$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft File: wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json) Hash identifier: ggRHSGV+Zk+0jaKaGdKl1nG564Cuj5J6kMEK3oKH17w= Subject key identifier: 3D:A6:C1:6C:54:47:F2:54:E1:61:4A:F4:AB:A0:2B:EE:51:CA:D0:09 Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 Certificate issuer: /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft Manifest number: 0122 Signing time: Thu 21 Nov 2024 02:58:22 +0000 Manifest this update: Thu 21 Nov 2024 02:58:21 +0000 Manifest next update: Thu 28 Nov 2024 02:58:21 +0000 Files and hashes: 1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: DZyuC5E8QMlnXNXnyqiVqw45uwXP0vxTMkB/ahMOYX8=) 2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Jrs9iVpBkhWObUZZRk09z2kiCsYhTgr/jMdFkC3tj10=) 3: 6881BE7EEFF411EDB617DD7DC4F9AE02.roa (hash: pcKNVy8KNgNcIGTnXKtg//wrVOXs2JXaYqznl9PD1II=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Validity Not Before: Nov 21 02:58:21 2024 GMT Not After : Nov 28 02:58:21 2024 GMT Subject: CN=673ea1cd-84ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:73:19:f3:4d:69:37:e8:e1:23:40:85:95:c4: 8f:f0:99:fc:d2:92:e3:c8:7a:71:a5:cd:fb:4d:61: 0c:ff:35:ca:83:f8:d1:ef:bd:ff:84:af:59:10:43: 4e:c1:fc:b3:43:67:12:79:f3:3b:34:3c:7c:5f:0d: c7:3d:20:e6:b1:76:7b:c8:80:5e:c6:f8:aa:b2:64: f3:07:3c:3e:12:e2:99:6f:75:35:22:18:eb:8b:79: 7d:59:95:ba:1e:2d:0b:19:fc:a4:d9:f4:05:f7:f6: f4:6f:a4:41:15:4c:e3:a4:09:d9:b5:7e:67:c6:ed: 99:31:c6:4f:6e:3b:80:41:c6:d8:93:cc:83:a4:13: 7c:ec:ff:a4:37:20:dd:46:c3:e8:95:ef:54:86:0c: 21:c2:7b:0b:ae:9c:41:18:a8:ac:38:77:35:be:c8: 7b:94:8e:c4:03:dd:47:01:9f:a1:da:33:a2:13:0c: 92:1d:66:7c:3b:bf:1e:2f:5e:2f:2a:17:bc:ec:d3: d6:98:a9:da:c9:0f:73:a5:de:cc:fe:4f:5a:5f:7a: 30:a5:bb:1c:92:a2:f0:34:bf:68:66:d0:9e:92:26: d3:e2:2f:de:e3:39:b6:27:d0:91:40:0f:1b:b3:c7: 0e:16:77:1e:ae:b4:b9:65:1c:1b:aa:4b:76:ff:06: 4a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A6:C1:6C:54:47:F2:54:E1:61:4A:F4:AB:A0:2B:EE:51:CA:D0:09 X509v3 Authority Key Identifier: keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3e:84:fa:3d:77:1e:42:70:69:6f:fe:58:9b:56:f8:ce:2b: cf:a0:25:42:9f:a1:71:6c:68:db:05:7f:16:28:51:04:11:74: 42:af:97:96:f9:79:6b:48:c8:d9:7f:c8:ef:29:39:21:bc:3c: e3:06:f8:9c:3c:ab:9e:ef:5f:61:9a:99:66:10:97:47:cc:eb: aa:49:f5:4b:97:fe:3b:af:f4:5b:3e:e2:fc:e4:cd:36:ec:69: 92:93:1e:47:75:b9:39:2a:c6:f6:38:6d:65:77:05:f7:91:9d: fa:4e:e5:d0:95:78:6e:22:4a:94:0b:0a:1e:7d:25:db:c8:a4: 1b:9c:e0:32:34:4e:e7:b4:11:26:15:44:d0:bf:35:40:f6:db: a7:a2:02:b6:8d:b2:fc:f9:3f:46:db:de:fc:a8:2e:18:b4:5a: e9:6f:23:e4:e0:7f:70:f4:ea:ba:a1:4f:64:74:4d:fc:29:fc: ee:8a:cb:76:f0:9a:50:cc:b1:3f:b1:54:af:fe:c4:84:15:3a: 42:9a:77:1a:72:7b:9e:2e:87:5e:f5:69:8a:3d:6c:b4:df:2d: 04:b1:c8:6d:95:75:12:b4:6f:15:f7:53:a1:ad:92:f6:d4:c7: 2d:30:4e:4a:0e:f8:d6:10:2a:d2:a7:de:b3:17:2c:a8:26:c4: 15:d3:c6:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3 RkE5Mjg1RDEwHhcNMjQxMTIxMDI1ODIxWhcNMjQxMTI4MDI1ODIxWjAYMRYwFAYD VQQDEw02NzNlYTFjZC04NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43MZ801pN+jhI0CFlcSP8Jn80pLjyHpxpc37TWEM/zXKg/jR773/hK9ZEENO wfyzQ2cSefM7NDx8Xw3HPSDmsXZ7yIBexviqsmTzBzw+EuKZb3U1Ihjri3l9WZW6 Hi0LGfyk2fQF9/b0b6RBFUzjpAnZtX5nxu2ZMcZPbjuAQcbYk8yDpBN87P+kNyDd RsPole9UhgwhwnsLrpxBGKisOHc1vsh7lI7EA91HAZ+h2jOiEwySHWZ8O78eL14v Khe87NPWmKnayQ9zpd7M/k9aX3owpbsckqLwNL9oZtCekibT4i/e4zm2J9CRQA8b s8cOFncerrS5ZRwbqkt2/wZKbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2mwWxU R/JU4WFK9KugK+5RytAJMB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTMyMy9FN0ZDMkYxRUVGRUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJW Zm1aLTh1aktwM05fcVNoZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1PoT6PXceQnBpb/5Ym1b4zivPoCVCn6FxbGjbBX8WKFEEEXRCr5eW +XlrSMjZf8jvKTkhvDzjBvicPKue719hmplmEJdHzOuqSfVLl/47r/RbPuL85M02 7GmSkx5Hdbk5Ksb2OG1ldwX3kZ36TuXQlXhuIkqUCwoefSXbyKQbnOAyNE7ntBEm FUTQvzVA9tunogK2jbL8+T9G2978qC4YtFrpbyPk4H9w9Oq6oU9kdE38Kfzuist2 8JpQzLE/sVSv/sSEFTpCmncacnueLode9WmKPWy03y0EschtlXUStG8V91OhrZL2 1MctME5KDvjWECrSp96zFyyoJsQV08Zq -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:06 2024 by rpki-client on console-ams.rpki-client.org