$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: XQBlgrxmGs+lXiDqEfd7H1wr418ulFYikDbuwSxjAEs= Subject key identifier: 70:E8:50:C2:9E:5C:C0:E6:41:96:E1:5B:BE:FA:31:06:CC:ED:07:64 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 050A Signing time: Fri 22 Nov 2024 23:11:57 +0000 Manifest this update: Fri 22 Nov 2024 23:11:56 +0000 Manifest next update: Fri 29 Nov 2024 23:11:56 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: ENQUuGQEDXlTNEgIPkXdsrowtiHj8VIVuyn/TR4ajwk=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: L6syG/DU8pQWTn+BvOaIlndDQ6lYytfpaRl28DKM+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Nov 22 23:11:56 2024 GMT Not After : Nov 29 23:11:56 2024 GMT Subject: CN=67410fbc-c112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:b1:33:b2:1e:0a:a5:d1:66:47:58:5c:83: 75:de:58:70:6a:11:0d:7a:24:01:7d:ce:52:70:34: 9e:ba:d2:89:5c:28:f9:46:e4:14:32:09:7c:19:51: 1d:64:44:e7:27:58:80:6b:7c:75:4e:be:23:52:5a: 47:1d:5a:36:71:b2:27:e3:b2:52:da:98:87:05:4c: 33:57:1c:e2:ef:f2:20:b2:33:9d:81:67:df:2a:e3: 39:58:03:b3:a4:20:3b:f1:df:33:31:e8:92:8e:54: 9c:59:2f:56:c7:ed:f8:b0:cb:dd:18:e8:f2:a9:1e: 75:ae:de:37:b8:72:d2:96:45:30:3a:18:1c:66:4a: 91:69:b7:6f:ea:f7:23:c1:8b:21:a8:4b:65:3b:d5: 9f:37:22:ea:2c:e9:41:05:c0:00:0f:9f:ec:7d:6d: 0f:06:a5:7c:2d:1f:69:76:67:62:4e:72:b0:b0:4c: 07:31:05:8b:27:98:a0:66:8a:71:ce:87:3c:f2:74: 04:96:c9:d6:90:1a:6e:e0:73:5f:e9:12:1e:e7:b1: 1b:55:9e:cc:17:d0:07:0c:af:0e:43:79:bf:d4:23: 5b:7e:02:bb:db:7e:b7:55:8b:f5:87:b8:4f:55:48: 68:cd:bf:f7:a8:35:3a:a6:51:08:6c:09:6f:ba:f2: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E8:50:C2:9E:5C:C0:E6:41:96:E1:5B:BE:FA:31:06:CC:ED:07:64 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a4:7a:dc:46:3b:c9:25:ad:ab:1c:2e:1b:f7:d6:25:c7:08: d5:96:f2:f2:40:cb:81:9c:2a:df:ad:7b:02:b1:a8:fb:ee:18: ed:98:a1:c4:60:d8:36:87:88:a2:c3:a3:f6:e0:4d:3c:f1:45: 03:d5:ea:ac:a2:c0:0b:0e:cf:13:b1:05:ec:49:b1:34:19:e4: a0:6d:80:df:10:51:06:4c:a5:37:d2:d1:54:fb:ce:75:a9:13: 29:82:dd:fa:17:56:d2:7d:1b:0e:19:e4:2e:2a:7c:a5:a1:88: a7:b7:94:13:7e:51:98:14:05:5b:e6:8b:20:70:d6:24:09:3a: 0c:fe:4e:d9:79:14:40:b8:48:cd:1a:37:80:cf:90:5b:d6:f6: b6:1f:50:65:aa:27:a1:1f:d1:dc:47:b2:88:00:1c:36:0e:a9: 6d:c6:a5:03:e2:e9:b9:c3:ff:1d:41:40:4a:21:38:9e:ef:5c: e2:79:03:47:e6:34:02:0e:06:05:77:d3:20:37:d5:ef:86:ab: 90:99:f3:93:74:bc:da:24:ed:50:58:a7:a2:b8:6c:fc:c8:bb: 2f:88:12:a9:13:42:fc:fe:7c:f1:09:82:33:43:db:31:10:88: 74:bc:b5:3b:04:d5:08:a7:3a:91:f3:0c:33:b9:76:4a:b3:61: 38:e2:c2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjQxMTIyMjMxMTU2WhcNMjQxMTI5MjMxMTU2WjAYMRYwFAYD VQQDEw02NzQxMGZiYy1jMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaqxM7IeCqXRZkdYXIN13lhwahENeiQBfc5ScDSeutKJXCj5RuQUMgl8GVEd ZETnJ1iAa3x1Tr4jUlpHHVo2cbIn47JS2piHBUwzVxzi7/IgsjOdgWffKuM5WAOz pCA78d8zMeiSjlScWS9Wx+34sMvdGOjyqR51rt43uHLSlkUwOhgcZkqRabdv6vcj wYshqEtlO9WfNyLqLOlBBcAAD5/sfW0PBqV8LR9pdmdiTnKwsEwHMQWLJ5igZopx zoc88nQElsnWkBpu4HNf6RIe57EbVZ7MF9AHDK8OQ3m/1CNbfgK72363VYv1h7hP VUhozb/3qDU6plEIbAlvuvJmWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDoUMKe XMDmQZbhW776MQbM7QdkMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWpHrcRjvJJa2rHC4b99YlxwjVlvLyQMuBnCrfrXsCsaj77hjtmKHE YNg2h4iiw6P24E088UUD1eqsosALDs8TsQXsSbE0GeSgbYDfEFEGTKU30tFU+851 qRMpgt36F1bSfRsOGeQuKnyloYint5QTflGYFAVb5osgcNYkCToM/k7ZeRRAuEjN GjeAz5Bb1va2H1BlqiehH9HcR7KIABw2DqltxqUD4um5w/8dQUBKITie71zieQNH 5jQCDgYFd9MgN9XvhquQmfOTdLzaJO1QWKeiuGz8yLsviBKpE0L8/nzxCYIzQ9sx EIh0vLU7BNUIpzqR8wwzuXZKs2E44sLE -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org