$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: TJGqQqO3OAZgZrlxOq6K4HNEfxzGyW5C/ji7+n98EYk= Subject key identifier: EB:D8:EB:F7:7A:E8:CA:E6:99:06:F3:7C:F6:1A:95:67:2F:F1:7D:84 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 1339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 1319 Signing time: Fri 22 Nov 2024 17:02:24 +0000 Manifest this update: Fri 22 Nov 2024 17:02:24 +0000 Manifest next update: Fri 29 Nov 2024 17:02:24 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: X9v1usfQoSUON8qS1hO+C23lmGTK1Uhrp1Ek940ZuSE=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: E5p0L4s5yLaJ1iajf72Hbp/+FA1uGcyIYQEUg1n7rWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4921 (0x1339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Nov 22 17:02:24 2024 GMT Not After : Nov 29 17:02:24 2024 GMT Subject: CN=6740b920-0019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:21:69:d2:6f:90:e4:ff:e6:73:da:ae:92: 29:5a:3a:5e:81:7b:a4:4d:53:7e:d1:42:7f:48:2c: dd:4c:3c:4e:bf:73:72:f8:5b:5e:96:95:05:53:a8: e4:43:57:9b:c0:6d:48:77:76:28:4c:f3:4d:2b:4e: 2b:ab:76:cf:d5:38:5b:b9:f0:72:84:b7:f6:6d:08: 4b:1c:86:91:58:14:f5:f7:33:69:e6:57:4c:f2:e6: 45:80:5c:35:00:51:32:a4:57:3c:af:74:5f:3e:95: b5:74:9f:c2:4e:42:71:d1:58:43:e2:42:4f:60:1c: 63:b7:4d:d3:85:12:61:c0:42:e8:7d:67:9f:82:27: 61:49:86:76:bc:ca:b9:f9:e4:47:aa:df:76:3c:ac: ee:b2:21:20:8a:c1:b1:5b:a5:a8:4f:2e:27:1e:c4: 8e:57:a9:17:40:14:7b:51:a7:d2:8a:45:92:a8:3d: 7c:22:eb:04:f4:db:7d:72:93:27:1f:6d:2a:65:00: 7c:77:84:2e:e9:ba:bb:5c:2a:26:57:8d:85:e1:f6: 6f:41:3f:a7:2c:44:ad:3b:d9:9b:de:9b:2b:7b:b7: bb:dc:f5:7d:3b:ae:e9:59:24:f7:bd:b0:93:7f:24: bb:fc:d5:d7:ad:22:d8:68:6a:a9:e5:85:3c:12:8c: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D8:EB:F7:7A:E8:CA:E6:99:06:F3:7C:F6:1A:95:67:2F:F1:7D:84 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9a:3b:95:e9:bb:6d:67:2c:3b:1b:8a:a1:34:3f:4c:ca:97: aa:09:79:5c:94:ec:b6:24:6b:7e:62:2d:db:5f:41:8f:68:f5: 9e:86:0f:d8:cd:f2:6e:6a:0d:71:29:e2:55:00:a8:7b:35:6d: 64:06:3f:92:ee:a9:98:b2:82:d3:ca:21:6b:d8:48:71:03:f8: 4d:3b:a2:84:03:d7:8b:86:28:21:33:3b:2c:ea:ad:cb:5b:03: b2:da:16:93:41:a4:fe:0f:c6:f3:df:03:94:c1:81:bd:25:f1: a3:a8:b7:f6:af:98:85:f2:df:28:ce:61:48:41:92:07:ef:d2: 94:0f:1a:46:d8:3c:b2:d9:db:2a:69:46:3d:67:b5:1c:4c:ef: 9d:05:4d:88:15:b0:6f:73:3c:af:53:dd:5c:c7:4e:ac:c0:a9: e5:6a:62:32:86:36:19:9c:46:c9:a8:ca:20:b2:52:e6:e0:af: bd:25:20:f1:6f:ef:7f:09:e8:f7:04:18:a4:27:a2:1e:20:3e: 46:0a:fa:c5:e4:e2:49:31:f7:95:8b:9b:c9:f6:74:3e:64:b2: 99:c0:5f:2d:95:79:0f:cb:5b:83:d7:12:06:97:6d:fb:6e:86: be:de:be:b8:f2:40:51:82:44:3e:d5:f9:ee:5f:9b:6a:58:5d: 76:b2:24:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjQxMTIyMTcwMjI0WhcNMjQxMTI5MTcwMjI0WjAYMRYwFAYD VQQDEw02NzQwYjkyMC0wMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx40hadJvkOT/5nParpIpWjpegXukTVN+0UJ/SCzdTDxOv3Ny+FtelpUFU6jk Q1ebwG1Id3YoTPNNK04rq3bP1ThbufByhLf2bQhLHIaRWBT19zNp5ldM8uZFgFw1 AFEypFc8r3RfPpW1dJ/CTkJx0VhD4kJPYBxjt03ThRJhwELofWefgidhSYZ2vMq5 +eRHqt92PKzusiEgisGxW6WoTy4nHsSOV6kXQBR7UafSikWSqD18IusE9Nt9cpMn H20qZQB8d4Qu6bq7XComV42F4fZvQT+nLEStO9mb3psre7e73PV9O67pWST3vbCT fyS7/NXXrSLYaGqp5YU8EoxWzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvY6/d6 6MrmmQbzfPYalWcv8X2EMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAimjuV6bttZyw7G4qhND9MypeqCXlclOy2JGt+Yi3bX0GPaPWehg/Y zfJuag1xKeJVAKh7NW1kBj+S7qmYsoLTyiFr2EhxA/hNO6KEA9eLhighMzss6q3L WwOy2haTQaT+D8bz3wOUwYG9JfGjqLf2r5iF8t8ozmFIQZIH79KUDxpG2Dyy2dsq aUY9Z7UcTO+dBU2IFbBvczyvU91cx06swKnlamIyhjYZnEbJqMogslLm4K+9JSDx b+9/Cej3BBikJ6IeID5GCvrF5OJJMfeVi5vJ9nQ+ZLKZwF8tlXkPy1uD1xIGl237 boa+3r648kBRgkQ+1fnuX5tqWF12siTg -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org