$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: WvRrrPwni+hXe3GnblYowIF9fM2vbX1WI6O6E/QYWzg= Subject key identifier: AF:2C:E6:BB:E9:7D:AB:6B:B3:D3:18:58:10:18:48:A2:F5:55:21:59 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: 4D Signing time: Thu 21 Nov 2024 05:20:51 +0000 Manifest this update: Thu 21 Nov 2024 05:20:51 +0000 Manifest next update: Thu 28 Nov 2024 05:20:51 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: nRZTzu9BF17m4D/ao43zyGt8tBt4Yya5ETmLuBaCc1w=) 2: 1F04A04C346611EF90CE2150C4F9AE02.roa (hash: zif08OzaGPPedGPIwrQhRPE8pOs4ZsH49eqd+XDcfaU=) 3: F76C6448346511EF80C6F34FC4F9AE02.roa (hash: Don0S4nk9nm0mmjHLO0K6d0HSv8chlDSOmW/UglwVZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Nov 21 05:20:51 2024 GMT Not After : Nov 28 05:20:51 2024 GMT Subject: CN=673ec333-2a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b0:ef:ea:0c:e9:81:9f:12:e1:00:bf:ad:2c: 2c:4f:af:d5:eb:ff:ce:10:bd:40:bc:da:16:ad:95: 71:e3:50:88:5f:31:b1:7f:82:0f:c8:f3:f5:af:f8: de:2a:c6:70:28:5a:19:c4:5c:d6:c0:c6:68:54:eb: 0c:51:1a:3b:4c:ee:8d:c0:1b:51:60:76:ae:2b:fc: 1f:2e:60:6e:59:28:0e:fc:bc:04:bf:35:02:3c:55: 53:0f:9a:1d:5b:e8:3a:03:18:82:a5:e8:80:de:d8: c9:0f:13:2a:b4:a7:8d:ed:e9:71:a2:de:b1:bb:31: 25:38:fc:7b:08:62:47:2d:f2:f8:01:10:66:ba:68: 60:c3:c6:1d:fb:7d:d7:67:2d:aa:ee:48:7b:2f:e8: 5f:f7:13:c0:b8:49:70:b6:38:e8:c1:f7:c6:b3:1e: 14:a0:1a:82:ce:9a:76:80:72:90:52:3b:8d:fa:c5: 5f:c6:d1:3a:4a:4a:ee:4b:57:33:ec:d8:6f:1a:4e: 08:4f:89:7d:fc:08:44:29:05:8d:66:b9:ff:ba:d0: 98:d6:75:06:f9:ca:8c:da:57:86:c3:af:a5:ef:f6: 11:0c:56:a9:2f:e5:66:54:b8:b1:3a:83:64:ae:ce: 2c:d2:be:7e:0c:2d:33:8f:37:6f:e9:c9:1e:8d:8e: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:E6:BB:E9:7D:AB:6B:B3:D3:18:58:10:18:48:A2:F5:55:21:59 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:19:53:33:27:21:68:6c:0d:80:d5:4e:f9:0e:0d:20:e0:8c: 59:3f:6f:cb:9c:dd:c7:02:54:37:da:66:95:02:e9:c4:61:5b: 2a:99:01:ad:46:29:27:82:e1:13:c7:ff:86:fc:f4:eb:ae:0c: 26:21:e8:bf:be:9f:18:ee:a5:bc:70:92:91:8d:a8:7b:fd:9d: ef:19:82:02:1b:5d:d2:f8:13:7b:e5:21:e4:5c:ee:05:25:18: 4e:15:2e:75:dc:db:65:02:f8:fd:6b:15:0a:0f:a5:4c:df:0f: a2:60:51:a7:80:d4:33:ab:29:eb:1a:c7:8b:57:86:67:03:61: cb:42:c2:6d:e5:3f:26:4d:46:0b:78:3e:36:90:0c:4c:90:bc: 9c:67:05:f2:31:95:ba:e2:ee:7f:38:0e:9b:75:e1:d5:8d:ad: d5:06:c7:eb:5e:73:c0:96:dd:65:2e:5a:b9:e7:a1:aa:eb:9c: 99:b9:0e:7b:1f:ba:80:52:c4:18:7e:85:69:10:7b:71:3e:6f: b7:04:fd:e3:df:ed:ce:03:da:df:8f:79:7c:fd:04:2f:4e:bf: 6a:f7:50:2f:03:39:6e:04:05:c8:99:b7:e2:92:64:64:09:22: ab:0c:a0:37:27:ae:a8:75:70:28:97:32:5c:10:28:f8:f2:be: 1c:91:87:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NFMzExMC8GA1UEBRMoQzI2RjQ2RkQ5OTUyQjNBRjNBN0Q3MTVERTFCRjNBNjFF MjVDNzk4QTAeFw0yNDExMjEwNTIwNTFaFw0yNDExMjgwNTIwNTFaMBgxFjAUBgNV BAMTDTY3M2VjMzMzLTJhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmsO/qDOmBnxLhAL+tLCxPr9Xr/84QvUC82hatlXHjUIhfMbF/gg/I8/Wv+N4q xnAoWhnEXNbAxmhU6wxRGjtM7o3AG1Fgdq4r/B8uYG5ZKA78vAS/NQI8VVMPmh1b 6DoDGIKl6IDe2MkPEyq0p43t6XGi3rG7MSU4/HsIYkct8vgBEGa6aGDDxh37fddn LaruSHsv6F/3E8C4SXC2OOjB98azHhSgGoLOmnaAcpBSO436xV/G0TpKSu5LVzPs 2G8aTghPiX38CEQpBY1muf+60JjWdQb5yozaV4bDr6Xv9hEMVqkv5WZUuLE6g2Su zizSvn4MLTOPN2/pyR6NjtWNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUryzmu+l9 q2uz0xhYEBhIovVVIVkwHwYDVR0jBBgwFoAUwm9G/ZlSs686fXFd4b86YeJceYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0UzL0E5MENBRkM0MzQ2 NTExRUZCOUMwNzY0RkM0RjlBRTAyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd205R19abFNzNjg2ZlhGZDRiODZZZUpjZVlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0UzL0E5MENBRkM0MzQ2NTExRUZCOUMwNzY0RkM0RjlBRTAyL3dtOUdfWmxTczY4 NmZYRmQ0Yjg2WWVKY2VZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYZUzMnIWhsDYDVTvkODSDgjFk/b8uc3ccCVDfaZpUC6cRhWyqZAa1G KSeC4RPH/4b89OuuDCYh6L++nxjupbxwkpGNqHv9ne8ZggIbXdL4E3vlIeRc7gUl GE4VLnXc22UC+P1rFQoPpUzfD6JgUaeA1DOrKesax4tXhmcDYctCwm3lPyZNRgt4 PjaQDEyQvJxnBfIxlbri7n84Dpt14dWNrdUGx+tec8CW3WUuWrnnoarrnJm5Dnsf uoBSxBh+hWkQe3E+b7cE/ePf7c4D2t+PeXz9BC9Ov2r3UC8DOW4EBciZt+KSZGQJ IqsMoDcnrqh1cCiXMlwQKPjyvhyRh4w= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:00 2024 by rpki-client on console-ams.rpki-client.org