$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: xwFqi5HYTzavzY8XoNNPcMcl5J0p/D6wGYsU2WPFE+A= Subject key identifier: 55:B5:56:97:3F:ED:AD:7C:66:3A:FD:0B:BA:17:70:FC:20:FC:06:7B Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0AE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0AB5 Signing time: Wed 20 Nov 2024 19:17:56 +0000 Manifest this update: Wed 20 Nov 2024 19:17:55 +0000 Manifest next update: Wed 27 Nov 2024 19:17:55 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: bvOjWmeOICU/Fyjh29vrLldCgLnwE7j83ji4409QYas=) 2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=) 3: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: whniw/rt8w3AT9eiCUwlSP3EPH0+CO0/R53FHraLneY=) 4: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=) 5: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=) 6: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: i4o6KpN/sFIWxaZMoc1d6q2sPtevZ9Tpc5mV9I6tNEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2790 (0xae6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Nov 20 19:17:55 2024 GMT Not After : Nov 27 19:17:55 2024 GMT Subject: CN=673e35e4-9ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:90:93:3f:b5:f9:ec:47:df:c3:de:e7:10: e6:9f:76:25:d1:80:60:fc:cf:a3:3c:5a:55:13:7d: 17:86:45:e2:cf:1f:21:54:82:d2:9d:4c:99:ca:c6: ab:50:a3:60:31:e6:42:77:2e:0b:29:64:36:ca:ca: cc:c5:d2:32:9b:25:4e:40:89:33:6f:6d:64:04:cf: 83:c5:9c:6b:b0:6c:bc:d6:f4:d5:71:60:a7:3a:0b: 80:c5:b4:3c:97:d0:32:69:65:e2:7b:51:9f:e3:32: f6:4c:0b:01:a4:d1:94:c8:6a:5f:96:9e:e7:01:54: bf:b7:ce:17:b5:9d:c2:a2:ff:0b:50:a5:08:a0:82: 37:1d:39:49:0a:a2:a9:bd:09:13:ab:9b:d9:ab:b9: 87:f1:a7:6d:2a:54:e4:3d:be:bd:fc:c9:73:03:0f: 4f:f5:ba:a5:5f:53:bc:9a:f8:9a:13:fd:12:24:66: 10:a6:35:26:b3:eb:b7:74:da:a4:97:53:3e:d8:a2: 97:bc:c9:27:79:2d:e5:73:ef:da:5b:cc:1c:48:b3: 5c:d3:08:ee:ae:9e:0b:98:c1:af:8a:ba:3a:3d:e7: f3:05:e9:db:b2:85:1e:21:2f:e2:ec:bf:97:d9:f9: 29:53:c0:a4:66:7c:97:4d:29:b2:be:eb:55:59:dc: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B5:56:97:3F:ED:AD:7C:66:3A:FD:0B:BA:17:70:FC:20:FC:06:7B X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:65:84:d3:a8:ff:3f:3b:ef:ff:b2:c6:6b:34:cc:74:7f:5b: 17:47:2c:f9:44:7a:15:10:8c:59:16:8c:fd:49:2e:b3:c7:74: 58:39:e3:32:52:ff:22:1e:c4:83:04:ed:cd:4c:79:6c:de:18: f7:47:b1:b2:7b:f2:3e:8c:8a:9a:ac:ff:40:bc:26:db:d8:80: f2:3d:44:4f:aa:2e:0b:52:6e:46:ae:68:3b:79:4b:f1:ce:c8: 29:f0:2a:38:f1:38:6f:49:ae:c1:41:a4:ae:be:e6:c9:98:6b: d1:47:2d:bb:14:5b:91:92:9e:12:53:01:2a:c0:90:55:f7:4f: 47:d6:d3:bc:1b:e5:e2:04:b7:71:68:21:78:f7:db:bd:ca:aa: 9b:32:54:26:b8:b8:85:70:18:35:fa:a1:5b:b7:f9:59:f6:d5: a0:35:56:9c:35:9f:41:9f:c3:b3:ad:a2:dd:42:cb:86:c0:bb: c9:e7:82:19:a8:03:87:b4:b6:ad:9c:f1:b5:12:dc:15:1f:cf: 94:fa:fd:54:1b:2c:8c:44:4c:8c:50:53:ea:1b:22:a0:57:d4: de:7e:f1:ca:f3:b0:e4:92:64:fb:14:16:da:78:14:10:cf:d6: 37:75:53:ad:66:ae:32:19:ea:66:d7:88:ea:ee:62:8d:93:d0: ad:cb:6b:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjQxMTIwMTkxNzU1WhcNMjQxMTI3MTkxNzU1WjAYMRYwFAYD VQQDEw02NzNlMzVlNC05ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVCQkz+1+exH38Pe5xDmn3Yl0YBg/M+jPFpVE30XhkXizx8hVILSnUyZysar UKNgMeZCdy4LKWQ2ysrMxdIymyVOQIkzb21kBM+DxZxrsGy81vTVcWCnOguAxbQ8 l9AyaWXie1Gf4zL2TAsBpNGUyGpflp7nAVS/t84XtZ3Cov8LUKUIoII3HTlJCqKp vQkTq5vZq7mH8adtKlTkPb69/MlzAw9P9bqlX1O8mviaE/0SJGYQpjUms+u3dNqk l1M+2KKXvMkneS3lc+/aW8wcSLNc0wjurp4LmMGviro6PefzBenbsoUeIS/i7L+X 2fkpU8CkZnyXTSmyvutVWdyB6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW1Vpc/ 7a18Zjr9C7oXcPwg/AZ7MB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsZYTTqP8/O+//ssZrNMx0f1sXRyz5RHoVEIxZFoz9SS6zx3RYOeMy Uv8iHsSDBO3NTHls3hj3R7Gye/I+jIqarP9AvCbb2IDyPURPqi4LUm5Grmg7eUvx zsgp8Co48ThvSa7BQaSuvubJmGvRRy27FFuRkp4SUwEqwJBV909H1tO8G+XiBLdx aCF499u9yqqbMlQmuLiFcBg1+qFbt/lZ9tWgNVacNZ9Bn8OzraLdQsuGwLvJ54IZ qAOHtLatnPG1EtwVH8+U+v1UGyyMREyMUFPqGyKgV9TefvHK87DkkmT7FBbaeBQQ z9Y3dVOtZq4yGepm14jq7mKNk9Cty2vs -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:21 2024 by rpki-client on console-fra.rpki-client.org