$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json) Hash identifier: wbyc2aG+68VZ6xjqrdX+Uwhi7rkSPKp0JsaSXCTA1No= Subject key identifier: 33:47:1D:51:D4:FB:96:08:F6:CC:41:97:A1:4B:AE:19:90:95:73:CF Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft Manifest number: 015A Signing time: Sat 23 Nov 2024 02:25:05 +0000 Manifest this update: Sat 23 Nov 2024 02:25:05 +0000 Manifest next update: Sat 30 Nov 2024 02:25:05 +0000 Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: aRpoAMYSt4omwxhFBVf4bhwPZ0kz5HlWndON6TatPM0=) 2: 7FB6349E967111ED94CA8D6AC4F9AE02.roa (hash: IkBbAKpYbcppJK4s7Lux0mr/S6wEZBpwnFhMZ3gHdyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Validity Not Before: Nov 23 02:25:05 2024 GMT Not After : Nov 30 02:25:05 2024 GMT Subject: CN=67413d01-5e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:81:48:37:72:e3:1f:bd:72:60:c5:e8:c8: cb:9b:b8:a6:6d:26:3a:c6:ba:d8:fb:c8:17:23:6a: ea:dc:af:cc:cd:46:a7:70:a0:25:6c:d8:c9:e5:96: 7b:3e:d7:9b:74:60:48:1f:89:56:d8:8b:28:7b:7e: bb:00:d2:9b:db:6b:5e:3c:91:fb:69:55:5a:c5:42: 37:e1:60:b0:ac:71:5a:04:17:86:06:76:b0:b3:1c: 20:d3:e6:96:83:83:30:0e:36:a5:60:65:6c:bd:1e: 22:b5:e4:43:48:e3:9a:b5:56:4a:1c:bf:fa:ff:35: b8:41:49:49:2b:35:7e:93:7c:5c:43:9b:98:b7:67: 2a:ed:f0:ec:b3:b0:02:0c:de:ca:22:31:bb:0e:da: 58:43:19:b8:a8:b1:8f:9f:a1:be:9d:f1:34:c1:6c: 13:49:83:86:3b:ac:56:35:7d:09:75:75:27:80:3e: 5c:0e:34:67:3c:13:37:25:74:65:75:e8:c2:39:b5: 6b:48:bf:e0:74:f7:50:59:07:d4:07:c7:0a:e0:a1: a3:fd:ae:d1:59:ab:24:f4:19:6e:d7:e4:b3:9b:9e: 63:1d:d1:b3:6d:2c:99:db:7f:bc:9b:b5:96:53:02: 1f:1f:ab:c2:c0:09:05:e2:dc:5f:56:9f:9e:87:a2: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:47:1D:51:D4:FB:96:08:F6:CC:41:97:A1:4B:AE:19:90:95:73:CF X509v3 Authority Key Identifier: keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:68:e1:69:86:a5:90:00:59:6f:42:f1:30:9d:85:49:42:19: a9:bd:b3:67:f0:3d:5f:0c:a2:43:cd:01:b7:5b:8f:37:e5:43: c8:1c:24:48:86:47:f0:97:65:fb:03:f7:3a:fa:13:b0:92:97: 87:e8:cf:e9:a3:50:bc:62:ee:d0:9e:30:b4:8f:1c:e4:67:09: 86:c2:b0:34:fd:25:69:ca:70:b6:ac:4c:8f:f1:c8:03:ec:0c: 3f:c2:f8:bf:e5:f5:ef:02:f8:8e:c9:ea:cf:3c:b4:1b:c7:c5: ce:9b:a6:37:a5:19:c0:cd:72:ab:ef:56:fe:5b:8d:96:33:4f: 75:4d:91:a5:04:67:f4:03:c5:7a:34:1b:4e:8f:7c:91:ca:0b: 63:82:a7:f3:40:22:ae:92:a7:f7:65:77:09:38:8b:24:dd:38: 33:f7:a8:26:40:6a:c5:d6:95:5a:dd:13:da:48:ec:f1:ea:09: 7c:cd:d8:3e:83:46:ed:f6:8b:68:05:f9:77:45:93:51:65:51: 45:0a:b2:50:7a:a1:8e:ec:6b:c4:7c:21:ce:a7:eb:32:55:79: c9:94:74:52:1f:53:81:5e:61:57:13:03:1f:c4:a7:11:95:e6: 79:96:12:d0:a9:bb:b3:9d:35:9c:59:d9:ed:f7:3d:5d:2a:16: 87:8b:c5:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0MUUxMTAvBgNVBAUTKEMxMzc2NEEwQTYzQTc3NjdGM0E0NzVEN0E4MUFFOERG MThBRkUwOEQwHhcNMjQxMTIzMDIyNTA1WhcNMjQxMTMwMDIyNTA1WjAYMRYwFAYD VQQDEw02NzQxM2QwMS01ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse2BSDdy4x+9cmDF6MjLm7imbSY6xrrY+8gXI2rq3K/MzUancKAlbNjJ5ZZ7 PtebdGBIH4lW2Isoe367ANKb22tePJH7aVVaxUI34WCwrHFaBBeGBnawsxwg0+aW g4MwDjalYGVsvR4iteRDSOOatVZKHL/6/zW4QUlJKzV+k3xcQ5uYt2cq7fDss7AC DN7KIjG7DtpYQxm4qLGPn6G+nfE0wWwTSYOGO6xWNX0JdXUngD5cDjRnPBM3JXRl dejCObVrSL/gdPdQWQfUB8cK4KGj/a7RWask9Blu1+Szm55jHdGzbSyZ23+8m7WW UwIfH6vCwAkF4txfVp+eh6ISbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNHHVHU +5YI9sxBl6FLrhmQlXPPMB8GA1UdIwQYMBaAFME3ZKCmOndn86R116ga6N8Yr+CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTQxRS9FRjFGQUQxODk2 NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQyZnpwSFhYcUJybzN4aXY0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUZGtvS1k2ZDJmenBIWFhxQnJvM3hpdjRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTQxRS9FRjFGQUQxODk2NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQy ZnpwSFhYcUJybzN4aXY0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbaOFphqWQAFlvQvEwnYVJQhmpvbNn8D1fDKJDzQG3W4835UPIHCRI hkfwl2X7A/c6+hOwkpeH6M/po1C8Yu7QnjC0jxzkZwmGwrA0/SVpynC2rEyP8cgD 7Aw/wvi/5fXvAviOyerPPLQbx8XOm6Y3pRnAzXKr71b+W42WM091TZGlBGf0A8V6 NBtOj3yRygtjgqfzQCKukqf3ZXcJOIsk3Tgz96gmQGrF1pVa3RPaSOzx6gl8zdg+ g0bt9otoBfl3RZNRZVFFCrJQeqGO7GvEfCHOp+syVXnJlHRSH1OBXmFXEwMfxKcR leZ5lhLQqbuznTWcWdnt9z1dKhaHi8Wv -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org