$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft File: woh5_sEM6SnBzy5bl4hvHX6hfFo.mft (raw, json) Hash identifier: T7j9lZYXaqOdSYYi6WOYOqESU5AqpvOZ3kdCssjF7YM= Subject key identifier: 31:5B:ED:FA:EF:10:51:76:FC:BC:F5:48:7B:82:E2:5D:DA:5C:C5:62 Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft Manifest number: 0B1D Signing time: Fri 22 Nov 2024 19:03:55 +0000 Manifest this update: Fri 22 Nov 2024 19:03:55 +0000 Manifest next update: Fri 29 Nov 2024 19:03:55 +0000 Files and hashes: 1: woh5_sEM6SnBzy5bl4hvHX6hfFo.crl (hash: u0zj8azb4dgNHHpP19mx8mtYe1IAWyDOLQ5KnPFFQ+Y=) 2: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (hash: HA8b7O0J4U/fVhELFxa2fc2iFFbl1YKY12nGF5DR6EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A Validity Not Before: Nov 22 19:03:55 2024 GMT Not After : Nov 29 19:03:55 2024 GMT Subject: CN=6740d59b-5750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:2f:be:b0:f6:d2:30:1f:dd:bb:41:ca:40: 5c:7d:eb:a7:53:9e:56:37:05:6b:d3:6c:a0:20:72: 45:ca:74:41:c2:7b:20:25:b1:57:a0:de:e4:51:5d: f7:42:dd:38:3b:b3:ab:ef:e4:75:75:96:36:57:6d: 05:d9:77:da:6a:5c:13:d1:b4:52:14:2d:7f:38:a7: 61:8f:d7:1c:e3:22:71:a1:51:c8:3e:a2:85:72:7a: 30:a7:51:55:3a:1c:7d:bd:e0:5d:c9:e0:3d:ad:67: 40:2a:dd:b8:1a:67:17:69:6e:79:86:a6:78:a1:53: 28:dd:28:36:d3:be:38:53:32:43:1a:06:8f:48:32: a1:66:05:0d:9c:ac:fe:db:a5:5c:00:dc:fb:6d:2b: 62:54:5a:1d:a5:7f:90:df:44:24:00:ee:19:fe:5e: de:bd:1c:15:20:93:43:62:86:b3:45:a1:b2:13:d3: dc:fa:a8:cc:d3:a5:28:82:9b:a3:e9:d0:00:f9:80: fa:59:05:1f:72:3b:ef:96:3e:61:b9:b0:33:d1:48: 63:a5:13:21:8c:d1:85:29:9a:0a:89:8a:10:22:42: 49:bc:3a:ac:18:d8:cf:1b:c0:68:d4:c3:ad:07:05: 54:b1:1e:8b:96:5b:4d:14:80:e5:f4:5a:8d:2b:6b: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:ED:FA:EF:10:51:76:FC:BC:F5:48:7B:82:E2:5D:DA:5C:C5:62 X509v3 Authority Key Identifier: keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:1c:61:1f:0f:4f:fe:3a:77:d3:ab:66:49:76:bf:32:54: a8:31:6c:bf:11:8e:2e:f0:24:e4:7c:03:29:ad:a9:73:ee:e6: 2c:6d:2d:3a:85:a3:38:25:b2:24:47:d5:ad:c8:06:3d:cc:35: ef:a0:ba:62:fd:a3:44:ee:9d:21:75:ca:67:e8:ac:73:f0:f7: 6c:4e:91:02:ee:83:50:db:a8:37:1e:41:a4:28:9e:63:7e:a9: e6:0b:40:9b:c5:13:20:8c:1f:62:53:64:a3:73:2d:7a:c0:45: 57:40:64:da:e3:8b:56:9e:9f:16:f6:78:f5:20:f7:d5:fa:42: 9d:2e:31:28:9e:2e:8e:42:58:c7:09:56:04:b2:cc:39:b1:49: e0:ce:a2:3e:92:04:9d:88:24:13:9e:78:2e:19:f0:c2:89:28: 7a:9c:af:07:7c:df:74:0f:d0:26:16:b2:b7:08:9d:ab:2f:9e: 1a:eb:3d:19:65:fd:8d:53:fb:5d:54:ab:fb:70:34:2d:38:6c: 3d:c1:8e:cd:58:45:5f:ef:e5:b2:1a:53:68:e0:02:43:26:f3: b8:e0:10:b4:49:bf:86:20:e4:73:38:de:e5:28:8d:6d:b4:1f: d3:5e:ef:d4:66:73:3a:a2:d1:1e:bb:ba:74:d1:96:5a:ab:db: 4e:c3:be:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFQjExMTAvBgNVBAUTKEMyODg3OUZFQzEwQ0U5MjlDMUNGMkU1Qjk3ODg2RjFE N0VBMTdDNUEwHhcNMjQxMTIyMTkwMzU1WhcNMjQxMTI5MTkwMzU1WjAYMRYwFAYD VQQDEw02NzQwZDU5Yi01NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcAvvrD20jAf3btBykBcfeunU55WNwVr02ygIHJFynRBwnsgJbFXoN7kUV33 Qt04O7Or7+R1dZY2V20F2XfaalwT0bRSFC1/OKdhj9cc4yJxoVHIPqKFcnowp1FV Ohx9veBdyeA9rWdAKt24GmcXaW55hqZ4oVMo3Sg20744UzJDGgaPSDKhZgUNnKz+ 26VcANz7bStiVFodpX+Q30QkAO4Z/l7evRwVIJNDYoazRaGyE9Pc+qjM06Uogpuj 6dAA+YD6WQUfcjvvlj5hubAz0UhjpRMhjNGFKZoKiYoQIkJJvDqsGNjPG8Bo1MOt BwVUsR6LlltNFIDl9FqNK2s26QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFb7frv EFF2/Lz1SHuC4l3aXMViMB8GA1UdIwQYMBaAFMKIef7BDOkpwc8uW5eIbx1+oXxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkVCMS80QzVGNzIwODMx RjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZTbkJ6eTVibDRodkhYNmhm Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvaDVfc0VNNlNuQnp5NWJsNGh2SFg2aGZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkVCMS80QzVGNzIwODMxRjMxMUVBQTBBOTY4NzZDNEY5QUUwMi93b2g1X3NFTTZT bkJ6eTVibDRodkhYNmhmRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZcRxhHw9P/jp306tmSXa/MlSoMWy/EY4u8CTkfAMpralz7uYsbS06 haM4JbIkR9WtyAY9zDXvoLpi/aNE7p0hdcpn6Kxz8PdsTpEC7oNQ26g3HkGkKJ5j fqnmC0CbxRMgjB9iU2Sjcy16wEVXQGTa44tWnp8W9nj1IPfV+kKdLjEoni6OQljH CVYEssw5sUngzqI+kgSdiCQTnnguGfDCiSh6nK8HfN90D9AmFrK3CJ2rL54a6z0Z Zf2NU/tdVKv7cDQtOGw9wY7NWEVf7+WyGlNo4AJDJvO44BC0Sb+GIORzON7lKI1t tB/TXu/UZnM6otEeu7p00ZZaq9tOw74T -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org