$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: 7GiMdMdXbi8oKfyV8NJLs2g7lSDo/zl61t/WL+M86VQ= Subject key identifier: CF:87:34:5C:C7:90:A0:5F:51:2A:6E:B2:CF:89:0A:CF:A3:FD:84:C7 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: 3E Signing time: Wed 23 Oct 2024 06:06:44 +0000 Manifest this update: Wed 23 Oct 2024 06:06:44 +0000 Manifest next update: Wed 30 Oct 2024 06:06:44 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: j2+9kcUvIfRfON9nmWdvKeenX3EK8OMOqtQ6pXYHjfA=) 2: 1F04A04C346611EF90CE2150C4F9AE02.roa (hash: zif08OzaGPPedGPIwrQhRPE8pOs4ZsH49eqd+XDcfaU=) 3: F76C6448346511EF80C6F34FC4F9AE02.roa (hash: Don0S4nk9nm0mmjHLO0K6d0HSv8chlDSOmW/UglwVZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Oct 23 06:06:44 2024 GMT Not After : Oct 30 06:06:44 2024 GMT Subject: CN=67189274-36e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:51:0c:88:f5:04:d3:ca:b9:2c:f0:5a:af: 59:e7:c1:9a:ce:2c:43:36:c7:85:89:7a:8b:ab:1b: b2:f6:84:dc:0e:cc:0a:1b:f1:38:2f:2a:b7:dd:4b: 82:50:6f:39:82:3d:13:64:fb:b7:b2:e9:00:94:56: ba:b4:e8:7e:c3:80:bc:64:2d:45:ef:b3:81:80:07: e1:58:20:96:79:89:5e:d5:37:9b:6d:5c:9c:f8:9f: 19:6c:49:4b:66:3a:5d:36:5b:f6:58:7b:ea:b4:57: 52:c8:5e:2c:6c:ff:64:14:4e:aa:c6:fd:9d:57:66: 27:cd:c8:cf:9f:23:10:23:be:9b:af:b7:68:f6:bd: e2:71:0c:28:4b:90:bf:77:28:8a:f1:f9:79:15:c8: 27:12:fb:db:bb:59:61:ce:11:0a:d7:ec:74:65:4d: c9:33:8e:e4:4f:e8:dc:77:0a:2d:89:69:43:9b:f6: d2:21:fc:10:1e:f2:64:9c:3c:27:eb:2c:de:13:7e: af:ba:0a:a5:95:49:36:6c:92:be:f9:4c:1c:9b:39: bf:c1:23:b0:3d:b3:50:65:85:18:df:cc:1e:73:5a: e7:59:3c:95:fb:64:cf:5c:84:62:81:18:72:88:78: c2:96:49:f4:b6:6d:87:ab:81:76:82:32:a1:d3:08: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:34:5C:C7:90:A0:5F:51:2A:6E:B2:CF:89:0A:CF:A3:FD:84:C7 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:55:d6:ad:48:f4:93:fc:7f:2f:5d:84:2e:18:7e:8b:ee:1a: 67:8d:8f:48:b7:af:cd:1b:21:54:07:98:3d:73:5e:0b:fe:46: e9:79:38:4a:b5:60:ef:29:9f:c7:a5:b3:20:fd:e2:bb:bd:6a: fe:19:99:4a:22:6f:22:e8:e3:05:ae:43:6c:7f:b6:e3:7d:89: 03:b9:94:9b:60:89:fd:20:a7:51:2c:28:e4:1e:2b:e1:13:3c: 7e:eb:bb:2e:e9:d6:cd:af:22:db:ba:e9:35:e1:69:82:85:86: c2:5f:3a:f8:f3:d4:cc:ca:cf:83:18:4f:1b:bc:56:73:87:65: 36:de:e4:a0:b1:4f:72:0e:12:19:4f:c0:d0:01:95:ce:f5:45: bf:d9:20:1a:9b:6f:e0:fc:44:8c:09:81:f5:6b:35:79:f3:9c: 55:78:24:69:94:48:ea:08:64:77:ec:ce:76:d1:b4:6b:ee:b7: 4d:60:df:09:4b:6c:5a:51:92:6c:98:aa:f8:09:85:b8:b6:8c: a7:8a:6a:6d:24:4c:e1:49:d7:22:a4:93:1e:14:c9:a3:ce:14: 34:e6:48:a2:5f:f4:af:5c:ea:2b:78:70:e5:48:cd:30:c6:71: 07:40:d1:1b:a8:76:4e:60:5d:62:3c:e3:90:7f:a7:23:55:01: 7c:ff:fa:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NFMzExMC8GA1UEBRMoQzI2RjQ2RkQ5OTUyQjNBRjNBN0Q3MTVERTFCRjNBNjFF MjVDNzk4QTAeFw0yNDEwMjMwNjA2NDRaFw0yNDEwMzAwNjA2NDRaMBgxFjAUBgNV BAMTDTY3MTg5Mjc0LTM2ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvC1EMiPUE08q5LPBar1nnwZrOLEM2x4WJeourG7L2hNwOzAob8TgvKrfdS4JQ bzmCPRNk+7ey6QCUVrq06H7DgLxkLUXvs4GAB+FYIJZ5iV7VN5ttXJz4nxlsSUtm Ol02W/ZYe+q0V1LIXixs/2QUTqrG/Z1XZifNyM+fIxAjvpuvt2j2veJxDChLkL93 KIrx+XkVyCcS+9u7WWHOEQrX7HRlTckzjuRP6Nx3Ci2JaUOb9tIh/BAe8mScPCfr LN4Tfq+6CqWVSTZskr75TBybOb/BI7A9s1BlhRjfzB5zWudZPJX7ZM9chGKBGHKI eMKWSfS2bYergXaCMqHTCC/RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz4c0XMeQ oF9RKm6yz4kKz6P9hMcwHwYDVR0jBBgwFoAUwm9G/ZlSs686fXFd4b86YeJceYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0UzL0E5MENBRkM0MzQ2 NTExRUZCOUMwNzY0RkM0RjlBRTAyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd205R19abFNzNjg2ZlhGZDRiODZZZUpjZVlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0UzL0E5MENBRkM0MzQ2NTExRUZCOUMwNzY0RkM0RjlBRTAyL3dtOUdfWmxTczY4 NmZYRmQ0Yjg2WWVKY2VZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdV1q1I9JP8fy9dhC4YfovuGmeNj0i3r80bIVQHmD1zXgv+Rul5OEq1 YO8pn8elsyD94ru9av4ZmUoibyLo4wWuQ2x/tuN9iQO5lJtgif0gp1EsKOQeK+ET PH7ruy7p1s2vItu66TXhaYKFhsJfOvjz1MzKz4MYTxu8VnOHZTbe5KCxT3IOEhlP wNABlc71Rb/ZIBqbb+D8RIwJgfVrNXnznFV4JGmUSOoIZHfsznbRtGvut01g3wlL bFpRkmyYqvgJhbi2jKeKam0kTOFJ1yKkkx4UyaPOFDTmSKJf9K9c6it4cOVIzTDG cQdA0Ruodk5gXWI845B/pyNVAXz/+qg= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org