$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: jXz4UFqfgwpV5ELRh97ZgpjAqMqkYTdaa1MERZl5tgM= Subject key identifier: 23:7C:DB:5E:E5:AB:3C:71:A5:83:70:A9:76:0D:DA:8E:DE:0C:68:9A Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 04F8 Signing time: Fri 22 Nov 2024 23:13:46 +0000 Manifest this update: Fri 22 Nov 2024 23:13:46 +0000 Manifest next update: Fri 29 Nov 2024 23:13:46 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: IueoJ2O6Wx+iLnWtQI2+yp2gCwQnGub3EtDbXcSkJH0=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: sbkQxmyHF5zPQR/UDBWCWEbbyoVFQKNcg9AzuA7dWNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Nov 22 23:13:46 2024 GMT Not After : Nov 29 23:13:46 2024 GMT Subject: CN=6741102a-5597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:ce:32:51:88:3f:04:61:82:72:21:08:b7: 2d:c4:43:62:e9:2d:d6:85:37:67:47:b8:60:ca:c8: 51:1d:4f:d6:a7:7f:80:40:c1:d6:24:40:4b:8f:bc: f2:db:99:01:96:93:a0:fb:c0:aa:76:db:a8:20:de: b2:eb:ea:01:69:fb:f3:1d:ba:45:30:59:f6:f3:18: a4:4a:55:c5:20:a4:8d:a1:66:9e:b1:a3:8e:79:d3: 1a:56:4d:da:7e:9d:85:40:db:58:27:6d:80:2d:8c: e3:a1:2f:e2:05:70:8d:e8:9d:1d:80:a0:af:a6:8e: e2:b4:40:9b:39:4b:93:50:76:6c:fa:57:8f:31:01: 5d:82:07:97:7e:09:89:4e:b5:64:1f:ac:c4:93:cb: fa:e9:ef:6b:a3:31:fe:79:14:66:9e:d2:bd:3d:a2: 28:29:d1:b1:1b:93:16:b0:0b:9b:84:8e:27:7c:c4: 75:17:d0:3b:17:78:6b:9a:7b:23:62:34:74:fd:be: 8b:75:ec:22:c1:44:f4:6c:c2:46:39:ce:e6:75:b9: 26:90:5b:ce:18:eb:74:5e:24:72:c6:34:0e:7e:2e: 3b:e2:4d:2f:07:e6:f5:3d:60:eb:c4:79:a6:07:89: f7:d7:b3:04:a7:43:9e:2b:e1:84:9b:a1:e5:da:66: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:DB:5E:E5:AB:3C:71:A5:83:70:A9:76:0D:DA:8E:DE:0C:68:9A X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d8:9f:4b:21:53:6d:77:8e:3f:f7:77:11:ff:27:22:f3:45: 5e:63:fe:24:e5:9d:e6:ed:33:52:23:ac:67:15:38:4b:7f:4b: a3:2d:b8:16:0c:55:e5:ab:f5:17:5d:bc:8b:40:b6:47:89:16: 21:69:76:be:bb:7a:6c:c9:b2:bb:87:02:44:ae:30:1a:c3:53: e8:17:b6:b2:92:d0:5c:43:57:80:98:b8:9d:11:f2:3a:e0:90: 3f:b8:9e:a8:1f:54:66:55:ed:cb:bf:12:a8:74:f5:a6:94:07: 47:c8:f8:72:d1:75:b5:7e:36:17:01:7f:11:dc:7b:0f:45:8c: f4:27:14:0d:65:c2:9c:dd:78:60:b1:f6:ce:68:94:7c:ba:25: 8c:80:f0:55:1a:9d:21:72:2e:36:b7:90:99:fa:34:e0:3f:86: fa:ad:da:7c:e5:e4:ab:5c:3b:47:7f:20:07:db:c6:dd:3e:e3: 20:2f:ca:91:6c:23:0b:f4:b1:f8:04:fd:04:ad:82:58:86:27: fc:99:cd:41:52:0a:ac:79:2c:ff:ef:15:50:eb:34:7e:a9:9a: e7:b1:40:59:9d:de:0a:ac:76:14:7b:0d:ea:c2:59:05:ad:05: 94:10:2c:77:4d:af:7e:3b:ff:d0:dc:88:db:a1:b3:98:fe:ab: 5d:67:a6:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjQxMTIyMjMxMzQ2WhcNMjQxMTI5MjMxMzQ2WjAYMRYwFAYD VQQDEw02NzQxMTAyYS01NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3HOMlGIPwRhgnIhCLctxENi6S3WhTdnR7hgyshRHU/Wp3+AQMHWJEBLj7zy 25kBlpOg+8CqdtuoIN6y6+oBafvzHbpFMFn28xikSlXFIKSNoWaesaOOedMaVk3a fp2FQNtYJ22ALYzjoS/iBXCN6J0dgKCvpo7itECbOUuTUHZs+lePMQFdggeXfgmJ TrVkH6zEk8v66e9rozH+eRRmntK9PaIoKdGxG5MWsAubhI4nfMR1F9A7F3hrmnsj YjR0/b6LdewiwUT0bMJGOc7mdbkmkFvOGOt0XiRyxjQOfi474k0vB+b1PWDrxHmm B4n317MEp0OeK+GEm6Hl2mafnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN8217l qzxxpYNwqXYN2o7eDGiaMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2J9LIVNtd44/93cR/yci80VeY/4k5Z3m7TNSI6xnFThLf0ujLbgW DFXlq/UXXbyLQLZHiRYhaXa+u3psybK7hwJErjAaw1PoF7ayktBcQ1eAmLidEfI6 4JA/uJ6oH1RmVe3LvxKodPWmlAdHyPhy0XW1fjYXAX8R3HsPRYz0JxQNZcKc3Xhg sfbOaJR8uiWMgPBVGp0hci42t5CZ+jTgP4b6rdp85eSrXDtHfyAH28bdPuMgL8qR bCML9LH4BP0ErYJYhif8mc1BUgqseSz/7xVQ6zR+qZrnsUBZnd4KrHYUew3qwlkF rQWUECx3Ta9+O//Q3IjbobOY/qtdZ6aQ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org