$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: c2Hr57OMpt7D51ibTFicTJ9eDbUavw4I+FaQ8BlXhcA= Subject key identifier: D4:34:0C:22:CE:D9:F4:77:58:4C:C8:02:03:3E:AB:E9:15:7A:71:14 Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: 0118 Signing time: Sat 23 Nov 2024 03:01:38 +0000 Manifest this update: Sat 23 Nov 2024 03:01:37 +0000 Manifest next update: Sat 30 Nov 2024 03:01:37 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: 5Tnfr15ilAtYsaAJODB3kNmQ6rShKX9XLEZfVtZJpBk=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: Nov 23 03:01:37 2024 GMT Not After : Nov 30 03:01:37 2024 GMT Subject: CN=67414591-3851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:c7:98:1a:11:10:d4:e9:88:31:97:af:b5: f1:11:f1:a2:97:6c:cf:71:b9:c6:db:c9:bb:f9:e4: 76:1f:b6:22:bd:0b:2c:ee:91:09:34:b5:4e:69:e3: d6:07:09:a7:43:65:e2:99:bb:35:78:0a:67:50:fe: 3f:f8:a0:60:76:fa:ed:e3:9c:1c:fc:14:0e:a3:7b: 76:2b:93:c3:ee:76:0a:96:18:d3:e6:f1:78:a5:7c: 1d:67:ee:2c:38:5c:ba:2a:fd:8a:93:da:c8:9d:fe: ff:3e:3e:42:ea:cd:c1:8e:cb:72:ec:51:d4:bb:0a: d6:32:38:78:f2:22:c8:7e:b8:fc:9b:a4:cb:a3:7e: 67:03:e2:22:cf:bd:fe:51:8e:45:c0:09:c1:7c:18: fc:46:3c:a9:40:20:e3:6f:98:bb:91:d5:7f:1d:41: 4e:0e:da:57:1a:71:5d:75:fc:ca:ed:37:ec:e1:0c: ca:b0:e6:7e:4e:ea:07:77:97:77:33:c1:da:17:9d: bb:90:e8:ba:1f:5c:13:68:d1:d0:69:f6:40:33:5a: 8f:3e:d1:6f:82:23:55:a3:44:b1:f5:3a:a4:78:31: 15:4f:a5:30:32:c4:89:bb:1e:1b:01:77:9d:f3:f2: 6a:67:b2:f6:06:f5:a2:97:d0:65:d6:06:b1:a4:b7: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:0C:22:CE:D9:F4:77:58:4C:C8:02:03:3E:AB:E9:15:7A:71:14 X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:3b:1f:87:ef:3c:4c:c3:37:d5:24:ac:2b:d4:79:30:22:bc: b4:e6:6e:d5:d7:50:2f:7f:e9:3c:b5:31:fa:34:52:a2:4e:0a: a9:30:de:66:80:cb:c7:7d:d7:1d:e4:97:50:31:01:fb:ab:58: cd:ad:3b:60:14:cd:82:bd:b9:c5:87:90:1d:ef:77:e3:e1:bf: 3e:d5:6d:05:95:6b:43:1a:25:7e:7a:9d:f1:60:8c:6a:c8:68: 1f:77:e3:d3:9d:20:80:16:8e:0e:84:dd:d3:83:12:ca:b9:11: be:8e:b0:78:bf:5b:0e:e4:2d:7e:af:d6:8a:8b:a9:89:3a:ea: ae:1a:fd:10:bb:1c:c4:f3:11:f0:22:ca:79:31:c7:0c:ff:d8: 34:87:bc:ea:02:fd:cb:a6:53:53:67:bc:2e:0b:c9:b2:10:8e: 0e:dd:05:55:5d:12:c4:cd:6b:74:17:b7:64:1d:46:9f:02:1e: 35:20:76:ca:9e:aa:f8:47:12:61:1e:d6:b4:de:77:0a:8a:1f: 20:ba:f3:bd:2a:64:96:07:52:28:6c:c5:e1:1e:36:a5:27:0e: 29:2d:db:d9:50:21:d4:b2:32:f7:b9:70:e1:c4:01:62:a3:55: ba:d1:39:2a:fe:9f:cf:18:28:10:59:84:a3:e5:1f:e7:8f:2e: 50:94:4b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjQxMTIzMDMwMTM3WhcNMjQxMTMwMDMwMTM3WjAYMRYwFAYD VQQDEw02NzQxNDU5MS0zODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6DHmBoRENTpiDGXr7XxEfGil2zPcbnG28m7+eR2H7YivQss7pEJNLVOaePW BwmnQ2Ximbs1eApnUP4/+KBgdvrt45wc/BQOo3t2K5PD7nYKlhjT5vF4pXwdZ+4s OFy6Kv2Kk9rInf7/Pj5C6s3Bjsty7FHUuwrWMjh48iLIfrj8m6TLo35nA+Iiz73+ UY5FwAnBfBj8RjypQCDjb5i7kdV/HUFODtpXGnFddfzK7Tfs4QzKsOZ+TuoHd5d3 M8HaF527kOi6H1wTaNHQafZAM1qPPtFvgiNVo0Sx9TqkeDEVT6UwMsSJux4bAXed 8/JqZ7L2BvWil9Bl1gaxpLeaQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ0DCLO 2fR3WEzIAgM+q+kVenEUMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGOx+H7zxMwzfVJKwr1HkwIry05m7V11Avf+k8tTH6NFKiTgqpMN5m gMvHfdcd5JdQMQH7q1jNrTtgFM2CvbnFh5Ad73fj4b8+1W0FlWtDGiV+ep3xYIxq yGgfd+PTnSCAFo4OhN3TgxLKuRG+jrB4v1sO5C1+r9aKi6mJOuquGv0QuxzE8xHw Isp5MccM/9g0h7zqAv3LplNTZ7wuC8myEI4O3QVVXRLEzWt0F7dkHUafAh41IHbK nqr4RxJhHta03ncKih8guvO9KmSWB1IobMXhHjalJw4pLdvZUCHUsjL3uXDhxAFi o1W60Tkq/p/PGCgQWYSj5R/njy5QlEtT -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org