$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: cyU8pxGFzHpzX1rpViDsChYBM2K3KnWoR7iZPpPLugk= Subject key identifier: 22:65:0A:E0:9C:67:E2:BE:69:58:16:48:38:54:DD:27:C6:FD:82:85 Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0ECC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0EB4 Signing time: Fri 22 Nov 2024 17:40:47 +0000 Manifest this update: Fri 22 Nov 2024 17:40:47 +0000 Manifest next update: Fri 29 Nov 2024 17:40:47 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: SkGdTRwsYjC0hvfdlkeh84PIJ4jTNUjBpSrqsnQr+KU=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: cQ5gxOJln3e7MyTD1Pa9yBZSLtdhttdpqLQ+iR+Fz8o=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: P21sWTdEvS+OR+eBWq38z1ZuadpIkizBtR94Vsv/HGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3788 (0xecc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Nov 22 17:40:47 2024 GMT Not After : Nov 29 17:40:47 2024 GMT Subject: CN=6740c21f-6cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:4d:46:43:66:ad:30:c7:01:60:a7:1d:6b: 6f:f5:da:4a:86:26:85:05:b5:56:f4:e9:2f:1b:88: 8a:40:2f:77:5a:09:99:9a:f3:dc:6f:5d:46:c7:0e: 34:01:37:39:ab:32:04:1b:6e:f9:89:34:1b:86:a1: 51:1e:3b:8c:bd:a4:fd:52:5b:64:e5:3a:0c:6e:74: fa:ab:69:8d:1f:8b:2c:c6:d6:4b:d8:84:87:e6:77: 01:ec:38:35:1b:a5:61:9b:cc:07:b1:42:12:3e:bc: 3b:1f:8b:76:0b:b1:86:6a:17:1b:81:d8:e5:f0:10: b0:70:b2:b7:ae:71:e4:90:59:52:00:23:2a:17:96: 3f:4c:d7:37:7e:96:73:c9:e8:59:9c:cc:37:98:aa: 0e:54:7f:08:27:32:df:c5:09:ae:15:7e:b2:17:2b: 3b:6a:94:26:02:9b:7d:cd:8d:ff:96:5a:0f:4d:65: 5d:9a:20:2d:06:34:96:5f:d5:c1:dd:bc:1d:74:d5: 97:5d:e1:bc:90:cd:2f:78:6d:f3:8b:65:22:72:14: af:3d:18:b7:fe:4b:6d:f0:4d:67:66:d0:84:99:19: c1:f3:ee:e9:a0:4a:8d:9f:06:ae:d7:5f:16:93:4f: 47:9d:9d:4c:81:01:b0:93:69:af:60:27:56:3a:93: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:65:0A:E0:9C:67:E2:BE:69:58:16:48:38:54:DD:27:C6:FD:82:85 X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0d:6f:e7:3d:df:90:53:21:87:8f:9f:3c:d7:e7:11:71:1a: 0e:00:93:82:02:7e:93:d0:c1:bd:85:71:61:a7:d8:61:75:c3: 13:58:2b:8d:fe:f3:a3:af:b6:cb:4e:b8:5d:48:5d:b8:b6:42: 46:4f:64:d0:54:4c:16:fb:9a:54:c2:d3:ed:bb:b9:bd:ce:e7: 82:3d:82:c4:a3:52:4f:78:fe:ca:6c:35:9a:d9:d2:26:5d:cd: 52:e6:1c:1f:3f:48:be:2a:2f:a9:b5:3d:7e:14:a3:75:f1:d1: 5f:bd:43:b5:81:92:59:6f:83:75:f6:a5:f0:75:a3:e0:ad:a0: 82:b8:01:bc:a0:7d:cb:b1:e6:12:e6:14:6f:65:e3:15:35:aa: 39:4d:6e:49:dd:b0:89:a9:85:d7:2a:ad:d5:fd:17:84:e1:0a: 61:bf:e6:87:e7:85:26:3c:8b:e2:9a:58:ca:6d:0b:70:b3:e6: 17:73:00:55:fd:20:53:fb:6d:1a:08:fa:01:a1:e5:e4:16:5a: 0a:cc:da:64:14:9b:39:5b:8b:ad:64:4c:9e:75:82:9f:9e:78: 01:0a:02:52:a3:c6:29:ae:10:d8:11:20:83:6f:a8:22:ad:d7: 4e:2d:9c:34:a9:38:c0:d3:b7:b4:82:e8:35:ec:03:b2:4d:a4: 05:e8:0f:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjQxMTIyMTc0MDQ3WhcNMjQxMTI5MTc0MDQ3WjAYMRYwFAYD VQQDEw02NzQwYzIxZi02Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIhNRkNmrTDHAWCnHWtv9dpKhiaFBbVW9OkvG4iKQC93WgmZmvPcb11Gxw40 ATc5qzIEG275iTQbhqFRHjuMvaT9Ultk5ToMbnT6q2mNH4ssxtZL2ISH5ncB7Dg1 G6Vhm8wHsUISPrw7H4t2C7GGahcbgdjl8BCwcLK3rnHkkFlSACMqF5Y/TNc3fpZz yehZnMw3mKoOVH8IJzLfxQmuFX6yFys7apQmApt9zY3/lloPTWVdmiAtBjSWX9XB 3bwddNWXXeG8kM0veG3zi2UichSvPRi3/ktt8E1nZtCEmRnB8+7poEqNnwau118W k09HnZ1MgQGwk2mvYCdWOpOPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJlCuCc Z+K+aVgWSDhU3SfG/YKFMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5DW/nPd+QUyGHj5881+cRcRoOAJOCAn6T0MG9hXFhp9hhdcMTWCuN /vOjr7bLTrhdSF24tkJGT2TQVEwW+5pUwtPtu7m9zueCPYLEo1JPeP7KbDWa2dIm Xc1S5hwfP0i+Ki+ptT1+FKN18dFfvUO1gZJZb4N19qXwdaPgraCCuAG8oH3LseYS 5hRvZeMVNao5TW5J3bCJqYXXKq3V/ReE4Qphv+aH54UmPIvimljKbQtws+YXcwBV /SBT+20aCPoBoeXkFloKzNpkFJs5W4utZEyedYKfnngBCgJSo8YprhDYESCDb6gi rddOLZw0qTjA07e0gug17AOyTaQF6A8b -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org