$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: mnp5XN1t9TBbEuWW2YLQMMO1AQNNTDg20MNLQKv4Wqc= Subject key identifier: 08:C1:F3:D2:78:C9:8B:AC:83:6C:7C:02:42:4B:88:9D:F4:1A:9E:64 Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 0749 Signing time: Fri 22 Nov 2024 21:07:23 +0000 Manifest this update: Fri 22 Nov 2024 21:07:22 +0000 Manifest next update: Fri 29 Nov 2024 21:07:22 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: UxHuKHSnZU5+wLeYODj4dGpuFnTv7ImUNH/dbKf1WFI=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ciOpG8qRab9sKkVmGRn2hy7gpdalC9pHnHF+YnHZNHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Nov 22 21:07:22 2024 GMT Not After : Nov 29 21:07:22 2024 GMT Subject: CN=6740f28a-99ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:56:27:f9:81:d6:38:ed:86:56:74:11:4d: 69:04:21:62:d4:b8:2d:e2:8a:ed:18:52:c4:51:ad: 2f:70:77:e7:94:48:6f:53:c9:6a:ad:5c:6f:21:2e: c1:5c:45:16:a9:de:51:02:d3:ed:23:d6:07:3f:24: a4:8b:95:56:0d:1c:75:42:4b:bd:d3:fa:32:cd:9d: 60:0e:a6:91:58:cf:a0:72:4b:fe:98:63:24:af:89: f6:d0:93:c4:5e:a8:de:a3:68:99:e0:8b:83:b7:16: 10:35:22:b1:c1:10:66:1d:97:12:16:ed:bb:bd:70: 48:60:a4:58:51:fb:93:de:63:a6:4f:68:47:3d:b6: 32:65:b1:b8:21:5e:4f:66:b5:50:2b:28:95:0f:a4: d8:e9:2f:51:e6:ae:cf:e1:95:0a:9a:03:10:d4:60: 95:a2:4c:48:dd:3a:06:84:41:5b:2e:12:2e:41:1b: 6f:7d:4a:bf:c9:47:6c:12:47:9b:a0:0a:09:53:e5: e8:22:d2:be:38:20:dd:7f:0c:c0:43:43:0f:af:dd: b2:df:e1:20:fa:d2:bc:f1:32:d9:8a:68:d8:07:b1: dd:96:08:35:6e:ec:ec:73:1d:0c:c3:6f:e9:b5:5e: 03:8c:2f:f1:c4:e0:62:f3:a2:64:f8:8b:7a:77:93: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C1:F3:D2:78:C9:8B:AC:83:6C:7C:02:42:4B:88:9D:F4:1A:9E:64 X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4d:2e:5f:79:fc:5a:57:a5:65:a0:c6:05:a4:4b:7f:84:79: 4d:ea:68:ea:98:b4:bb:d1:bc:07:cd:aa:04:b2:6a:18:45:da: cb:a6:07:78:29:ac:1a:37:f0:a7:90:36:2e:d5:3d:95:d2:24: cd:16:d5:75:88:51:95:7a:1d:d1:88:54:b8:d3:f0:43:4d:57: 31:d2:61:bd:de:c4:20:83:9c:e3:ee:1e:06:fd:cd:5f:01:4f: fd:30:3e:71:f3:75:c0:1b:a5:44:ac:6a:f2:a9:d7:7a:7d:0f: 2c:a8:97:83:8e:1d:09:71:47:24:62:22:d0:48:a8:68:44:92: 3d:a0:36:c3:94:25:7d:03:60:6f:83:ae:3e:79:7c:da:4f:bd: 7d:09:51:f1:dd:1a:af:5d:d7:89:84:34:71:7c:78:89:e4:1f: c6:c3:ab:8c:3a:95:a9:0b:4f:a4:55:20:48:fd:e7:a4:e5:47: f1:9b:6e:e9:3f:89:db:e1:d3:0f:96:d3:24:ec:73:76:31:5c: 37:aa:86:8a:d2:cc:28:90:db:3f:c0:7f:61:1c:7e:e4:a9:81: 05:dc:0f:27:fd:7e:cd:8b:a2:4d:bb:b6:24:08:5c:fd:7e:c9: bc:98:cd:be:18:2c:c0:a9:73:b2:1b:b4:47:74:4c:a5:70:72: 66:27:37:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjQxMTIyMjEwNzIyWhcNMjQxMTI5MjEwNzIyWjAYMRYwFAYD VQQDEw02NzQwZjI4YS05OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uJWJ/mB1jjthlZ0EU1pBCFi1Lgt4ortGFLEUa0vcHfnlEhvU8lqrVxvIS7B XEUWqd5RAtPtI9YHPySki5VWDRx1Qku90/oyzZ1gDqaRWM+gckv+mGMkr4n20JPE Xqjeo2iZ4IuDtxYQNSKxwRBmHZcSFu27vXBIYKRYUfuT3mOmT2hHPbYyZbG4IV5P ZrVQKyiVD6TY6S9R5q7P4ZUKmgMQ1GCVokxI3ToGhEFbLhIuQRtvfUq/yUdsEkeb oAoJU+XoItK+OCDdfwzAQ0MPr92y3+Eg+tK88TLZimjYB7Hdlgg1buzscx0Mw2/p tV4DjC/xxOBi86Jk+It6d5NPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjB89J4 yYusg2x8AkJLiJ30Gp5kMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeTS5fefxaV6VloMYFpEt/hHlN6mjqmLS70bwHzaoEsmoYRdrLpgd4 KawaN/CnkDYu1T2V0iTNFtV1iFGVeh3RiFS40/BDTVcx0mG93sQgg5zj7h4G/c1f AU/9MD5x83XAG6VErGryqdd6fQ8sqJeDjh0JcUckYiLQSKhoRJI9oDbDlCV9A2Bv g64+eXzaT719CVHx3RqvXdeJhDRxfHiJ5B/Gw6uMOpWpC0+kVSBI/eek5Ufxm27p P4nb4dMPltMk7HN2MVw3qoaK0swokNs/wH9hHH7kqYEF3A8n/X7Ni6JNu7YkCFz9 fsm8mM2+GCzAqXOyG7RHdEylcHJmJzfE -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org