$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: 9Sl3wAnrNRMclnb+9uKgz9bFrC5elMlV184DIhkvrFs= Subject key identifier: 9A:8F:56:6B:78:1C:32:23:02:B3:8C:E8:D1:4E:60:C8:61:D5:BB:56 Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: A1 Signing time: Sat 23 Nov 2024 04:18:36 +0000 Manifest this update: Sat 23 Nov 2024 04:18:35 +0000 Manifest next update: Sat 30 Nov 2024 04:18:35 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: F2pmczFOtervTBFr/AQ89950lnj4zEx+hxyqZe1hfGI=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: CRo8pDS3QFFaAXTL+9qZM9K187fka63VWkrPnljCSFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: Nov 23 04:18:35 2024 GMT Not After : Nov 30 04:18:35 2024 GMT Subject: CN=6741579b-11b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:f0:62:ad:17:d4:3c:93:89:c7:13:a3:81: 71:f0:9f:e9:4a:d3:fb:22:af:23:0b:62:57:fc:76: 54:c7:1c:7a:3a:12:2c:57:aa:d1:ab:44:62:fb:1d: 0e:f0:25:00:b7:4a:e8:01:98:20:0e:17:3f:a7:22: f5:48:6e:92:83:13:1d:00:7b:06:4e:29:43:d3:47: c1:b1:05:ed:d0:0f:31:d1:43:c4:f8:47:8d:2c:a1: e5:7e:79:3a:af:28:72:b3:6d:e7:81:53:7d:d7:61: 93:66:72:18:86:ed:e5:21:b4:55:da:2e:ea:29:3c: 0e:3a:7d:17:89:59:da:99:74:be:53:bd:05:6a:0c: 41:48:32:5c:70:68:6c:11:60:d8:30:bd:27:bf:f5: fb:07:4a:b1:2c:22:5b:5c:be:4e:f4:0a:6f:01:d8: 2d:31:92:5b:e3:ba:5a:17:80:ac:4d:7e:a0:66:21: 0f:35:ba:75:83:6d:10:3f:eb:5e:15:35:12:12:7d: 54:a1:5c:33:37:a6:32:d4:3e:bd:62:e0:25:69:da: bf:e4:24:75:d2:14:78:75:f6:bb:56:c5:98:f1:b0: fb:6d:c4:42:10:77:4d:fa:a7:ec:1c:c7:1f:92:38: 48:ec:88:b8:17:df:23:82:b4:44:b6:a4:a6:e6:22: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8F:56:6B:78:1C:32:23:02:B3:8C:E8:D1:4E:60:C8:61:D5:BB:56 X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8f:14:72:94:a3:6c:b9:a3:f9:19:2f:b4:49:59:f9:8f:09: 00:88:0d:2a:7b:59:97:68:1c:ee:ba:8a:e9:b0:fe:34:3a:1d: 34:20:f8:42:d8:2b:28:49:a6:ff:5d:c4:e6:f5:73:f1:42:2b: 17:f5:57:b9:d6:60:d6:e1:5f:85:4a:86:9c:c6:f0:05:ea:8d: 98:3f:f6:15:81:c5:81:de:e0:e2:42:fe:5b:e5:ab:11:09:31: e4:c3:b0:a9:b6:f8:f1:be:3b:38:17:1f:f7:be:1f:2b:11:de: fb:14:29:bc:36:78:f3:e4:15:f5:ad:a7:3f:77:78:6d:a3:b7: 0e:43:f2:a2:11:b1:5f:f8:3d:54:56:e9:ec:f7:99:61:57:6d: 73:65:f5:fb:f3:8c:ad:c3:c2:b4:ec:cc:69:7e:52:ed:e2:6f: 0a:c4:c1:8a:1b:d6:85:69:f1:89:c5:6f:b7:52:6e:94:2d:d8: be:af:be:9b:9d:a2:32:aa:9d:37:53:30:7c:69:68:95:2f:4c: 20:30:b9:9b:ac:b2:74:dd:0a:5a:95:3a:34:1d:d8:1e:a8:54: 71:11:05:74:5e:8b:63:0d:46:a9:56:8c:a7:6f:90:66:11:a3: 45:fd:9d:37:9f:fb:d1:4d:db:1b:0c:cd:2b:80:37:76:ea:35: 91:4b:63:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjQxMTIzMDQxODM1WhcNMjQxMTMwMDQxODM1WjAYMRYwFAYD VQQDEw02NzQxNTc5Yi0xMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJfwYq0X1DyTiccTo4Fx8J/pStP7Iq8jC2JX/HZUxxx6OhIsV6rRq0Ri+x0O 8CUAt0roAZggDhc/pyL1SG6SgxMdAHsGTilD00fBsQXt0A8x0UPE+EeNLKHlfnk6 ryhys23ngVN912GTZnIYhu3lIbRV2i7qKTwOOn0XiVnamXS+U70FagxBSDJccGhs EWDYML0nv/X7B0qxLCJbXL5O9ApvAdgtMZJb47paF4CsTX6gZiEPNbp1g20QP+te FTUSEn1UoVwzN6Yy1D69YuAladq/5CR10hR4dfa7VsWY8bD7bcRCEHdN+qfsHMcf kjhI7Ii4F98jgrREtqSm5iLjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqPVmt4 HDIjArOM6NFOYMhh1btWMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhjxRylKNsuaP5GS+0SVn5jwkAiA0qe1mXaBzuuorpsP40Oh00IPhC 2CsoSab/XcTm9XPxQisX9Ve51mDW4V+FSoacxvAF6o2YP/YVgcWB3uDiQv5b5asR CTHkw7Cptvjxvjs4Fx/3vh8rEd77FCm8Nnjz5BX1rac/d3hto7cOQ/KiEbFf+D1U Vuns95lhV21zZfX784ytw8K07MxpflLt4m8KxMGKG9aFafGJxW+3Um6ULdi+r76b naIyqp03UzB8aWiVL0wgMLmbrLJ03QpalTo0HdgeqFRxEQV0XotjDUapVoynb5Bm EaNF/Z03n/vRTdsbDM0rgDd26jWRS2NV -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org