$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: jI3YyNXNPOmon1GZtcZEpmqM7lmMaWxdJZRxKzLwHNw= Subject key identifier: 02:66:0E:B5:88:CF:FD:A5:C7:EB:31:49:1F:C1:12:E4:86:DA:34:BD Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 010D Signing time: Mon 25 Nov 2024 03:07:59 +0000 Manifest this update: Mon 25 Nov 2024 03:07:58 +0000 Manifest next update: Mon 02 Dec 2024 03:07:58 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: r4dIdJL51eP0E1V8c8Dsnsm4R336UXjX3tL9k2JOcF4=) 2: 778D3E88227B11EF88C3CA12C4F9AE02.roa (hash: 42iV0FOG3/tRPliIEgNMZXa2a7eWQ2R2CLN3hHB+7aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Nov 25 03:07:58 2024 GMT Not After : Dec 2 03:07:58 2024 GMT Subject: CN=6743ea0f-5a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:fc:18:f6:ae:b6:fc:c6:0b:11:e5:3f:26: b8:78:33:dc:c6:2a:ef:66:c4:d5:c4:4b:82:e4:1f: a4:c0:00:d2:e8:44:47:d9:f7:ac:e0:ed:ae:2b:6b: 0f:3a:bf:81:be:0a:d5:d6:1c:69:81:59:fe:74:e3: 60:74:53:c5:75:81:69:3c:3a:fa:6e:7f:6c:2d:ad: d0:80:b1:c2:81:ed:e6:7b:6c:66:81:6c:90:5f:81: 00:cd:89:88:89:ba:06:8b:34:3d:77:7c:40:bf:e3: 7b:0a:96:de:90:0b:55:48:96:e9:66:cf:05:4f:9e: 47:90:aa:9e:3b:44:4f:fe:fe:a0:d0:40:4f:7f:3f: a5:58:19:67:6d:66:3e:65:41:56:22:0d:e2:a4:8e: 6d:34:3e:c9:a1:25:b8:59:9f:1f:cf:e6:03:bd:cc: 3d:2c:62:0e:94:aa:ab:9b:6b:6a:78:b0:d7:29:f9: 52:b2:dd:52:bb:18:52:23:4a:92:15:47:fb:c7:6a: 1f:ce:a1:e8:97:21:8f:ec:9a:65:15:f4:72:e2:97: 3a:59:f4:ae:35:ce:ed:72:fe:27:20:e7:53:49:a5: e6:1c:d2:d4:32:d3:50:78:3f:99:28:7d:63:9e:d6: c2:ae:1e:d0:24:23:86:15:9b:f2:8e:40:bd:e1:a0: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:66:0E:B5:88:CF:FD:A5:C7:EB:31:49:1F:C1:12:E4:86:DA:34:BD X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:94:3b:fa:a1:e2:47:b3:69:4d:69:37:1f:b8:88:5e:2c:17: 3c:92:4a:77:c3:0e:d8:bd:1d:e4:bc:2b:4c:49:a2:a7:26:e8: b2:2e:64:b6:7b:6e:d2:ee:4b:77:b2:7b:f5:ae:36:e4:ab:eb: f1:61:bc:21:dd:2c:45:69:2d:6b:de:c3:d3:60:18:5c:40:b0: a8:e8:ff:71:af:40:ea:8c:f5:a4:11:3e:cd:67:f7:ff:b7:ba: 0f:e1:2f:f7:c9:d5:7b:33:b2:ff:d4:ad:ad:df:88:bb:38:83: 72:88:0a:2b:02:a8:3c:a4:40:34:44:b0:46:78:30:10:d9:96: 30:b7:2b:be:06:b3:b1:f0:35:e8:23:8f:2a:64:ae:68:0e:31: c6:5c:62:9b:ba:b3:a3:eb:83:2c:df:aa:ec:9f:61:a0:bf:e3: 95:56:1c:b7:62:59:47:9e:2a:61:25:c3:b7:50:25:3f:17:c0: 58:2d:01:ec:29:4f:aa:9c:b2:b6:b4:94:c6:2f:d9:b6:be:87: 3b:09:fa:c3:06:60:24:2f:4a:7e:3f:a9:b6:a8:31:28:66:2f: 57:1f:3c:ee:9a:5d:ec:66:f2:ce:77:b0:8c:61:85:a3:41:ac: bc:1a:7a:c8:c7:81:9d:d9:16:34:1d:89:17:11:c8:8b:8a:9f: 54:b4:e3:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjQxMTI1MDMwNzU4WhcNMjQxMjAyMDMwNzU4WjAYMRYwFAYD VQQDEw02NzQzZWEwZi01YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Fb8GPautvzGCxHlPya4eDPcxirvZsTVxEuC5B+kwADS6ERH2fes4O2uK2sP Or+BvgrV1hxpgVn+dONgdFPFdYFpPDr6bn9sLa3QgLHCge3me2xmgWyQX4EAzYmI iboGizQ9d3xAv+N7CpbekAtVSJbpZs8FT55HkKqeO0RP/v6g0EBPfz+lWBlnbWY+ ZUFWIg3ipI5tND7JoSW4WZ8fz+YDvcw9LGIOlKqrm2tqeLDXKflSst1SuxhSI0qS FUf7x2ofzqHolyGP7JplFfRy4pc6WfSuNc7tcv4nIOdTSaXmHNLUMtNQeD+ZKH1j ntbCrh7QJCOGFZvyjkC94aBKFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJmDrWI z/2lx+sxSR/BEuSG2jS9MB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRlDv6oeJHs2lNaTcfuIheLBc8kkp3ww7YvR3kvCtMSaKnJuiyLmS2 e27S7kt3snv1rjbkq+vxYbwh3SxFaS1r3sPTYBhcQLCo6P9xr0DqjPWkET7NZ/f/ t7oP4S/3ydV7M7L/1K2t34i7OINyiAorAqg8pEA0RLBGeDAQ2ZYwtyu+BrOx8DXo I48qZK5oDjHGXGKburOj64Ms36rsn2Ggv+OVVhy3YllHniphJcO3UCU/F8BYLQHs KU+qnLK2tJTGL9m2voc7CfrDBmAkL0p+P6m2qDEoZi9XHzzuml3sZvLOd7CMYYWj Qay8GnrIx4Gd2RY0HYkXEciLip9UtOP2 -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:32 2024 by rpki-client on console-fra.rpki-client.org