$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: kmAJx4Hi0bIvi30GqU2cKcnxBqMqmk6FIySApNps410= Subject key identifier: 19:3B:BF:0E:B8:E8:06:B9:23:AF:B6:53:1A:0E:62:A3:1F:8B:31:2D Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 2D Signing time: Sat 23 Nov 2024 05:37:54 +0000 Manifest this update: Sat 23 Nov 2024 05:37:53 +0000 Manifest next update: Sat 30 Nov 2024 05:37:53 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: 7VirhlKm+9a2XHQWr9T9fqn/ywr1W9/C8NWNNQ98qq8=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Nov 23 05:37:53 2024 GMT Not After : Nov 30 05:37:53 2024 GMT Subject: CN=67416a31-68c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:eb:e8:a6:b4:e1:8b:9c:34:0f:87:8e:33: 6a:b5:dd:64:11:3a:70:8d:51:70:69:40:38:49:a7: 5c:29:ab:2a:e7:5f:be:16:43:8e:e4:0d:ae:86:19: b5:f9:2c:bd:9e:e0:9e:ae:19:c5:f5:d0:13:2d:80: 88:7e:a7:39:f0:24:6a:81:2b:76:cb:09:05:35:a7: bf:41:ed:4f:0f:90:56:bb:ff:41:60:00:eb:cf:06: a1:46:c2:b3:ff:42:eb:6c:a8:af:82:85:0e:91:30: a9:02:0b:45:8d:5c:0c:12:38:c1:cf:be:66:46:e5: 27:16:ca:24:84:fb:dd:43:ae:c2:e2:59:7c:c7:78: 11:b5:ff:d1:0c:6c:ac:71:80:29:02:5c:89:f6:be: 16:c9:dd:18:3b:e6:98:98:3e:ff:c7:54:ea:ab:d8: 10:b2:3f:6c:11:41:de:8e:e8:03:45:64:6b:51:4a: ce:90:aa:ac:98:dc:91:de:f8:2a:a8:74:26:5d:65: e8:46:27:f9:c4:9d:19:83:cc:a0:65:69:c0:ed:d3: 5c:57:f2:b6:04:e6:5c:7a:be:89:55:d0:4b:64:96: 2f:b4:ea:42:e0:81:e4:af:8a:75:f7:f3:54:ec:ea: 63:89:30:75:67:a5:72:dd:55:24:7d:2a:7f:c5:74: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3B:BF:0E:B8:E8:06:B9:23:AF:B6:53:1A:0E:62:A3:1F:8B:31:2D X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:79:49:23:33:05:56:c7:52:6d:be:ec:7c:ce:cb:cd:fb:15: 74:e5:91:ea:d3:f8:67:4b:e1:9d:c0:a9:b0:ed:3d:50:27:90: 98:11:35:70:81:bb:6c:e4:3c:31:ad:be:6b:8e:48:b3:7e:c0: 42:32:15:c9:a2:41:95:e7:2a:07:92:94:91:a3:f9:96:f6:76: 31:10:2d:14:2d:3d:ea:ae:e7:a8:2a:6b:0e:e2:e2:f2:f1:8d: 4c:d3:51:80:1a:f3:80:b5:61:87:56:18:a2:c9:f2:11:65:f1: 78:1c:5a:0c:bc:02:ed:4a:b4:b4:3b:b4:dd:b0:e1:61:62:5e: 49:87:f2:01:36:9e:37:8e:cb:51:b9:0b:27:18:a6:58:4a:29: 4d:a0:3f:fc:bb:f4:aa:e5:02:d2:b7:b4:8e:2d:e1:26:53:99: eb:7c:81:04:bc:eb:c1:82:11:cc:8c:c0:f2:72:b7:4b:b8:8e: a2:19:bf:bf:c0:02:b1:b5:1f:ca:86:ad:9b:14:a4:01:ab:f4: 98:53:45:f6:6a:07:cc:6c:26:87:0e:d8:bc:95:f4:4f:9b:d7: a6:29:33:bd:e1:37:64:49:e6:80:db:5e:27:f2:24:28:ca:b4: 44:91:71:8b:03:d3:f5:7a:1f:3d:2c:16:ab:df:f5:11:65:87: 6e:71:23:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjJEOTExMC8GA1UEBRMoRkYwNjM0M0NBOTlBNjQxMDAwQzcxMUYzMkQ2OUY1OUMx OUFDRjA0MzAeFw0yNDExMjMwNTM3NTNaFw0yNDExMzAwNTM3NTNaMBgxFjAUBgNV BAMTDTY3NDE2YTMxLTY4YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA/uvoprThi5w0D4eOM2q13WQROnCNUXBpQDhJp1wpqyrnX74WQ47kDa6GGbX5 LL2e4J6uGcX10BMtgIh+pznwJGqBK3bLCQU1p79B7U8PkFa7/0FgAOvPBqFGwrP/ QutsqK+ChQ6RMKkCC0WNXAwSOMHPvmZG5ScWyiSE+91DrsLiWXzHeBG1/9EMbKxx gCkCXIn2vhbJ3Rg75piYPv/HVOqr2BCyP2wRQd6O6ANFZGtRSs6QqqyY3JHe+Cqo dCZdZehGJ/nEnRmDzKBlacDt01xX8rYE5lx6volV0Etkli+06kLggeSvinX381Ts 6mOJMHVnpXLdVSR9Kn/FdN/fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGTu/Drjo Brkjr7ZTGg5iox+LMS0wHwYDVR0jBBgwFoAU/wY0PKmaZBAAxxHzLWn1nBms8EMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMkQ5L0IzMTIwMUUwNjdB QTExRUY4RjQ5OEEyN0M0RjlBRTAyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3dZMFBLbWFaQkFBeHhIekxXbjFuQm1zOEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MkQ5L0IzMTIwMUUwNjdBQTExRUY4RjQ5OEEyN0M0RjlBRTAyL193WTBQS21hWkJB QXh4SHpMV24xbkJtczhFTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIR5SSMzBVbHUm2+7HzOy837FXTlkerT+GdL4Z3AqbDtPVAnkJgRNXCB u2zkPDGtvmuOSLN+wEIyFcmiQZXnKgeSlJGj+Zb2djEQLRQtPequ56gqaw7i4vLx jUzTUYAa84C1YYdWGKLJ8hFl8XgcWgy8Au1KtLQ7tN2w4WFiXkmH8gE2njeOy1G5 CycYplhKKU2gP/y79KrlAtK3tI4t4SZTmet8gQS868GCEcyMwPJyt0u4jqIZv7/A ArG1H8qGrZsUpAGr9JhTRfZqB8xsJocO2LyV9E+b16YpM73hN2RJ5oDbXifyJCjK tESRcYsD0/V6Hz0sFqvf9RFlh25xI5A= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org