$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json) Hash identifier: Dc79WLU26BhPOjoljxyB4WtqqbSLCy/kHYUvZCPSEV8= Subject key identifier: 14:9D:5F:71:71:D4:92:50:39:62:3B:96:10:44:C3:99:B1:5D:C3:FC Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft Manifest number: 3422 Signing time: Fri 22 Nov 2024 15:08:31 +0000 Manifest this update: Fri 22 Nov 2024 15:08:31 +0000 Manifest next update: Fri 29 Nov 2024 15:08:31 +0000 Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: qS0JZV8f5PMBe6potXCBgHt6ULcLuBtBrN32/V9RhaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Validity Not Before: Nov 22 15:08:31 2024 GMT Not After : Nov 29 15:08:31 2024 GMT Subject: CN=67409e6f-720a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:50:d4:aa:b9:d0:4d:38:d3:66:6b:9d:8b: 31:5b:2e:f9:22:37:ca:5f:90:6a:3c:5d:05:85:a3: 3e:4d:06:9b:f5:e8:19:b8:9c:88:94:b9:6b:16:3a: e6:a0:70:13:e8:69:a4:c4:31:5c:ca:6a:9b:64:7f: 95:26:a6:86:21:88:04:71:d4:24:9a:16:7f:f2:fd: b4:55:3e:93:db:37:5f:c9:2a:72:79:ee:93:f0:cf: e1:e0:bb:df:2a:78:a8:cf:63:29:c6:72:3c:84:d4: b2:f1:b1:9e:9d:df:3d:ed:d8:bc:9d:f7:1f:47:94: 8d:5a:98:c9:8e:55:fe:9d:df:c2:6a:95:be:a8:88: 32:16:c4:e4:60:4b:63:97:8b:95:94:c4:56:17:42: 68:d9:ae:07:e4:7a:8a:62:8a:8f:aa:12:fe:df:9b: 2a:07:bd:2b:65:c1:5d:98:33:e5:30:c5:d2:f8:2c: 25:de:b6:92:31:82:d6:e3:ce:a4:f2:0c:74:c8:5b: d7:2c:e6:8b:04:30:92:e2:14:ad:9c:de:a3:cf:53: 46:32:de:71:1f:84:bd:c5:a8:ca:d3:e1:1b:52:50: 86:37:77:77:27:e3:26:db:8b:c9:7f:ca:19:4e:e8: 27:2e:6d:b1:27:d8:c6:2a:2b:2d:ef:82:5f:2e:02: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:5F:71:71:D4:92:50:39:62:3B:96:10:44:C3:99:B1:5D:C3:FC X509v3 Authority Key Identifier: keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:4f:b4:53:5f:5a:60:ff:1c:e2:ff:8f:cb:a7:79:97:cc:13: a4:c4:b1:40:02:ea:21:0b:49:b5:dd:08:27:9f:c7:26:84:86: 27:3a:8c:47:41:df:a7:89:41:43:30:22:99:53:dc:a4:19:6e: 15:1e:0c:53:f8:c8:bd:6d:e1:96:cc:0f:d1:40:37:5e:fa:6b: 74:c9:37:51:e4:aa:62:49:74:9a:fb:32:e2:c2:cc:75:a4:17: 46:40:c1:bb:29:2d:87:91:c5:ee:0c:be:a8:30:b8:f1:b2:be: cc:07:93:e3:8f:7f:7c:04:94:06:c8:a9:93:28:1a:75:78:2d: 0a:73:a9:b8:f1:2d:79:8a:39:27:91:25:19:3d:68:66:d9:3c: 85:8e:58:14:8c:c3:1d:38:53:dd:08:ba:b7:4b:7b:19:dd:7e: c6:e8:35:d6:11:10:96:f1:c5:ac:9b:d7:f6:46:56:59:07:d5: b8:3b:26:11:74:69:bd:b6:15:87:d1:d1:52:b4:a1:d9:df:e2: 17:c1:76:58:8d:18:10:21:01:b0:69:51:d7:22:f1:07:f2:92: 1c:dc:e9:9d:0a:bb:e4:a0:c8:c9:9a:f6:41:59:85:4b:b1:e5: ea:b6:48:07:a4:f6:75:f2:f9:8f:d5:b5:a3:2a:1d:d3:fb:07: c8:1d:21:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC RUMxMEMzMDkwHhcNMjQxMTIyMTUwODMxWhcNMjQxMTI5MTUwODMxWjAYMRYwFAYD VQQDEw02NzQwOWU2Zi03MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbRQ1Kq50E0402ZrnYsxWy75IjfKX5BqPF0FhaM+TQab9egZuJyIlLlrFjrm oHAT6GmkxDFcymqbZH+VJqaGIYgEcdQkmhZ/8v20VT6T2zdfySpyee6T8M/h4Lvf Knioz2MpxnI8hNSy8bGend897di8nfcfR5SNWpjJjlX+nd/CapW+qIgyFsTkYEtj l4uVlMRWF0Jo2a4H5HqKYoqPqhL+35sqB70rZcFdmDPlMMXS+Cwl3raSMYLW486k 8gx0yFvXLOaLBDCS4hStnN6jz1NGMt5xH4S9xajK0+EbUlCGN3d3J+Mm24vJf8oZ TugnLm2xJ9jGKist74JfLgLN8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSdX3Fx 1JJQOWI7lhBEw5mxXcP8MB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3 d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVT7RTX1pg/xzi/4/Lp3mXzBOkxLFAAuohC0m13Qgnn8cmhIYnOoxH Qd+niUFDMCKZU9ykGW4VHgxT+Mi9beGWzA/RQDde+mt0yTdR5KpiSXSa+zLiwsx1 pBdGQMG7KS2HkcXuDL6oMLjxsr7MB5Pjj398BJQGyKmTKBp1eC0Kc6m48S15ijkn kSUZPWhm2TyFjlgUjMMdOFPdCLq3S3sZ3X7G6DXWERCW8cWsm9f2RlZZB9W4OyYR dGm9thWH0dFStKHZ3+IXwXZYjRgQIQGwaVHXIvEH8pIc3OmdCrvkoMjJmvZBWYVL seXqtkgHpPZ18vmP1bWjKh3T+wfIHSHi -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org