$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: +nuWwjJyAW/YNgdOvLHfJ+PlqbIwVzfb1rsGgHv3BxA= Subject key identifier: FB:22:54:60:03:DD:73:1C:6E:0D:CE:49:F1:22:32:E5:8E:EA:BE:0D Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 0536 Signing time: Fri 22 Nov 2024 23:04:08 +0000 Manifest this update: Fri 22 Nov 2024 23:04:07 +0000 Manifest next update: Fri 29 Nov 2024 23:04:07 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: vu3ByoAlNTLE4U5TF3+n30UqujdiEwvGEdenlsxiOPg=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Nov 22 23:04:07 2024 GMT Not After : Nov 29 23:04:07 2024 GMT Subject: CN=67410de8-383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:de:c2:9d:79:28:4b:71:66:d4:ea:c5:cf: 21:5b:68:15:06:69:7f:f4:41:18:6a:2f:05:33:df: f5:a1:8a:f2:94:99:ca:0e:80:dc:85:d2:ec:67:43: 03:20:a5:60:d3:10:54:f8:09:2e:47:8d:c6:6d:dd: 87:92:70:a1:0e:37:46:9c:10:e0:7f:89:02:57:15: d8:b2:c5:63:fc:17:1c:dd:16:24:81:6e:ae:35:3d: 65:24:ba:27:e7:f0:48:ac:ad:d2:69:f0:bb:7f:2e: 43:25:8f:6a:db:49:91:c4:a6:1e:42:59:ed:78:2d: be:1c:fc:bd:58:6c:b6:a9:7e:b3:c9:85:39:67:b8: ed:cb:db:3b:0e:a2:9b:cc:d6:fa:7a:63:81:7f:cb: d6:29:d0:da:c7:18:7e:c8:0c:62:a9:1f:3e:5d:d2: 21:d9:92:0c:2d:e1:47:e6:7e:d1:53:70:50:63:01: 70:1c:02:b3:b5:ae:3e:e1:2c:69:c5:8d:7a:51:89: 15:71:41:14:b8:b9:2a:97:2f:da:09:e4:4b:f4:7e: ba:d4:41:fd:e8:40:5e:70:4b:66:63:2e:53:e2:dc: af:f1:35:f1:00:71:95:02:35:2a:28:c8:df:2e:e5: d1:84:73:ee:1b:d4:ed:e5:23:bb:2b:d8:e0:e1:ad: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:22:54:60:03:DD:73:1C:6E:0D:CE:49:F1:22:32:E5:8E:EA:BE:0D X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:39:6e:75:2b:f8:bb:50:ea:bd:4a:be:b7:b1:d3:e2:0e:fe: 18:d8:f8:ea:91:63:ec:08:77:1d:dc:bd:e6:98:5b:bd:0a:8f: 96:d1:b4:2e:21:cf:e4:e0:88:52:92:bb:48:00:eb:a7:5e:ef: b3:cc:13:20:25:d1:41:4e:5b:e4:73:aa:2e:42:a9:5a:34:42: cb:49:56:b1:3c:7c:03:07:a4:d0:f1:7d:6d:3d:19:cd:bf:2d: 16:01:51:bf:b5:5e:94:fe:d5:ed:fc:9e:b6:4c:d0:a3:35:f1: 8c:cf:d8:8d:01:24:d8:23:65:39:ed:64:f7:d7:c1:fe:a8:8b: f4:23:77:0d:87:1f:e0:50:1a:71:e3:cf:8c:85:69:46:a7:3b: 6a:d4:46:e7:8e:96:bb:5c:41:4e:86:4b:ad:0e:85:3a:b6:dd: f2:19:a6:d3:01:5f:ac:c7:ad:64:f4:3e:d0:65:77:77:28:3f: 95:38:2d:1c:bb:1a:2c:15:1a:f4:b7:87:c9:2c:b0:00:c5:5f: 6b:ef:19:78:c3:3a:94:42:98:e4:66:56:4d:ee:0b:39:88:46: b2:4e:15:b0:16:39:01:fc:c3:5e:e3:d5:83:62:d8:4c:dc:37: 7e:74:a0:b5:32:a1:26:90:bf:2a:9c:69:d3:78:d8:9a:9b:fa: 7a:18:e0:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjQxMTIyMjMwNDA3WhcNMjQxMTI5MjMwNDA3WjAYMRYwFAYD VQQDEw02NzQxMGRlOC0zODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhLewp15KEtxZtTqxc8hW2gVBml/9EEYai8FM9/1oYrylJnKDoDchdLsZ0MD IKVg0xBU+AkuR43Gbd2HknChDjdGnBDgf4kCVxXYssVj/Bcc3RYkgW6uNT1lJLon 5/BIrK3SafC7fy5DJY9q20mRxKYeQlnteC2+HPy9WGy2qX6zyYU5Z7jty9s7DqKb zNb6emOBf8vWKdDaxxh+yAxiqR8+XdIh2ZIMLeFH5n7RU3BQYwFwHAKzta4+4Sxp xY16UYkVcUEUuLkqly/aCeRL9H661EH96EBecEtmYy5T4tyv8TXxAHGVAjUqKMjf LuXRhHPuG9Tt5SO7K9jg4a3CewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsiVGAD 3XMcbg3OSfEiMuWO6r4NMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsOW51K/i7UOq9Sr63sdPiDv4Y2PjqkWPsCHcd3L3mmFu9Co+W0bQu Ic/k4IhSkrtIAOunXu+zzBMgJdFBTlvkc6ouQqlaNELLSVaxPHwDB6TQ8X1tPRnN vy0WAVG/tV6U/tXt/J62TNCjNfGMz9iNASTYI2U57WT318H+qIv0I3cNhx/gUBpx 48+MhWlGpztq1Ebnjpa7XEFOhkutDoU6tt3yGabTAV+sx61k9D7QZXd3KD+VOC0c uxosFRr0t4fJLLAAxV9r7xl4wzqUQpjkZlZN7gs5iEayThWwFjkB/MNe49WDYthM 3Dd+dKC1MqEmkL8qnGnTeNiam/p6GOCY -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org