$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft File: WHWg6apyuWJyxu1EVcFM2I01uVw.mft (raw, json) Hash identifier: Uuo2ZedArqKHq+AAdcfKZCXEg0mVC5YuOJxPIEgd9oM= Subject key identifier: 3E:DF:6A:70:3C:F3:9B:81:49:9D:EF:60:50:18:FF:95:47:30:B4:79 Authority key identifier: 58:75:A0:E9:AA:72:B9:62:72:C6:ED:44:55:C1:4C:D8:8D:35:B9:5C Certificate issuer: /CN=A91AD9CB/serialNumber=5875A0E9AA72B96272C6ED4455C14CD88D35B95C Certificate serial: 3114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft Manifest number: 3114 Signing time: Fri 22 Nov 2024 15:27:43 +0000 Manifest this update: Fri 22 Nov 2024 15:27:43 +0000 Manifest next update: Fri 29 Nov 2024 15:27:43 +0000 Files and hashes: 1: WHWg6apyuWJyxu1EVcFM2I01uVw.crl (hash: 36gXx85F23PY1HAia7+lQ55VF7+u87Q6w0ISXOBiPGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.crl rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12564 (0x3114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9CB/serialNumber=5875A0E9AA72B96272C6ED4455C14CD88D35B95C Validity Not Before: Nov 22 15:27:43 2024 GMT Not After : Nov 29 15:27:43 2024 GMT Subject: CN=6740a2ef-7eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:a0:bf:25:2c:e5:e7:c1:9d:c6:79:9a:f7: bf:7d:83:42:22:48:59:05:79:94:6f:25:c4:c0:b9: 82:6f:9e:6b:27:1f:e4:f1:b0:bf:d1:05:2f:e9:8d: a3:45:a0:e2:8d:76:e8:d9:5b:39:e4:fc:5c:c9:48: d9:cd:20:93:0a:73:6b:4c:9b:15:5e:d7:64:ec:f3: 85:e9:54:74:83:43:19:c7:aa:08:b6:35:61:6c:8a: bf:48:ef:41:62:95:bf:c8:72:ef:f2:47:67:a1:ea: a9:d1:51:2d:1d:a3:54:0b:54:0c:f9:e7:dc:69:70: 79:bd:de:64:42:23:93:e5:76:59:ae:0d:00:6a:bd: 07:9e:2f:8b:71:e8:ba:4f:de:7f:59:d7:b5:75:98: a9:8c:8a:ec:d1:50:03:d0:7c:5c:6d:75:8e:14:dc: 79:b2:78:3c:80:c6:fc:8b:14:72:0c:53:46:06:5b: 9e:9e:0f:c7:8e:19:36:c8:d0:57:41:ec:72:04:07: 9c:1d:20:4a:8f:69:66:6e:51:52:1c:81:fa:42:18: d9:22:35:b9:7a:82:e4:db:b4:b5:e1:79:34:da:df: f5:ba:18:31:5d:0a:c7:26:a4:f4:68:6e:fc:b5:c9: 03:ee:26:99:66:68:db:0e:01:06:23:42:21:a0:49: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DF:6A:70:3C:F3:9B:81:49:9D:EF:60:50:18:FF:95:47:30:B4:79 X509v3 Authority Key Identifier: keyid:58:75:A0:E9:AA:72:B9:62:72:C6:ED:44:55:C1:4C:D8:8D:35:B9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHWg6apyuWJyxu1EVcFM2I01uVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9CB/00D6CE4EB6D011E2B6830AB668865CEE/WHWg6apyuWJyxu1EVcFM2I01uVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:63:1c:d7:1c:c2:ea:04:2b:6f:42:6d:99:4c:c3:b6:fc: 39:05:0b:82:e6:c1:4a:2b:1a:bf:5b:7c:e7:e1:e2:dc:1b:d7: 6e:ce:89:ae:8e:3e:03:53:39:44:d0:14:1d:6a:78:da:bf:50: 3e:a1:f1:b1:eb:f6:d8:0d:e0:4b:0c:00:33:20:92:33:ef:28: 01:32:db:f4:04:0f:4f:36:c8:a1:c2:f2:ef:c2:3b:57:8e:c7: 4d:44:dd:0e:fc:0b:f9:96:d0:fe:9c:58:d1:78:c3:c9:a6:bd: 43:2b:43:63:31:58:bd:26:3f:fe:79:24:57:d9:f1:b7:a8:47: e9:07:16:d3:13:b6:9f:9f:73:cf:df:2d:b6:82:3d:89:52:f5: 41:f2:7b:7e:eb:19:e3:6c:8c:5b:e5:1b:b2:7a:07:58:5f:41: 3b:6a:34:87:bc:c6:72:00:21:50:9c:c2:60:89:fc:fb:78:8f: f2:ec:7e:e3:d3:42:46:35:3d:da:e9:a2:e6:5a:30:c4:73:c4: 42:d7:4d:17:2c:8a:b2:74:63:01:55:f6:63:2a:63:6b:43:ca: 4b:a6:40:fd:8c:11:15:f8:0c:72:0c:36:e1:61:91:84:60:bb: da:52:35:d2:49:ec:82:c0:37:58:d5:d7:c8:b4:14:8e:8c:54: ba:d4:23:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5Q0IxMTAvBgNVBAUTKDU4NzVBMEU5QUE3MkI5NjI3MkM2RUQ0NDU1QzE0Q0Q4 OEQzNUI5NUMwHhcNMjQxMTIyMTUyNzQzWhcNMjQxMTI5MTUyNzQzWjAYMRYwFAYD VQQDEw02NzQwYTJlZi03ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ImgvyUs5efBncZ5mve/fYNCIkhZBXmUbyXEwLmCb55rJx/k8bC/0QUv6Y2j RaDijXbo2Vs55PxcyUjZzSCTCnNrTJsVXtdk7POF6VR0g0MZx6oItjVhbIq/SO9B YpW/yHLv8kdnoeqp0VEtHaNUC1QM+efcaXB5vd5kQiOT5XZZrg0Aar0Hni+Lcei6 T95/Wde1dZipjIrs0VAD0HxcbXWOFNx5sng8gMb8ixRyDFNGBlueng/Hjhk2yNBX QexyBAecHSBKj2lmblFSHIH6QhjZIjW5eoLk27S14Xk02t/1uhgxXQrHJqT0aG78 tckD7iaZZmjbDgEGI0IhoEl6pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7fanA8 85uBSZ3vYFAY/5VHMLR5MB8GA1UdIwQYMBaAFFh1oOmqcrlicsbtRFXBTNiNNblc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlDQi8wMEQ2Q0U0RUI2 RDAxMUUyQjY4MzBBQjY2ODg2NUNFRS9XSFdnNmFweXVXSnl4dTFFVmNGTTJJMDF1 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIV2c2YXB5dVdKeXh1MUVWY0ZNMkkwMXVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlDQi8wMEQ2Q0U0RUI2RDAxMUUyQjY4MzBBQjY2ODg2NUNFRS9XSFdnNmFweXVX Snl4dTFFVmNGTTJJMDF1VncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2PmMc1xzC6gQrb0JtmUzDtvw5BQuC5sFKKxq/W3zn4eLcG9duzomu jj4DUzlE0BQdanjav1A+ofGx6/bYDeBLDAAzIJIz7ygBMtv0BA9PNsihwvLvwjtX jsdNRN0O/Av5ltD+nFjReMPJpr1DK0NjMVi9Jj/+eSRX2fG3qEfpBxbTE7afn3PP 3y22gj2JUvVB8nt+6xnjbIxb5RuyegdYX0E7ajSHvMZyACFQnMJgifz7eI/y7H7j 00JGNT3a6aLmWjDEc8RC100XLIqydGMBVfZjKmNrQ8pLpkD9jBEV+AxyDDbhYZGE YLvaUjXSSeyCwDdY1dfItBSOjFS61CPj -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org