$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: EgqC2dwYvjjfbIUY6T3sIh+5DDmmzXH2jfGIarSkc4I= Subject key identifier: 25:44:E3:C8:CB:93:94:60:68:38:11:50:B0:50:08:99:83:FD:E6:63 Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 0112 Signing time: Sat 23 Nov 2024 03:05:56 +0000 Manifest this update: Sat 23 Nov 2024 03:05:55 +0000 Manifest next update: Sat 30 Nov 2024 03:05:55 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: R7olQnL//qC1BD2+XN3DMtmGonMEVr6+6/m/kn6VcTM=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: CtHJodJQnL5Xz0yuYtNWAz2VQ1bux6VI2UVz4UoYjHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: Nov 23 03:05:55 2024 GMT Not After : Nov 30 03:05:55 2024 GMT Subject: CN=67414693-739d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:bd:64:62:4e:f1:81:f6:d4:98:80:8f:08: 6f:dc:7e:ca:96:04:d8:a1:21:f5:f2:2d:04:7c:3c: ca:d3:e5:de:c7:41:df:35:f6:4d:db:83:1a:0d:c4: 51:79:08:48:18:ff:f2:b3:f3:96:b4:5c:36:45:b8: bf:98:cd:13:b1:7a:47:81:e5:92:b3:8b:e5:bf:56: 2b:71:34:b2:4c:33:8e:62:08:3d:93:8e:1f:f5:85: f2:b7:36:72:8d:ee:7a:19:2c:c9:60:96:0f:c2:64: ae:28:59:1c:38:8f:7d:b3:bb:fc:f5:b3:3d:73:0d: a9:87:c7:12:10:61:0e:29:48:43:04:97:c2:33:ec: d7:c7:37:31:46:69:5d:b5:a7:71:8c:c6:6b:2e:7e: ee:5d:6e:e0:9b:02:e2:ab:c9:bd:67:5f:f7:3a:89: fb:d5:cb:01:b0:14:dc:40:93:f6:c1:0b:fb:42:26: 13:67:77:c1:e6:31:62:24:d2:82:c2:f9:9f:fa:f2: 5b:54:c8:d4:11:3c:82:c1:20:bc:7a:33:ad:80:d8: 00:d4:dc:53:3f:9e:7c:76:01:e0:70:4f:b5:e0:a3: 9a:cf:9a:26:17:08:dc:84:57:1e:0e:d7:48:41:4f: 0f:7b:5b:b1:f4:71:92:fd:ab:7d:10:60:6a:ae:c2: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:44:E3:C8:CB:93:94:60:68:38:11:50:B0:50:08:99:83:FD:E6:63 X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:dc:8c:11:6d:cc:18:19:a5:70:7e:84:78:75:fd:96:99: dd:e4:97:aa:53:ff:d2:25:8b:a5:86:8a:be:09:a1:5b:0d:0a: 5e:cc:0e:04:8c:c0:0a:1b:26:41:4c:57:d5:73:c2:9f:b1:85: 44:99:1b:43:d4:38:85:ba:6e:39:cd:cd:cb:43:e1:bc:a7:00: c0:d9:1c:da:1b:d3:84:dd:3d:3e:11:79:ab:a0:81:fb:bc:5a: b2:10:48:e1:4a:37:9a:69:0a:97:84:1a:d6:a7:28:e2:24:bc: a3:9d:b1:c5:76:58:52:18:88:45:0c:9a:68:08:c9:5d:a1:0d: 12:68:6f:13:c0:cd:d5:3c:5f:bf:db:82:ec:a7:4a:e6:a9:a9: e6:29:b2:02:7c:2a:0f:8b:84:ea:58:d8:60:c8:5e:19:1f:d4: 80:50:c0:8e:31:0a:fe:5e:ef:16:f3:87:6c:cc:c5:e6:98:6a: 0c:52:27:e1:b9:32:28:18:86:7d:2d:89:cc:9e:aa:52:ca:3b: cd:69:11:bf:78:c8:d3:5c:94:78:89:4a:3d:07:5a:c5:be:e4: 64:ff:50:24:3d:01:cd:f9:c9:99:e3:89:da:45:66:d3:27:68: cd:25:6d:34:3c:9f:88:62:58:74:89:d9:97:2c:e7:cd:6e:27: 1b:86:f6:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjQxMTIzMDMwNTU1WhcNMjQxMTMwMDMwNTU1WjAYMRYwFAYD VQQDEw02NzQxNDY5My03MzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAog+9ZGJO8YH21JiAjwhv3H7KlgTYoSH18i0EfDzK0+Xex0HfNfZN24MaDcRR eQhIGP/ys/OWtFw2Rbi/mM0TsXpHgeWSs4vlv1YrcTSyTDOOYgg9k44f9YXytzZy je56GSzJYJYPwmSuKFkcOI99s7v89bM9cw2ph8cSEGEOKUhDBJfCM+zXxzcxRmld tadxjMZrLn7uXW7gmwLiq8m9Z1/3Oon71csBsBTcQJP2wQv7QiYTZ3fB5jFiJNKC wvmf+vJbVMjUETyCwSC8ejOtgNgA1NxTP558dgHgcE+14KOaz5omFwjchFceDtdI QU8Pe1ux9HGS/at9EGBqrsK+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVE48jL k5RgaDgRULBQCJmD/eZjMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW49yMEW3MGBmlcH6EeHX9lpnd5JeqU//SJYulhoq+CaFbDQpezA4E jMAKGyZBTFfVc8KfsYVEmRtD1DiFum45zc3LQ+G8pwDA2RzaG9OE3T0+EXmroIH7 vFqyEEjhSjeaaQqXhBrWpyjiJLyjnbHFdlhSGIhFDJpoCMldoQ0SaG8TwM3VPF+/ 24Lsp0rmqanmKbICfCoPi4TqWNhgyF4ZH9SAUMCOMQr+Xu8W84dszMXmmGoMUifh uTIoGIZ9LYnMnqpSyjvNaRG/eMjTXJR4iUo9B1rFvuRk/1AkPQHN+cmZ44naRWbT J2jNJW00PJ+IYlh0idmXLOfNbicbhvYJ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org