89:7e:82:18:12:5d:90:04:86:46:5f:54: d8:e4:3b:c0:04:91:e0:dd:75:ed:c4:5e:9a:e3:c0:2c:bd:63: e4:83:db:85:55:c5:56:98:b1:3d:0f:db:e0:15:46:68:4f:3a: e3:54:0d:82:56:6e:88:ce:45:42:dc:8e:81:da:35:e7:69:da: 3e:93:9d:d9:c5:1b:45:1c:c3:cc:1d:f2:fc:df:d1:81:f4:aa: dd:07:67:69:95:41:be:f6:f1:64:33:8d:00:23:7e:ce:d2:58: 9b:5d:d8:16:1c:55:aa:3e:5b:7e:05:33:9c:d4:0f:a4:1f:49: 33:fb:c0:d6:58:40:66:ab:ad:66:6b:34:32:e2:21:4f:3a:f5: 39:28:7a:56:9d:82:e0:a3:ed:53:0e:19:a7:e4:3a:bd:ee:7f: fe:67:3a:58:6b:7b:d9:d6:7c:ac:26:29:64:0a:75:be:a1:69: bd:32:c5:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjQxMTIyMTkwNTEzWhcNMjQxMTI5MTkwNTEzWjAYMRYwFAYD VQQDEw02NzQwZDVlOS1iNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzoSWze1FiUifI9JKXGjH6xnOzQwUoK1FsbAc4cWwXcvjb4lMxL85tFYMEgs Txy4SL3S6icrdQAA3jFI63WClcMSXtEg186DORMwoECGGB6YeJzuaHYPPDnyaKom mwULgO8MjvrmqlSE0s3W+j4oFSwgdlpAzblN331u3b11xDDkHwa6vnG1BPRWmans whOYf20EJiMPoH2cClUeuUZluiNioaH54BaEnOj8hh6nRdCELTs700yk5xKKHx3X JSxFL+UqQILs05zP5dTZ4Pcbt8e17A3yp6cTlJpN01IpYccFVIFrG0XZfvrqpcwf rPIaJPdJ1P7EA4AEoe3NQfSJbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGp9T8C srRFyfmv/Qm64yLIynALMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRELrUz7WSTj5kgN3vhiYI0KAd67KbtGb/kmXpz/jD1uKLu7qSDlZQ ORpoOgFvCcSnnQs0FI2t1OXGkSjpkQM+xq5o6HNJT9uZlGnjiGeJfoIYEl2QBIZG X1TY5DvABJHg3XXtxF6a48AsvWPkg9uFVcVWmLE9D9vgFUZoTzrjVA2CVm6IzkVC 3I6B2jXnado+k53ZxRtFHMPMHfL839GB9KrdB2dplUG+9vFkM40AI37O0libXdgW HFWqPlt+BTOc1A+kH0kz+8DWWEBmq61mazQy4iFPOvU5KHpWnYLgo+1TDhmn5Dq9 7n/+ZzpYa3vZ1nysJilkCnW+oWm9MsWb -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org