$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: 97meT7qR8FHiVl8WKL/4aa7Zqa4bFDLo3UmGSTnWw1w= Subject key identifier: F1:7D:9A:44:04:8D:85:AE:26:17:0B:8E:F9:A1:80:5C:AB:AD:13:28 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 1960 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 1956 Signing time: Wed 20 Nov 2024 16:22:58 +0000 Manifest this update: Wed 20 Nov 2024 16:22:57 +0000 Manifest next update: Wed 27 Nov 2024 16:22:57 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: 2ii2lDelT6QNcGVburchkdba0+UQXynkSHErpWf05fc=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: yqEcj3SZ3T1pYpHMLtfx0ZxmS715TGOM5EI1dS08gyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6496 (0x1960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Nov 20 16:22:57 2024 GMT Not After : Nov 27 16:22:57 2024 GMT Subject: CN=673e0ce2-354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f6:a0:38:7c:40:d2:cc:e9:e1:3d:83:61:74: c1:d6:ef:f8:c3:c4:26:59:3c:3e:de:eb:91:a1:38: 41:ef:70:12:e0:8f:5c:c9:5a:42:83:0c:1d:ee:fe: 02:4d:30:25:5d:a2:26:de:30:ee:0a:05:48:d8:0d: 1d:40:dd:10:1c:9d:d7:4b:74:05:59:df:0e:16:88: 1a:78:73:10:1e:30:73:81:13:f2:82:10:d1:cd:26: a7:8b:26:e1:aa:c6:3d:4d:e6:27:79:2d:06:e0:a0: be:aa:d4:a0:5e:ad:b3:ad:b7:2f:56:dc:f3:3e:78: 5d:21:1c:5b:2a:e1:a1:0f:34:8f:28:39:15:7f:bd: ae:61:a8:9c:42:6a:1a:f3:dd:91:e5:af:50:2e:5d: f1:c8:72:88:20:b2:e4:8e:75:53:bb:ac:66:1c:cd: 6f:35:e8:92:86:6c:15:05:76:cc:88:bc:e6:ed:96: 7c:bb:ec:1e:8e:8f:7d:a4:7b:3a:60:9d:5f:ac:91: 12:11:e3:5a:88:74:29:f5:aa:1f:08:42:eb:40:75: c0:7a:11:90:b7:af:70:a1:5a:6b:f2:f5:bc:62:5e: ae:bf:ee:74:86:a4:79:e7:ee:3b:b2:d8:c1:1b:55: 2d:19:ba:67:01:ce:82:5d:f6:68:f6:38:32:d0:51: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7D:9A:44:04:8D:85:AE:26:17:0B:8E:F9:A1:80:5C:AB:AD:13:28 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:15:48:21:08:bf:fc:d3:b6:a5:41:c7:fb:7f:cc:6e:26:63: 05:04:41:b8:79:f4:b0:2d:15:b9:5c:39:c3:10:49:01:73:dd: 83:f3:0f:6a:89:6a:05:e7:87:be:68:82:e8:43:ab:6a:7b:a0: aa:78:cb:e1:16:bc:3f:31:e1:cb:b5:ac:46:b5:6a:9b:ea:6d: e5:12:a6:e9:b8:b3:f5:c1:21:96:2c:85:f5:26:2c:85:03:16: 5d:16:72:81:cc:f7:24:d9:be:39:76:3d:8e:86:31:38:21:62: fa:3f:4a:8a:ce:34:59:ec:4a:71:42:70:be:66:78:cb:d9:94: 50:72:56:5a:af:c2:93:44:a7:2f:7c:e7:ca:66:95:27:2d:f9: 6c:1f:f4:91:a0:86:8d:68:15:b1:11:cb:58:97:11:03:2d:88: 8a:aa:50:70:a3:7c:71:21:e4:f4:e9:84:c1:1b:05:7c:18:41: 5b:12:ee:ba:c8:07:12:0c:68:d0:d2:ed:ad:3f:46:aa:49:8a: f1:93:34:17:26:25:aa:1b:60:b1:d8:d1:a9:98:89:36:de:f4: 5f:0f:51:f2:be:a4:ca:65:3f:2f:2d:88:fa:46:47:49:9f:b7: 9a:9d:08:8d:de:fa:ac:f9:7d:57:46:bf:13:ca:dd:0d:56:f5: c7:38:ad:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjQxMTIwMTYyMjU3WhcNMjQxMTI3MTYyMjU3WjAYMRYwFAYD VQQDEw02NzNlMGNlMi0zNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vagOHxA0szp4T2DYXTB1u/4w8QmWTw+3uuRoThB73AS4I9cyVpCgwwd7v4C TTAlXaIm3jDuCgVI2A0dQN0QHJ3XS3QFWd8OFogaeHMQHjBzgRPyghDRzSaniybh qsY9TeYneS0G4KC+qtSgXq2zrbcvVtzzPnhdIRxbKuGhDzSPKDkVf72uYaicQmoa 892R5a9QLl3xyHKIILLkjnVTu6xmHM1vNeiShmwVBXbMiLzm7ZZ8u+wejo99pHs6 YJ1frJESEeNaiHQp9aofCELrQHXAehGQt69woVpr8vW8Yl6uv+50hqR55+47stjB G1UtGbpnAc6CXfZo9jgy0FHOzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF9mkQE jYWuJhcLjvmhgFyrrRMoMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbFUghCL/807alQcf7f8xuJmMFBEG4efSwLRW5XDnDEEkBc92D8w9q iWoF54e+aILoQ6tqe6CqeMvhFrw/MeHLtaxGtWqb6m3lEqbpuLP1wSGWLIX1JiyF AxZdFnKBzPck2b45dj2OhjE4IWL6P0qKzjRZ7EpxQnC+ZnjL2ZRQclZar8KTRKcv fOfKZpUnLflsH/SRoIaNaBWxEctYlxEDLYiKqlBwo3xxIeT06YTBGwV8GEFbEu66 yAcSDGjQ0u2tP0aqSYrxkzQXJiWqG2Cx2NGpmIk23vRfD1HyvqTKZT8vLYj6RkdJ n7eanQiN3vqs+X1XRr8Tyt0NVvXHOK3o -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:01 2024 by rpki-client on console-fra.rpki-client.org