$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: QeA8aACCKCwscGH/xM7dQ2SRmGuAHabh8hw9qq1bGuw= Subject key identifier: 71:C3:FF:6E:30:52:6A:A9:CD:FC:2D:2A:BE:59:EE:E3:4A:CA:39:2D Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: 33 Signing time: Thu 21 Nov 2024 05:41:16 +0000 Manifest this update: Thu 21 Nov 2024 05:41:16 +0000 Manifest next update: Thu 28 Nov 2024 05:41:16 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: KyZvzzhliAk4kZ4p5QxBJySG004ccvMUle2sLjo+7Ds=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: atTdCHE/dOxVB22J8uOVRUHo7cPd4x9PndNRWzZINF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Nov 21 05:41:16 2024 GMT Not After : Nov 28 05:41:16 2024 GMT Subject: CN=673ec7fc-fa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:60:cc:38:4a:09:be:b4:d3:24:05:4e:c4: 97:3e:9d:ef:c2:f1:7f:48:3b:6e:3d:39:dd:8a:52: 7f:f7:7e:9f:5b:73:7f:32:76:ca:88:3c:1b:35:2d: 93:62:18:11:4c:af:89:e4:ee:72:a1:1c:d2:5a:75: 15:06:90:bb:4c:ee:5f:40:86:28:1e:33:91:f3:7d: 5d:7f:fe:78:12:03:84:9f:e6:df:a7:57:7d:5b:7b: f6:28:48:7c:a4:85:ae:c9:d6:85:34:9b:dd:11:da: c9:3c:6e:78:cd:d0:fc:07:6a:ee:8a:3e:23:18:f0: 59:5a:79:65:d4:5b:39:ee:c8:41:62:67:9d:01:ca: 39:07:7d:11:45:93:74:5f:d1:4e:d9:39:e5:d5:a3: fc:ac:41:79:1c:50:95:ea:6d:6a:48:c4:ac:24:86: 85:89:5f:4b:bf:50:df:91:ae:2d:af:07:c7:8d:b5: 2c:91:46:7b:b5:1f:50:ba:54:30:c4:7c:57:76:9e: d0:b5:d5:aa:f8:85:ee:be:86:62:21:65:79:d3:52: bc:75:8d:93:d5:72:a2:91:66:41:c9:bd:1f:73:27: f2:15:0b:96:43:bc:66:07:8c:f7:60:00:eb:13:df: 60:cf:b1:9b:d8:e0:a2:d5:62:0f:ef:01:31:5b:88: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:FF:6E:30:52:6A:A9:CD:FC:2D:2A:BE:59:EE:E3:4A:CA:39:2D X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ef:cb:94:c0:87:4a:67:dd:f5:9e:02:db:06:c8:c7:6b:76: 45:3c:0d:1d:b4:1c:ba:a2:f4:40:9d:f7:b7:51:0f:d3:77:5c: 29:27:64:05:75:cf:45:c7:c1:ee:38:03:b1:be:79:e6:62:9f: 73:0f:37:58:fe:4f:f2:0d:b4:5c:f2:be:ab:b9:e3:3d:7a:76: d8:fb:be:78:2e:93:9a:d7:b0:65:77:8a:b6:fc:fd:e0:26:41: f4:d2:12:dd:35:f7:13:42:96:24:a0:06:5a:a2:82:14:6e:d9: ab:5b:bc:d6:d7:00:f2:d1:63:74:50:bd:d5:3b:d7:6f:3a:c3: 16:c3:ce:97:16:d3:43:f9:83:a9:77:2d:b9:42:6c:64:8a:eb: 0d:d4:d6:a6:9e:9f:ab:f7:d5:75:e4:fb:92:f8:4a:e2:e2:15: 2f:83:25:63:74:e5:df:0f:c6:2d:07:76:9b:67:30:45:e8:0f: da:0b:bf:1f:93:42:65:c6:11:2d:b1:b0:4c:ac:ab:e5:87:a2: 7d:95:f7:07:52:06:96:d0:8f:16:b9:6e:3f:ed:0d:13:c8:b7: 9d:9f:62:67:a4:64:2f:e2:ad:1a:f9:9a:df:53:b0:d7:aa:87: 72:e8:d8:4a:a3:ac:f3:57:d0:b2:fd:c5:28:ea:a0:56:97:92: 6f:82:0a:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzdDRDExMC8GA1UEBRMoQzMzNzJERTFGRTlFNTNDMThCMzA1MTZEOTY0QzQzNjcy MkVCM0VDQjAeFw0yNDExMjEwNTQxMTZaFw0yNDExMjgwNTQxMTZaMBgxFjAUBgNV BAMTDTY3M2VjN2ZjLWZhNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2lmDMOEoJvrTTJAVOxJc+ne/C8X9IO249Od2KUn/3fp9bc38ydsqIPBs1LZNi GBFMr4nk7nKhHNJadRUGkLtM7l9AhigeM5HzfV1//ngSA4Sf5t+nV31be/YoSHyk ha7J1oU0m90R2sk8bnjN0PwHau6KPiMY8FlaeWXUWznuyEFiZ50ByjkHfRFFk3Rf 0U7ZOeXVo/ysQXkcUJXqbWpIxKwkhoWJX0u/UN+Rri2vB8eNtSyRRnu1H1C6VDDE fFd2ntC11ar4he6+hmIhZXnTUrx1jZPVcqKRZkHJvR9zJ/IVC5ZDvGYHjPdgAOsT 32DPsZvY4KLVYg/vATFbiDxZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUccP/bjBS aqnN/C0qvlnu40rKOS0wHwYDVR0jBBgwFoAUwzct4f6eU8GLMFFtlkxDZyLrPssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDN0NEL0Q2NEExRkI0NUVB MjExRUZCMTY3NzI0M0M0RjlBRTAyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd3pjdDRmNmVVOEdMTUZGdGxreERaeUxyUHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD N0NEL0Q2NEExRkI0NUVBMjExRUZCMTY3NzI0M0M0RjlBRTAyL3d6Y3Q0ZjZlVThH TE1GRnRsa3hEWnlMclBzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABTvy5TAh0pn3fWeAtsGyMdrdkU8DR20HLqi9ECd97dRD9N3XCknZAV1 z0XHwe44A7G+eeZin3MPN1j+T/INtFzyvqu54z16dtj7vnguk5rXsGV3irb8/eAm QfTSEt019xNCliSgBlqighRu2atbvNbXAPLRY3RQvdU71286wxbDzpcW00P5g6l3 LblCbGSK6w3U1qaen6v31XXk+5L4SuLiFS+DJWN05d8Pxi0HdptnMEXoD9oLvx+T QmXGES2xsEysq+WHon2V9wdSBpbQjxa5bj/tDRPIt52fYmekZC/irRr5mt9TsNeq h3Lo2EqjrPNX0LL9xSjqoFaXkm+CCuk= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org