$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: ehh4WIt2iOoOs/fr5hdpi+YR8hciMDtSwEM43WDyi9A= Subject key identifier: 7F:C7:B8:9C:C2:1D:34:04:FC:21:B3:50:F1:F5:0C:0E:EB:B1:43:49 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0BB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0BA1 Signing time: Fri 22 Nov 2024 18:42:58 +0000 Manifest this update: Fri 22 Nov 2024 18:42:57 +0000 Manifest next update: Fri 29 Nov 2024 18:42:57 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: GHyu93jOllsU/vGmec2a9bEDWf8lnLf9GDBITVzlEOk=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: c0jeJK9QAPrhoHAkb65StqU7qp272k5edHZrKw0cT9s=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5WuLHxmG8IWJX07luYYTcBfHJi95efpMQlBpweMImOc=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: hdDK9bB387XmiOfI09xup4zeZ5o4crSOg7jbYJEcLb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Nov 22 18:42:57 2024 GMT Not After : Nov 29 18:42:57 2024 GMT Subject: CN=6740d0b2-8bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:b1:06:f1:64:57:94:0c:08:12:c5:c2:6f: f9:6a:29:02:95:60:97:11:b6:cc:7b:da:d1:c1:ee: 2a:b1:75:0b:8a:8f:6a:20:b2:aa:ae:2e:87:72:67: 0e:0f:41:f9:a9:14:16:bb:28:fd:f8:b3:8c:d3:cb: 7a:39:47:d2:7a:e9:fa:1a:2b:1f:38:14:7d:8f:5f: 0b:72:24:f0:c0:ce:29:6c:d5:65:c2:90:86:2b:2e: 5f:31:dd:1b:c9:d6:0b:9c:0a:5e:11:a2:8b:be:cf: 9c:88:82:34:d1:c8:06:f6:80:53:c6:56:61:bd:70: 4e:4a:49:28:1f:52:16:8a:50:bf:29:61:67:fd:9b: 18:ee:2f:c4:35:12:bd:e7:7a:db:4c:10:80:2b:3a: 1d:5c:44:a3:65:bb:99:f4:c0:b3:bf:89:bb:e7:da: 87:e5:88:6d:ec:7e:f9:0b:7f:b1:ea:30:d8:31:f8: 63:a7:15:17:25:44:bd:10:76:96:e2:26:5b:05:e0: 37:7e:88:f5:27:26:7c:5d:ee:7a:56:6a:ec:19:59: 7e:71:d2:d7:15:d3:99:08:c9:e6:78:dc:31:07:45: 66:6f:a2:31:2b:9d:68:ef:5f:2d:e1:f4:4f:e4:4f: 9f:96:45:fc:17:2d:13:df:e1:1c:60:cf:e6:c4:80: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:B8:9C:C2:1D:34:04:FC:21:B3:50:F1:F5:0C:0E:EB:B1:43:49 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:fe:98:2b:5f:74:12:f6:2f:c3:d6:e3:69:8e:5d:03:73:24: 47:7e:db:65:41:05:7c:ef:ea:54:29:dd:4d:37:d6:00:10:c2: f6:4a:49:fe:c5:7b:52:0e:96:9e:bc:9c:01:80:9e:d2:66:39: ba:6e:ef:30:e9:54:a9:f4:d5:18:e5:b7:35:b8:b1:ae:15:92: 25:10:86:13:c0:33:69:f0:b8:dd:c2:8f:3c:2b:33:3c:50:3e: c0:2c:0f:b1:4b:7a:53:1e:d5:59:a5:20:84:08:08:98:30:22: af:49:6f:98:bd:46:3d:78:8f:00:7b:a7:e9:ac:db:fb:1b:8c: 06:e3:86:c8:51:ec:c7:e3:25:2a:aa:21:d9:4b:44:e9:ba:7c: 94:4a:71:9f:26:24:4b:b1:8e:a0:83:42:60:e0:e6:6c:ea:16: f2:44:1d:d3:3f:df:9b:ba:71:f7:da:8d:50:69:9d:6b:24:79: 16:fb:e6:2f:ca:76:66:8a:8a:e1:71:87:4b:56:97:a6:8a:4f: 3d:ed:5d:b8:ac:01:b4:88:a2:cb:d3:b6:48:5f:a8:07:ce:ea: d9:06:3d:8c:4b:b0:39:1b:54:c2:65:63:6d:f5:0d:7e:fe:32: 30:11:1a:bd:f7:4f:6d:68:a5:c2:56:69:7b:46:82:4d:e1:d7: 07:da:b4:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjQxMTIyMTg0MjU3WhcNMjQxMTI5MTg0MjU3WjAYMRYwFAYD VQQDEw02NzQwZDBiMi04YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbyxBvFkV5QMCBLFwm/5aikClWCXEbbMe9rRwe4qsXULio9qILKqri6HcmcO D0H5qRQWuyj9+LOM08t6OUfSeun6GisfOBR9j18LciTwwM4pbNVlwpCGKy5fMd0b ydYLnApeEaKLvs+ciII00cgG9oBTxlZhvXBOSkkoH1IWilC/KWFn/ZsY7i/ENRK9 53rbTBCAKzodXESjZbuZ9MCzv4m759qH5Yht7H75C3+x6jDYMfhjpxUXJUS9EHaW 4iZbBeA3foj1JyZ8Xe56VmrsGVl+cdLXFdOZCMnmeNwxB0Vmb6IxK51o718t4fRP 5E+flkX8Fy0T3+EcYM/mxIBeQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/HuJzC HTQE/CGzUPH1DA7rsUNJMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi/pgrX3QS9i/D1uNpjl0DcyRHfttlQQV87+pUKd1NN9YAEML2Skn+ xXtSDpaevJwBgJ7SZjm6bu8w6VSp9NUY5bc1uLGuFZIlEIYTwDNp8Ljdwo88KzM8 UD7ALA+xS3pTHtVZpSCECAiYMCKvSW+YvUY9eI8Ae6fprNv7G4wG44bIUezH4yUq qiHZS0TpunyUSnGfJiRLsY6gg0Jg4OZs6hbyRB3TP9+bunH32o1QaZ1rJHkW++Yv ynZmiorhcYdLVpemik897V24rAG0iKLL07ZIX6gHzurZBj2MS7A5G1TCZWNt9Q1+ /jIwERq9909taKXCVml7RoJN4dcH2rSo -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org