$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: IBwxzJTMPxvk2RlFaOk8CybF8ucI00cK+5CpPiBmJpE= Subject key identifier: 3E:4A:EF:CF:4D:03:CD:D4:51:02:24:35:38:A3:18:FC:B2:FC:EE:B4 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 3459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 3443 Signing time: Fri 22 Nov 2024 15:14:36 +0000 Manifest this update: Fri 22 Nov 2024 15:14:36 +0000 Manifest next update: Fri 29 Nov 2024 15:14:36 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: KoExlkTIxSKQtoGJJ/wbuyWpnE4dKr/m/e0FWK/ICt4=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: HLTePiU4urymQI4+1hTlyJoCh3/oP2VQ7PHFtXnFIXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13401 (0x3459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Nov 22 15:14:36 2024 GMT Not After : Nov 29 15:14:36 2024 GMT Subject: CN=67409fdc-2647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:31:dc:a6:88:1f:52:bf:d3:f6:a3:84:cb: e8:22:37:3c:8d:09:5d:30:ac:2c:d9:db:f5:18:48: 0c:00:a2:e6:26:5c:10:8f:2f:91:f6:8c:33:54:64: ee:95:07:d1:a6:0b:fb:a1:5c:0f:1b:05:21:9c:69: 56:53:dc:0a:1f:7a:90:65:ef:0d:9d:0e:b2:5c:70: c4:93:54:bb:1d:03:a1:de:c6:48:c4:e7:7b:4f:b1: 8d:59:a6:0e:07:a3:d0:23:67:73:b9:c0:5a:23:14: e4:bd:cd:43:1f:04:1a:e1:2e:46:4d:9c:8d:61:40: b7:35:00:9f:d3:4f:e2:61:a3:61:fe:75:59:1b:eb: 44:a3:ad:ec:e0:da:72:59:11:50:0c:3e:4f:5d:c7: 50:66:67:0f:51:f6:10:a0:79:e3:41:53:32:f7:6c: 89:25:6b:27:43:c7:c2:69:f2:bf:cc:81:c4:cc:87: dd:be:86:bf:02:0d:63:2e:e0:62:41:32:70:77:52: a8:86:58:90:c0:4d:bc:eb:91:1e:23:b4:ec:9a:f7: 2c:50:3b:71:4c:77:64:d8:fd:07:1c:4c:f8:93:d8: 8d:9b:81:d8:b2:03:88:43:c7:a9:04:f7:9a:4e:f1: ab:90:d7:1a:6c:0b:de:63:30:8c:ec:9b:7a:01:d4: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4A:EF:CF:4D:03:CD:D4:51:02:24:35:38:A3:18:FC:B2:FC:EE:B4 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:25:0f:d3:a8:c3:19:45:48:6f:01:59:51:0d:7e:93:5b:ef: d4:87:f6:2c:0b:46:f6:28:1d:94:90:32:cf:e8:2e:0d:1f:25: b8:68:24:50:9f:47:68:da:9d:11:75:ef:2d:4f:e6:49:35:fb: 29:25:8e:74:87:8a:e3:58:9b:1f:9b:64:61:6d:fb:27:c5:88: ea:2d:5d:a5:e1:6a:23:e4:92:28:8d:f8:1e:77:3e:f3:56:68: 64:a3:f9:32:b3:38:cb:76:0b:d7:11:11:c1:9b:ee:a5:9a:25: c1:cc:76:3e:d2:30:8e:87:b2:88:2b:17:83:31:0d:24:87:88: c6:4b:82:68:d4:4c:7c:2b:8f:79:87:33:7c:d7:e1:9a:76:97: dd:10:52:d4:58:de:ec:86:6c:ef:32:bd:6b:be:7d:ed:dc:fe: bb:99:18:58:30:ea:8f:98:05:a0:db:46:19:aa:d3:f8:ef:75: 34:04:b0:01:10:e9:51:ff:8b:fb:6c:38:db:30:8e:e6:e9:58: fc:71:56:6d:45:0c:31:c6:09:a8:b2:28:ae:4e:84:dc:92:5f: d5:5c:12:70:f4:de:f3:43:ab:3c:42:a1:ed:60:67:5c:95:62: ca:de:c1:27:b4:1a:e9:7b:df:e7:40:66:a4:8f:5a:0c:dd:68: bf:ff:fa:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjQxMTIyMTUxNDM2WhcNMjQxMTI5MTUxNDM2WjAYMRYwFAYD VQQDEw02NzQwOWZkYy0yNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA8x3KaIH1K/0/ajhMvoIjc8jQldMKws2dv1GEgMAKLmJlwQjy+R9owzVGTu lQfRpgv7oVwPGwUhnGlWU9wKH3qQZe8NnQ6yXHDEk1S7HQOh3sZIxOd7T7GNWaYO B6PQI2dzucBaIxTkvc1DHwQa4S5GTZyNYUC3NQCf00/iYaNh/nVZG+tEo63s4Npy WRFQDD5PXcdQZmcPUfYQoHnjQVMy92yJJWsnQ8fCafK/zIHEzIfdvoa/Ag1jLuBi QTJwd1KohliQwE2865EeI7TsmvcsUDtxTHdk2P0HHEz4k9iNm4HYsgOIQ8epBPea TvGrkNcabAveYzCM7Jt6AdRu2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5K789N A83UUQIkNTijGPyy/O60MB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+JQ/TqMMZRUhvAVlRDX6TW+/Uh/YsC0b2KB2UkDLP6C4NHyW4aCRQ n0do2p0Rde8tT+ZJNfspJY50h4rjWJsfm2RhbfsnxYjqLV2l4Woj5JIojfgedz7z Vmhko/kyszjLdgvXERHBm+6lmiXBzHY+0jCOh7KIKxeDMQ0kh4jGS4Jo1Ex8K495 hzN81+GadpfdEFLUWN7shmzvMr1rvn3t3P67mRhYMOqPmAWg20YZqtP473U0BLAB EOlR/4v7bDjbMI7m6Vj8cVZtRQwxxgmosiiuToTckl/VXBJw9N7zQ6s8QqHtYGdc lWLK3sEntBrpe9/nQGakj1oM3Wi///oa -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org