$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft File: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft (raw, json) Hash identifier: 0EsTw7Siwptt6CVur126h87cHbtMUEpmRn9WKfqJupw= Subject key identifier: 13:E8:CE:5E:AD:4C:0F:3B:AC:B0:88:5A:E7:A3:F7:68:73:EA:E0:A1 Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF Certificate issuer: /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft Manifest number: 01CC Signing time: Sat 23 Nov 2024 01:44:50 +0000 Manifest this update: Sat 23 Nov 2024 01:44:49 +0000 Manifest next update: Sat 30 Nov 2024 01:44:49 +0000 Files and hashes: 1: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl (hash: xx7/YmnD16joeNdM+/BDI4yjG51RUx2iBxr5dctgMnI=) 2: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (hash: AjNBzFUDqt6+IEyEaHnoFf3U+H667eB/MqDhSUBVYx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Validity Not Before: Nov 23 01:44:49 2024 GMT Not After : Nov 30 01:44:49 2024 GMT Subject: CN=67413391-99d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:55:8a:3c:8b:4c:03:94:59:0b:92:b4:cb: 97:0c:a8:04:2d:51:0d:00:19:ab:9d:d6:a8:cd:f8: 89:45:e2:e5:c7:98:84:f2:de:e6:aa:c9:3a:cd:4b: 34:88:2a:4c:ec:0a:2f:1c:63:14:da:cd:43:66:5d: af:b8:58:82:4a:75:d6:be:46:c8:9a:84:ee:40:d0: 93:2d:e3:7a:c0:2d:6a:fb:f3:d6:4d:4b:45:da:b6: 55:57:a8:bb:be:77:66:e3:ac:00:3a:6c:53:b3:b9: cf:b5:31:d7:2a:4c:8c:a5:01:00:34:f5:a3:7c:5c: c6:b3:f1:c8:63:57:04:ef:e3:1d:88:89:37:25:92: e1:b0:a9:01:6c:eb:fe:28:26:51:1c:fb:be:c6:89: 05:0e:6a:75:6c:71:d8:50:23:d0:e7:89:b5:bb:3f: 53:3a:07:71:25:ae:3a:3b:61:9c:95:06:fd:1c:6d: b0:a4:1d:21:7c:44:9f:60:df:43:f1:70:1e:5a:8e: 77:b2:7b:e8:1c:2d:79:3e:fa:53:b7:dc:02:9c:7f: 20:4f:b3:9b:d2:9a:ba:c3:ad:6e:39:48:b3:1b:f5: 26:71:4b:d6:28:e9:a8:3f:0e:98:66:06:e0:e1:ab: 01:c8:02:d0:6f:0c:61:6a:5b:75:2d:99:f6:cb:2d: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E8:CE:5E:AD:4C:0F:3B:AC:B0:88:5A:E7:A3:F7:68:73:EA:E0:A1 X509v3 Authority Key Identifier: keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:85:9b:90:94:df:66:52:52:2c:c3:54:32:99:d7:46:b1: 57:09:60:d5:22:49:29:cd:0f:00:62:db:a0:f8:2b:8e:45:8a: dc:45:02:5d:ac:2a:45:70:a1:0e:8c:1e:b4:4c:80:51:d5:7f: 40:78:31:e6:41:f6:fc:60:23:ee:71:d9:ec:0f:a8:62:40:13: 2f:04:e1:c2:5a:76:a7:3f:30:96:3a:88:0f:b9:5e:ff:85:bb: ed:c1:b2:2c:65:fa:29:a6:2d:37:3e:ad:ef:2b:59:b5:49:5e: bb:85:b9:34:f8:b2:43:ad:81:f8:79:4f:41:88:bb:bf:b6:dc: 3b:bf:d3:56:cd:65:b2:b6:97:18:10:fe:55:bf:86:a7:94:4d: 83:ac:fa:53:58:2c:dd:d7:ba:08:e6:75:fa:ac:a2:8d:3e:cb: a8:01:c2:3e:a2:a6:8c:9f:f4:ac:c9:1f:a9:7b:74:3e:91:95: 20:54:da:ac:e6:f8:1a:0b:03:87:b5:12:4b:53:ec:c1:e8:45: 55:5a:64:67:4e:03:7b:70:c4:11:cd:b3:99:0b:a3:b1:4a:51: 3a:2b:01:ec:8b:ca:60:48:4c:6e:af:ec:4c:40:f9:b5:d9:a2: 4c:8e:36:72:47:21:16:10:4c:c0:e6:8f:87:f7:80:3c:a1:1c: 25:f0:fe:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2QjUxMTAvBgNVBAUTKDVBRUNFQUQ1NENCMzZDQkYxQjRBMDBDNENENDEwODQ2 RDIzMTQxRUYwHhcNMjQxMTIzMDE0NDQ5WhcNMjQxMTMwMDE0NDQ5WjAYMRYwFAYD VQQDEw02NzQxMzM5MS05OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw71VijyLTAOUWQuStMuXDKgELVENABmrndaozfiJReLlx5iE8t7mqsk6zUs0 iCpM7AovHGMU2s1DZl2vuFiCSnXWvkbImoTuQNCTLeN6wC1q+/PWTUtF2rZVV6i7 vndm46wAOmxTs7nPtTHXKkyMpQEANPWjfFzGs/HIY1cE7+MdiIk3JZLhsKkBbOv+ KCZRHPu+xokFDmp1bHHYUCPQ54m1uz9TOgdxJa46O2GclQb9HG2wpB0hfESfYN9D 8XAeWo53snvoHC15PvpTt9wCnH8gT7Ob0pq6w61uOUizG/UmcUvWKOmoPw6YZgbg 4asByALQbwxhalt1LZn2yy0fxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPozl6t TA87rLCIWuej92hz6uChMB8GA1UdIwQYMBaAFFrs6tVMs2y/G0oAxM1BCEbSMUHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzZCNS9GNDExNURCQzJC QUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJMOGJTZ0RFelVFSVJ0SXhR ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1enExVXl6Ykw4YlNnREV6VUVJUnRJeFFlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzZCNS9GNDExNURCQzJCQUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJM OGJTZ0RFelVFSVJ0SXhRZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysIWbkJTfZlJSLMNUMpnXRrFXCWDVIkkpzQ8AYtug+CuORYrcRQJd rCpFcKEOjB60TIBR1X9AeDHmQfb8YCPucdnsD6hiQBMvBOHCWnanPzCWOogPuV7/ hbvtwbIsZfoppi03Pq3vK1m1SV67hbk0+LJDrYH4eU9BiLu/ttw7v9NWzWWytpcY EP5Vv4anlE2DrPpTWCzd17oI5nX6rKKNPsuoAcI+oqaMn/SsyR+pe3Q+kZUgVNqs 5vgaCwOHtRJLU+zB6EVVWmRnTgN7cMQRzbOZC6OxSlE6KwHsi8pgSExur+xMQPm1 2aJMjjZyRyEWEEzA5o+H94A8oRwl8P6H -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:30 2024 by rpki-client on console-fra.rpki-client.org