$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft File: wwhUyZUfLYZr_6nE1T05k3nYD6w.mft (raw, json) Hash identifier: LTN6ro0Ap6idssMatZhLbLo5lcYwcdIVgVkWR4UfQfQ= Subject key identifier: A5:DC:C4:FF:96:40:A9:5D:37:D9:F0:8D:FB:59:D2:DC:2A:AF:39:A1 Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC Certificate issuer: /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft Manifest number: 0290 Signing time: Sat 23 Nov 2024 01:08:39 +0000 Manifest this update: Sat 23 Nov 2024 01:08:39 +0000 Manifest next update: Sat 30 Nov 2024 01:08:39 +0000 Files and hashes: 1: wwhUyZUfLYZr_6nE1T05k3nYD6w.crl (hash: M+p9gNBMb4uDNUVmY9Ywe9Xxwi6C0HEj/0Bak9fH0ts=) 2: 2E5E44C40D7311ED90DA6411C4F9AE02.roa (hash: DAE4nA/YSJ+X4ohFS4FgtgN36rqtaSq7+XsAoE9m8Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC Validity Not Before: Nov 23 01:08:39 2024 GMT Not After : Nov 30 01:08:39 2024 GMT Subject: CN=67412b17-26b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:a0:42:68:c4:0e:42:aa:2b:fa:37:3e:ae: 33:c5:25:7a:06:59:10:f1:0a:34:d0:31:2e:3a:50: 8a:28:28:ac:d0:e4:3f:b3:c1:22:e4:6f:c5:13:b3: 36:39:29:76:bd:41:4f:4d:7b:02:60:72:13:85:52: 73:6f:28:61:9a:7f:a9:6a:c7:e8:ad:6a:2c:44:a3: f0:57:dd:94:a7:ca:c9:7e:28:65:d9:94:e9:d6:3e: 25:60:d3:72:02:18:e9:5c:08:8b:53:1b:c7:65:60: 66:fe:44:7a:2d:30:a2:36:20:b4:24:37:0f:21:4e: b9:65:7d:bc:63:02:4b:54:0b:37:63:a2:ba:ce:39: ea:fb:b7:a2:5a:ae:99:f7:31:a5:c6:0f:4b:86:88: fc:12:26:08:a9:f1:e6:84:12:f8:de:c6:eb:57:a5: 47:0a:16:43:75:39:d1:df:e2:9e:74:25:09:63:91: 12:59:e7:91:e2:b4:89:a7:17:df:b5:48:c6:a4:83: c5:9b:6c:dd:8b:26:ff:a7:d0:b9:3e:36:4c:2e:dc: f4:cd:e1:18:fb:b0:4a:d2:3d:27:58:f6:8b:80:38: 0f:45:9e:02:50:ad:5d:3a:65:fb:c4:55:ac:d7:87: 53:b9:59:df:01:fc:4e:3b:ce:b6:3b:15:62:44:9b: 3e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DC:C4:FF:96:40:A9:5D:37:D9:F0:8D:FB:59:D2:DC:2A:AF:39:A1 X509v3 Authority Key Identifier: keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:de:06:e0:30:db:bc:f4:ba:72:61:ed:d4:ca:88:0d:39:bd: 93:fe:7e:8c:33:20:e5:c5:c9:21:f4:b4:82:89:b4:7e:14:a8: 83:e9:e2:62:71:0e:b5:d4:1c:8f:f9:27:29:c2:f6:ca:6d:87: 77:66:14:e7:b4:05:69:66:d9:f6:52:e7:84:5b:f0:ca:25:63: 5f:b5:b5:fc:66:b5:ac:8f:51:ca:c8:53:aa:0b:28:e0:39:c8: 9e:b4:25:1f:04:5f:21:1b:fa:98:89:57:c0:74:c4:9e:69:12: 6a:09:9f:ef:97:b7:91:7f:97:db:e9:f1:84:48:08:ea:bd:f6: e3:a8:17:17:c9:e5:1d:10:09:23:ad:ec:e4:76:ad:56:c9:52: e9:5a:2a:47:a8:ad:16:cc:7a:7b:8f:8f:48:9f:4d:84:9f:da: 79:e0:5c:de:a8:3a:41:31:af:de:5d:1a:e1:1c:4f:3f:6a:fc: 5e:1b:31:80:72:58:e0:c0:c5:60:f6:a9:81:ea:8d:d4:9f:ba: 8a:b0:4a:43:bf:6d:9f:e8:71:c2:1f:15:1e:f4:a7:c5:e0:78: 1a:ce:ea:99:d6:20:67:15:1f:5b:59:e4:4b:93:01:6f:34:0b: 83:d6:16:07:b5:98:b5:cd:a5:b1:a4:79:ed:41:82:07:62:04: b7:94:d3:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg5QTIxMTAvBgNVBAUTKEMzMDg1NEM5OTUxRjJEODY2QkZGQTlDNEQ1M0QzOTkz NzlEODBGQUMwHhcNMjQxMTIzMDEwODM5WhcNMjQxMTMwMDEwODM5WjAYMRYwFAYD VQQDEw02NzQxMmIxNy0yNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl+gQmjEDkKqK/o3Pq4zxSV6BlkQ8Qo00DEuOlCKKCis0OQ/s8Ei5G/FE7M2 OSl2vUFPTXsCYHIThVJzbyhhmn+pasforWosRKPwV92Up8rJfihl2ZTp1j4lYNNy AhjpXAiLUxvHZWBm/kR6LTCiNiC0JDcPIU65ZX28YwJLVAs3Y6K6zjnq+7eiWq6Z 9zGlxg9Lhoj8EiYIqfHmhBL43sbrV6VHChZDdTnR3+KedCUJY5ESWeeR4rSJpxff tUjGpIPFm2zdiyb/p9C5PjZMLtz0zeEY+7BK0j0nWPaLgDgPRZ4CUK1dOmX7xFWs 14dTuVnfAfxOO862OxViRJs+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXcxP+W QKldN9nwjftZ0twqrzmhMB8GA1UdIwQYMBaAFMMIVMmVHy2Ga/+pxNU9OZN52A+s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODlBMi9CQzYyQzk3MERG NTYxMUVDOEM2RjE2MEZDNEY5QUUwMi93d2hVeVpVZkxZWnJfNm5FMVQwNWszbllE NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d3aFV5WlVmTFlacl82bkUxVDA1azNuWUQ2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODlBMi9CQzYyQzk3MERGNTYxMUVDOEM2RjE2MEZDNEY5QUUwMi93d2hVeVpVZkxZ WnJfNm5FMVQwNWszbllENncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3gbgMNu89LpyYe3UyogNOb2T/n6MMyDlxckh9LSCibR+FKiD6eJi cQ611ByP+ScpwvbKbYd3ZhTntAVpZtn2UueEW/DKJWNftbX8ZrWsj1HKyFOqCyjg OcietCUfBF8hG/qYiVfAdMSeaRJqCZ/vl7eRf5fb6fGESAjqvfbjqBcXyeUdEAkj rezkdq1WyVLpWipHqK0WzHp7j49In02En9p54FzeqDpBMa/eXRrhHE8/avxeGzGA cljgwMVg9qmB6o3Un7qKsEpDv22f6HHCHxUe9KfF4HgazuqZ1iBnFR9bWeRLkwFv NAuD1hYHtZi1zaWxpHntQYIHYgS3lNMy -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org