$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json) Hash identifier: GcEVbOnxNXLtSBsbaI9VmlSuCq+BsRzDGNi15i1ddjo= Subject key identifier: F8:AA:2A:B2:39:DD:06:34:AF:74:BB:C8:2D:59:37:86:E2:79:30:D3 Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft Manifest number: 111A Signing time: Fri 22 Nov 2024 19:38:13 +0000 Manifest this update: Fri 22 Nov 2024 19:38:12 +0000 Manifest next update: Fri 29 Nov 2024 19:38:12 +0000 Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: TlIKMAJzglTN21vtG0mqi2AYfrheugIWkEuyKfNIaDU=) 2: 336BA9301F3511EBA1BEA484C4F9AE02.roa (hash: ElAnFlp3kF0p03WKBf4jolCtUh912lbOzQsrGjbAyPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: Nov 22 19:38:12 2024 GMT Not After : Nov 29 19:38:12 2024 GMT Subject: CN=6740dda5-730c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:f3:fd:d9:9e:d6:99:38:f7:c0:81:e5:b5: 7d:09:4a:52:4e:9c:c4:14:a2:88:bc:32:a7:ef:1f: 7c:59:2b:11:1e:d0:4b:97:17:57:6b:b2:47:93:23: 71:5f:e5:81:64:f1:20:86:11:1f:78:8b:4d:cc:03: 23:11:79:61:7e:28:ad:9a:10:c3:76:81:fd:e2:50: 66:05:60:a0:a8:fe:ca:e8:10:10:98:be:a3:1a:8d: c5:61:d1:2d:5d:1c:b8:11:b1:4b:69:f0:27:b8:05: 07:df:bf:a4:0e:14:09:6b:7c:d8:c0:69:fe:cb:7f: cb:c2:47:38:16:23:c2:40:74:f5:0a:30:21:da:62: 24:b6:97:f3:07:ef:58:ec:78:3e:7a:ee:85:db:f0: da:14:c0:5e:28:d8:bf:a8:21:d3:02:ab:18:85:98: 2e:c8:ac:16:72:b7:b6:28:9d:e6:6c:8b:ff:53:52: 1d:00:cf:36:89:e7:51:0e:42:2f:f2:96:bb:af:65: 5a:a7:d2:f5:1d:f0:82:7b:ff:88:eb:40:c5:f8:ce: 21:31:6e:66:47:12:10:3d:9b:0e:ba:e7:76:a6:0e: 9d:c3:f8:e4:0a:0d:da:43:cb:3d:85:8b:54:22:49: 56:a7:57:49:40:6e:86:a7:62:07:da:9e:10:7d:9a: b3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AA:2A:B2:39:DD:06:34:AF:74:BB:C8:2D:59:37:86:E2:79:30:D3 X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f4:09:fa:a0:9d:ae:59:5d:14:35:96:64:84:c3:63:77:0b: 5d:d9:b3:81:aa:b2:c7:92:0a:36:b9:c8:f6:d4:16:62:6b:54: cd:e6:f9:37:5a:2a:0b:15:83:2a:d4:e3:a6:b7:6d:64:72:fd: 1c:df:b7:ba:27:b3:83:43:bb:46:45:90:62:21:9f:ec:9e:85: 73:36:9d:f7:6f:58:73:53:a6:23:6b:50:4d:69:0a:b5:c0:7c: 30:fa:f0:78:08:ba:21:61:35:f0:2c:27:77:d7:52:58:9e:7a: 74:5e:29:eb:a2:94:9f:7c:df:eb:5c:98:cc:9a:f7:7d:b8:40: e6:a0:08:25:40:be:fc:a0:a0:94:f0:e7:4e:04:61:5a:46:7b: 84:c8:d3:62:85:b9:16:e8:5f:69:29:e4:36:40:b4:06:94:a5: 74:1e:db:ec:3f:00:26:7f:9d:89:8c:d8:68:03:dd:53:c2:0f: ab:67:81:ad:aa:ea:93:e1:97:99:bd:1d:4d:69:a3:7f:65:8f: d3:49:3a:c5:3a:88:d9:0a:59:06:eb:06:df:96:1c:2c:20:ea: 75:bc:6c:58:23:38:33:9e:54:e8:b3:20:ac:bd:cf:4d:a4:9c: 4e:7f:fd:e0:5e:76:1d:dd:e0:c9:be:bf:b9:d7:07:be:18:52: 35:9f:eb:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjQxMTIyMTkzODEyWhcNMjQxMTI5MTkzODEyWjAYMRYwFAYD VQQDEw02NzQwZGRhNS03MzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtnz/dme1pk498CB5bV9CUpSTpzEFKKIvDKn7x98WSsRHtBLlxdXa7JHkyNx X+WBZPEghhEfeItNzAMjEXlhfiitmhDDdoH94lBmBWCgqP7K6BAQmL6jGo3FYdEt XRy4EbFLafAnuAUH37+kDhQJa3zYwGn+y3/Lwkc4FiPCQHT1CjAh2mIktpfzB+9Y 7Hg+eu6F2/DaFMBeKNi/qCHTAqsYhZguyKwWcre2KJ3mbIv/U1IdAM82iedRDkIv 8pa7r2Vap9L1HfCCe/+I60DF+M4hMW5mRxIQPZsOuud2pg6dw/jkCg3aQ8s9hYtU IklWp1dJQG6Gp2IH2p4QfZqzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiqKrI5 3QY0r3S7yC1ZN4bieTDTMB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA59An6oJ2uWV0UNZZkhMNjdwtd2bOBqrLHkgo2ucj21BZia1TN5vk3 WioLFYMq1OOmt21kcv0c37e6J7ODQ7tGRZBiIZ/snoVzNp33b1hzU6Yja1BNaQq1 wHww+vB4CLohYTXwLCd311JYnnp0XinropSffN/rXJjMmvd9uEDmoAglQL78oKCU 8OdOBGFaRnuEyNNihbkW6F9pKeQ2QLQGlKV0HtvsPwAmf52JjNhoA91Twg+rZ4Gt quqT4ZeZvR1NaaN/ZY/TSTrFOojZClkG6wbflhwsIOp1vGxYIzgznlTosyCsvc9N pJxOf/3gXnYd3eDJvr+51we+GFI1n+sP -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org