$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: 4XbV8yUPi+j7dWxLDLWTM+3pB51xyURvfN/NXZHXOgY= Subject key identifier: 72:A6:DA:A5:EE:A7:BB:B3:BF:F7:9F:0E:FF:BF:EE:52:78:23:AC:9B Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 25CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 25A8 Signing time: Fri 22 Nov 2024 15:44:08 +0000 Manifest this update: Fri 22 Nov 2024 15:44:07 +0000 Manifest next update: Fri 29 Nov 2024 15:44:07 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: UxhfjAAsvuX1djlr1gzd45YeQ1vRDhjhaLI+qQgbOs8=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9678 (0x25ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Nov 22 15:44:07 2024 GMT Not After : Nov 29 15:44:07 2024 GMT Subject: CN=6740a6c8-8ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fb:8b:30:57:42:b9:c5:51:9e:12:30:80:4d: 0e:dc:d4:68:86:75:30:30:f7:02:e4:b6:6d:e7:71: a6:ee:aa:9e:c3:e7:f8:d0:5d:23:68:e5:0e:a9:6f: 2e:22:e7:de:7a:93:2c:e8:31:25:eb:98:79:e4:d8: da:1f:ab:ff:04:1f:05:1d:b6:e5:dc:d3:d9:34:25: 80:f3:39:59:c1:f2:70:2b:ea:1a:41:8b:1a:a0:6f: bc:21:bd:92:49:f8:e7:65:80:de:a8:e5:5e:75:5f: 22:c2:bf:bc:17:d5:50:50:38:c9:3b:d8:f4:3b:c3: 6f:40:30:3b:6c:cd:09:d2:a9:c3:05:a6:2b:5c:61: 2e:ca:7c:d1:f0:d5:81:ff:f4:17:6a:38:ce:6f:cc: 46:fd:af:0e:54:fe:3f:84:6e:13:7d:9b:a7:77:dc: 9e:02:9e:77:2c:04:be:c8:df:f0:81:91:c1:b9:c4: a7:a0:7a:53:a9:1b:46:f8:e0:a2:27:02:bc:c2:07: 3b:41:b6:0a:24:e0:3f:73:0b:55:9a:bf:b6:1e:1a: ed:e5:c4:89:1f:47:1f:6c:76:3a:bc:36:5e:b6:72: 04:66:8b:03:9f:0b:4d:2c:86:be:86:ef:33:be:49: cb:80:66:5b:77:79:55:2c:ec:4a:b0:15:ab:1f:b1: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:DA:A5:EE:A7:BB:B3:BF:F7:9F:0E:FF:BF:EE:52:78:23:AC:9B X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fc:9a:41:a4:40:ec:8f:6a:ea:0e:83:61:dd:eb:19:0f:be: cb:12:34:75:c4:a3:7a:cf:8c:83:b0:f0:dd:73:63:08:21:27: 9f:ba:ca:63:80:e7:01:9a:03:d2:9f:34:9a:02:dc:81:ef:a1: c8:39:ec:49:0b:ae:c4:a1:47:99:76:eb:f6:e4:bb:48:a7:2a: 68:ae:87:13:e1:29:88:1b:b2:7e:1b:19:79:01:d2:43:e3:21: 9b:11:ca:52:13:93:6e:fb:ce:0b:e5:a1:2e:3b:47:07:57:1a: 42:0f:db:26:e7:6e:1e:40:34:b0:15:e8:be:43:c5:73:53:ff: 17:5e:b5:07:91:47:72:2c:b2:9a:29:8b:3b:dd:99:80:e8:43: 90:4d:e0:3c:c9:74:b9:65:84:99:dd:46:68:65:c2:55:b6:05: 68:ad:e6:07:ad:a0:ee:da:4f:33:27:35:d5:81:94:17:49:1f: 52:68:6e:6e:a8:b8:a2:3c:7c:83:3b:0d:89:d5:1d:fd:b3:df: cd:50:40:30:dc:5c:df:42:8a:ff:47:bf:9b:2c:67:9a:83:08: 68:39:60:48:8d:bc:c8:c3:2c:30:ae:03:82:6f:db:38:70:5c: 24:34:db:fd:a5:ea:d3:b0:41:6c:e1:cb:e1:57:76:36:29:60: 4d:97:9e:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjQxMTIyMTU0NDA3WhcNMjQxMTI5MTU0NDA3WjAYMRYwFAYD VQQDEw02NzQwYTZjOC04ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/uLMFdCucVRnhIwgE0O3NRohnUwMPcC5LZt53Gm7qqew+f40F0jaOUOqW8u IufeepMs6DEl65h55NjaH6v/BB8FHbbl3NPZNCWA8zlZwfJwK+oaQYsaoG+8Ib2S SfjnZYDeqOVedV8iwr+8F9VQUDjJO9j0O8NvQDA7bM0J0qnDBaYrXGEuynzR8NWB //QXajjOb8xG/a8OVP4/hG4TfZund9yeAp53LAS+yN/wgZHBucSnoHpTqRtG+OCi JwK8wgc7QbYKJOA/cwtVmr+2Hhrt5cSJH0cfbHY6vDZetnIEZosDnwtNLIa+hu8z vknLgGZbd3lVLOxKsBWrH7F1qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKm2qXu p7uzv/efDv+/7lJ4I6ybMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq/JpBpEDsj2rqDoNh3esZD77LEjR1xKN6z4yDsPDdc2MIISefuspj gOcBmgPSnzSaAtyB76HIOexJC67EoUeZduv25LtIpyporocT4SmIG7J+Gxl5AdJD 4yGbEcpSE5Nu+84L5aEuO0cHVxpCD9sm524eQDSwFei+Q8VzU/8XXrUHkUdyLLKa KYs73ZmA6EOQTeA8yXS5ZYSZ3UZoZcJVtgVoreYHraDu2k8zJzXVgZQXSR9SaG5u qLiiPHyDOw2J1R39s9/NUEAw3FzfQor/R7+bLGeagwhoOWBIjbzIwywwrgOCb9s4 cFwkNNv9perTsEFs4cvhV3Y2KWBNl56u -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org