$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: 07aFIzgc7Aq6WRpMj+jaBeSBKvVbwzeRpaH5OEr1VQs= Subject key identifier: 84:75:DE:EC:4D:4A:CE:B2:E6:90:C4:E6:27:4A:1B:2B:B8:E2:51:AA Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 20 Signing time: Thu 21 Nov 2024 05:54:46 +0000 Manifest this update: Thu 21 Nov 2024 05:54:45 +0000 Manifest next update: Thu 28 Nov 2024 05:54:45 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: dtlbmg1TyfEU8U6oOs4qmvfuRZQhnzNFIdlvysd6aZw=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Nov 21 05:54:45 2024 GMT Not After : Nov 28 05:54:45 2024 GMT Subject: CN=673ecb25-a840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:95:a1:7e:92:e4:6b:f9:c3:a5:c6:de:9b: 5a:79:be:4a:09:00:f1:cb:eb:e8:71:2e:cd:ab:b0: cb:a1:78:92:d0:c6:56:66:31:97:f6:e9:05:08:9f: 10:f0:9e:af:24:f9:34:94:d3:90:3b:6b:9f:ff:a0: b0:15:a7:36:ad:cc:e6:27:3c:b1:31:d9:5f:a3:ed: c3:33:e1:a2:7a:16:7f:f8:d0:a9:99:4b:52:d1:9b: d9:c3:e4:9c:10:b5:f9:c5:66:8e:e4:18:62:58:60: b8:eb:58:19:78:c4:52:5e:e0:23:28:4b:2c:3c:df: 99:60:9b:2b:30:65:4b:c5:4f:14:c0:6e:4d:a1:54: 85:f0:97:62:b7:c9:93:3e:e0:cb:2c:e9:1f:f8:6a: e8:c6:8e:d5:f9:c8:cb:43:e0:4e:55:e1:40:4d:5b: 9a:5e:5b:09:6a:d2:e9:44:61:20:d6:0b:6a:08:db: 15:12:1c:cc:cc:f6:7a:c2:c2:02:cf:04:c7:3b:71: 3c:1a:07:59:1b:54:66:e0:b7:71:3b:3a:29:4b:a3: 84:6a:2e:69:57:bb:87:13:2b:95:b6:98:8b:ac:ec: 7d:8f:b0:26:83:05:cb:10:50:43:47:a4:dd:bb:75: 83:22:ae:b3:9d:f2:5d:68:08:b1:bc:30:41:80:00: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:DE:EC:4D:4A:CE:B2:E6:90:C4:E6:27:4A:1B:2B:B8:E2:51:AA X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3e:85:0e:ab:13:bb:16:cb:e7:1f:bc:9b:35:05:ad:35:2a: 33:18:09:56:01:48:da:4d:14:c5:70:be:11:90:1a:bb:d7:ef: e5:57:93:d0:1b:f5:d0:3b:95:91:fc:dd:29:02:0c:74:4a:0c: 19:c0:5a:eb:5b:6c:9f:cb:ce:70:c0:e8:51:b0:2a:88:3a:87: 03:f7:d3:00:bc:03:96:e9:15:d4:84:03:39:57:8d:cd:2c:27: fb:91:02:d6:fe:44:5e:33:6a:6b:93:04:62:e9:93:22:a7:77: d6:14:02:84:8e:2e:25:51:17:72:eb:71:33:d6:8b:f3:27:58: 79:87:13:c4:13:53:b4:3c:e4:3d:46:8c:a0:f2:1c:02:7b:b7: 50:de:a5:64:18:6e:15:0c:a6:18:d9:89:c3:1f:e9:5a:db:19: 4a:22:5c:96:be:b5:61:14:bb:34:aa:73:c4:11:38:97:90:96: 8b:8e:28:96:ce:9d:71:fa:ee:b0:fd:16:df:e8:05:a8:89:b3: e0:6c:e0:07:67:e4:d3:2c:6a:33:33:93:a0:4d:2f:6f:b8:11: 2e:c9:3e:81:ed:09:58:15:fe:6a:20:cd:07:bf:d9:4e:da:0f: 0a:d5:8f:e7:a1:91:0d:a9:0f:01:8a:be:96:f3:43:7b:f8:b9: f2:2b:50:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjUwRDExMC8GA1UEBRMoNTg2RjkzMzE3NkY2NTQ1NDM1QkIwNjk3RkU1Rjk4MkEy MDkzOTQxQjAeFw0yNDExMjEwNTU0NDVaFw0yNDExMjgwNTU0NDVaMBgxFjAUBgNV BAMTDTY3M2VjYjI1LWE4NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/F5WhfpLka/nDpcbem1p5vkoJAPHL6+hxLs2rsMuheJLQxlZmMZf26QUInxDw nq8k+TSU05A7a5//oLAVpzatzOYnPLEx2V+j7cMz4aJ6Fn/40KmZS1LRm9nD5JwQ tfnFZo7kGGJYYLjrWBl4xFJe4CMoSyw835lgmyswZUvFTxTAbk2hVIXwl2K3yZM+ 4Mss6R/4aujGjtX5yMtD4E5V4UBNW5peWwlq0ulEYSDWC2oI2xUSHMzM9nrCwgLP BMc7cTwaB1kbVGbgt3E7OilLo4RqLmlXu4cTK5W2mIus7H2PsCaDBcsQUENHpN27 dYMirrOd8l1oCLG8MEGAAMBzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhHXe7E1K zrLmkMTmJ0obK7jiUaowHwYDVR0jBBgwFoAUWG+TMXb2VFQ1uwaX/l+YKiCTlBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTBEL0VGOEUzREFDN0JC QzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxC cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0ctVE1YYjJWRlExdXdhWF9sLVlLaUNUbEJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTBEL0VGOEUzREFDN0JCQzExRUY5MkVFMUE2NkM0RjlBRTAyL1dHLVRNWGIyVkZR MXV3YVhfbC1ZS2lDVGxCcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIo+hQ6rE7sWy+cfvJs1Ba01KjMYCVYBSNpNFMVwvhGQGrvX7+VXk9Ab 9dA7lZH83SkCDHRKDBnAWutbbJ/LznDA6FGwKog6hwP30wC8A5bpFdSEAzlXjc0s J/uRAtb+RF4zamuTBGLpkyKnd9YUAoSOLiVRF3LrcTPWi/MnWHmHE8QTU7Q85D1G jKDyHAJ7t1DepWQYbhUMphjZicMf6VrbGUoiXJa+tWEUuzSqc8QROJeQlouOKJbO nXH67rD9Ft/oBaiJs+Bs4Adn5NMsajMzk6BNL2+4ES7JPoHtCVgV/mogzQe/2U7a DwrVj+ehkQ2pDwGKvpbzQ3v4ufIrUHI= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org