$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: Ot+jZncqk7Yi2XIcSfhHgFGYZix8qhUiu90by+qmv3g= Subject key identifier: 1C:11:45:4A:B5:DE:F7:8A:89:83:E7:D7:50:D4:5A:9E:21:B6:A8:F5 Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 013A Signing time: Sat 23 Nov 2024 02:41:18 +0000 Manifest this update: Sat 23 Nov 2024 02:41:18 +0000 Manifest next update: Sat 30 Nov 2024 02:41:18 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: NhP0Lbox+HA9z99r6TAU2r5XyijD7TWA6/S9htquLo4=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8u6b4a4SL7qo5uF/JaMZJ60i8FGnfKqe4W4pbpnaB3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Nov 23 02:41:18 2024 GMT Not After : Nov 30 02:41:18 2024 GMT Subject: CN=674140ce-444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:c2:a4:88:ef:c2:fd:3b:7c:04:cf:7b:9e: f2:4e:16:0a:3c:72:14:0d:f5:dd:b0:d6:dd:80:26: 34:a3:04:81:47:88:ad:24:14:3b:c4:d4:15:f0:1f: 40:ef:47:7f:bd:a4:2f:05:e3:fb:d3:e5:c3:be:45: 58:83:78:a0:2d:cc:1c:67:4d:9c:f5:4f:00:90:b5: 1d:84:b0:7d:e9:f0:d6:f7:fb:27:16:2b:24:86:cb: db:54:4e:50:be:c0:a3:00:18:fb:2b:7f:90:8f:ca: 8b:a1:3d:1d:c9:56:8d:bc:3f:9f:bf:92:be:8d:bb: 78:1b:c3:30:cf:29:e3:2e:29:30:36:7b:f5:3a:83: e5:d0:77:80:57:26:71:09:de:d5:c8:0f:4a:ef:d6: 61:53:63:97:7e:cf:48:3c:7b:6b:4a:b0:92:6a:c6: b2:21:d8:49:f7:82:32:62:ca:e6:da:5e:c9:ff:8e: 39:d3:28:2e:ce:9b:63:fb:da:20:99:af:39:d0:b5: 0c:f0:5f:01:cf:67:bb:15:3a:14:6d:0b:0e:08:62: a7:3a:42:ea:08:a8:ba:80:70:ee:96:bf:16:d1:f4: ca:b8:fa:cf:c6:ad:1c:00:73:f8:b1:ae:36:b3:2a: 25:a8:71:ef:af:b7:46:ac:f6:79:03:36:7a:6f:e9: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:11:45:4A:B5:DE:F7:8A:89:83:E7:D7:50:D4:5A:9E:21:B6:A8:F5 X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4a:d0:3c:f5:59:99:59:99:01:0a:35:e8:fd:b4:5b:3a:54: ca:a9:99:7f:a4:90:ad:d0:e8:11:a6:f7:88:21:ed:3c:71:0c: 43:20:e2:db:f6:10:ba:ca:0d:8d:d1:79:e0:a9:84:28:39:cc: 2d:f9:87:e0:bc:fb:a4:18:71:10:7d:96:55:b7:f4:59:ed:51: 2a:84:b7:44:3f:12:d4:18:17:3d:c1:0a:a0:73:5c:e0:09:61: d5:81:0f:61:b9:64:70:f2:9c:fe:ca:2e:24:18:e9:67:aa:21: 04:87:93:78:8b:1a:12:a9:2c:e2:77:29:7f:66:0a:23:a6:b6: 31:cc:45:6b:89:35:58:d8:30:56:62:ec:be:ab:bf:e8:71:98: 54:a7:67:31:cf:e2:86:99:1e:8e:31:92:55:44:47:32:fe:a5: 72:df:6a:95:c4:ce:f5:76:8e:d1:60:4e:6d:93:dc:69:9f:54: a0:94:a8:a4:22:51:3c:bf:0b:1a:56:df:9f:77:54:bc:4f:ed: 0b:09:75:03:f6:6d:72:e9:95:39:e7:d4:5d:42:0e:c0:42:09: 1b:5d:18:36:10:f2:74:fe:88:46:3c:24:c1:51:16:79:b5:56: fc:38:02:72:10:22:78:88:30:24:72:6d:cb:72:56:6b:ab:11: 0a:4e:6c:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjQxMTIzMDI0MTE4WhcNMjQxMTMwMDI0MTE4WjAYMRYwFAYD VQQDEw02NzQxNDBjZS00NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cTCpIjvwv07fATPe57yThYKPHIUDfXdsNbdgCY0owSBR4itJBQ7xNQV8B9A 70d/vaQvBeP70+XDvkVYg3igLcwcZ02c9U8AkLUdhLB96fDW9/snFiskhsvbVE5Q vsCjABj7K3+Qj8qLoT0dyVaNvD+fv5K+jbt4G8MwzynjLikwNnv1OoPl0HeAVyZx Cd7VyA9K79ZhU2OXfs9IPHtrSrCSasayIdhJ94IyYsrm2l7J/4450yguzptj+9og ma850LUM8F8Bz2e7FToUbQsOCGKnOkLqCKi6gHDulr8W0fTKuPrPxq0cAHP4sa42 syolqHHvr7dGrPZ5AzZ6b+nAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwRRUq1 3veKiYPn11DUWp4htqj1MB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVStA89VmZWZkBCjXo/bRbOlTKqZl/pJCt0OgRpveIIe08cQxDIOLb 9hC6yg2N0XngqYQoOcwt+YfgvPukGHEQfZZVt/RZ7VEqhLdEPxLUGBc9wQqgc1zg CWHVgQ9huWRw8pz+yi4kGOlnqiEEh5N4ixoSqSzidyl/ZgojprYxzEVriTVY2DBW Yuy+q7/ocZhUp2cxz+KGmR6OMZJVREcy/qVy32qVxM71do7RYE5tk9xpn1SglKik IlE8vwsaVt+fd1S8T+0LCXUD9m1y6ZU559RdQg7AQgkbXRg2EPJ0/ohGPCTBURZ5 tVb8OAJyECJ4iDAkcm3LclZrqxEKTmyK -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org