$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json) Hash identifier: W0BY1I6u67d3HoUFqA2agsMFgEJlS0WSd9JV9e7MSqc= Subject key identifier: FB:49:76:30:EE:93:FF:A9:B5:E7:46:47:7E:8E:E9:E7:94:A4:11:38 Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:34:43 +0000 Manifest this update: Wed 23 Oct 2024 06:34:42 +0000 Manifest next update: Wed 30 Oct 2024 06:34:42 +0000 Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: yxAB8tpAj2qUMQI3Zo/2iBF/tpc4ELwtubfkJ5JdCUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Validity Not Before: Oct 23 06:34:42 2024 GMT Not After : Oct 30 06:34:42 2024 GMT Subject: CN=67189903-ab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:61:cf:68:67:51:0b:92:81:7f:ce:1d:b8:c8: 5b:8b:a9:84:f0:88:12:aa:bb:b4:89:1c:fd:41:7b: 73:7c:a0:78:75:f1:54:b2:b4:e0:c1:0e:c5:1d:bd: d1:07:e7:4c:fe:1d:20:84:0b:b1:84:d4:81:2c:d3: e9:54:48:a0:5b:29:0c:8a:c1:e6:d9:71:b2:50:13: 2b:ef:03:3d:02:84:1b:14:18:61:64:5c:b5:3b:a0: 9f:96:45:b7:4e:0f:b6:6d:0e:1b:5b:aa:d6:ce:cf: 69:9b:be:93:90:1a:7d:6d:0f:5e:89:e3:59:69:9f: e5:46:24:52:dd:c0:89:4a:24:76:aa:22:60:b3:3c: 6e:db:37:3b:5b:b8:21:76:e7:73:4a:84:e8:a0:b0: e8:53:70:15:7b:19:8f:e1:f4:89:37:72:ed:ae:5e: 9d:a6:95:1e:f1:a5:2a:e1:e5:24:68:d7:8e:44:c9: 01:82:ee:94:64:8c:ac:b9:53:ff:f2:32:05:20:96: b2:21:6f:66:a6:b6:72:bf:cc:8f:84:9f:15:9e:28: fb:bf:3b:b5:bd:a3:a3:fa:87:c9:03:72:c0:59:58: dd:8d:4a:96:d8:c2:93:3e:39:ab:19:67:bb:32:3a: 20:83:fc:e0:15:f7:c4:c2:df:ed:70:22:b5:b3:44: 7b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:49:76:30:EE:93:FF:A9:B5:E7:46:47:7E:8E:E9:E7:94:A4:11:38 X509v3 Authority Key Identifier: keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:31:7c:b7:51:70:87:bf:5d:e4:b4:23:9c:48:e7:09:ce:b4: 62:cc:e6:24:f8:1e:98:79:e1:70:bf:6c:44:08:c2:ae:02:02: 70:81:c6:f5:c9:6d:79:35:d9:a9:a5:f2:20:4c:a8:11:f7:4c: 6c:cc:bd:3b:61:a5:f2:d4:60:34:ae:00:18:9d:3f:bd:aa:d2: 92:f2:cd:49:03:46:c2:b6:9b:8f:da:2a:b4:80:b1:38:91:64: 92:a7:7d:6e:f6:5e:5c:53:40:a6:76:57:80:a4:ff:66:1a:01: 01:59:c2:b1:8f:9d:aa:73:2f:19:19:6d:09:e4:2a:b3:82:2b: 87:82:0b:d0:4c:f8:5a:4e:c5:6c:85:ba:9e:de:02:27:1c:fa: d5:60:27:83:0b:3e:e5:af:e8:8b:6c:70:98:a1:3d:07:73:0b: f9:07:5f:39:d7:ba:04:89:d1:78:0b:36:8a:fd:5b:27:b3:df: 38:e3:b4:37:6e:36:76:19:a3:b3:91:d5:38:b9:ed:f5:83:9e: af:4b:3c:8d:ad:75:1b:0a:dc:b8:3f:e3:a1:6c:02:b2:16:4f: da:c2:82:1a:96:2f:d0:2d:a2:9f:33:f9:b7:ab:be:ff:51:a5: 0c:c5:e1:a0:18:8c:07:c7:93:19:bc:50:56:9e:d2:d4:50:91: 94:02:98:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDRCRTExMC8GA1UEBRMoQzI5NjNGM0E4NTRGRDZENEU2MTAxOTlFNjc0MDgzRDhB QUExMkU1MDAeFw0yNDEwMjMwNjM0NDJaFw0yNDEwMzAwNjM0NDJaMBgxFjAUBgNV BAMTDTY3MTg5OTAzLWFiNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0Yc9oZ1ELkoF/zh24yFuLqYTwiBKqu7SJHP1Be3N8oHh18VSytODBDsUdvdEH 50z+HSCEC7GE1IEs0+lUSKBbKQyKwebZcbJQEyvvAz0ChBsUGGFkXLU7oJ+WRbdO D7ZtDhtbqtbOz2mbvpOQGn1tD16J41lpn+VGJFLdwIlKJHaqImCzPG7bNztbuCF2 53NKhOigsOhTcBV7GY/h9Ik3cu2uXp2mlR7xpSrh5SRo145EyQGC7pRkjKy5U//y MgUglrIhb2amtnK/zI+EnxWeKPu/O7W9o6P6h8kDcsBZWN2NSpbYwpM+OasZZ7sy OiCD/OAV98TC3+1wIrWzRHvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+0l2MO6T /6m150ZHfo7p55SkETgwHwYDVR0jBBgwFoAUwpY/OoVP1tTmEBmeZ0CD2KqhLlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NEJFLzBCMkU4QjUwNjky MjExRUZCRjg3QkIwRUM0RjlBRTAyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3BZX09vVlAxdFRtRUJtZVowQ0QyS3FoTGxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 NEJFLzBCMkU4QjUwNjkyMjExRUZCRjg3QkIwRUM0RjlBRTAyL3dwWV9Pb1ZQMXRU bUVCbWVaMENEMktxaExsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHIxfLdRcIe/XeS0I5xI5wnOtGLM5iT4Hph54XC/bEQIwq4CAnCBxvXJ bXk12aml8iBMqBH3TGzMvTthpfLUYDSuABidP72q0pLyzUkDRsK2m4/aKrSAsTiR ZJKnfW72XlxTQKZ2V4Ck/2YaAQFZwrGPnapzLxkZbQnkKrOCK4eCC9BM+FpOxWyF up7eAicc+tVgJ4MLPuWv6ItscJihPQdzC/kHXznXugSJ0XgLNor9Wyez3zjjtDdu NnYZo7OR1Ti57fWDnq9LPI2tdRsK3Lg/46FsArIWT9rCghqWL9Atop8z+bervv9R pQzF4aAYjAfHkxm8UFae0tRQkZQCmGY= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org