$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: aQstm9jNF9EkyksdDKMbqG5XIEI2jSOA0gYdvJF4qhs= Subject key identifier: F2:43:E3:EF:7E:52:BD:0B:C9:C3:9E:4F:0B:D9:82:85:C0:33:50:94 Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: 98 Signing time: Sat 23 Nov 2024 04:26:11 +0000 Manifest this update: Sat 23 Nov 2024 04:26:10 +0000 Manifest next update: Sat 30 Nov 2024 04:26:10 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: i9/QIpooplVYV52r+G/I6NFgzhW/H2myZh0mvOEW2Vw=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: vdjvb/3ZRx74eaLttznaQOdBXcHEfYOyZXwsd4KdeBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: Nov 23 04:26:10 2024 GMT Not After : Nov 30 04:26:10 2024 GMT Subject: CN=67415962-c7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:f3:4b:00:64:25:b1:c7:96:5e:53:80:8b: f8:dd:56:6d:9d:ef:c4:f3:0b:ce:83:bb:8f:13:8c: 2c:e9:fd:a0:e4:ae:4b:3f:70:1d:70:a5:37:33:4c: c6:77:6b:bc:21:e5:5c:27:ff:6c:6d:a7:1b:41:b8: be:54:8e:3e:c7:a2:fd:83:b2:af:3d:d1:45:51:03: 97:fc:c6:75:c3:4c:84:e4:a6:b7:c9:e6:3f:f1:95: f5:43:26:d1:c6:81:82:3a:6c:1f:ba:84:2c:ad:87: d9:fa:3e:62:b3:8d:2a:68:0a:98:70:56:b0:27:7a: 9f:47:ee:24:d4:1d:27:d9:31:30:3e:3a:a1:0a:61: 4d:b9:d1:f7:43:61:c8:02:ea:6b:99:b9:71:4b:23: 57:fb:8a:0e:23:5c:a6:36:94:f1:ae:cb:7a:72:98: bb:74:a9:cf:f0:81:bf:c5:d3:7f:14:7c:b2:3e:41: 8e:b3:c4:01:34:86:0b:44:34:95:fb:25:05:89:99: 19:b4:3a:61:24:5c:8c:66:2e:e2:28:43:cd:6b:da: d4:64:28:12:6b:bd:c7:4c:0f:0d:64:e4:79:b3:ab: fa:80:16:5c:a5:70:94:b7:f5:ff:81:17:1f:57:dc: 9a:3d:46:71:d6:70:c9:62:68:ba:57:24:df:aa:1a: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:43:E3:EF:7E:52:BD:0B:C9:C3:9E:4F:0B:D9:82:85:C0:33:50:94 X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:18:0a:8b:a8:96:3f:78:3b:d4:1a:46:6d:e2:1d:61:dd:c3: af:88:44:ff:c7:85:29:cd:b4:f0:db:a8:9c:21:bf:23:16:04: 42:6f:0e:66:ed:b0:49:71:b5:d8:8d:02:45:6d:cc:6b:ce:f3: 54:17:7e:af:01:61:54:38:dc:50:a3:50:e9:26:d7:0c:c8:79: 10:63:4c:20:89:7b:96:43:4b:82:8b:c1:f7:7c:75:05:81:8a: a2:61:e0:1c:26:0e:60:b7:29:ff:65:3c:1b:c6:74:38:5e:0a: a4:f0:39:91:6b:37:1d:cc:e3:d8:e8:73:7f:17:77:21:fa:dd: 9b:ae:0b:74:bd:30:db:7e:49:a3:74:a6:9e:65:55:79:3d:a7: 8b:dc:16:b9:6b:9b:9d:f4:26:9d:2e:c0:da:08:cb:3b:b7:6d: 57:7b:5a:73:70:55:c0:70:97:93:ca:b3:ba:b5:7b:65:c9:a2: 7e:cc:ad:5c:58:a7:9d:81:72:83:41:d2:4b:99:77:05:ce:c3: 95:81:57:23:ca:5f:4e:2c:8d:51:08:c3:b7:46:78:3c:dd:30: 40:96:76:b7:f7:36:f9:07:64:93:bc:6a:04:58:03:8c:cd:d4: bf:1e:a4:62:03:75:cf:5b:f0:f7:48:4b:da:12:d7:ab:13:d4: 01:74:81:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5 MDY0ODlDQzYwHhcNMjQxMTIzMDQyNjEwWhcNMjQxMTMwMDQyNjEwWjAYMRYwFAYD VQQDEw02NzQxNTk2Mi1jN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MnzSwBkJbHHll5TgIv43VZtne/E8wvOg7uPE4ws6f2g5K5LP3AdcKU3M0zG d2u8IeVcJ/9sbacbQbi+VI4+x6L9g7KvPdFFUQOX/MZ1w0yE5Ka3yeY/8ZX1QybR xoGCOmwfuoQsrYfZ+j5is40qaAqYcFawJ3qfR+4k1B0n2TEwPjqhCmFNudH3Q2HI AuprmblxSyNX+4oOI1ymNpTxrst6cpi7dKnP8IG/xdN/FHyyPkGOs8QBNIYLRDSV +yUFiZkZtDphJFyMZi7iKEPNa9rUZCgSa73HTA8NZOR5s6v6gBZcpXCUt/X/gRcf V9yaPUZx1nDJYmi6VyTfqhqjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJD4+9+ Ur0LycOeTwvZgoXAM1CUMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0 NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4 aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVGAqLqJY/eDvUGkZt4h1h3cOviET/x4UpzbTw26icIb8jFgRCbw5m 7bBJcbXYjQJFbcxrzvNUF36vAWFUONxQo1DpJtcMyHkQY0wgiXuWQ0uCi8H3fHUF gYqiYeAcJg5gtyn/ZTwbxnQ4Xgqk8DmRazcdzOPY6HN/F3ch+t2brgt0vTDbfkmj dKaeZVV5PaeL3Ba5a5ud9CadLsDaCMs7t21Xe1pzcFXAcJeTyrO6tXtlyaJ+zK1c WKedgXKDQdJLmXcFzsOVgVcjyl9OLI1RCMO3Rng83TBAlna39zb5B2STvGoEWAOM zdS/HqRiA3XPW/D3SEvaEterE9QBdIFc -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org