$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: 5Vr9UPjWv5UMw7H6Eb97zV9CwoTsDd33rHAvjWkCVgs= Subject key identifier: BE:D6:BE:C4:F6:DC:0E:29:9B:26:10:F2:28:59:B5:BD:87:66:1E:80 Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: 86 Signing time: Sat 23 Nov 2024 04:35:36 +0000 Manifest this update: Sat 23 Nov 2024 04:35:35 +0000 Manifest next update: Sat 30 Nov 2024 04:35:35 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: /U9zCujC95cvJ6ZFyutag7lsoolUIzZZwR98vN+si28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: Nov 23 04:35:35 2024 GMT Not After : Nov 30 04:35:35 2024 GMT Subject: CN=67415b98-2a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:5b:b3:21:f2:fe:47:78:d2:15:8c:02:ae: c5:3d:ed:2e:42:10:67:a0:2c:11:27:be:12:aa:3b: 3d:c1:fd:43:be:62:cf:63:8e:5b:b0:c5:43:67:3e: fa:bb:a4:52:bd:59:8a:d1:d0:42:ba:a4:ff:42:dc: 94:57:f0:e9:69:39:3a:2e:d6:b1:09:31:5b:a5:e0: fb:e5:53:b4:7a:94:a0:63:5f:08:5b:52:c6:92:03: 9a:05:0d:6a:b5:ef:fb:86:5f:a9:41:25:70:d4:b8: d4:9f:e5:b2:df:ec:6b:ec:82:5c:5e:5c:88:3d:83: 08:04:b1:da:91:7e:92:4f:13:25:fc:24:f3:02:49: 85:12:12:3b:cd:a6:c8:6e:f1:54:03:b0:6a:7e:11: ad:ac:2e:84:a3:ff:1d:af:e7:98:9b:3b:19:cb:d5: 01:28:b6:ee:01:80:f3:4a:b1:a7:a7:fa:50:39:fc: a2:49:a0:0c:fb:4a:82:8d:83:4b:1c:fa:67:42:6b: 8e:e6:71:bf:3e:ac:d7:e6:be:25:84:3d:0a:cc:eb: 30:d8:dc:e9:9a:aa:66:df:f6:e4:9a:51:6a:5a:83: 35:2d:8e:68:67:96:bf:3e:39:1a:c9:ba:ab:0b:07: b7:4e:02:2d:f9:8f:d5:03:4c:e4:a5:8a:f6:0d:b2: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:BE:C4:F6:DC:0E:29:9B:26:10:F2:28:59:B5:BD:87:66:1E:80 X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ff:6d:75:7b:1f:1e:02:b4:8f:fc:e8:ba:08:cd:63:2c:b4: f5:58:cf:7e:bc:24:fd:05:8f:88:55:5d:e8:c6:1c:b7:c9:74: aa:91:03:b6:d6:66:8c:7d:4f:53:1f:f0:72:c1:87:f3:45:e0: f5:f0:19:04:c9:0d:f9:57:98:10:ba:81:65:5b:35:77:01:9a: 2d:f6:96:bb:1c:0a:a8:37:cb:1b:81:8a:49:4f:62:a4:78:28: 5a:13:90:52:f2:c2:2e:5f:ea:5d:0a:11:9c:ff:6d:57:9d:c6: b9:6c:d1:2b:51:44:ef:1f:8c:08:e8:a2:1e:84:6b:18:fc:8a: ee:99:11:d2:8e:01:aa:93:2b:8d:ab:b0:6e:81:86:17:22:25: 73:78:1f:ee:64:e9:c0:8a:7d:9d:f5:b7:34:70:59:5f:50:08: 64:34:6d:04:f6:4c:18:1e:c2:68:b3:15:e4:e4:da:4e:20:cf: c1:76:b8:d4:16:68:75:7e:a7:52:1d:94:38:01:b2:34:c7:26: 85:b0:f3:e4:d6:c6:80:5f:56:d8:fa:2b:21:14:94:29:32:f7: 1a:b6:6b:5b:6f:26:9e:75:30:fe:51:0b:41:a6:bb:b6:44:a7: e7:e6:dd:54:35:3b:5e:ba:f3:7c:79:ec:b3:e0:0c:c5:e0:03: 7a:7f:13:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjQxMTIzMDQzNTM1WhcNMjQxMTMwMDQzNTM1WjAYMRYwFAYD VQQDEw02NzQxNWI5OC0yYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw9bsyHy/kd40hWMAq7FPe0uQhBnoCwRJ74Sqjs9wf1DvmLPY45bsMVDZz76 u6RSvVmK0dBCuqT/QtyUV/DpaTk6LtaxCTFbpeD75VO0epSgY18IW1LGkgOaBQ1q te/7hl+pQSVw1LjUn+Wy3+xr7IJcXlyIPYMIBLHakX6STxMl/CTzAkmFEhI7zabI bvFUA7BqfhGtrC6Eo/8dr+eYmzsZy9UBKLbuAYDzSrGnp/pQOfyiSaAM+0qCjYNL HPpnQmuO5nG/PqzX5r4lhD0KzOsw2Nzpmqpm3/bkmlFqWoM1LY5oZ5a/Pjkaybqr Cwe3TgIt+Y/VA0zkpYr2DbLjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7WvsT2 3A4pmyYQ8ihZtb2HZh6AMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl/211ex8eArSP/Oi6CM1jLLT1WM9+vCT9BY+IVV3oxhy3yXSqkQO2 1maMfU9TH/BywYfzReD18BkEyQ35V5gQuoFlWzV3AZot9pa7HAqoN8sbgYpJT2Kk eChaE5BS8sIuX+pdChGc/21Xnca5bNErUUTvH4wI6KIehGsY/IrumRHSjgGqkyuN q7BugYYXIiVzeB/uZOnAin2d9bc0cFlfUAhkNG0E9kwYHsJosxXk5NpOIM/BdrjU Fmh1fqdSHZQ4AbI0xyaFsPPk1saAX1bY+ishFJQpMvcatmtbbyaedTD+UQtBpru2 RKfn5t1UNTteuvN8eeyz4AzF4AN6fxNj -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org