$ rpki-client -vvf rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft File: wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft (raw, json) Hash identifier: HXSVOV21agV0GxrH+pQ6AVHHn5HYDUZwbzvdf4QXlxo= Subject key identifier: C8:F7:F5:CB:A8:90:E7:DC:86:F4:88:54:3C:44:27:43:D7:1B:87:81 Authority key identifier: C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10 Certificate issuer: /CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft Manifest number: 0673 Signing time: Fri 22 Nov 2024 21:53:27 +0000 Manifest this update: Fri 22 Nov 2024 21:53:26 +0000 Manifest next update: Fri 29 Nov 2024 21:53:26 +0000 Files and hashes: 1: wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl (hash: IJwCrbDBVIvBxtg245NrQqdDHOPf1XNREJjijBOcl78=) 2: 5E7AC046554C11EB87AB9070C4F9AE02.roa (hash: 9SEp12826tyPgZ90rcyya6rTZZSYMM+g/IkmHnoRS+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F23D/serialNumber=C1BFA26C1B79438008BC1D73158CC851BD129C10 Validity Not Before: Nov 22 21:53:26 2024 GMT Not After : Nov 29 21:53:26 2024 GMT Subject: CN=6740fd56-bf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:fa:a2:f1:65:d6:2d:dd:aa:7b:1e:e6:cb: 01:e1:c8:ed:14:ed:4b:08:9e:1b:b0:8f:63:a7:26: 37:84:cd:2f:cd:d9:74:fa:b1:cc:2b:8e:8c:5d:77: e1:83:41:d6:61:b4:6a:06:47:ed:b6:95:20:b6:0e: ea:6a:ac:4a:6d:cf:01:ca:83:50:a7:88:79:f3:4a: de:3b:60:68:e3:55:96:79:9b:87:9c:08:2f:6e:7a: 99:46:1e:c0:8a:5f:f0:44:1d:77:b3:47:24:13:d0: 36:b2:dd:6e:d2:22:16:0d:d3:39:f6:68:30:b8:1e: 7e:c8:7e:d3:44:cd:03:c7:09:04:07:e2:08:a3:c1: 21:18:63:1d:20:c5:06:2d:0d:8e:64:16:bb:0c:e7: 31:78:6c:56:a7:b2:a7:84:0c:a8:ad:d3:c4:ee:b1: 6e:13:cf:8d:42:0d:76:1c:b5:46:67:e7:85:a0:07: 70:57:15:6d:fd:26:9a:27:b8:cc:17:56:23:4f:65: b4:8e:08:ba:83:b5:ed:8c:d0:70:45:71:f3:44:b0: b6:7b:04:a5:28:0e:3a:43:d9:f0:01:ce:a0:01:9e: 50:f7:de:c8:dc:18:11:d6:c8:ad:fc:3c:e5:59:fa: 56:eb:3f:7c:0c:92:3d:25:53:5a:09:ee:5f:e0:a5: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F7:F5:CB:A8:90:E7:DC:86:F4:88:54:3C:44:27:43:D7:1B:87:81 X509v3 Authority Key Identifier: keyid:C1:BF:A2:6C:1B:79:43:80:08:BC:1D:73:15:8C:C8:51:BD:12:9C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F23D/7D891FFA553D11EBB5687F74C4F9AE02/wb-ibBt5Q4AIvB1zFYzIUb0SnBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:98:d5:6f:c9:ff:58:44:20:f7:3c:43:90:d7:ac:f4:f6:84: 8f:18:fe:f7:ff:02:da:ef:d6:fd:25:3a:7c:09:27:ef:66:ba: 2f:a5:0f:2f:de:ff:42:e6:4c:20:57:bf:1d:b6:df:9b:b7:70: c3:ef:cb:6f:34:f5:19:6f:ad:8e:ad:ec:1f:a4:f9:dd:8e:98: b8:75:aa:c9:83:b2:25:50:00:57:6d:c5:5f:6d:2b:e4:c1:f0: 08:d8:9c:6a:09:70:26:8d:c2:f9:e0:bf:e7:53:14:c9:fa:b9: 1f:55:81:fa:d1:3c:41:e7:6b:47:28:bb:06:9c:cc:68:ca:ab: e0:ea:c7:d3:68:08:a1:40:c4:05:0d:e8:9b:31:f2:15:33:4f: 89:00:81:56:c9:b1:36:9a:a4:32:e2:1f:12:77:0a:95:1b:18: a4:91:c4:c1:f9:6e:3d:77:23:fd:a2:b3:c3:a0:5b:73:5c:27: 0e:e2:86:08:ee:8c:48:73:d9:10:3e:f1:35:44:5f:3f:d0:4a: 84:86:0a:49:ad:83:2d:75:53:50:82:35:cd:9a:c9:7a:4a:e9: 14:4e:fa:54:c8:a1:c5:1f:b4:07:34:1d:7d:6e:45:b7:31:cc: 5a:f9:7c:01:81:06:61:28:e1:db:3e:06:92:3a:79:3f:63:37: bb:32:af:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyM0QxMTAvBgNVBAUTKEMxQkZBMjZDMUI3OTQzODAwOEJDMUQ3MzE1OENDODUx QkQxMjlDMTAwHhcNMjQxMTIyMjE1MzI2WhcNMjQxMTI5MjE1MzI2WjAYMRYwFAYD VQQDEw02NzQwZmQ1Ni1iZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud/6ovFl1i3dqnse5ssB4cjtFO1LCJ4bsI9jpyY3hM0vzdl0+rHMK46MXXfh g0HWYbRqBkfttpUgtg7qaqxKbc8ByoNQp4h580reO2Bo41WWeZuHnAgvbnqZRh7A il/wRB13s0ckE9A2st1u0iIWDdM59mgwuB5+yH7TRM0DxwkEB+IIo8EhGGMdIMUG LQ2OZBa7DOcxeGxWp7KnhAyordPE7rFuE8+NQg12HLVGZ+eFoAdwVxVt/SaaJ7jM F1YjT2W0jgi6g7XtjNBwRXHzRLC2ewSlKA46Q9nwAc6gAZ5Q997I3BgR1sit/Dzl WfpW6z98DJI9JVNaCe5f4KUjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj39cuo kOfchvSIVDxEJ0PXG4eBMB8GA1UdIwQYMBaAFMG/omwbeUOACLwdcxWMyFG9EpwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIzRC83RDg5MUZGQTU1 M0QxMUVCQjU2ODdGNzRDNEY5QUUwMi93Yi1pYkJ0NVE0QUl2QjF6Rll6SVViMFNu QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diLWliQnQ1UTRBSXZCMXpGWXpJVWIwU25CQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIzRC83RDg5MUZGQTU1M0QxMUVCQjU2ODdGNzRDNEY5QUUwMi93Yi1pYkJ0NVE0 QUl2QjF6Rll6SVViMFNuQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANmNVvyf9YRCD3PEOQ16z09oSPGP73/wLa79b9JTp8CSfvZrovpQ8v 3v9C5kwgV78dtt+bt3DD78tvNPUZb62OrewfpPndjpi4darJg7IlUABXbcVfbSvk wfAI2JxqCXAmjcL54L/nUxTJ+rkfVYH60TxB52tHKLsGnMxoyqvg6sfTaAihQMQF DeibMfIVM0+JAIFWybE2mqQy4h8SdwqVGxikkcTB+W49dyP9orPDoFtzXCcO4oYI 7oxIc9kQPvE1RF8/0EqEhgpJrYMtdVNQgjXNmsl6SukUTvpUyKHFH7QHNB19bkW3 Mcxa+XwBgQZhKOHbPgaSOnk/Yze7Mq/U -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org