$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: j1BN2wvsuFQG4pOLHJTbx3yJKtOVXrEUn+xZa93WimY= Subject key identifier: 90:96:1B:87:F1:15:50:02:68:17:77:31:0B:8D:A4:B3:0B:87:59:6F Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: 37 Signing time: Thu 19 Sep 2024 05:50:38 +0000 Manifest this update: Thu 19 Sep 2024 05:50:37 +0000 Manifest next update: Thu 26 Sep 2024 05:50:37 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: 8UhCA4LziWSaajYtjwl2BAiSUH6h/HY2UltPv8qCCfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Sep 19 05:50:37 2024 GMT Not After : Sep 26 05:50:37 2024 GMT Subject: CN=66ebbbae-868f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:33:c5:75:21:ef:d1:4c:ef:5b:e7:f9:6d: ff:4d:0e:10:5d:c5:f0:e3:e6:32:13:b1:48:e8:96: b9:7c:37:61:95:55:48:11:ee:16:35:a1:fb:bb:e2: 98:e8:cd:eb:7e:50:18:0a:f2:9c:6f:c7:13:26:14: 8d:69:d0:26:05:2a:db:43:d0:a8:7d:ab:e9:3a:fa: 6e:71:02:82:00:7d:a4:68:ae:25:c7:ed:75:b4:2a: cc:aa:a5:fc:cc:de:7f:e1:f5:31:0a:e6:ef:09:aa: a2:35:1c:93:fb:0c:f4:65:38:bd:86:b2:77:e1:20: ca:d7:5b:11:c5:bb:0b:1e:c6:a5:c8:c3:ff:80:06: 9c:07:69:78:7e:ff:03:94:c8:c6:b1:2f:1c:b1:12: b7:28:50:f3:7c:5f:3f:4a:54:5c:90:b8:ed:33:16: e2:00:f6:31:a5:fd:c2:21:be:22:1a:6f:91:fa:3b: 7d:12:63:1c:8b:23:7d:a5:cf:0b:c6:23:aa:ae:6a: fb:87:fb:f8:9d:30:8d:05:d8:d1:d5:d1:3c:0a:00: 8c:11:8b:7b:85:3f:7b:ae:48:e0:15:24:23:34:c9: c0:7a:1c:e2:bd:9b:12:43:58:e0:fd:80:08:99:de: b1:16:2e:2b:bf:a0:d6:ff:b3:54:04:11:01:bf:1b: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:1B:87:F1:15:50:02:68:17:77:31:0B:8D:A4:B3:0B:87:59:6F X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:14:0e:92:c0:47:92:d1:04:39:4a:a8:36:6f:28:da:ad: 64:2a:17:f1:4e:1b:9c:c5:a8:87:40:49:3c:30:66:cc:89:8d: 5c:45:95:10:9a:12:10:44:0c:3a:e9:dd:84:80:ad:6f:9c:43: bd:6c:d1:3c:c6:1a:83:54:79:a1:94:d2:76:1e:5a:29:72:2e: a7:c0:22:9c:dc:1f:5b:fc:d1:69:16:37:4a:21:d2:5d:a1:b0: c3:09:ad:b8:e0:6e:fd:ee:42:46:9f:42:2a:15:e4:12:90:f8: 19:17:8d:6a:09:b2:76:79:a4:b6:fd:d7:59:0c:ae:1b:f5:1a: 19:ed:3f:19:60:8e:6e:df:b7:09:8f:1d:6e:bc:53:17:69:10: 8d:9a:ff:8a:5e:91:1f:62:f6:2c:74:cb:51:f5:64:3f:3b:8d: c7:68:70:45:18:85:ff:5b:93:58:c5:63:5d:0c:03:9d:47:0c: 7d:4f:04:55:6a:96:14:a6:0c:4b:4a:cd:29:6b:d6:56:60:ee: 47:ea:d9:77:c8:8a:9c:5f:ff:89:2c:0d:2a:82:e4:6a:a8:90: 1c:bd:89:4a:de:8b:f9:a5:33:be:8d:98:3a:28:eb:65:72:d5: 9c:52:96:35:1b:71:96:f3:f1:69:54:cc:65:cd:bb:cd:04:69: d9:c6:1f:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUI5QTExMC8GA1UEBRMoQzA3MEVGODgyQzZFNDgwODY0MjRBOUI1RjE0NjZFMUI3 NzRBNDQ5QTAeFw0yNDA5MTkwNTUwMzdaFw0yNDA5MjYwNTUwMzdaMBgxFjAUBgNV BAMTDTY2ZWJiYmFlLTg2OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKWzPFdSHv0UzvW+f5bf9NDhBdxfDj5jITsUjolrl8N2GVVUgR7hY1ofu74pjo zet+UBgK8pxvxxMmFI1p0CYFKttD0Kh9q+k6+m5xAoIAfaRoriXH7XW0KsyqpfzM 3n/h9TEK5u8JqqI1HJP7DPRlOL2GsnfhIMrXWxHFuwsexqXIw/+ABpwHaXh+/wOU yMaxLxyxErcoUPN8Xz9KVFyQuO0zFuIA9jGl/cIhviIab5H6O30SYxyLI32lzwvG I6quavuH+/idMI0F2NHV0TwKAIwRi3uFP3uuSOAVJCM0ycB6HOK9mxJDWOD9gAiZ 3rEWLiu/oNb/s1QEEQG/G6jFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkJYbh/EV UAJoF3cxC42kswuHWW8wHwYDVR0jBBgwFoAUwHDviCxuSAhkJKm18UZuG3dKRJow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQjlBL0RBNjkwN0EwMjND MzExRUY4OTJERUIyMUM0RjlBRTAyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JK by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd0hEdmlDeHVTQWhrSkttMThVWnVHM2RLUkpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF QjlBL0RBNjkwN0EwMjNDMzExRUY4OTJERUIyMUM0RjlBRTAyL3dIRHZpQ3h1U0Fo a0pLbTE4VVp1RzNkS1JKby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKVFA6SwEeS0QQ5Sqg2byjarWQqF/FOG5zFqIdASTwwZsyJjVxFlRCa EhBEDDrp3YSArW+cQ71s0TzGGoNUeaGU0nYeWilyLqfAIpzcH1v80WkWN0oh0l2h sMMJrbjgbv3uQkafQioV5BKQ+BkXjWoJsnZ5pLb911kMrhv1GhntPxlgjm7ftwmP HW68UxdpEI2a/4pekR9i9ix0y1H1ZD87jcdocEUYhf9bk1jFY10MA51HDH1PBFVq lhSmDEtKzSlr1lZg7kfq2XfIipxf/4ksDSqC5GqokBy9iUrei/mlM76NmDoo62Vy 1ZxSljUbcZbz8WlUzGXNu80EadnGH8Q= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:06 2024 by rpki-client on console-ams.rpki-client.org