$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft File: WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json) Hash identifier: LjDnEJk1QtlNw+rNs3zgC8CUdmfNmF6iENkB26kdIIQ= Subject key identifier: CE:F5:73:0A:3D:CB:F2:89:24:D5:02:FE:36:45:EB:B1:78:E2:02:90 Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 Certificate issuer: /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Certificate serial: 18F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft Manifest number: 2B1E Signing time: Fri 22 Nov 2024 16:28:56 +0000 Manifest this update: Fri 22 Nov 2024 16:28:55 +0000 Manifest next update: Fri 29 Nov 2024 16:28:55 +0000 Files and hashes: 1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: pXutVL66FAPwDtkBTanVbiLJJD9eE4ua8phpSawU0qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6389 (0x18f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Validity Not Before: Nov 22 16:28:55 2024 GMT Not After : Nov 29 16:28:55 2024 GMT Subject: CN=6740b147-e4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:d1:87:79:9f:7f:d7:89:0b:0c:9a:cc:40: bf:de:59:aa:ce:82:6c:38:48:11:c1:18:4e:46:a7: 9b:cf:df:fb:d9:f3:e1:69:c3:44:62:36:04:f5:09: 0a:02:2c:2a:4d:e7:93:d7:64:75:50:72:fa:f2:b2: 02:12:26:69:c6:a4:bf:4b:72:aa:1c:af:aa:dc:44: d8:d9:f9:ee:c4:de:6b:bb:98:bf:8e:d8:b9:67:c0: 97:5f:a9:17:d5:2e:e6:25:1e:56:4a:a2:39:f9:1a: a7:a9:88:06:2c:f3:85:73:58:a4:c9:3d:a8:3a:19: fa:c1:ce:02:f8:0c:1a:7f:15:d2:87:3e:90:34:c2: 90:b8:31:19:3c:d8:be:55:45:09:e2:03:ec:97:bb: ad:e7:7f:d5:af:36:c5:9b:e1:66:c0:91:83:18:e7: e3:cd:95:0c:65:d8:75:32:06:4a:21:28:19:ca:38: da:f4:e9:ea:31:86:a0:47:a3:c0:0a:e0:9a:53:11: 2a:bf:25:42:80:64:b5:a9:0b:39:d4:90:54:de:22: ae:38:24:d6:34:f5:31:30:33:49:62:cf:e5:e3:58: 2a:98:b2:11:1f:d6:87:c5:82:bf:b0:94:41:0f:ca: 90:46:dc:52:3b:f6:bf:ff:75:62:0d:4c:d9:a6:2d: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:73:0A:3D:CB:F2:89:24:D5:02:FE:36:45:EB:B1:78:E2:02:90 X509v3 Authority Key Identifier: keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c4:6c:ce:56:ac:3f:b5:cc:5e:a9:28:ec:da:12:20:6b:62: ab:14:75:f6:24:41:b3:87:ab:bc:72:c1:21:41:5f:05:45:bf: de:e6:ca:f9:c5:8e:97:d5:b8:ee:89:95:cc:74:32:c2:38:a0: e4:d1:ab:15:82:98:97:c8:1d:36:e8:7e:65:d1:26:45:c9:57: 84:f3:74:c6:c3:2a:d0:ea:ff:45:a9:4f:36:ee:ad:23:32:93: b2:93:5a:fc:e5:ed:94:b6:d1:3b:51:ad:99:74:41:79:2b:df: 64:d1:f8:a2:7f:c4:99:79:24:33:65:7b:09:4d:29:74:d2:87: 9a:7b:84:9f:35:bd:99:75:2f:8a:58:a1:db:99:30:ef:c9:dd: 8a:26:53:61:0e:a9:d4:41:d7:a8:a6:58:6c:4c:3d:d0:99:38: 21:b7:c8:c9:2b:a3:46:f9:17:17:75:da:2f:2e:b1:12:7e:84: a3:29:fb:f2:4c:c7:1a:33:fc:ab:8c:7f:1f:e5:0d:ce:77:aa: 76:76:a1:8f:65:a6:d5:b3:8c:ec:39:d2:70:c8:c9:1f:40:87: 85:cf:a9:4b:e6:18:39:9d:39:29:a8:dd:af:59:ed:d9:53:39: a3:06:cd:b9:d4:05:ff:d6:16:90:1a:72:87:57:fb:b9:47:f5: dd:06:33:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDU4NTA0RjIwMDQ1NjE1MzY4MThBNDREMEJFNDE2RUI1 MDU1RThGNDgwHhcNMjQxMTIyMTYyODU1WhcNMjQxMTI5MTYyODU1WjAYMRYwFAYD VQQDEw02NzQwYjE0Ny1lNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucLRh3mff9eJCwyazEC/3lmqzoJsOEgRwRhORqebz9/72fPhacNEYjYE9QkK AiwqTeeT12R1UHL68rICEiZpxqS/S3KqHK+q3ETY2fnuxN5ru5i/jti5Z8CXX6kX 1S7mJR5WSqI5+RqnqYgGLPOFc1ikyT2oOhn6wc4C+AwafxXShz6QNMKQuDEZPNi+ VUUJ4gPsl7ut53/VrzbFm+FmwJGDGOfjzZUMZdh1MgZKISgZyjja9OnqMYagR6PA CuCaUxEqvyVCgGS1qQs51JBU3iKuOCTWNPUxMDNJYs/l41gqmLIRH9aHxYK/sJRB D8qQRtxSO/a//3ViDUzZpi1IoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM71cwo9 y/KJJNUC/jZF67F44gKQMB8GA1UdIwQYMBaAFFhQTyAEVhU2gYpE0L5BbrUFXo9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZUYUJpa1RRdmtGdXRRVmVq MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGQlBJQVJXRlRhQmlrVFF2a0Z1dFFWZWowZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZU YUJpa1RRdmtGdXRRVmVqMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKxGzOVqw/tcxeqSjs2hIga2KrFHX2JEGzh6u8csEhQV8FRb/e5sr5 xY6X1bjuiZXMdDLCOKDk0asVgpiXyB026H5l0SZFyVeE83TGwyrQ6v9FqU827q0j MpOyk1r85e2UttE7Ua2ZdEF5K99k0fiif8SZeSQzZXsJTSl00oeae4SfNb2ZdS+K WKHbmTDvyd2KJlNhDqnUQdeoplhsTD3QmTght8jJK6NG+RcXddovLrESfoSjKfvy TMcaM/yrjH8f5Q3Od6p2dqGPZabVs4zsOdJwyMkfQIeFz6lL5hg5nTkpqN2vWe3Z UzmjBs251AX/1haQGnKHV/u5R/XdBjMj -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org