$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: u4jc08Kj0BjZjKYFEW8B42gNRMZtEDxNx8rO/L4VNCg= Subject key identifier: CE:58:58:94:2A:F7:CF:71:6F:05:84:51:27:54:3B:7C:33:3C:2A:7A Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 0515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 050F Signing time: Fri 22 Nov 2024 23:11:21 +0000 Manifest this update: Fri 22 Nov 2024 23:11:21 +0000 Manifest next update: Fri 29 Nov 2024 23:11:21 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: z2pE0IR/qV9rcMdggZhSRUd1FgSlGVkZB9bltgUv+u0=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: /IQosXeTs3yKI2PYcZx2uhrQ/iH7sT08Mb2D4+fQ4bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: Nov 22 23:11:21 2024 GMT Not After : Nov 29 23:11:21 2024 GMT Subject: CN=67410f99-ec0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:0a:1e:f8:60:7a:75:78:1c:0a:4e:62:1c: 3b:84:66:fc:16:1c:82:48:fc:c0:e7:60:82:7f:dd: 46:70:5a:9c:60:02:c0:95:21:bf:bc:79:d6:56:d4: b9:92:d4:10:03:2b:6d:d2:96:c6:76:b1:b6:67:7f: d5:c2:87:5b:62:75:e5:87:33:9a:37:c4:4c:38:31: a5:33:85:51:01:82:a3:52:a7:77:82:71:20:75:b6: 82:c6:e0:13:db:02:00:33:3c:39:b5:5c:02:f2:f3: 4b:bb:d3:df:ad:6d:40:c8:41:dd:dd:65:e3:0b:04: 62:43:1c:49:99:e5:82:bd:e4:7a:47:d0:77:82:4a: 84:b4:0d:13:96:2c:0b:e0:f7:22:1e:24:c8:58:d7: 33:a8:30:9a:df:c3:42:8a:3d:17:9e:f8:71:0b:ba: fa:cc:ad:12:cd:cf:3e:b7:45:b7:37:ef:a9:1a:19: 58:16:33:5d:a0:20:4f:7c:97:33:46:76:51:b0:ff: 6b:a5:6c:6a:ac:2b:7e:b7:6d:75:68:21:bc:93:2e: a2:19:cf:c9:a8:c8:34:06:6e:7c:ea:b6:21:b7:d3: 8c:5c:3e:67:7c:dd:ae:a0:bd:84:e3:41:92:23:a2: 26:12:45:14:67:5b:4b:1c:9f:67:92:cc:26:e0:6e: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:58:58:94:2A:F7:CF:71:6F:05:84:51:27:54:3B:7C:33:3C:2A:7A X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:14:ff:49:ee:ff:29:ce:e9:7f:f5:be:46:e0:3c:f3:7a:aa: dd:d4:81:5d:a0:1a:f9:3a:52:d2:c3:2e:64:79:81:d0:eb:8d: fb:1f:49:d9:0a:26:39:32:ae:ed:8b:21:86:17:97:ed:52:12: 85:06:07:3c:bf:c4:39:b4:75:8d:06:18:15:a2:dc:27:1a:4d: 30:92:94:d2:43:3a:a4:a1:e7:31:bb:22:1b:77:bb:1d:bd:48: ac:77:f0:9b:35:8a:7a:29:bf:f2:a3:42:f7:17:93:a1:22:45: a4:6f:f9:66:cd:71:b1:5c:8d:2c:08:ff:c7:28:3a:0e:e1:cb: 7f:92:68:39:39:cd:f7:5f:fd:82:ac:04:bb:b0:0b:91:42:e4: f3:ab:04:5a:cf:8a:75:17:41:14:32:6a:2a:11:7e:32:34:8a: 72:16:0f:61:bf:1d:a1:73:d6:dc:1a:c5:02:ed:86:24:78:b4: b8:cd:7e:47:1c:ef:8a:c0:cd:c8:9e:65:36:29:c7:94:4f:e6: 8d:e8:57:98:1c:84:1d:88:51:f1:07:90:6a:bb:ee:cf:fb:94: a9:d8:4d:34:92:ca:2f:37:d3:48:25:d9:64:a8:17:44:5c:56: 87:f8:90:94:e6:14:9d:a9:fb:99:43:c2:fc:40:a7:9e:d3:18: 87:29:ab:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjQxMTIyMjMxMTIxWhcNMjQxMTI5MjMxMTIxWjAYMRYwFAYD VQQDEw02NzQxMGY5OS1lYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/wKHvhgenV4HApOYhw7hGb8FhyCSPzA52CCf91GcFqcYALAlSG/vHnWVtS5 ktQQAytt0pbGdrG2Z3/VwodbYnXlhzOaN8RMODGlM4VRAYKjUqd3gnEgdbaCxuAT 2wIAMzw5tVwC8vNLu9PfrW1AyEHd3WXjCwRiQxxJmeWCveR6R9B3gkqEtA0TliwL 4PciHiTIWNczqDCa38NCij0XnvhxC7r6zK0Szc8+t0W3N++pGhlYFjNdoCBPfJcz RnZRsP9rpWxqrCt+t211aCG8ky6iGc/JqMg0Bm586rYht9OMXD5nfN2uoL2E40GS I6ImEkUUZ1tLHJ9nkswm4G64YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5YWJQq 989xbwWEUSdUO3wzPCp6MB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkFP9J7v8pzul/9b5G4Dzzeqrd1IFdoBr5OlLSwy5keYHQ6437H0nZ CiY5Mq7tiyGGF5ftUhKFBgc8v8Q5tHWNBhgVotwnGk0wkpTSQzqkoecxuyIbd7sd vUisd/CbNYp6Kb/yo0L3F5OhIkWkb/lmzXGxXI0sCP/HKDoO4ct/kmg5Oc33X/2C rAS7sAuRQuTzqwRaz4p1F0EUMmoqEX4yNIpyFg9hvx2hc9bcGsUC7YYkeLS4zX5H HO+KwM3InmU2KceUT+aN6FeYHIQdiFHxB5Bqu+7P+5Sp2E00ksovN9NIJdlkqBdE XFaH+JCU5hSdqfuZQ8L8QKee0xiHKavD -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:53 2024 by rpki-client on console-ams.rpki-client.org