$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: 4J8bab9K2oQL4dMBc67fpPzCnT7GBQVIJh9ChYsDTrA= Subject key identifier: D5:29:1C:64:E3:96:FF:FC:FC:34:D3:9D:78:4E:B8:78:E1:C8:0B:55 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: B3 Signing time: Sat 23 Nov 2024 04:07:40 +0000 Manifest this update: Sat 23 Nov 2024 04:07:39 +0000 Manifest next update: Sat 30 Nov 2024 04:07:39 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: IWHjaFdqBwZKaz8xA2Vdmt28RP1lv6mOL2EtGCjdob0=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: izatJflc937blTSbiJsZOIjjq1ChWsCeAYSdNwpZor0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Nov 23 04:07:39 2024 GMT Not After : Nov 30 04:07:39 2024 GMT Subject: CN=6741550b-5a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:40:6b:bd:31:78:6d:f7:e7:40:e1:f3:02: 25:a0:e7:88:a3:c3:2d:cb:39:52:cc:a9:49:6d:f5: 8e:6b:67:04:37:dd:48:9b:b8:27:42:b5:82:46:ed: f9:13:14:b9:df:d7:5a:39:41:d5:a9:e5:29:c7:91: 0d:c0:1f:2b:43:f0:8c:27:c8:70:a1:96:e1:dc:fd: 11:02:f5:b3:5e:8f:8d:fe:db:95:6b:dd:ce:3e:7f: e5:74:33:2c:47:9e:17:bb:13:79:f3:5a:b8:42:83: fb:1c:72:72:b9:d6:c2:ae:02:2c:2d:16:ab:be:c1: 99:5a:9f:27:eb:d1:71:57:45:60:20:58:ca:e7:70: cf:9e:7f:8a:d2:a1:fa:37:d4:2e:ac:f0:4b:11:97: 12:57:94:04:6e:09:03:85:b9:f7:fe:78:51:9f:16: d2:b4:2c:76:0b:9b:25:48:c3:a7:fd:dd:40:0c:5f: b8:3f:a0:1e:64:bc:d3:f3:cd:a2:f3:2d:5d:ad:93: d1:44:e1:83:8c:f2:4d:a0:6a:fe:11:a0:57:e1:57: 6c:af:9b:da:82:6e:ba:d0:25:d3:dd:c0:d6:2f:dc: 3f:80:cc:4c:13:81:7e:90:b7:4f:ad:f4:98:fa:cc: de:0a:ee:73:96:42:00:d3:fa:47:45:2f:52:db:f4: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:29:1C:64:E3:96:FF:FC:FC:34:D3:9D:78:4E:B8:78:E1:C8:0B:55 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8a:d6:a6:ee:4f:92:12:d9:61:81:53:d8:8b:3b:bb:6b:72: 76:83:56:97:06:5c:46:41:9a:56:24:13:12:5d:84:0d:77:d1: 37:a3:07:20:00:3f:b4:d7:eb:64:c1:ba:c2:49:21:0d:1c:fe: b9:32:96:40:50:4d:b7:3e:f2:84:0a:c2:70:12:48:47:f6:82: 29:c1:b8:a9:db:67:72:6d:30:6b:59:1c:68:4f:65:e0:d9:d1: c1:24:18:6a:62:51:80:4c:7c:a4:5d:41:4e:93:d5:bc:25:e2: 15:c2:0a:1f:7b:20:76:5e:44:22:ed:b1:82:37:8c:93:09:cf: 61:20:5c:3e:a9:dc:9e:41:12:6f:dd:dd:65:77:6c:c5:fa:a1: d0:a7:9c:ce:58:76:8c:08:8e:19:8a:28:a6:08:6f:9f:38:0f: cb:8a:e6:f7:fe:5e:35:39:9b:12:78:72:15:49:ad:37:5f:d2: ed:8f:4d:50:04:26:a7:ec:37:90:c7:61:04:d4:7c:3a:cd:7e: 49:27:82:f3:7d:8c:98:34:5d:db:9f:42:42:67:1a:7b:30:c7: 0c:9f:7b:0a:ef:3b:3f:a3:37:77:f1:7c:c7:b2:b2:36:56:f4: f1:ae:1b:2c:8c:dc:91:13:ea:a4:95:c1:f2:8e:76:61:16:33: 16:37:aa:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjQxMTIzMDQwNzM5WhcNMjQxMTMwMDQwNzM5WjAYMRYwFAYD VQQDEw02NzQxNTUwYi01YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3apAa70xeG3350Dh8wIloOeIo8MtyzlSzKlJbfWOa2cEN91Im7gnQrWCRu35 ExS539daOUHVqeUpx5ENwB8rQ/CMJ8hwoZbh3P0RAvWzXo+N/tuVa93OPn/ldDMs R54XuxN581q4QoP7HHJyudbCrgIsLRarvsGZWp8n69FxV0VgIFjK53DPnn+K0qH6 N9QurPBLEZcSV5QEbgkDhbn3/nhRnxbStCx2C5slSMOn/d1ADF+4P6AeZLzT882i 8y1drZPRROGDjPJNoGr+EaBX4Vdsr5vagm660CXT3cDWL9w/gMxME4F+kLdPrfSY +szeCu5zlkIA0/pHRS9S2/SxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUpHGTj lv/8/DTTnXhOuHjhyAtVMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkitam7k+SEtlhgVPYizu7a3J2g1aXBlxGQZpWJBMSXYQNd9E3owcg AD+01+tkwbrCSSENHP65MpZAUE23PvKECsJwEkhH9oIpwbip22dybTBrWRxoT2Xg 2dHBJBhqYlGATHykXUFOk9W8JeIVwgofeyB2XkQi7bGCN4yTCc9hIFw+qdyeQRJv 3d1ld2zF+qHQp5zOWHaMCI4ZiiimCG+fOA/Liub3/l41OZsSeHIVSa03X9Ltj01Q BCan7DeQx2EE1Hw6zX5JJ4LzfYyYNF3bn0JCZxp7MMcMn3sK7zs/ozd38XzHsrI2 VvTxrhssjNyRE+qklcHyjnZhFjMWN6rd -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org