$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: q7Y5WQfswDOjxml7yf4wWllTjKeqWJgWSyo6uR35HK4= Subject key identifier: C7:08:83:E0:54:2B:89:86:F1:19:1E:A6:79:31:73:5C:54:31:20:90 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 3447 Signing time: Wed 20 Nov 2024 14:26:13 +0000 Manifest this update: Wed 20 Nov 2024 14:26:12 +0000 Manifest next update: Wed 27 Nov 2024 14:26:12 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: SyIXPeXlKl6CuuCtjPnwXs2dIawsg+eys1fRlnYAhUY=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: OhyFTZMkQ0Lsb0HJnA8vV6teBU6PIDkPYMH0Rk7064s=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: neNYJqIEz8xW2AoFgnO+vg+NOrfZM+OF1VhMZH+wkRk=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: A75OHSDWXW0WzjUXTIrXgGI8y9ggeXqBCTyyb2T7Ldw=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: JK8W6UaIKOwZbbLYWrHQgOdLnCofpXI6UdkvJKjgYgE=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: lzFmgFwlx+ysDvsRN+ouOm/eTsfD/xJ8/CNYdaKB1L8=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: atmIiyo4XPPU6AeHw1WXpgRnFa7jfd2pOHkWGew1+XE=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: VDYRnkXPM98d5RA7/NO91xO7Z9K49iVQHvJBdyHXoqM=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: uv4YHJGeHIKZEuFqJlGDqjwkBu45qN9VkY0Iz5VKmrM=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: InWU/AiONnrgo1wTkMsfQ5x6H98uvw9sacgEkC/ZGcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Nov 20 14:26:12 2024 GMT Not After : Nov 27 14:26:12 2024 GMT Subject: CN=673df185-154a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:44:cc:8d:6c:cb:14:6a:ea:23:55:e6:ef: 3a:3c:10:a5:21:c0:c6:9f:08:3e:68:cf:61:bd:8e: 41:28:b2:cf:a2:e5:75:be:22:b9:71:51:5a:2d:9e: 3d:c4:46:15:c8:c7:61:11:fa:f3:1b:b7:2e:85:38: 7e:49:17:4f:fe:ed:99:2e:2b:d4:30:92:36:4c:b3: 0e:06:29:8c:d4:96:74:7c:be:83:cd:ee:a1:df:41: e1:06:a0:a0:f3:64:ba:14:b4:c7:ee:c5:3b:cb:30: 0a:c7:1d:5b:04:4b:07:86:7a:04:fa:19:1c:62:94: 68:6f:c0:7e:64:b3:a6:c9:10:58:ff:64:2e:1d:fb: f0:97:2c:bd:8d:83:af:93:c9:e4:60:9a:fd:a3:6f: be:d1:4c:44:8b:23:9a:c8:35:e1:c3:34:22:bd:55: f9:26:e9:fc:81:d3:57:3c:1d:b9:55:ae:e6:23:a0: 38:b5:08:4d:23:e9:f9:a5:77:60:71:9b:2a:97:6e: 03:30:4d:d3:3b:12:24:cb:7e:69:7c:d5:bb:62:bd: 27:6a:5c:f4:55:97:f9:d7:d0:51:78:33:a0:1e:66: 43:b2:fb:cb:03:ed:7b:e8:67:91:54:cb:1e:4f:ac: bd:a7:3f:16:be:54:f0:52:5e:50:64:98:31:b9:19: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:83:E0:54:2B:89:86:F1:19:1E:A6:79:31:73:5C:54:31:20:90 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:59:b0:af:f1:02:3b:78:5e:86:0a:7d:02:75:d2:02:07:db: 31:06:3a:da:50:11:63:d7:23:93:1b:ff:9f:d3:1d:18:55:0c: ac:f2:ec:a8:cd:9f:f4:8c:27:99:85:0a:ca:9a:d9:ea:8b:16: a5:bf:b5:08:4e:d3:a3:5e:4c:e8:28:c5:f6:3c:df:93:24:d3: 7f:3b:ec:0f:d0:19:c4:0c:47:2d:93:78:4a:f7:17:a4:e9:e8: 91:b0:d4:b9:30:26:d7:44:7e:32:17:51:fc:53:60:6b:a5:9d: b4:16:28:39:8e:49:6b:52:55:de:52:97:93:99:b9:67:6c:97: a9:74:8a:30:d4:d3:e6:b7:9f:15:47:3b:b8:d9:c9:58:67:c1: 51:06:19:ef:be:01:86:1e:cb:1d:79:5f:e8:f5:d1:85:f0:03: 5f:dd:c4:3b:c8:de:42:92:b9:0a:c4:b6:8e:16:7c:2f:24:ce: 09:f0:dd:bb:c9:9c:ff:4e:96:cf:d0:2d:9a:6a:b2:5b:1b:4b: 33:2f:01:6c:2b:cf:f8:d7:3f:79:b4:45:cf:05:b4:86:1b:a9: 47:3b:1b:21:bc:38:90:e4:bd:28:cd:63:7b:68:b4:0d:06:06: a2:74:45:f4:18:4d:75:17:21:dd:6f:f7:d5:da:80:70:e0:cd: 20:a3:ff:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjQxMTIwMTQyNjEyWhcNMjQxMTI3MTQyNjEyWjAYMRYwFAYD VQQDEw02NzNkZjE4NS0xNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2b9EzI1syxRq6iNV5u86PBClIcDGnwg+aM9hvY5BKLLPouV1viK5cVFaLZ49 xEYVyMdhEfrzG7cuhTh+SRdP/u2ZLivUMJI2TLMOBimM1JZ0fL6Dze6h30HhBqCg 82S6FLTH7sU7yzAKxx1bBEsHhnoE+hkcYpRob8B+ZLOmyRBY/2QuHfvwlyy9jYOv k8nkYJr9o2++0UxEiyOayDXhwzQivVX5Jun8gdNXPB25Va7mI6A4tQhNI+n5pXdg cZsql24DME3TOxIky35pfNW7Yr0nalz0VZf519BReDOgHmZDsvvLA+176GeRVMse T6y9pz8WvlTwUl5QZJgxuRkKKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcIg+BU K4mG8Rkepnkxc1xUMSCQMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGWbCv8QI7eF6GCn0CddICB9sxBjraUBFj1yOTG/+f0x0YVQys8uyo zZ/0jCeZhQrKmtnqixalv7UITtOjXkzoKMX2PN+TJNN/O+wP0BnEDEctk3hK9xek 6eiRsNS5MCbXRH4yF1H8U2BrpZ20Fig5jklrUlXeUpeTmblnbJepdIow1NPmt58V Rzu42clYZ8FRBhnvvgGGHssdeV/o9dGF8ANf3cQ7yN5CkrkKxLaOFnwvJM4J8N27 yZz/TpbP0C2aarJbG0szLwFsK8/41z95tEXPBbSGG6lHOxshvDiQ5L0ozWN7aLQN BgaidEX0GE11FyHdb/fV2oBw4M0go//s -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:06 2024 by rpki-client on console-ams.rpki-client.org