$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft File: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft (raw, json) Hash identifier: TyqjvKJvI8bqVf9z5oH7KFJngjrmIELS7nchFcNVxik= Subject key identifier: 6A:53:08:04:19:E6:B6:5D:89:EA:DF:56:55:8F:1F:45:AB:A3:51:09 Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Certificate serial: 0FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft Manifest number: 0FA5 Signing time: Wed 20 Nov 2024 17:28:31 +0000 Manifest this update: Wed 20 Nov 2024 17:28:31 +0000 Manifest next update: Wed 27 Nov 2024 17:28:31 +0000 Files and hashes: 1: Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl (hash: SswZUZ1Ea8G/rUt5zo79ZRnepAi0Uj/Gj3zBfRWkTvA=) 2: 727F33429FAD11EAAD1A6744C4F9AE02.roa (hash: icRTAdMqAhD6EOBPnGJKJMdO+YjE0sqjrzfiUj6yyo4=) 3: A8DA1B1E9EE511EA890A7220C4F9AE02.roa (hash: n0I3mFWn4zx5HdP+/EVuE3GsQLubN+IQGazgufG3pgY=) 4: 9D164714168511EAB282BB44C4F9AE02.roa (hash: +Z5eq5GUeFS2MmmulFa88HJNuMpvnMOg5gvwg5dtvrw=) 5: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (hash: mC8alSlqRvNrS3mIxvzPOKUF8N3H1asLuijq6BtCmLc=) 6: ED4C74EC5B2911EDAC608856C4F9AE02.roa (hash: xo3YxEyFwniZbN8RkrtlYPP0V0NbKQQ/nc/1FJQGmBc=) 7: B7D67B4ECC3011EA9B54C679C4F9AE02.roa (hash: OpNEmGX2ba7z/P9BfT+t4IkpMepIYvoT+puV7LT+04c=) 8: CC320712ACE011EAB535D034C4F9AE02.roa (hash: JYY7Jlcu8MvbqrTObq1zVkDo+73nlBcySqwLIuU2yn4=) 9: F47561669C3B11EABC59DA11C4F9AE02.roa (hash: 4YobdsxDwRIrk/z/bKC20Bc3suxWt2VmXdAQxoroaO4=) 10: F34FF6B69C3B11EABC59DA11C4F9AE02.roa (hash: MFk1nSICKweDEyitdcyRRusZH8cL5CRVKqUjAaaDNgc=) 11: 9DE197A2168511EAB282BB44C4F9AE02.roa (hash: 3WEuTkpxymDOhPpNtxE7OCAK0vRrg/LDsaux5yYOx7s=) 12: 884A03F4447111EC83674068C4F9AE02.roa (hash: BEHDTAZA1ATzsmitace9+w4q5zuGmH+c62oba+E6Pp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4085 (0xff5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Validity Not Before: Nov 20 17:28:31 2024 GMT Not After : Nov 27 17:28:31 2024 GMT Subject: CN=673e1c3f-4aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f7:d1:e5:ee:f9:a2:ae:62:21:34:a2:b4:6c: 9b:74:2a:81:71:e7:28:46:ed:42:0f:87:da:de:0e: 3b:d1:ac:a6:2d:4b:1d:85:ae:f6:c0:dd:ee:28:9d: f5:5c:a1:60:11:f0:c5:e2:e2:fe:8c:96:b1:3b:ae: 85:e6:2c:4e:4b:4d:1f:35:28:b8:cb:32:24:f8:50: 50:60:d4:a6:58:ef:6e:75:4a:d5:4c:a1:08:c1:38: c7:4b:27:64:77:a8:d6:04:c4:b3:bf:ff:bd:ec:5a: e0:ae:b2:3a:d0:ca:e9:5e:29:db:99:7f:2a:7a:22: 14:e7:39:54:83:b4:a7:de:e4:d8:9b:f9:73:16:b9: 62:fe:bf:c1:f7:08:91:0c:a8:3a:ce:e4:eb:83:3d: a2:69:8c:16:59:4f:3b:92:34:45:30:da:5c:54:77: 38:28:a8:34:3f:9f:02:8e:1e:63:d5:c4:fa:d8:8a: ad:28:64:48:40:38:16:17:cb:07:44:41:fb:26:0c: 8f:00:bd:26:4c:2f:9c:9f:b7:23:6d:63:a1:58:eb: 23:c6:b3:59:98:91:e2:62:80:f6:66:2d:a8:87:70: 29:5d:7e:2b:e7:e8:6f:1a:9a:5b:91:8c:40:9b:8a: d8:1b:ec:ab:94:b2:81:2e:2e:b9:06:9f:86:00:16: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:53:08:04:19:E6:B6:5D:89:EA:DF:56:55:8F:1F:45:AB:A3:51:09 X509v3 Authority Key Identifier: keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ec:5b:f4:52:9a:21:bc:e9:5b:36:57:47:fe:19:20:41:4b: 88:02:1c:7d:ed:36:5d:e9:1a:c0:f1:69:23:72:71:31:90:4a: b1:9c:c0:c2:32:4b:22:80:40:24:2a:73:5f:eb:c4:ab:00:99: e3:be:a2:0c:c4:ba:15:e9:e3:b3:c0:ee:5c:37:64:19:ef:a8: 37:58:4d:05:d1:6d:10:0c:f8:cb:03:79:60:7e:1a:23:3e:37: 2f:c4:a5:24:d5:34:82:7b:5c:7f:b7:e0:07:ed:b8:13:7e:84: 86:b0:c4:3f:00:d7:2b:2f:78:7d:76:30:24:72:a7:bd:ab:f2: 97:0c:d1:91:25:3f:f3:98:4b:d7:a2:da:74:e0:04:c8:c1:43: 26:df:ff:64:28:37:6d:5d:f8:f2:d5:97:5d:cf:a2:82:a8:be: b1:b9:5f:7a:79:09:4d:6e:de:34:57:67:b0:fa:9a:f0:1e:df: 58:62:d7:43:d3:e8:79:d0:68:84:17:69:bb:44:ee:41:12:7a: a4:ef:bc:81:e6:93:6d:6a:d3:51:ef:10:64:9d:32:54:d1:eb: 34:2a:c8:41:3e:65:b0:61:f7:1e:91:74:e4:83:21:5c:00:66: 68:66:2b:1c:67:f3:ec:4e:45:0b:14:a3:c1:42:82:70:c1:87: dd:5d:28:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0 NERGRjhCRkYwHhcNMjQxMTIwMTcyODMxWhcNMjQxMTI3MTcyODMxWjAYMRYwFAYD VQQDEw02NzNlMWMzZi00YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vfR5e75oq5iITSitGybdCqBcecoRu1CD4fa3g470aymLUsdha72wN3uKJ31 XKFgEfDF4uL+jJaxO66F5ixOS00fNSi4yzIk+FBQYNSmWO9udUrVTKEIwTjHSydk d6jWBMSzv/+97FrgrrI60MrpXinbmX8qeiIU5zlUg7Sn3uTYm/lzFrli/r/B9wiR DKg6zuTrgz2iaYwWWU87kjRFMNpcVHc4KKg0P58Cjh5j1cT62IqtKGRIQDgWF8sH REH7JgyPAL0mTC+cn7cjbWOhWOsjxrNZmJHiYoD2Zi2oh3ApXX4r5+hvGppbkYxA m4rYG+yrlLKBLi65Bp+GABaW2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpTCAQZ 5rZdierfVlWPH0Wro1EJMB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Q5Qy80NTU5NDJENjUwQjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQ R0RpdTQtYk40SFZFM19pXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ7Fv0UpohvOlbNldH/hkgQUuIAhx97TZd6RrA8WkjcnExkEqxnMDC MksigEAkKnNf68SrAJnjvqIMxLoV6eOzwO5cN2QZ76g3WE0F0W0QDPjLA3lgfhoj PjcvxKUk1TSCe1x/t+AH7bgTfoSGsMQ/ANcrL3h9djAkcqe9q/KXDNGRJT/zmEvX otp04ATIwUMm3/9kKDdtXfjy1Zddz6KCqL6xuV96eQlNbt40V2ew+prwHt9YYtdD 0+h50GiEF2m7RO5BEnqk77yB5pNtatNR7xBknTJU0es0KshBPmWwYfcekXTkgyFc AGZoZiscZ/PsTkULFKPBQoJwwYfdXSig -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:47 2024 by rpki-client on console-fra.rpki-client.org