$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json) Hash identifier: bpuvR/2Gi4Y3Hig1hKzAGFqLV/A/8OPBxhm76ho2IMY= Subject key identifier: CB:C4:92:4D:DA:82:DD:BE:C3:BC:2E:C3:D8:04:77:83:42:C3:B1:22 Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft Manifest number: 2C Signing time: Sat 23 Nov 2024 05:39:00 +0000 Manifest this update: Sat 23 Nov 2024 05:39:00 +0000 Manifest next update: Sat 30 Nov 2024 05:39:00 +0000 Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: w9rUVFvpEciNW+HZOmPhvaWzZ4fIJvoKXFpwcfM39fw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Validity Not Before: Nov 23 05:39:00 2024 GMT Not After : Nov 30 05:39:00 2024 GMT Subject: CN=67416a74-0c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:29:3e:d2:97:5a:c4:3a:05:d9:b7:31:84: c4:8b:72:ef:e6:88:a1:ab:3f:7c:55:7e:a7:a6:2c: ec:d8:af:2a:2d:d0:89:32:02:73:6a:96:58:3a:c0: 09:b9:80:06:cb:e6:f8:80:e5:27:50:5c:b7:d6:51: 1c:9b:78:cc:4c:51:48:35:2a:1e:8b:1c:7c:0e:60: fa:36:b5:88:93:b0:a3:fa:ce:bd:c8:ba:07:2b:fc: a4:16:18:fe:1b:81:5d:ca:da:71:82:57:83:63:05: 1d:90:db:10:41:cc:19:ec:85:74:db:5d:bd:09:86: 92:70:4a:55:ec:e7:cc:de:90:a8:e5:b8:72:f0:35: f5:8a:af:c9:02:ae:d8:78:68:b3:96:0e:ba:f9:3e: 6b:ff:86:60:00:d9:6f:e3:85:a3:c6:f8:13:cd:26: 5f:75:67:4b:33:87:6b:12:a7:5a:09:99:7d:82:22: a7:71:78:06:0c:a5:db:6e:4f:81:a1:93:7a:08:2f: 5b:e5:33:89:6f:ed:05:d0:04:59:57:55:4f:07:bf: a4:49:2e:69:af:5f:74:d9:7a:48:b2:c1:fb:fc:11: 38:17:4f:d0:40:32:a0:e9:19:bf:c2:7d:5c:04:d4: 25:3b:57:2e:ae:83:9a:a9:31:aa:ab:97:54:b5:bb: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C4:92:4D:DA:82:DD:BE:C3:BC:2E:C3:D8:04:77:83:42:C3:B1:22 X509v3 Authority Key Identifier: keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:60:99:21:cf:9c:9d:a6:89:10:a8:c4:c0:f8:d2:17:cb:7e: 6a:4c:a9:d4:7c:01:1e:eb:34:6d:23:4e:b6:de:4a:6b:d7:2a: 53:75:c8:eb:7c:fd:cb:4d:cf:64:18:09:70:73:84:f7:fc:a9: c7:e5:e9:da:3d:12:40:79:07:f1:d5:98:30:a3:a4:ca:f3:da: e9:1e:af:6b:c4:58:c2:3b:3e:36:d4:10:85:cf:b4:1a:54:97: 96:a8:74:5f:18:05:06:ef:d0:b5:cc:c1:26:e3:6b:2f:37:34: 57:0f:c7:4f:16:92:59:0f:19:60:33:04:95:a5:42:07:34:c3: 54:13:ac:e0:7a:3b:94:4b:d5:29:ba:e4:d4:1f:ee:35:57:0c: 66:9f:33:cb:9d:fb:ce:76:31:33:18:2c:34:81:a3:41:ce:b1: 15:34:1e:dd:dc:ec:ed:b6:8e:1f:70:eb:cd:84:16:b9:86:78: ee:39:7c:ca:91:95:c4:78:25:9e:4d:8b:c5:7a:8a:38:4d:fc: 1e:fa:fa:0a:2f:2a:9a:2a:18:17:97:85:2b:8b:fe:e5:e8:84: 13:94:69:31:df:8c:26:71:a3:5d:a0:7d:0e:41:20:9c:91:1f: 3c:3f:26:2b:7d:a9:af:df:c1:95:12:be:c1:0f:ed:37:1c:e7: b3:ba:a9:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDRCRTExMC8GA1UEBRMoQzI5NjNGM0E4NTRGRDZENEU2MTAxOTlFNjc0MDgzRDhB QUExMkU1MDAeFw0yNDExMjMwNTM5MDBaFw0yNDExMzAwNTM5MDBaMBgxFjAUBgNV BAMTDTY3NDE2YTc0LTBjNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPZCk+0pdaxDoF2bcxhMSLcu/miKGrP3xVfqemLOzYryot0IkyAnNqllg6wAm5 gAbL5viA5SdQXLfWURybeMxMUUg1Kh6LHHwOYPo2tYiTsKP6zr3Iugcr/KQWGP4b gV3K2nGCV4NjBR2Q2xBBzBnshXTbXb0JhpJwSlXs58zekKjluHLwNfWKr8kCrth4 aLOWDrr5Pmv/hmAA2W/jhaPG+BPNJl91Z0szh2sSp1oJmX2CIqdxeAYMpdtuT4Gh k3oIL1vlM4lv7QXQBFlXVU8Hv6RJLmmvX3TZekiywfv8ETgXT9BAMqDpGb/CfVwE 1CU7Vy6ug5qpMaqrl1S1uyAdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy8SSTdqC 3b7DvC7D2AR3g0LDsSIwHwYDVR0jBBgwFoAUwpY/OoVP1tTmEBmeZ0CD2KqhLlAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NEJFLzBCMkU4QjUwNjky MjExRUZCRjg3QkIwRUM0RjlBRTAyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExs QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3BZX09vVlAxdFRtRUJtZVowQ0QyS3FoTGxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 NEJFLzBCMkU4QjUwNjkyMjExRUZCRjg3QkIwRUM0RjlBRTAyL3dwWV9Pb1ZQMXRU bUVCbWVaMENEMktxaExsQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIxgmSHPnJ2miRCoxMD40hfLfmpMqdR8AR7rNG0jTrbeSmvXKlN1yOt8 /ctNz2QYCXBzhPf8qcfl6do9EkB5B/HVmDCjpMrz2uker2vEWMI7PjbUEIXPtBpU l5aodF8YBQbv0LXMwSbjay83NFcPx08WklkPGWAzBJWlQgc0w1QTrOB6O5RL1Sm6 5NQf7jVXDGafM8ud+852MTMYLDSBo0HOsRU0Ht3c7O22jh9w682EFrmGeO45fMqR lcR4JZ5Ni8V6ijhN/B76+govKpoqGBeXhSuL/uXohBOUaTHfjCZxo12gfQ5BIJyR Hzw/Jit9qa/fwZUSvsEP7Tcc57O6qSY= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org