$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft File: wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json) Hash identifier: HQPtCc4hWq1l9tyCXIl4BwLgdjfSNZps9YOq+2R5OdM= Subject key identifier: 49:27:86:B1:01:4E:89:46:47:77:BF:1C:C1:A6:1C:F9:73:2B:3F:5D Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Certificate serial: 07EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft Manifest number: 07DF Signing time: Fri 22 Nov 2024 20:42:11 +0000 Manifest this update: Fri 22 Nov 2024 20:42:11 +0000 Manifest next update: Fri 29 Nov 2024 20:42:11 +0000 Files and hashes: 1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: FhsJWvcAr/oLn1D5Miy/4nDlfg+a0mMF9pfD34AKdEs=) 2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: 0JhS68ZbMDxqrN7xqgQ1rb34ESFxqmGwfdPUG+zU2nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2030 (0x7ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Validity Not Before: Nov 22 20:42:11 2024 GMT Not After : Nov 29 20:42:11 2024 GMT Subject: CN=6740eca3-e23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:77:6c:0f:8b:f4:88:5f:51:34:58:53:1c: ee:c0:dd:a3:9f:7c:93:a8:d8:d1:82:43:b5:7b:62: c0:9d:c7:f4:f9:ba:09:be:c3:cb:92:83:6c:fd:45: 93:13:ad:5c:b8:28:17:40:1d:c6:b7:b1:59:ef:e2: 21:55:5b:bb:48:20:b4:cf:64:14:8a:4c:04:c2:90: b8:f8:0d:7c:45:ca:a4:fd:50:19:fb:6f:11:d5:83: 93:c3:37:e8:34:43:fa:1a:b0:53:0e:d8:53:b9:e4: a4:b5:ce:55:09:18:02:ba:ba:74:d9:da:8d:c3:fb: c6:10:27:40:66:b9:7f:30:58:38:f5:85:b2:03:07: a7:db:3d:0d:66:68:4f:29:13:9b:f2:3b:1e:0e:60: 82:86:34:22:54:06:8c:5e:fa:39:9c:aa:e5:44:4d: 37:a7:39:95:70:ed:29:10:cb:d4:5d:f6:b3:e4:34: a0:1f:30:4b:22:7c:dc:17:d8:9f:3d:21:9d:cf:34: 7c:4a:0c:75:13:8c:8d:be:35:0d:3e:b8:be:80:96: 69:eb:ba:bf:33:7b:2f:38:5a:4b:c5:59:bb:1e:3f: 82:81:69:6e:fb:50:52:e6:83:f8:9d:44:62:3e:59: 05:89:7a:e4:47:ef:09:1b:48:45:1c:9b:90:0b:28: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:86:B1:01:4E:89:46:47:77:BF:1C:C1:A6:1C:F9:73:2B:3F:5D X509v3 Authority Key Identifier: keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ed:16:81:a4:1f:57:09:d8:c4:95:4c:25:80:c5:a5:8f:4e: c8:06:fa:27:82:df:52:5d:ec:d5:ae:9f:3e:ed:9b:df:d4:63: 39:13:c7:27:cc:8b:1e:ba:4f:81:7b:80:d6:09:14:5e:a5:56: 88:31:26:c0:e7:b9:3f:08:22:aa:f3:69:81:35:df:c4:8a:bd: 8f:9e:f6:01:4e:21:d6:7c:63:2c:f8:de:02:76:e6:7c:ad:38: 3d:e7:57:1e:d7:f6:08:90:15:ef:25:cb:14:a0:de:ae:41:b3: 94:47:bb:e1:e2:a2:5f:95:74:aa:6e:70:7a:e6:84:1f:25:4a: 4f:af:ed:52:96:6a:85:65:8b:cc:74:b3:05:92:d7:52:94:1d: 2e:26:3c:44:c4:60:c8:23:64:dc:49:52:7d:ce:83:15:c8:90: ac:93:2a:2e:30:bf:c1:5c:1e:93:5b:37:1b:5d:99:68:07:e9: b7:c1:c8:5d:5e:d5:f9:dd:64:8d:99:99:53:ed:69:ed:2c:36: c6:10:00:6a:04:14:59:b6:89:85:64:40:51:48:af:1f:74:08: 07:d7:9b:3d:99:21:d8:83:b0:e7:7f:29:25:67:48:19:82:48: 74:ca:a9:ca:bb:a2:30:92:71:44:f2:ae:c0:84:bc:70:f2:28: 2c:d6:c8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERDMxMTAvBgNVBAUTKEMyRTBCNTgzREE0MERCNkREODMzMDUxQzA1MjQ1OTlF MUE1OTAyQzYwHhcNMjQxMTIyMjA0MjExWhcNMjQxMTI5MjA0MjExWjAYMRYwFAYD VQQDEw02NzQwZWNhMy1lMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3x13bA+L9IhfUTRYUxzuwN2jn3yTqNjRgkO1e2LAncf0+boJvsPLkoNs/UWT E61cuCgXQB3Gt7FZ7+IhVVu7SCC0z2QUikwEwpC4+A18Rcqk/VAZ+28R1YOTwzfo NEP6GrBTDthTueSktc5VCRgCurp02dqNw/vGECdAZrl/MFg49YWyAwen2z0NZmhP KROb8jseDmCChjQiVAaMXvo5nKrlRE03pzmVcO0pEMvUXfaz5DSgHzBLInzcF9if PSGdzzR8Sgx1E4yNvjUNPri+gJZp67q/M3svOFpLxVm7Hj+CgWlu+1BS5oP4nURi PlkFiXrkR+8JG0hFHJuQCyiAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEknhrEB TolGR3e/HMGmHPlzKz9dMB8GA1UdIwQYMBaAFMLgtYPaQNtt2DMFHAUkWZ4aWQLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0REMy8wRDcxNTAzMkQw OTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIyM1lNd1VjQlNSWm5ocFpB c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d1QzFnOXBBMjIzWU13VWNCU1JabmhwWkFzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0REMy8wRDcxNTAzMkQwOTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIy M1lNd1VjQlNSWm5ocFpBc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg7RaBpB9XCdjElUwlgMWlj07IBvongt9SXezVrp8+7Zvf1GM5E8cn zIseuk+Be4DWCRRepVaIMSbA57k/CCKq82mBNd/Eir2PnvYBTiHWfGMs+N4CduZ8 rTg951ce1/YIkBXvJcsUoN6uQbOUR7vh4qJflXSqbnB65oQfJUpPr+1SlmqFZYvM dLMFktdSlB0uJjxExGDII2TcSVJ9zoMVyJCskyouML/BXB6TWzcbXZloB+m3wchd XtX53WSNmZlT7WntLDbGEABqBBRZtomFZEBRSK8fdAgH15s9mSHYg7DnfyklZ0gZ gkh0yqnKu6IwknFE8q7AhLxw8igs1sgk -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org