$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft File: wvw-GxtUPr1I39pZHcJRgiT5W38.mft (raw, json) Hash identifier: 21Tu10L6UPc4t+r3Mtza5SrhE6UQuUnZR0LiCVGP/xQ= Subject key identifier: CB:6C:59:A9:79:D3:16:C4:42:76:39:55:8D:3E:BB:36:52:1A:1F:E2 Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F Certificate issuer: /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft Manifest number: 01CA Signing time: Sat 23 Nov 2024 01:44:56 +0000 Manifest this update: Sat 23 Nov 2024 01:44:56 +0000 Manifest next update: Sat 30 Nov 2024 01:44:56 +0000 Files and hashes: 1: wvw-GxtUPr1I39pZHcJRgiT5W38.crl (hash: g8tSJjEpjcg+6IY34mCEl1rrUvX84yTUpUq04BbrA6w=) 2: 6B0DCABA80D111EFA7138B77C4F9AE02.roa (hash: 20c4MYkepjZuHhBAMHBrn49t6jxeY+Aj8lyTrV2Ws5U=) 3: B0EBD14E80D111EFABEC5878C4F9AE02.roa (hash: 2dlgj7DItMuHmtFFxfEMPVxDtbkL2wPq3LttfyLou7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Validity Not Before: Nov 23 01:44:56 2024 GMT Not After : Nov 30 01:44:56 2024 GMT Subject: CN=67413398-30ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:9e:7f:c1:e9:e2:57:38:b6:46:eb:e7:05: ba:f5:d2:0c:a3:ea:5d:fe:59:e6:09:9d:f2:08:9c: 22:13:7c:17:80:9f:45:f1:72:4f:2f:5d:21:96:d7: 33:29:ac:22:b8:91:15:0a:07:6c:77:a3:10:e0:c6: 55:ac:18:2e:98:40:26:9f:76:f0:0b:68:aa:2e:5d: 0c:c6:17:fb:df:76:a5:e0:e1:45:39:56:6a:c7:fb: 24:8e:f2:57:ae:8f:0c:a9:f9:5d:d8:6d:ef:87:0c: af:20:e6:c5:48:f2:b4:5a:31:d0:f3:ac:c3:49:ef: b2:68:9c:55:ec:f8:f5:e4:41:05:2c:64:f0:b9:11: a6:6c:3e:4c:8f:78:cc:8c:be:0b:96:fa:68:37:e6: e9:c4:fd:de:06:d3:a7:d3:2c:e1:77:82:ed:97:d2: 1f:d4:c2:37:99:8d:d4:93:c4:38:db:31:84:4f:f7: 57:34:64:0d:b3:e4:45:ab:d1:5f:ba:e7:9b:75:dd: cf:7e:e2:e5:46:33:db:9f:84:a8:6a:e4:f0:70:41: da:6b:6f:2b:4d:85:86:30:39:33:d1:70:c1:d3:05: 09:cd:bb:4a:46:7d:ad:66:30:91:34:28:d3:32:61: bd:fd:cc:7c:99:eb:2e:5b:58:09:ef:20:58:cd:2e: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6C:59:A9:79:D3:16:C4:42:76:39:55:8D:3E:BB:36:52:1A:1F:E2 X509v3 Authority Key Identifier: keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e4:65:e4:81:bc:99:23:31:ca:9a:c5:9a:2f:a3:84:be:fb: c1:c4:e7:34:29:58:7a:0d:c0:0d:66:b2:8f:67:19:b9:90:27: 08:77:5a:43:9d:ac:0a:f4:e6:4a:59:cb:47:f6:89:a9:92:93: b1:6d:e5:d2:70:9d:35:ae:bf:91:7e:c9:fa:e5:02:75:09:7c: 73:a1:a4:0c:51:3d:85:42:b5:1e:f8:b9:86:8c:72:21:a3:24: 47:45:af:84:db:86:f4:71:04:6e:be:27:59:39:8a:92:8f:42: d9:27:d9:2f:45:f4:70:6d:7b:9b:5d:3d:2d:04:64:13:45:be: 7c:fa:d4:ea:99:67:cc:da:8e:f7:e3:f1:42:b0:5c:36:a5:5f: a8:78:5d:0c:54:95:5d:c6:a0:1b:e8:92:c6:d2:1a:2f:ef:ed: d2:e4:0e:26:c6:ad:70:d7:8b:11:8b:d7:9d:69:4e:fd:41:0b: 45:66:03:86:63:e9:3c:f2:b9:4e:bc:4c:65:ae:d6:41:57:f5: 93:a6:9a:2f:9e:7b:ad:2a:8e:d1:6d:d0:03:eb:b8:c5:da:50: c2:18:6a:68:24:c6:92:ec:55:07:3c:d6:3b:35:0d:7e:92:16: 04:57:2f:9d:0f:86:57:7e:a5:ba:b1:6e:5c:56:e4:3c:e3:0f: 7a:a0:2c:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy MjRGOTVCN0YwHhcNMjQxMTIzMDE0NDU2WhcNMjQxMTMwMDE0NDU2WjAYMRYwFAYD VQQDEw02NzQxMzM5OC0zMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSeef8Hp4lc4tkbr5wW69dIMo+pd/lnmCZ3yCJwiE3wXgJ9F8XJPL10hltcz KawiuJEVCgdsd6MQ4MZVrBgumEAmn3bwC2iqLl0Mxhf733al4OFFOVZqx/skjvJX ro8Mqfld2G3vhwyvIObFSPK0WjHQ86zDSe+yaJxV7Pj15EEFLGTwuRGmbD5Mj3jM jL4LlvpoN+bpxP3eBtOn0yzhd4Ltl9If1MI3mY3Uk8Q42zGET/dXNGQNs+RFq9Ff uuebdd3PfuLlRjPbn4SoauTwcEHaa28rTYWGMDkz0XDB0wUJzbtKRn2tZjCRNCjT MmG9/cx8mesuW1gJ7yBYzS7IVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtsWal5 0xbEQnY5VY0+uzZSGh/iMB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTUyNC80OTFGMDJERTJDNzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVBy MUkzOXBaSGNKUmdpVDVXMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh5GXkgbyZIzHKmsWaL6OEvvvBxOc0KVh6DcANZrKPZxm5kCcId1pD nawK9OZKWctH9ompkpOxbeXScJ01rr+Rfsn65QJ1CXxzoaQMUT2FQrUe+LmGjHIh oyRHRa+E24b0cQRuvidZOYqSj0LZJ9kvRfRwbXubXT0tBGQTRb58+tTqmWfM2o73 4/FCsFw2pV+oeF0MVJVdxqAb6JLG0hov7+3S5A4mxq1w14sRi9edaU79QQtFZgOG Y+k88rlOvExlrtZBV/WTppovnnutKo7RbdAD67jF2lDCGGpoJMaS7FUHPNY7NQ1+ khYEVy+dD4ZXfqW6sW5cVuQ84w96oCyV -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org