$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: 2dHPaSTt0kccoAeK7BKgyphET4Md/d1+OoaCDkWRUhI= Subject key identifier: E2:FB:E5:60:03:69:60:2A:49:74:C4:D2:EC:A6:4F:73:42:99:AC:20 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0ECD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0E58 Signing time: Wed 20 Nov 2024 17:41:17 +0000 Manifest this update: Wed 20 Nov 2024 17:41:16 +0000 Manifest next update: Wed 27 Nov 2024 17:41:16 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 5UUnenKqeCtZkSPAdsJxQHUYlQBf8F0BfMJh1Hx5cPU=) 2: E563749EE95211EDA4284D3BC4F9AE02.roa (hash: xENSKJ8aOnHAaVFmsWY/FeCt/jrwgQ/BKkre++CsTaA=) 3: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: 69vf8i2AyBWTvcreeXZcAmXyRzf/6fUCTiPRkTLNVcA=) 4: ED2BF5FEDF3711ED99AC7D58C4F9AE02.roa (hash: Gu53Xb3UW0I/sazAk3mhgfWKWY5VAgF6HwWldac3STY=) 5: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: DPa2SyiYsDe0TvzZ1Z3q6+1dtL6Alr2cq0P1vHVdLaM=) 6: 416881CE924011EB8767521BC4F9AE02.roa (hash: 4mEXVYgBx/nKl7DjW29xkvq4e05Fqjm8qJZ6J8+De7I=) 7: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: ll8uPXO7+p+L4mr0tZPETWCxlV0OBmMVm5vFHlyDwyk=) 8: A9630ACCF78011ED829BBD5DC4F9AE02.roa (hash: 3cGMkhaBquzIL1YZj2oxCpKbpTk7zRRTs9lA907D7WU=) 9: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: GQ7BlSff2SRKmCMQxyAGueYKZPB5XCwxNw5oLLxj8Xc=) 10: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: +OviFQ85mowakK+fg84OXMpO+t1TRoDLWVpJ0HIDDFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3789 (0xecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Nov 20 17:41:16 2024 GMT Not After : Nov 27 17:41:16 2024 GMT Subject: CN=673e1f3c-1101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9e:3b:e5:7a:b6:b7:a6:05:e7:f2:e5:6e:78: 65:89:4e:29:c9:a2:9c:c7:11:3d:56:6a:99:7c:12: 12:84:81:15:02:fb:5c:c6:0f:aa:64:68:8c:58:56: 6e:26:3e:71:8a:9a:a3:dd:62:fa:7f:52:49:5a:35: 67:b5:a7:a5:94:3d:65:5f:81:60:9b:c1:dc:97:f7: d9:f5:00:61:20:a3:78:34:fb:e0:ea:8e:c0:30:ef: 4c:a1:d3:a6:b7:73:0f:08:78:e0:e0:96:27:3e:ec: 3b:b0:3d:63:27:93:54:b6:19:cb:fd:92:43:28:81: f1:11:ee:a8:5b:1c:5c:5b:f4:5e:fa:d0:7c:5f:be: 5c:bc:9c:12:15:02:3a:5c:70:e6:47:92:9f:d6:24: f4:e5:62:b8:fa:d9:32:dd:f5:ef:4d:31:b3:c1:90: 0b:13:a5:0e:3b:75:ee:ca:fa:fc:a9:c1:24:b7:35: 95:18:62:dd:c9:0b:fe:15:a9:33:2a:2f:a1:87:56: 49:68:83:ef:4e:9f:35:69:a2:d7:f8:50:a6:3f:b4: 0c:4d:d4:2a:42:67:83:82:3f:f2:2b:42:44:dc:bc: c7:e3:ad:61:5f:8a:ea:7b:7d:18:81:6d:74:dd:29: 97:c7:51:80:07:ca:e6:ab:20:6c:5a:1d:3f:c9:30: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FB:E5:60:03:69:60:2A:49:74:C4:D2:EC:A6:4F:73:42:99:AC:20 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:95:ac:4e:26:91:15:15:57:1a:c6:37:85:84:b8:23:c2:45: 42:be:5a:1f:4d:2e:31:f1:92:14:0f:99:55:d9:a9:3b:e4:ec: c6:45:b3:15:06:0c:6b:26:c3:e2:3c:83:2d:03:db:a5:ae:e3: e9:74:d7:06:45:79:2f:8b:30:c7:51:d6:72:0f:59:6b:80:f9: a5:37:23:ce:df:b4:6c:80:96:97:45:3a:b0:37:07:6b:66:0e: 4f:43:8a:eb:ff:20:d3:3d:75:8f:94:a1:35:c0:ef:76:87:64: e6:ef:0d:92:9e:8d:73:d3:4f:91:d3:bc:d4:9b:40:c7:34:f3: 0a:59:87:d8:0b:c4:23:4c:2d:86:7e:35:7f:7b:f5:ec:6c:e7: 6d:e7:57:c1:8e:38:03:72:b0:8e:c8:18:d5:75:2c:04:37:a4: 12:dd:1f:21:10:c0:f2:72:f0:39:8e:81:a5:a4:9d:5b:f7:9d: a3:db:6e:3c:f9:9a:d6:e0:4c:a6:e6:09:2d:6f:22:99:cd:97: e8:8a:ed:e6:e5:3c:4e:83:44:61:85:23:2c:a7:7e:c6:42:1a: f7:4b:7d:79:48:e5:f2:7d:ba:5c:61:c7:30:09:57:1d:c3:c5: 3e:42:cc:ad:4b:e2:48:6e:2f:db:62:24:65:d9:b4:2d:39:e3: 06:1b:fd:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjQxMTIwMTc0MTE2WhcNMjQxMTI3MTc0MTE2WjAYMRYwFAYD VQQDEw02NzNlMWYzYy0xMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J475Xq2t6YF5/LlbnhliU4pyaKcxxE9VmqZfBIShIEVAvtcxg+qZGiMWFZu Jj5xipqj3WL6f1JJWjVntaellD1lX4Fgm8Hcl/fZ9QBhIKN4NPvg6o7AMO9ModOm t3MPCHjg4JYnPuw7sD1jJ5NUthnL/ZJDKIHxEe6oWxxcW/Re+tB8X75cvJwSFQI6 XHDmR5Kf1iT05WK4+tky3fXvTTGzwZALE6UOO3Xuyvr8qcEktzWVGGLdyQv+Fakz Ki+hh1ZJaIPvTp81aaLX+FCmP7QMTdQqQmeDgj/yK0JE3LzH461hX4rqe30YgW10 3SmXx1GAB8rmqyBsWh0/yTCvvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOL75WAD aWAqSXTE0uymT3NCmawgMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3laxOJpEVFVcaxjeFhLgjwkVCvlofTS4x8ZIUD5lV2ak75OzGRbMV BgxrJsPiPIMtA9ulruPpdNcGRXkvizDHUdZyD1lrgPmlNyPO37RsgJaXRTqwNwdr Zg5PQ4rr/yDTPXWPlKE1wO92h2Tm7w2Sno1z00+R07zUm0DHNPMKWYfYC8QjTC2G fjV/e/XsbOdt51fBjjgDcrCOyBjVdSwEN6QS3R8hEMDycvA5joGlpJ1b952j2248 +ZrW4Eym5gktbyKZzZfoiu3m5TxOg0RhhSMsp37GQhr3S315SOXyfbpcYccwCVcd w8U+QsytS+JIbi/bYiRl2bQtOeMGG/2u -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org