$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: +0xrejqTXy1GTHlb7mh7J2OLQkgULedJTtW+p8S6SJM= Subject key identifier: 6C:34:6A:44:07:EA:2C:EE:19:A5:7A:AD:31:37:60:84:47:78:41:F8 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 3422 Signing time: Wed 20 Nov 2024 14:54:00 +0000 Manifest this update: Wed 20 Nov 2024 14:54:00 +0000 Manifest next update: Wed 27 Nov 2024 14:54:00 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: ALLlwzlN4WAK+jHcXR8GweIme6/+3dx9bgV4uuPHDnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Nov 20 14:54:00 2024 GMT Not After : Nov 27 14:54:00 2024 GMT Subject: CN=673df808-c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:2d:0c:51:a4:a5:e1:1f:c4:fc:28:06:fd: 38:8b:ec:42:06:9f:e6:14:05:dc:0f:41:4d:a2:b7: b2:33:c6:2e:42:c3:46:da:d0:53:49:8b:d1:78:81: 2a:4c:fb:c0:3d:48:30:f5:4e:76:21:1c:80:49:c7: cb:67:f2:48:fc:b1:7f:9e:4b:fc:76:e1:2c:66:5e: 49:47:f9:fd:db:9d:15:49:99:31:ea:3f:56:49:c0: a0:d0:3c:67:a4:a9:1f:ec:ee:22:a8:00:7b:d0:8e: 49:f4:f1:b1:56:26:2d:4a:6e:e7:d2:90:7d:03:a0: 12:11:94:9a:85:e6:f9:14:46:19:d4:c6:15:66:5a: 08:7d:bd:78:c4:d0:4d:22:80:16:9d:d6:8e:d6:3d: b8:62:b4:ad:0a:36:c8:91:e5:7e:03:24:03:64:75: ee:f2:4e:21:2d:10:58:ea:ae:e5:54:1a:57:32:ab: f5:2e:cd:50:a3:8c:53:9d:94:81:70:81:41:6b:86: dd:4a:36:f1:2f:f8:ac:d0:ee:e0:17:d2:c8:4d:cd: 07:24:23:64:d4:17:fe:fc:39:d3:4a:3a:b7:bc:07: d9:15:13:79:b5:34:73:9c:28:b2:e8:19:e6:39:a4: c3:33:92:af:21:c7:94:01:07:77:42:b7:5a:7f:d5: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:6A:44:07:EA:2C:EE:19:A5:7A:AD:31:37:60:84:47:78:41:F8 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d6:bb:15:37:b7:5e:bc:81:f4:76:93:9d:90:59:99:34:e4: da:a8:dc:20:8f:31:0a:46:5a:d8:fb:6b:20:11:2a:59:28:00: 8b:94:06:bf:75:0e:a9:59:57:55:8a:a5:3a:21:82:36:1f:b1: 8f:86:a8:0f:03:5b:31:3b:47:3a:f2:61:ba:2e:d6:63:35:a7: 1a:74:2b:39:5c:f2:17:82:0c:38:9f:8f:a5:5e:06:5b:17:d8: 9e:00:5c:cd:f9:97:4f:9c:8f:cd:90:d9:bf:0e:48:00:16:68: 36:78:ae:32:da:2f:bb:3b:cd:92:53:28:6d:ee:2c:54:c9:6a: 8e:11:e2:b1:ce:5b:ee:f3:42:64:5a:7b:21:aa:1e:8b:35:af: 8d:cb:c4:89:ef:a1:7a:b1:87:a2:ad:99:9d:5d:1d:7c:69:05: 28:57:e2:17:2d:15:22:8a:fe:d4:fe:50:e3:8e:70:86:a9:ac: 1d:a6:03:36:94:8d:e1:d8:29:6d:b1:b1:2a:cc:73:8a:76:3d: ac:92:4c:d0:95:bd:c5:c6:5b:44:06:89:d5:ec:8e:0a:df:67: 5c:98:ce:b8:11:58:32:97:c5:e7:9a:7c:31:1d:5f:75:7c:c1: 0f:0d:64:30:a4:72:2b:e4:27:c4:27:a9:bc:f7:f7:17:18:60: 16:18:72:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjQxMTIwMTQ1NDAwWhcNMjQxMTI3MTQ1NDAwWjAYMRYwFAYD VQQDEw02NzNkZjgwOC1jOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQQtDFGkpeEfxPwoBv04i+xCBp/mFAXcD0FNoreyM8YuQsNG2tBTSYvReIEq TPvAPUgw9U52IRyAScfLZ/JI/LF/nkv8duEsZl5JR/n9250VSZkx6j9WScCg0Dxn pKkf7O4iqAB70I5J9PGxViYtSm7n0pB9A6ASEZSaheb5FEYZ1MYVZloIfb14xNBN IoAWndaO1j24YrStCjbIkeV+AyQDZHXu8k4hLRBY6q7lVBpXMqv1Ls1Qo4xTnZSB cIFBa4bdSjbxL/is0O7gF9LITc0HJCNk1Bf+/DnTSjq3vAfZFRN5tTRznCiy6Bnm OaTDM5KvIceUAQd3Qrdaf9UaEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw0akQH 6izuGaV6rTE3YIRHeEH4MB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl1rsVN7devIH0dpOdkFmZNOTaqNwgjzEKRlrY+2sgESpZKACLlAa/ dQ6pWVdViqU6IYI2H7GPhqgPA1sxO0c68mG6LtZjNacadCs5XPIXggw4n4+lXgZb F9ieAFzN+ZdPnI/NkNm/DkgAFmg2eK4y2i+7O82SUyht7ixUyWqOEeKxzlvu80Jk Wnshqh6LNa+Ny8SJ76F6sYeirZmdXR18aQUoV+IXLRUiiv7U/lDjjnCGqawdpgM2 lI3h2CltsbEqzHOKdj2skkzQlb3FxltEBonV7I4K32dcmM64EVgyl8XnmnwxHV91 fMEPDWQwpHIr5CfEJ6m89/cXGGAWGHJV -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:23 2024 by rpki-client on console-fra.rpki-client.org