$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: D2Of4YPU6+OTq6Wn/gydW5GNEzcmzWeuUVesvdxjcAE= Subject key identifier: E9:36:E0:B6:84:E5:46:C2:85:E9:7A:2E:21:4B:85:75:0B:D4:A5:B6 Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 1462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 1852 Signing time: Fri 22 Nov 2024 16:54:44 +0000 Manifest this update: Fri 22 Nov 2024 16:54:43 +0000 Manifest next update: Fri 29 Nov 2024 16:54:43 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: zXyO+kzf3QGkUB9MW+FuyAiXJp8pDLGPsx/U1dEI/wY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5218 (0x1462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Nov 22 16:54:43 2024 GMT Not After : Nov 29 16:54:43 2024 GMT Subject: CN=6740b753-2af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:fa:51:8f:2d:4f:35:85:d6:ab:cb:2a:3b: c6:98:d5:26:d2:b3:35:9c:ef:4c:e7:bc:8d:ca:a9: e6:ba:f8:a0:a6:37:56:c9:d5:fd:ad:04:70:59:65: 54:56:03:5f:cb:19:48:cc:34:ca:d0:36:7f:3d:c8: c9:bd:48:1d:ff:4b:4d:f1:b7:a2:1a:f9:bc:35:10: e5:b0:71:7f:95:12:31:1b:73:16:5b:7f:fd:15:ec: c9:bf:a0:52:ff:d9:30:b4:f1:92:33:31:8a:04:11: 58:25:ec:1c:2e:9b:bc:29:f0:45:d4:90:92:13:6d: 86:69:b4:97:07:c5:31:91:2c:e8:f4:5f:58:5f:41: de:8d:b1:b4:31:91:96:af:1a:c3:a6:60:2f:92:54: 19:67:10:e2:a9:a8:92:5b:5e:c7:64:ca:a3:dd:b2: 97:3e:68:04:51:98:6d:b8:33:4b:5f:36:31:c4:e1: 22:f3:88:73:21:8a:d9:78:d7:0c:2d:ea:a5:77:f4: dc:ec:46:7c:c7:6d:d4:5f:96:d6:2d:11:be:28:9d: c3:8f:06:6a:99:95:51:fa:d2:58:32:bd:93:16:62: 91:27:0a:35:08:47:b7:74:08:56:9e:f2:e5:f2:3a: e1:02:ce:12:be:e2:e3:eb:af:22:02:d7:51:77:1f: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:36:E0:B6:84:E5:46:C2:85:E9:7A:2E:21:4B:85:75:0B:D4:A5:B6 X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1d:53:02:b5:fd:84:42:ae:bd:90:f9:67:58:f8:fb:30:dd: 85:03:df:d2:29:4a:5b:53:da:cb:14:a8:f1:80:66:f2:4f:35: 10:83:ec:30:a0:c8:87:f6:0d:c9:cf:2e:d8:bf:b9:7a:5e:ab: 3b:5d:e2:53:c8:66:64:30:f3:68:3c:88:90:df:98:b4:b6:bc: 11:f1:31:a9:1d:dc:57:4e:ef:12:ad:58:a1:90:9d:ad:16:e8: e6:db:15:c7:57:7c:ab:0d:9d:db:12:88:4e:ed:88:2d:58:b2: 01:dd:3f:42:04:47:b1:4b:df:d6:5e:fb:4e:9e:86:fc:70:7a: 81:92:b1:9e:18:90:68:96:9a:21:10:81:1c:7b:0e:f2:07:a6: 03:3e:64:38:58:67:54:6b:04:b6:7a:69:de:ba:15:b7:f7:8b: 4b:ba:09:d6:0f:9d:e2:17:9b:5f:d3:0a:44:be:07:4b:52:aa: 2f:f1:a9:5f:01:0b:a5:8c:f2:4f:f0:b2:4a:10:e8:27:33:45: 0d:19:82:e8:44:f3:9c:69:6a:5f:77:71:3a:92:a0:2c:cd:43: f9:c4:f7:1f:87:cb:b6:5b:9a:2c:30:c5:6e:0a:2e:36:a2:b3: dc:79:00:de:19:08:10:fd:f7:dc:e6:aa:9b:a5:d6:06:98:d9: bc:70:94:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjQxMTIyMTY1NDQzWhcNMjQxMTI5MTY1NDQzWjAYMRYwFAYD VQQDEw02NzQwYjc1My0yYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VP6UY8tTzWF1qvLKjvGmNUm0rM1nO9M57yNyqnmuvigpjdWydX9rQRwWWVU VgNfyxlIzDTK0DZ/PcjJvUgd/0tN8beiGvm8NRDlsHF/lRIxG3MWW3/9FezJv6BS /9kwtPGSMzGKBBFYJewcLpu8KfBF1JCSE22GabSXB8UxkSzo9F9YX0HejbG0MZGW rxrDpmAvklQZZxDiqaiSW17HZMqj3bKXPmgEUZhtuDNLXzYxxOEi84hzIYrZeNcM Leqld/Tc7EZ8x23UX5bWLRG+KJ3DjwZqmZVR+tJYMr2TFmKRJwo1CEe3dAhWnvLl 8jrhAs4SvuLj668iAtdRdx91RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk24LaE 5UbChel6LiFLhXUL1KW2MB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvHVMCtf2EQq69kPlnWPj7MN2FA9/SKUpbU9rLFKjxgGbyTzUQg+ww oMiH9g3Jzy7Yv7l6Xqs7XeJTyGZkMPNoPIiQ35i0trwR8TGpHdxXTu8SrVihkJ2t Fujm2xXHV3yrDZ3bEohO7YgtWLIB3T9CBEexS9/WXvtOnob8cHqBkrGeGJBolpoh EIEcew7yB6YDPmQ4WGdUawS2emneuhW394tLugnWD53iF5tf0wpEvgdLUqov8alf AQuljPJP8LJKEOgnM0UNGYLoRPOcaWpfd3E6kqAszUP5xPcfh8u2W5osMMVuCi42 orPceQDeGQgQ/ffc5qqbpdYGmNm8cJT4 -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org