$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft File: WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json) Hash identifier: YwiYIv64NODkekthnkWKhgf3secuO2W6CZ8/Jo+NsuE= Subject key identifier: 4D:E8:D9:3C:F2:41:10:CB:C1:77:6A:C2:01:BF:AF:B5:62:4A:D5:48 Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 Certificate issuer: /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft Manifest number: 0672 Signing time: Sun 24 Nov 2024 21:45:15 +0000 Manifest this update: Sun 24 Nov 2024 21:45:14 +0000 Manifest next update: Sun 01 Dec 2024 21:45:14 +0000 Files and hashes: 1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: FoWLHE7a4i1UzoVFdkge3Xf7M44b/ZDDwF+WHANFQpU=) 2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: xDkjde8fXVe0/58MBEqY/WqNBmnSLATc80yeKpLKQQc=) 3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: LBebV0Evm/UGpPLphMH1G/iMGgilZT2vx+yzYjP/e3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Validity Not Before: Nov 24 21:45:14 2024 GMT Not After : Dec 1 21:45:14 2024 GMT Subject: CN=67439e6b-73d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:a6:28:c6:ab:d7:7c:a4:a0:f2:90:aa:1d: 81:7a:79:cb:90:07:55:90:a3:cd:61:c3:e4:2a:86: 87:d0:42:fc:e7:f6:bb:6a:2f:4b:83:ab:63:cd:b5: 25:bc:8e:7b:95:c6:46:8c:07:ec:15:c0:35:7e:1f: 1b:3b:b9:e4:64:69:aa:80:42:f2:84:05:df:54:81: 22:19:2c:f5:6f:ac:1a:ea:31:d2:76:a9:f7:0f:b9: 76:85:f8:a4:89:5b:8b:ab:a6:2e:b0:dc:43:81:af: a1:d0:fa:c7:c7:0e:40:24:6e:72:8d:7e:7c:2d:65: 4e:9e:90:d2:95:22:fb:b3:ce:37:b8:5c:8b:83:a7: cc:1f:a8:aa:3d:74:0e:43:73:be:6a:fe:82:ac:a2: 0f:88:03:d1:cd:df:dc:6b:b7:72:57:3d:ae:b2:49: 5b:94:13:d3:9d:f9:ca:ff:b7:fd:66:bd:6f:28:aa: e0:06:5b:75:4a:d0:f0:db:bd:b3:3d:bc:d3:cb:e0: c8:1e:2d:ef:28:1e:da:8d:66:0c:1d:9c:ef:c6:8e: 3c:94:3b:16:53:fb:ee:46:d3:d9:0f:5c:37:36:80: 49:3a:bd:2b:45:03:72:de:17:db:6d:46:5f:09:14: b3:58:4c:8b:7e:80:c6:71:f0:5b:e3:6d:f3:42:8d: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E8:D9:3C:F2:41:10:CB:C1:77:6A:C2:01:BF:AF:B5:62:4A:D5:48 X509v3 Authority Key Identifier: keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:08:17:de:8d:36:2a:be:88:21:e6:ba:18:35:5b:1d:3e:e5: a9:29:89:97:ad:52:d4:57:b3:4d:71:ff:41:bf:34:24:94:be: 00:f9:d1:9b:90:e1:a9:07:fb:6e:d0:6a:98:4d:35:e8:30:14: 7f:b8:bb:16:08:6a:8d:33:60:ed:ab:53:98:06:9c:d8:91:e5: c6:fd:58:4a:ab:22:b0:24:8a:76:cd:36:84:d6:11:ba:46:61: fe:34:08:ac:17:13:78:85:e9:21:c2:7f:62:7e:29:5e:0f:d6: 47:b1:b8:02:dd:bc:82:7b:3f:3f:bd:d3:9a:3f:48:27:d7:31: 7d:5c:d0:6e:54:08:a6:50:ee:fb:c0:76:3f:dc:9d:70:e6:67: da:d9:53:3d:be:c2:d6:61:a7:24:1d:34:8f:fa:2e:c3:7f:6e: dd:f3:ad:79:9d:07:4e:3b:64:c5:f8:a5:7c:36:8e:e4:8f:01: af:3f:3b:c4:82:64:18:5c:c3:f8:10:d4:44:70:6e:ce:c9:15: ac:3a:2d:90:dd:38:27:d6:0e:16:16:32:37:cd:16:c7:9b:1d: fb:19:64:12:f6:ff:c4:36:45:06:48:8f:c7:90:0f:cf:89:03: c2:18:ed:25:5a:20:20:3c:3d:f2:28:31:b9:0b:5f:77:0c:c6: dc:41:c1:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1QjIxMTAvBgNVBAUTKDU4NDA4RDJDOUVGNzk5NTExQTZFNUQ3MEY4MkVDODY5 OTZGMzEzRjQwHhcNMjQxMTI0MjE0NTE0WhcNMjQxMjAxMjE0NTE0WjAYMRYwFAYD VQQDEw02NzQzOWU2Yi03M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40qmKMar13ykoPKQqh2BennLkAdVkKPNYcPkKoaH0EL85/a7ai9Lg6tjzbUl vI57lcZGjAfsFcA1fh8bO7nkZGmqgELyhAXfVIEiGSz1b6wa6jHSdqn3D7l2hfik iVuLq6YusNxDga+h0PrHxw5AJG5yjX58LWVOnpDSlSL7s843uFyLg6fMH6iqPXQO Q3O+av6CrKIPiAPRzd/ca7dyVz2usklblBPTnfnK/7f9Zr1vKKrgBlt1StDw272z PbzTy+DIHi3vKB7ajWYMHZzvxo48lDsWU/vuRtPZD1w3NoBJOr0rRQNy3hfbbUZf CRSzWEyLfoDGcfBb423zQo1DjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3o2Tzy QRDLwXdqwgG/r7ViStVIMB8GA1UdIwQYMBaAFFhAjSye95lRGm5dcPguyGmW8xP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVCMi8yMDhGRjlEMjU3 NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21WRWFibDF3LUM3SWFaYnpF X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dFQ05MSjczbVZFYWJsMXctQzdJYVpiekVfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVCMi8yMDhGRjlEMjU3NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21W RWFibDF3LUM3SWFaYnpFX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeCBfejTYqvogh5roYNVsdPuWpKYmXrVLUV7NNcf9BvzQklL4A+dGb kOGpB/tu0GqYTTXoMBR/uLsWCGqNM2Dtq1OYBpzYkeXG/VhKqyKwJIp2zTaE1hG6 RmH+NAisFxN4hekhwn9ifileD9ZHsbgC3byCez8/vdOaP0gn1zF9XNBuVAimUO77 wHY/3J1w5mfa2VM9vsLWYackHTSP+i7Df27d8615nQdOO2TF+KV8No7kjwGvPzvE gmQYXMP4ENREcG7OyRWsOi2Q3Tgn1g4WFjI3zRbHmx37GWQS9v/ENkUGSI/HkA/P iQPCGO0lWiAgPD3yKDG5C193DMbcQcFm -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:58 2024 by rpki-client on console-ams.rpki-client.org