$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: lwfIsrtssoly+b/O38kB9DxAQVcOrJQd5FCENpxa+LU= Subject key identifier: B3:BE:D5:A9:11:1A:4E:86:DA:4E:79:EB:60:CD:B7:A0:E8:E4:20:EF Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 032F Signing time: Thu 21 Nov 2024 00:39:04 +0000 Manifest this update: Thu 21 Nov 2024 00:39:04 +0000 Manifest next update: Thu 28 Nov 2024 00:39:04 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: nf0jbc2qsOgZPzu2C7Qq7kQijpo3YnxOKs0G0yz/BJg=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: /TuZ9+B/iKL8Wdr/M4Xrg2SYzklBnsQLva2o/WSmeOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Nov 21 00:39:04 2024 GMT Not After : Nov 28 00:39:04 2024 GMT Subject: CN=673e8128-8cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:c0:43:9a:72:52:58:74:d6:a1:c1:9f:fd: 54:de:ed:37:3a:1e:dc:5d:dd:09:c6:1c:f6:49:7e: 1a:10:73:29:42:53:7b:fb:dc:6c:74:59:a3:bc:c6: 6f:ff:ec:f3:77:88:6e:81:3e:15:e3:84:68:af:88: 51:63:71:ed:5d:1d:1a:31:3e:27:47:a8:0c:b5:b7: 8a:a4:36:e3:9f:c0:b4:7c:fd:b9:56:75:50:1f:fa: 9d:60:c7:1d:c0:81:05:20:08:0e:63:ab:a7:ac:13: c4:d7:4c:7f:22:b2:dc:4c:38:15:c2:3a:7e:bd:3e: c6:89:3a:e1:d2:96:87:30:63:f5:f8:60:56:0d:16: 27:f8:87:92:b2:8c:69:41:12:e1:2f:c0:da:f9:18: f5:7b:56:bd:ad:76:77:ba:fd:11:10:9b:c3:56:53: 31:e6:9e:ca:b8:5a:51:16:9a:16:ac:9e:f6:cb:81: 07:69:a1:0e:9a:af:9f:73:16:92:13:c5:74:65:7c: 4f:12:b9:3f:95:a4:1c:73:56:9c:57:c6:b3:05:bc: b7:dc:38:2b:18:f4:bd:3c:d7:01:91:93:5b:97:f2: 3e:56:e4:b7:07:c6:99:aa:3f:de:fe:fb:9e:1d:e1: 56:49:14:82:aa:2f:c4:83:0f:3c:c7:06:83:10:c9: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BE:D5:A9:11:1A:4E:86:DA:4E:79:EB:60:CD:B7:A0:E8:E4:20:EF X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:49:56:a4:c6:5a:bb:03:be:b1:dc:de:f0:67:96:38:fc:4d: 48:73:2f:65:d5:4a:77:a7:64:90:a3:e3:0f:eb:2b:11:fe:82: c2:9e:2b:db:eb:5f:d5:0a:f2:aa:d0:f6:55:a2:e2:b3:11:12: 8a:ae:65:84:74:de:45:9f:cf:36:df:8d:95:d8:e9:92:cf:98: 4f:88:aa:34:9e:d0:51:ad:f5:ce:4c:37:48:fa:1f:56:ee:9e: e5:db:13:12:31:a0:6e:2b:63:3d:5f:34:23:0c:91:5d:a7:94: 9f:40:24:c8:88:dd:00:c4:a3:91:a6:b3:ed:1d:a9:8d:9d:69: 04:bc:2a:95:c9:c7:91:6d:5f:b6:09:e6:70:4e:12:6e:4e:0e: a2:af:a1:f6:3d:f8:84:43:83:c8:21:29:a5:5e:f8:4f:db:a3: 1d:59:99:aa:6d:17:64:5a:72:02:e3:6e:82:fc:0f:ce:a6:1e: 30:31:49:06:6a:92:f9:db:33:cd:06:6b:a5:48:41:66:84:0f: 48:d5:6e:60:49:70:55:87:fc:7d:b9:89:26:33:82:c1:5c:cf: 94:07:d4:28:fb:f1:ee:2f:f9:50:09:2a:26:8a:d8:c5:d1:5d: 5b:a6:28:1a:95:64:e8:25:d7:62:60:52:29:64:72:79:38:4e: 88:2b:4e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjQxMTIxMDAzOTA0WhcNMjQxMTI4MDAzOTA0WjAYMRYwFAYD VQQDEw02NzNlODEyOC04Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY7AQ5pyUlh01qHBn/1U3u03Oh7cXd0Jxhz2SX4aEHMpQlN7+9xsdFmjvMZv /+zzd4hugT4V44Ror4hRY3HtXR0aMT4nR6gMtbeKpDbjn8C0fP25VnVQH/qdYMcd wIEFIAgOY6unrBPE10x/IrLcTDgVwjp+vT7GiTrh0paHMGP1+GBWDRYn+IeSsoxp QRLhL8Da+Rj1e1a9rXZ3uv0REJvDVlMx5p7KuFpRFpoWrJ72y4EHaaEOmq+fcxaS E8V0ZXxPErk/laQcc1acV8azBby33DgrGPS9PNcBkZNbl/I+VuS3B8aZqj/e/vue HeFWSRSCqi/Egw88xwaDEMnm0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO+1akR Gk6G2k5562DNt6Do5CDvMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSVakxlq7A76x3N7wZ5Y4/E1Icy9l1Up3p2SQo+MP6ysR/oLCnivb 61/VCvKq0PZVouKzERKKrmWEdN5Fn882342V2OmSz5hPiKo0ntBRrfXOTDdI+h9W 7p7l2xMSMaBuK2M9XzQjDJFdp5SfQCTIiN0AxKORprPtHamNnWkEvCqVyceRbV+2 CeZwThJuTg6ir6H2PfiEQ4PIISmlXvhP26MdWZmqbRdkWnIC426C/A/Oph4wMUkG apL52zPNBmulSEFmhA9I1W5gSXBVh/x9uYkmM4LBXM+UB9Qo+/HuL/lQCSomitjF 0V1bpigalWToJddiYFIpZHJ5OE6IK07F -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org