$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft File: wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json) Hash identifier: xBrpFBGZY+kZstrdLt1Q17RG7iJgAH5wSDmMrK2JSZY= Subject key identifier: F7:26:2A:3E:31:C1:C5:EE:C0:1D:4B:7D:E8:8A:7F:41:58:1E:0B:64 Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 Certificate issuer: /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Certificate serial: 18FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft Manifest number: 18ED Signing time: Fri 22 Nov 2024 16:26:53 +0000 Manifest this update: Fri 22 Nov 2024 16:26:52 +0000 Manifest next update: Fri 29 Nov 2024 16:26:52 +0000 Files and hashes: 1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: D7Eim8ThgXMwwhMVlYRFzgpmB75I9cLE3HSuC1YoET4=) 2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: 4h9/gedAkyFkLOFX95sZ0gtcQY54jVFNaMdtuEQXK5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6398 (0x18fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Validity Not Before: Nov 22 16:26:52 2024 GMT Not After : Nov 29 16:26:52 2024 GMT Subject: CN=6740b0cd-d5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:7f:e5:6e:a2:da:85:ed:88:a6:08:4c:6b: 70:2c:de:0a:6d:98:c7:44:04:e4:00:8b:83:76:47: 49:d5:8e:e4:bb:9b:53:d6:14:77:88:62:f3:67:c9: c6:2b:f5:13:a8:8a:93:ba:5d:48:45:6b:91:61:c7: 68:48:85:2d:d7:6a:ec:b5:96:e5:5d:9a:83:e4:85: 52:8e:e6:23:2d:c7:2b:a4:8f:65:17:0c:2d:fa:a1: 93:ff:05:73:73:af:0a:56:09:91:55:04:ef:94:17: 57:d4:91:67:16:c8:c4:38:92:10:ad:34:8a:6c:2c: 0f:00:50:21:10:e9:43:a1:d3:b7:1d:30:59:b7:f0: a8:70:41:70:a2:52:12:30:1c:34:12:71:55:93:90: c1:6a:75:59:27:19:7c:a7:61:87:8f:28:53:f5:28: 6d:29:da:a3:e8:84:66:f8:aa:df:85:fd:d9:95:5d: 1b:a9:33:3d:b6:b1:46:af:9f:4b:ff:c7:e2:54:ed: c0:d4:00:bb:c7:3a:19:d9:12:b9:5e:27:6b:e7:70: 41:57:cd:d4:d1:99:00:f0:ec:a1:23:3c:75:6d:20: ac:8c:ba:aa:1d:cc:d8:4f:bc:12:4d:a1:d1:11:34: e1:e3:24:a4:d7:1c:01:2a:a5:c5:e1:4f:03:6d:48: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:26:2A:3E:31:C1:C5:EE:C0:1D:4B:7D:E8:8A:7F:41:58:1E:0B:64 X509v3 Authority Key Identifier: keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3e:b8:8a:cd:80:1b:f6:59:b7:62:55:42:89:6f:1d:fe:2d: 86:8f:90:6f:c7:03:df:ba:5e:d7:4c:08:b4:a9:d6:e1:7d:e0: fb:76:0b:23:c5:a8:57:5f:21:0f:85:a8:a0:a0:ee:31:65:23: 32:ad:3f:22:44:84:66:c3:ba:be:80:7f:04:09:0e:e4:b3:f7: 31:43:d2:db:54:e9:85:65:cc:b7:1a:68:56:da:47:92:1b:76: 31:ed:3f:98:7b:5c:24:3c:18:27:ad:74:55:9a:84:ef:ba:3e: 34:47:c1:38:8e:49:e1:a8:b5:8a:46:22:24:e1:d0:7c:00:48: 8b:9b:a4:72:ae:39:3d:68:f5:f3:1f:76:a0:73:9f:14:c9:6e: 8d:a3:13:c9:be:01:b5:cf:29:c5:13:37:2c:f7:ed:e4:14:e8: 1f:21:95:50:ef:d6:28:1f:c0:69:36:32:77:1d:47:be:c4:14: 19:a0:de:8a:e4:0b:6f:0d:93:bb:ef:bf:2c:f7:bd:6f:01:5d: f7:54:35:f7:b3:2e:d9:79:9c:c9:7f:b3:5e:50:09:fa:7e:df: e3:c6:4a:b0:23:7b:57:93:4e:8b:42:1e:19:81:69:cc:a4:1c: 90:36:d2:a2:93:bf:da:da:3e:65:9f:c0:8e:5f:3b:80:42:d0: e1:4f:7d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDQzMxMTAvBgNVBAUTKEMxQUE1Q0U1MkUxMTUzM0I2NDFFM0I2ODVBQjMyM0M0 Njk3NkE0MDEwHhcNMjQxMTIyMTYyNjUyWhcNMjQxMTI5MTYyNjUyWjAYMRYwFAYD VQQDEw02NzQwYjBjZC1kNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWh/5W6i2oXtiKYITGtwLN4KbZjHRATkAIuDdkdJ1Y7ku5tT1hR3iGLzZ8nG K/UTqIqTul1IRWuRYcdoSIUt12rstZblXZqD5IVSjuYjLccrpI9lFwwt+qGT/wVz c68KVgmRVQTvlBdX1JFnFsjEOJIQrTSKbCwPAFAhEOlDodO3HTBZt/CocEFwolIS MBw0EnFVk5DBanVZJxl8p2GHjyhT9ShtKdqj6IRm+Krfhf3ZlV0bqTM9trFGr59L /8fiVO3A1AC7xzoZ2RK5Xidr53BBV83U0ZkA8OyhIzx1bSCsjLqqHczYT7wSTaHR ETTh4ySk1xwBKqXF4U8DbUi9jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcmKj4x wcXuwB1LfeiKf0FYHgtkMB8GA1UdIwQYMBaAFMGqXOUuEVM7ZB47aFqzI8RpdqQB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUNDMy9ENEY0QjQ4ODc3 RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6dGtIanRvV3JNanhHbDJw QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhcGM1UzRSVXp0a0hqdG9Xck1qeEdsMnBBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUNDMy9ENEY0QjQ4ODc3RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6 dGtIanRvV3JNanhHbDJwQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlPriKzYAb9lm3YlVCiW8d/i2Gj5BvxwPful7XTAi0qdbhfeD7dgsj xahXXyEPhaigoO4xZSMyrT8iRIRmw7q+gH8ECQ7ks/cxQ9LbVOmFZcy3GmhW2keS G3Yx7T+Ye1wkPBgnrXRVmoTvuj40R8E4jknhqLWKRiIk4dB8AEiLm6Ryrjk9aPXz H3agc58UyW6NoxPJvgG1zynFEzcs9+3kFOgfIZVQ79YoH8BpNjJ3HUe+xBQZoN6K 5AtvDZO7778s971vAV33VDX3sy7ZeZzJf7NeUAn6ft/jxkqwI3tXk06LQh4ZgWnM pByQNtKik7/a2j5ln8COXzuAQtDhT33d -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org