$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: 7cbVv02Wrzk0AU9w2KWPPlgeHbdfe+EE1cQs/BPodM0= Subject key identifier: 95:FF:4B:73:BC:98:1B:55:87:0D:3E:00:D1:78:4A:0B:06:61:5A:F0 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 0309 Signing time: Sat 23 Nov 2024 01:13:23 +0000 Manifest this update: Sat 23 Nov 2024 01:13:22 +0000 Manifest next update: Sat 30 Nov 2024 01:13:22 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: s4h30vJvtnBRn4TdKsQYefVN4v//8K0iHmQs5J4urdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Nov 23 01:13:22 2024 GMT Not After : Nov 30 01:13:22 2024 GMT Subject: CN=67412c33-3a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:9e:46:af:85:cd:a6:67:e1:5d:8d:5e:2a: 1f:4f:2e:ab:9b:e0:a7:20:d3:fd:94:80:07:2f:60: 9f:d2:88:1a:84:0a:36:5a:1f:20:5e:78:df:1c:c0: 8f:5b:51:b3:89:b6:5e:51:f7:d4:04:b5:5e:93:f8: 19:11:bc:95:d3:da:d2:4d:19:c7:0b:7f:ff:43:20: e9:09:f8:bb:ae:c9:7b:47:c0:81:96:b5:b5:df:6d: f9:b5:2e:79:78:2a:f2:d1:81:7c:0f:2a:9f:3f:a0: b6:29:5d:25:94:32:61:6a:75:58:5f:95:81:80:c8: b5:b6:7e:f9:29:1f:3a:6f:43:5d:66:11:b4:a2:6c: 34:60:06:12:bf:b9:3f:ab:b4:ac:9c:a0:f3:58:90: 59:3c:75:e4:f5:fd:26:1b:6f:98:b3:05:2a:1c:c7: 16:03:4e:60:e9:23:a8:23:e1:e9:d8:86:15:99:82: 3d:b9:23:36:30:c9:8e:2f:03:ae:9c:08:b5:d8:5f: 05:3c:66:f5:43:e8:f0:d6:b0:2e:7f:24:f6:5d:79: a7:ac:59:df:54:39:42:c4:e7:7f:e7:a6:06:80:de: 8e:1d:e8:c6:3c:5b:41:b8:9a:ec:be:2e:15:d4:18: 79:da:b8:70:9c:4a:f7:0e:dc:64:9e:f8:33:c1:9c: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FF:4B:73:BC:98:1B:55:87:0D:3E:00:D1:78:4A:0B:06:61:5A:F0 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:18:2e:f8:25:6d:15:ef:4d:1f:22:ca:f1:a8:f5:ec:62:89: 94:11:c8:f7:e4:9e:68:1d:eb:36:37:80:b9:ef:08:1d:f7:d0: 8c:da:08:d8:65:8a:ae:3e:ac:85:93:b2:2a:5e:99:1f:aa:bf: 9b:a4:0b:cb:a5:c5:fd:0f:5b:55:38:ca:97:a6:33:5e:dd:54: 14:46:08:98:8e:32:eb:44:3d:0b:6c:f0:91:72:7e:8e:1f:92: 45:8f:76:16:09:d7:5a:da:f3:95:04:de:8a:86:99:6e:17:3c: 5b:a7:5d:f6:9c:ad:8c:97:17:ef:d8:95:a9:e8:41:f7:23:ac: 5d:e9:3e:55:fa:ce:89:0f:ec:8b:db:99:cf:31:b1:eb:b2:5d: a4:8c:b2:29:0c:13:bf:da:e5:2a:fa:a6:54:82:2f:26:f2:da: 72:f7:38:f9:da:ea:32:9a:8d:bc:bd:bb:99:83:dd:ed:85:1e: 60:73:9c:f6:f9:bd:26:09:e9:04:42:4e:9d:53:32:40:88:52: 8e:00:d6:00:54:b1:e5:d1:80:c7:74:cc:03:5d:b9:3c:87:55: de:85:21:81:a7:48:06:25:e9:5d:b5:80:48:c9:aa:98:2b:54: 81:43:85:9b:ff:b9:6e:76:5e:da:c0:54:12:90:9c:49:31:05: 75:84:4b:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjQxMTIzMDExMzIyWhcNMjQxMTMwMDExMzIyWjAYMRYwFAYD VQQDEw02NzQxMmMzMy0zYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vGeRq+FzaZn4V2NXiofTy6rm+CnINP9lIAHL2Cf0ogahAo2Wh8gXnjfHMCP W1GzibZeUffUBLVek/gZEbyV09rSTRnHC3//QyDpCfi7rsl7R8CBlrW13235tS55 eCry0YF8DyqfP6C2KV0llDJhanVYX5WBgMi1tn75KR86b0NdZhG0omw0YAYSv7k/ q7SsnKDzWJBZPHXk9f0mG2+YswUqHMcWA05g6SOoI+Hp2IYVmYI9uSM2MMmOLwOu nAi12F8FPGb1Q+jw1rAufyT2XXmnrFnfVDlCxOd/56YGgN6OHejGPFtBuJrsvi4V 1Bh52rhwnEr3DtxknvgzwZxavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX/S3O8 mBtVhw0+ANF4SgsGYVrwMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsGC74JW0V700fIsrxqPXsYomUEcj35J5oHes2N4C57wgd99CM2gjY ZYquPqyFk7IqXpkfqr+bpAvLpcX9D1tVOMqXpjNe3VQURgiYjjLrRD0LbPCRcn6O H5JFj3YWCdda2vOVBN6KhpluFzxbp132nK2Mlxfv2JWp6EH3I6xd6T5V+s6JD+yL 25nPMbHrsl2kjLIpDBO/2uUq+qZUgi8m8tpy9zj52uoymo28vbuZg93thR5gc5z2 +b0mCekEQk6dUzJAiFKOANYAVLHl0YDHdMwDXbk8h1XehSGBp0gGJeldtYBIyaqY K1SBQ4Wb/7ludl7awFQSkJxJMQV1hEtA -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org