$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json) Hash identifier: 3C978psWjNEu2E/hXPIOTQSz9v9hjQGlV1hulntGoHI= Subject key identifier: 85:B2:36:1D:A8:1B:1E:7B:7A:58:0B:52:F3:3C:D3:10:94:79:BE:30 Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft Manifest number: 22 Signing time: Wed 23 Oct 2024 06:29:41 +0000 Manifest this update: Wed 23 Oct 2024 06:29:40 +0000 Manifest next update: Wed 30 Oct 2024 06:29:40 +0000 Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: lsJ93/u8T6UW0lFreO0fxU08Mzt3fk5MAbIJesvGP3U=) 2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: Oct 23 06:29:40 2024 GMT Not After : Oct 30 06:29:40 2024 GMT Subject: CN=671897d5-5b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:90:5b:62:10:f1:5a:31:b8:e9:47:f6:68: ba:07:7a:c2:e8:f8:a6:c6:37:60:69:46:f9:82:fb: d2:5c:bb:c2:a4:de:04:fa:eb:13:37:07:3c:6b:67: 4d:45:59:7e:5c:63:36:a1:49:41:0c:8f:7e:b1:14: 84:32:36:73:3c:cd:53:35:e2:da:c4:d7:1c:92:b9: 91:ab:c5:a5:a3:d5:e1:b1:35:ed:cf:45:e1:86:8e: 17:a0:08:57:d7:e3:38:67:1e:c7:36:41:9a:29:ac: 1d:d6:54:3c:1e:7b:46:5e:6c:9f:28:55:65:84:86: 16:7e:5d:75:30:f7:94:79:38:aa:cb:3d:da:49:2a: 29:3c:8c:2e:b4:7f:9a:87:05:f1:e0:25:c1:84:1c: 2b:3d:54:50:5b:3e:25:1f:42:e9:d3:89:49:4c:8a: 5d:77:9e:ef:3f:cc:28:57:2f:c6:ed:cc:2c:b7:61: 46:df:e5:29:9b:7c:15:42:d0:93:bf:6d:51:60:20: 8a:21:5d:30:5c:0b:68:ed:e3:95:9e:87:c0:4d:03: 38:62:b0:a0:47:84:2b:78:f5:63:f1:08:d7:e7:32: 83:0d:a2:41:e8:9b:c2:51:1b:9c:83:91:c5:6b:ed: 41:e4:31:81:69:c8:3c:c9:cd:1d:91:30:4f:c5:c5: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B2:36:1D:A8:1B:1E:7B:7A:58:0B:52:F3:3C:D3:10:94:79:BE:30 X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8c:df:6e:ee:f4:5d:76:b6:a6:aa:04:3d:08:06:47:b0:41: 6d:78:e2:ad:cd:0d:f5:1f:6d:4f:36:56:86:70:3d:14:db:d7: 09:9b:6c:d8:90:8d:52:6a:0c:8b:4e:8f:3b:0a:47:94:15:13: 71:38:be:03:db:3c:59:e6:c8:d0:93:ab:c9:a3:1d:6a:da:68: cb:38:0c:e5:cf:78:66:f5:d0:69:9c:66:4e:3d:c1:93:f0:a0: 97:c8:cc:a0:5f:a1:8c:f7:ac:27:97:bf:b0:a2:0c:02:21:56: aa:6d:0a:9a:44:23:5d:11:9b:07:8c:07:0a:f9:f4:13:c5:6c: 77:8d:bf:e6:47:6e:f7:dc:97:6a:93:ce:16:75:8d:f6:b3:7e: 86:99:39:f5:73:11:31:43:36:ac:29:63:77:4b:2a:53:b0:11: dc:86:d6:17:1c:99:0b:04:10:af:59:a2:f9:c3:5e:32:25:39: 9a:e9:82:78:1d:04:9b:82:d1:51:9a:22:b5:97:5d:8c:c5:16: e1:95:92:c9:61:c5:ff:f1:29:d4:44:d1:b5:79:44:da:14:f0: 37:09:50:5e:86:7b:29:d8:61:af:24:dd:a3:18:7d:f1:be:07: fa:c8:73:ff:19:35:5c:c7:9a:06:d7:b9:3d:01:07:b2:2c:42: b7:c4:92:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZGRjExMC8GA1UEBRMoQzBERDJDNTU4NTdBOTJGRkU3Q0RDQkEyOTQ5OTgzRDQ4 QTQyQjlEODAeFw0yNDEwMjMwNjI5NDBaFw0yNDEwMzAwNjI5NDBaMBgxFjAUBgNV BAMTDTY3MTg5N2Q1LTViMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5fZBbYhDxWjG46Uf2aLoHesLo+KbGN2BpRvmC+9Jcu8Kk3gT66xM3BzxrZ01F WX5cYzahSUEMj36xFIQyNnM8zVM14trE1xySuZGrxaWj1eGxNe3PReGGjhegCFfX 4zhnHsc2QZoprB3WVDwee0ZebJ8oVWWEhhZ+XXUw95R5OKrLPdpJKik8jC60f5qH BfHgJcGEHCs9VFBbPiUfQunTiUlMil13nu8/zChXL8btzCy3YUbf5SmbfBVC0JO/ bVFgIIohXTBcC2jt45Weh8BNAzhisKBHhCt49WPxCNfnMoMNokHom8JRG5yDkcVr 7UHkMYFpyDzJzR2RME/FxSBTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhbI2Hagb Hnt6WAtS8zzTEJR5vjAwHwYDVR0jBBgwFoAUwN0sVYV6kv/nzcuilJmD1IpCudgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkZGLzk0MTA0QjRBNUY4 RTExRUZCMjNFNzk0NUM0RjlBRTAyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3Vk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd04wc1ZZVjZrdl9uemN1aWxKbUQxSXBDdWRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NkZGLzk0MTA0QjRBNUY4RTExRUZCMjNFNzk0NUM0RjlBRTAyL3dOMHNWWVY2a3Zf bnpjdWlsSm1EMUlwQ3VkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKM327u9F12tqaqBD0IBkewQW144q3NDfUfbU82VoZwPRTb1wmbbNiQ jVJqDItOjzsKR5QVE3E4vgPbPFnmyNCTq8mjHWraaMs4DOXPeGb10GmcZk49wZPw oJfIzKBfoYz3rCeXv7CiDAIhVqptCppEI10RmweMBwr59BPFbHeNv+ZHbvfcl2qT zhZ1jfazfoaZOfVzETFDNqwpY3dLKlOwEdyG1hccmQsEEK9ZovnDXjIlOZrpgngd BJuC0VGaIrWXXYzFFuGVkslhxf/xKdRE0bV5RNoU8DcJUF6GeynYYa8k3aMYffG+ B/rIc/8ZNVzHmgbXuT0BB7IsQrfEknQ= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org