$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: oCw4xeImPE/5cRxncnpzHwTR+oYM7/rMGXGS/aSiHKM= Subject key identifier: 7D:89:73:87:0C:66:E1:AE:9A:AD:A9:E8:3E:58:0C:51:AB:0C:BF:4A Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1EAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1EAC Signing time: Fri 22 Nov 2024 16:02:54 +0000 Manifest this update: Fri 22 Nov 2024 16:02:54 +0000 Manifest next update: Fri 29 Nov 2024 16:02:54 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: IH75iy0SWKpGyMNE/EVb5h2ik3OSNXVwEeMEcizrgf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7852 (0x1eac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Nov 22 16:02:54 2024 GMT Not After : Nov 29 16:02:54 2024 GMT Subject: CN=6740ab2e-36c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:bb:5a:9b:93:65:40:b6:3d:19:cc:71:e2: b1:38:08:30:f3:12:49:e0:93:c3:05:de:5e:10:ae: 7b:b8:6f:5c:b8:e4:71:20:e0:51:14:02:3c:f1:86: 28:d3:73:16:86:f4:1e:04:93:25:4e:31:01:91:04: 90:12:b0:4e:23:c4:be:5c:cb:57:58:4d:09:aa:1b: 05:ae:fb:92:61:73:31:2f:55:65:3f:6a:63:28:5c: a9:95:08:6d:aa:b6:fd:b9:ee:c9:d8:9d:92:26:ed: a8:c7:07:98:b1:e6:16:40:89:56:60:d0:cd:36:3a: 16:ff:59:97:65:d4:a2:34:8f:37:d3:e9:29:e5:8b: 39:db:e4:d3:c8:8d:a4:fa:65:53:33:fc:5e:ce:c8: 98:5c:f3:e2:c4:45:59:df:b2:74:58:3a:09:34:79: 0b:cd:43:b0:28:a2:dc:11:bd:90:74:6c:65:17:2a: 03:d2:60:16:a5:d9:9c:44:c1:37:f6:13:80:80:b8: 65:79:be:38:2d:f1:76:e9:56:f5:61:6a:bc:4f:e7: 1f:cc:92:b4:ba:8c:d2:3e:07:e8:a9:ca:2a:ab:b6: 65:37:6f:46:d4:c3:78:61:d6:a1:b3:e4:4e:af:57: 60:4b:ba:2b:c3:a1:54:85:ff:e1:92:cb:cd:f0:8b: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:89:73:87:0C:66:E1:AE:9A:AD:A9:E8:3E:58:0C:51:AB:0C:BF:4A X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:51:10:68:2e:66:5c:99:71:be:00:ef:7d:bd:0b:23:8f: ae:86:b9:17:b8:31:a8:44:49:78:ef:7a:9a:f0:51:69:f9:1f: 09:8f:a0:89:68:50:f2:f8:e9:3f:c9:bf:32:7c:91:0d:b5:6e: b2:2b:e6:3f:61:eb:8b:b8:7e:03:03:4c:ba:f3:46:93:36:c5: a4:e6:ea:ac:5a:f1:33:de:2d:ba:4e:1d:54:03:80:a8:6c:1b: e2:74:1e:d5:aa:0d:99:0b:dc:30:2c:32:e1:82:8b:bd:84:83: 61:09:16:3d:5c:be:cf:dc:84:b2:2c:ce:a1:8b:0b:6d:cf:a1: 56:77:be:f1:84:c7:22:48:be:da:15:3c:47:9f:31:bd:af:29: a5:5f:4a:6d:1d:40:4a:84:a3:57:31:30:68:85:4c:1e:b7:b4: 30:20:1c:b1:5b:31:b1:9c:a6:06:d5:4f:9e:e2:1e:e5:d6:67: d4:26:63:7a:3e:f1:55:2d:71:5c:50:95:3a:c9:de:01:00:bb: 2c:f0:c0:b3:9f:71:d2:f9:a4:f7:40:e4:0f:f0:6a:c4:d5:e6: e5:2b:38:08:0d:49:8d:54:ab:f5:51:b0:40:bc:02:76:f0:fe: e1:ff:1b:a1:e6:56:72:5f:77:97:24:14:10:2a:0c:e0:a6:ef: 4e:65:d4:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjQxMTIyMTYwMjU0WhcNMjQxMTI5MTYwMjU0WjAYMRYwFAYD VQQDEw02NzQwYWIyZS0zNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWu7WpuTZUC2PRnMceKxOAgw8xJJ4JPDBd5eEK57uG9cuORxIOBRFAI88YYo 03MWhvQeBJMlTjEBkQSQErBOI8S+XMtXWE0JqhsFrvuSYXMxL1VlP2pjKFyplQht qrb9ue7J2J2SJu2oxweYseYWQIlWYNDNNjoW/1mXZdSiNI830+kp5Ys52+TTyI2k +mVTM/xezsiYXPPixEVZ37J0WDoJNHkLzUOwKKLcEb2QdGxlFyoD0mAWpdmcRME3 9hOAgLhleb44LfF26Vb1YWq8T+cfzJK0uozSPgfoqcoqq7ZlN29G1MN4Ydahs+RO r1dgS7orw6FUhf/hksvN8Isk2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2Jc4cM ZuGumq2p6D5YDFGrDL9KMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLulEQaC5mXJlxvgDvfb0LI4+uhrkXuDGoREl473qa8FFp+R8Jj6CJ aFDy+Ok/yb8yfJENtW6yK+Y/YeuLuH4DA0y680aTNsWk5uqsWvEz3i26Th1UA4Co bBvidB7Vqg2ZC9wwLDLhgou9hINhCRY9XL7P3ISyLM6hiwttz6FWd77xhMciSL7a FTxHnzG9rymlX0ptHUBKhKNXMTBohUwet7QwIByxWzGxnKYG1U+e4h7l1mfUJmN6 PvFVLXFcUJU6yd4BALss8MCzn3HS+aT3QOQP8GrE1eblKzgIDUmNVKv1UbBAvAJ2 8P7h/xuh5lZyX3eXJBQQKgzgpu9OZdT1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org