$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json) Hash identifier: 8i8xB+DVxQZN1K8ZLd0lBjMx77EUw3E2w+zz3npoacM= Subject key identifier: 86:CC:08:ED:D6:F8:0C:F8:07:43:B8:35:84:74:9B:CF:97:D4:75:7A Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft Manifest number: 03F6 Signing time: Sat 23 Nov 2024 00:03:13 +0000 Manifest this update: Sat 23 Nov 2024 00:03:12 +0000 Manifest next update: Sat 30 Nov 2024 00:03:12 +0000 Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: OdlpLm+m6HLmyiBAa4PvHMc9jcrryz9y+4S+DRvMG9A=) 2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: QBD6YJv6MqaQvb/fyqpzOOca05ASQtdQe3enzaytMzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Validity Not Before: Nov 23 00:03:12 2024 GMT Not After : Nov 30 00:03:12 2024 GMT Subject: CN=67411bc1-ace5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:3b:1f:e2:cd:f0:fd:70:a6:1a:29:fd:9d: 8a:48:f7:8b:16:b2:c9:64:20:d7:ff:a1:b1:33:ff: aa:5b:01:99:37:60:fd:b4:5a:bc:57:a2:bf:06:33: 01:c8:4b:f2:db:5f:2c:f5:a4:40:46:d1:f1:55:d5: 1c:8e:7b:df:95:3f:32:63:c8:ce:fe:a9:95:86:d9: 40:d2:f0:7d:e6:8f:8e:1e:6e:15:b6:1d:9a:b9:8e: 1a:a1:18:0e:76:87:71:ed:00:f1:e8:ba:cc:87:6b: 27:d9:83:fe:63:80:5c:73:49:9d:38:b2:1e:80:aa: 0e:ee:71:eb:fc:6b:88:58:68:76:2c:ce:ba:3e:72: 0c:99:66:be:bf:f9:48:41:01:32:75:f9:2f:8d:69: 6c:c7:d4:1f:31:05:3e:56:d4:de:57:bb:14:95:78: db:dd:c9:79:29:9c:b6:f9:f1:4b:cd:b0:eb:94:fc: cc:c7:14:a9:a8:c1:59:02:0c:12:e6:bb:90:09:e3: d2:8a:74:16:e0:4d:99:f2:33:ae:67:d8:65:86:f6: bb:35:42:7e:a9:a4:f0:ed:6f:66:d0:78:24:4f:33: fa:42:85:ac:39:c5:fb:a9:54:8d:f2:33:76:27:57: 74:28:6e:7d:ef:65:74:99:9d:e0:e2:2d:6e:01:2d: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:08:ED:D6:F8:0C:F8:07:43:B8:35:84:74:9B:CF:97:D4:75:7A X509v3 Authority Key Identifier: keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4c:6e:ab:14:31:6e:f2:69:9d:75:df:53:75:a3:e9:bd:51: d1:19:f0:c8:03:9c:b2:00:84:b0:d6:05:b4:20:dc:01:8f:0f: dd:98:5a:0b:68:ad:7a:0a:9b:28:b7:49:96:ff:6f:66:77:8a: f1:63:42:66:2a:85:27:27:25:c3:24:07:f3:48:28:c2:3a:8b: bb:b6:f0:da:30:08:91:3b:e7:4b:70:de:05:d5:81:d8:20:43: ff:d0:e5:e1:43:a5:e7:ef:e3:fa:6f:b9:58:b2:5f:a3:f7:96: 2f:8c:61:75:73:84:1e:4c:df:49:9e:53:be:04:15:be:ec:7a: 8c:71:d7:58:bd:34:58:d5:95:85:f6:a9:f9:c1:c9:ee:57:45: 9f:3c:a6:40:2e:fc:24:f3:e9:6a:12:ea:46:4e:db:7c:c3:58: 04:36:04:08:ec:66:cf:31:69:eb:ab:fd:52:13:7b:16:23:89: 68:7d:fe:09:d0:ed:63:ac:dc:cb:0b:54:1a:cb:c5:14:e2:d4: 52:9c:b3:a1:05:9b:1f:3b:9c:bc:96:f7:f8:d7:4c:eb:43:3f: ce:25:bf:bc:50:31:c4:30:7e:e8:9e:5d:87:dc:81:10:4f:22: 39:a3:9c:b5:04:0f:42:6b:4f:48:0e:e9:56:66:85:2d:4d:82: 3a:40:68:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF NjgyNDlERUIwHhcNMjQxMTIzMDAwMzEyWhcNMjQxMTMwMDAwMzEyWjAYMRYwFAYD VQQDEw02NzQxMWJjMS1hY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNk7H+LN8P1wphop/Z2KSPeLFrLJZCDX/6GxM/+qWwGZN2D9tFq8V6K/BjMB yEvy218s9aRARtHxVdUcjnvflT8yY8jO/qmVhtlA0vB95o+OHm4Vth2auY4aoRgO dodx7QDx6LrMh2sn2YP+Y4Bcc0mdOLIegKoO7nHr/GuIWGh2LM66PnIMmWa+v/lI QQEydfkvjWlsx9QfMQU+VtTeV7sUlXjb3cl5KZy2+fFLzbDrlPzMxxSpqMFZAgwS 5ruQCePSinQW4E2Z8jOuZ9hlhva7NUJ+qaTw7W9m0HgkTzP6QoWsOcX7qVSN8jN2 J1d0KG5972V0mZ3g4i1uAS1pdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbMCO3W +Az4B0O4NYR0m8+X1HV6MB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4 UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0TG6rFDFu8mmddd9TdaPpvVHRGfDIA5yyAISw1gW0INwBjw/dmFoL aK16Cpsot0mW/29md4rxY0JmKoUnJyXDJAfzSCjCOou7tvDaMAiRO+dLcN4F1YHY IEP/0OXhQ6Xn7+P6b7lYsl+j95YvjGF1c4QeTN9JnlO+BBW+7HqMcddYvTRY1ZWF 9qn5wcnuV0WfPKZALvwk8+lqEupGTtt8w1gENgQI7GbPMWnrq/1SE3sWI4loff4J 0O1jrNzLC1Qay8UU4tRSnLOhBZsfO5y8lvf410zrQz/OJb+8UDHEMH7onl2H3IEQ TyI5o5y1BA9Ca09IDulWZoUtTYI6QGjB -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org