$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json) Hash identifier: Gl/pHOZIq8P7eGa2JiYRcXzQ8M61j8j/Yfe9B4VL08g= Subject key identifier: 4B:CA:D3:A5:7E:29:20:3F:A3:EA:FC:91:28:8F:FA:02:E3:11:C8:12 Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft Manifest number: 31 Signing time: Thu 21 Nov 2024 05:42:06 +0000 Manifest this update: Thu 21 Nov 2024 05:42:05 +0000 Manifest next update: Thu 28 Nov 2024 05:42:05 +0000 Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: SA0utmUj8DpgsknDr6IJgD8misHUXd7PlU2lh2LDgOA=) 2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: Nov 21 05:42:05 2024 GMT Not After : Nov 28 05:42:05 2024 GMT Subject: CN=673ec82d-b041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:90:a4:5b:f8:93:06:4d:5c:b7:af:22:f7: 74:aa:0f:2b:6b:95:b6:a4:cc:7f:61:79:38:42:b5: d2:b0:5f:13:3f:de:8c:51:ba:90:f4:25:44:55:82: 67:af:ac:ca:40:e1:54:71:5d:2c:3a:c5:55:0e:81: fb:1a:01:0a:5b:3a:f5:78:6e:1a:a9:b8:ec:11:81: 89:69:e5:13:4e:71:94:4c:bd:66:10:cf:88:8b:0c: f0:c5:10:b8:ea:20:5d:64:a8:3a:b8:c3:ba:aa:88: 72:d3:64:4a:2d:f3:e6:ac:a1:a4:84:6d:07:00:57: 4f:e9:ac:d2:f0:27:1b:4b:46:a1:ed:ed:d8:ad:39: 2c:0f:ac:c1:da:87:fe:39:75:c0:79:f6:bf:08:1a: 3c:aa:8b:c2:0f:4e:d6:16:96:0b:17:d8:08:db:e0: 16:3a:58:8a:7f:e7:ac:ca:6e:df:30:c8:fb:53:1c: 21:6e:dc:13:6f:a7:fc:d3:ab:c3:92:32:1e:95:38: c6:d8:fc:fc:16:2c:ee:02:f4:6d:05:de:48:f8:fb: 10:5d:55:ce:b4:8c:7c:ff:70:6a:fe:44:f4:10:7a: 61:3f:90:c8:1b:29:6a:06:ae:5c:7b:fd:ca:27:47: b0:71:86:ec:c6:ef:b7:d7:3f:99:c8:65:4c:f0:eb: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:D3:A5:7E:29:20:3F:A3:EA:FC:91:28:8F:FA:02:E3:11:C8:12 X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4b:af:8b:31:05:ba:e5:00:58:f6:75:10:89:dd:08:a5:d2: 32:57:95:12:40:de:45:b8:88:1c:38:08:f8:39:a5:d6:96:6a: c5:93:7b:33:6d:b2:cb:8e:e7:26:30:28:c4:10:e4:ad:a1:b2: cb:e1:c0:7e:48:6e:67:ff:4b:75:07:7a:e4:c8:f6:1e:3c:38: f9:74:8a:1a:96:e0:83:a6:8f:7c:61:06:cd:f8:e5:58:c7:0a: a6:59:66:e0:c6:fa:5f:ad:7e:fa:62:05:61:bc:58:f0:01:3e: 8e:a3:52:ec:48:a3:f0:66:22:d9:2a:ea:75:a2:6c:f7:ba:cd: 38:2a:cd:e1:42:a6:a8:1d:e9:ec:1a:37:ad:f2:6e:61:1a:b4: 83:99:71:ee:9a:f1:5d:35:a8:a1:c6:ae:d9:fb:86:09:d5:df: 7d:38:73:62:c5:44:cd:c4:22:89:f7:24:ed:27:c2:6e:26:05: fc:e7:f4:e3:f9:c5:22:ba:57:67:a3:b8:5b:2e:a7:75:10:6d: 60:3a:13:27:bd:a5:19:50:dc:6c:2b:fb:4d:7d:6b:c9:cf:e8: 09:f6:3e:5d:3f:f9:7d:30:2a:91:e1:ce:23:bd:74:7b:07:17: 42:7a:55:07:46:05:dc:48:13:01:82:69:63:7a:08:42:7e:41: a3:3c:5e:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjZGRjExMC8GA1UEBRMoQzBERDJDNTU4NTdBOTJGRkU3Q0RDQkEyOTQ5OTgzRDQ4 QTQyQjlEODAeFw0yNDExMjEwNTQyMDVaFw0yNDExMjgwNTQyMDVaMBgxFjAUBgNV BAMTDTY3M2VjODJkLWIwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFcZCkW/iTBk1ct68i93SqDytrlbakzH9heThCtdKwXxM/3oxRupD0JURVgmev rMpA4VRxXSw6xVUOgfsaAQpbOvV4bhqpuOwRgYlp5RNOcZRMvWYQz4iLDPDFELjq IF1kqDq4w7qqiHLTZEot8+asoaSEbQcAV0/prNLwJxtLRqHt7ditOSwPrMHah/45 dcB59r8IGjyqi8IPTtYWlgsX2Ajb4BY6WIp/56zKbt8wyPtTHCFu3BNvp/zTq8OS Mh6VOMbY/PwWLO4C9G0F3kj4+xBdVc60jHz/cGr+RPQQemE/kMgbKWoGrlx7/con R7BxhuzG77fXP5nIZUzw69DpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS8rTpX4p ID+j6vyRKI/6AuMRyBIwHwYDVR0jBBgwFoAUwN0sVYV6kv/nzcuilJmD1IpCudgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNkZGLzk0MTA0QjRBNUY4 RTExRUZCMjNFNzk0NUM0RjlBRTAyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3Vk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd04wc1ZZVjZrdl9uemN1aWxKbUQxSXBDdWRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NkZGLzk0MTA0QjRBNUY4RTExRUZCMjNFNzk0NUM0RjlBRTAyL3dOMHNWWVY2a3Zf bnpjdWlsSm1EMUlwQ3VkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAChLr4sxBbrlAFj2dRCJ3Qil0jJXlRJA3kW4iBw4CPg5pdaWasWTezNt ssuO5yYwKMQQ5K2hssvhwH5Ibmf/S3UHeuTI9h48OPl0ihqW4IOmj3xhBs345VjH CqZZZuDG+l+tfvpiBWG8WPABPo6jUuxIo/BmItkq6nWibPe6zTgqzeFCpqgd6ewa N63ybmEatIOZce6a8V01qKHGrtn7hgnV3304c2LFRM3EIon3JO0nwm4mBfzn9OP5 xSK6V2ejuFsup3UQbWA6Eye9pRlQ3Gwr+019a8nP6An2Pl0/+X0wKpHhziO9dHsH F0J6VQdGBdxIEwGCaWN6CEJ+QaM8XqM= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org