$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: 63f5w0ayB0yfGkeKw6wojYWdGvuF/8wafsvkNhbecz8= Subject key identifier: E2:D8:3B:C8:BB:AF:44:97:28:39:47:DD:35:5E:89:F1:1F:09:A9:62 Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 0107 Signing time: Sat 23 Nov 2024 03:11:12 +0000 Manifest this update: Sat 23 Nov 2024 03:11:12 +0000 Manifest next update: Sat 30 Nov 2024 03:11:12 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: Y+LCeXx++4RtXULlWxYb+Xv6tZ2KIwa+b0rMiy6sgjU=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: 87jyq80/7TFEo0ZjtNAlfKQCEGSGhXKCvcBSYItfaWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: Nov 23 03:11:12 2024 GMT Not After : Nov 30 03:11:12 2024 GMT Subject: CN=674147d0-936a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:2d:d2:2a:a6:8e:43:df:46:38:ef:54:61: 8d:4d:30:ce:91:b2:b6:f3:40:32:e4:6a:24:ff:27: f9:99:99:87:b2:ba:d7:f4:27:a3:33:d4:bf:5d:67: c8:a1:0f:13:18:58:5b:4e:43:87:71:ec:df:4d:bc: ba:50:f9:7e:80:41:fc:49:08:27:cb:7a:30:16:cb: 76:f9:35:9f:53:e3:85:ac:c3:39:49:46:69:db:8e: 1b:97:83:86:34:b0:7a:3c:ab:5e:19:a3:1e:36:dc: 5b:42:11:d8:a0:e3:0a:ac:16:9b:da:46:be:33:23: 62:68:0c:41:47:ad:f4:3c:6a:44:42:94:55:f9:ad: e2:e6:cc:03:85:ad:20:fe:62:6c:08:64:e3:36:19: 04:cd:e1:c9:e4:24:c3:4c:f7:25:42:0c:70:e9:fb: 0c:1f:f2:06:61:2c:3a:8c:c7:20:51:b7:8b:9e:56: ae:07:59:81:e0:70:2e:7d:2d:29:9c:46:6c:ad:4f: 5b:9e:7f:b6:0b:40:32:35:56:7c:51:0d:ae:57:3c: af:30:47:d8:f2:72:a2:55:20:03:1c:66:90:eb:4b: 83:2a:92:65:b8:31:22:f8:18:a3:b2:1e:8c:25:ad: 93:6a:5c:7a:ee:20:47:a7:58:78:e8:ca:30:24:34: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:3B:C8:BB:AF:44:97:28:39:47:DD:35:5E:89:F1:1F:09:A9:62 X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:15:c1:8d:6f:92:59:5e:43:01:92:f6:40:a1:20:ed:ab:51: ea:d9:75:da:5d:a6:95:bc:08:6d:11:7d:59:3d:1f:17:fa:a7: b7:29:2a:9a:87:f2:0b:19:bb:d3:51:be:5f:51:da:e6:e8:1a: 9a:72:4b:bd:bd:dd:f9:22:de:23:29:41:44:00:f3:87:68:b9: c7:48:e4:d8:e9:59:96:bc:45:43:9e:45:46:0b:1f:3b:c6:d4: 59:72:5e:54:e8:1f:16:58:53:66:95:ec:e3:47:ec:36:1d:88: 0d:a3:dc:e4:b4:eb:c5:93:b3:df:92:6d:4b:a4:23:e7:1f:4a: c3:8e:23:cd:e5:92:ab:ac:6f:43:34:b8:22:1c:f7:d2:ce:60: 9c:86:5f:74:8e:e9:d9:54:9a:15:1f:42:79:6d:2b:ed:7c:ee: 47:7b:94:e4:bd:d7:ab:95:60:a8:99:d5:8e:c0:9d:bf:25:e1: 86:29:45:ae:10:4f:1a:b8:08:99:ff:d2:0f:a3:c8:2a:c1:3d: b1:ff:c5:83:8a:3b:e5:d7:96:68:22:f7:b6:5c:8a:2f:4c:b9: f0:dd:11:26:93:02:cd:62:19:24:c4:43:df:3a:44:d4:cd:b0: ed:1a:1b:8f:e6:ab:f1:f6:a2:c0:72:38:d7:97:80:e2:69:7a: 75:4f:1f:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjQxMTIzMDMxMTEyWhcNMjQxMTMwMDMxMTEyWjAYMRYwFAYD VQQDEw02NzQxNDdkMC05MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6It0iqmjkPfRjjvVGGNTTDOkbK280Ay5Gok/yf5mZmHsrrX9CejM9S/XWfI oQ8TGFhbTkOHcezfTby6UPl+gEH8SQgny3owFst2+TWfU+OFrMM5SUZp244bl4OG NLB6PKteGaMeNtxbQhHYoOMKrBab2ka+MyNiaAxBR630PGpEQpRV+a3i5swDha0g /mJsCGTjNhkEzeHJ5CTDTPclQgxw6fsMH/IGYSw6jMcgUbeLnlauB1mB4HAufS0p nEZsrU9bnn+2C0AyNVZ8UQ2uVzyvMEfY8nKiVSADHGaQ60uDKpJluDEi+Bijsh6M Ja2Talx67iBHp1h46MowJDT3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLYO8i7 r0SXKDlH3TVeifEfCaliMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrFcGNb5JZXkMBkvZAoSDtq1Hq2XXaXaaVvAhtEX1ZPR8X+qe3KSqa h/ILGbvTUb5fUdrm6Bqacku9vd35It4jKUFEAPOHaLnHSOTY6VmWvEVDnkVGCx87 xtRZcl5U6B8WWFNmlezjR+w2HYgNo9zktOvFk7Pfkm1LpCPnH0rDjiPN5ZKrrG9D NLgiHPfSzmCchl90junZVJoVH0J5bSvtfO5He5TkvderlWComdWOwJ2/JeGGKUWu EE8auAiZ/9IPo8gqwT2x/8WDijvl15ZoIve2XIovTLnw3REmkwLNYhkkxEPfOkTU zbDtGhuP5qvx9qLAcjjXl4DiaXp1Tx/6 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:20 2024 by rpki-client on console-ams.rpki-client.org