$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: gPpHcP12BbP6WEt/qLepB2qOdvz23GrbgDMpEDsdRLw= Subject key identifier: 80:A2:75:7E:B0:7D:6F:CE:81:34:60:DB:4B:36:07:0C:80:D3:51:94 Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: A7 Signing time: Sat 23 Nov 2024 04:17:14 +0000 Manifest this update: Sat 23 Nov 2024 04:17:14 +0000 Manifest next update: Sat 30 Nov 2024 04:17:14 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: pv9Gq2XKpfZp83CRTU3h73VrprTb7hLJMiyiNZblzno=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: /xLgcciV1fAsMQUoHqYX8C0b6v/QUBkQkCnmsh29lS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: Nov 23 04:17:14 2024 GMT Not After : Nov 30 04:17:14 2024 GMT Subject: CN=6741574a-097b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:d1:a7:42:59:b7:65:ea:1e:1f:82:55:e6: af:0a:f5:48:dd:45:6c:ee:d1:51:06:1f:a1:36:15: 3e:14:cb:9b:44:83:35:7a:22:7c:7b:e7:0f:c7:eb: e1:b6:7a:76:6f:0f:d2:3e:28:77:bc:dd:9b:39:0b: e1:e2:6f:81:07:72:2f:cd:50:b5:81:e8:65:93:eb: d8:13:4b:9a:a8:44:9f:7f:60:f6:f8:6a:69:8f:19: e6:61:8b:ef:06:59:a9:0a:da:c9:ee:1b:92:4c:23: 9e:a6:dd:49:3e:4b:a1:cc:c7:97:99:bb:bb:60:d3: 6d:8f:e0:8d:6d:47:d3:5a:4f:aa:75:47:db:d5:3e: 62:61:00:84:32:eb:e4:62:a8:a6:99:4d:41:89:99: 6d:60:c2:d3:ca:1d:e3:95:1e:0d:03:7b:b6:0c:11: 12:83:ae:5a:cf:c4:61:10:86:7d:c2:4d:17:49:70: 27:23:c2:98:8d:6d:93:57:d4:01:e6:aa:27:61:23: 6f:01:bc:a6:d5:03:8c:a1:89:a5:a4:fc:9b:e1:7f: 88:7c:41:c4:59:27:1f:7a:9f:b4:a0:cd:9f:be:b0: 3b:60:49:b7:90:55:85:6b:ec:b4:d7:f7:a4:f1:e1: 35:ef:11:23:f0:c9:12:e7:d3:ff:e7:c9:89:27:f5: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A2:75:7E:B0:7D:6F:CE:81:34:60:DB:4B:36:07:0C:80:D3:51:94 X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:8b:a3:89:85:19:b9:41:17:0a:b8:5d:2b:8d:4f:0b:97:68: f5:fe:22:bb:ab:16:83:10:e7:da:41:5e:b3:42:14:0b:8a:1b: 0f:a7:16:13:35:5e:e6:a0:d6:70:aa:d9:87:1c:32:67:ee:8d: 4a:4c:be:b8:d9:b7:c2:e1:b7:23:7b:46:2c:a2:24:ea:a2:2c: 56:73:8d:00:d2:a8:7b:60:bc:1b:94:e0:54:95:f9:84:b0:56: bc:2c:ce:a0:61:82:c0:ad:88:ba:9b:74:3a:c1:0c:e9:0a:40: c7:6d:4e:28:75:dc:c5:f3:d1:59:a5:2b:aa:0a:1b:4f:cc:2a: a4:98:77:ef:68:c6:ab:c3:95:84:0b:a9:65:79:5a:32:42:f6: d0:68:c2:e5:e4:e7:4b:44:42:7a:0d:e6:e7:f6:7e:b1:c8:92: e3:08:bb:ef:df:a8:d6:16:15:a3:f8:27:4e:73:38:b6:bd:b2: 5f:3e:b1:5e:c6:76:1d:1d:d0:dc:ef:db:40:7e:3e:e8:24:a3: 76:00:73:69:7b:ad:e8:70:11:7e:9b:c8:cb:c7:09:1e:4d:4f: b0:5d:18:51:ed:95:d2:a1:32:ca:9c:c4:d3:5b:37:cf:37:10: 53:6d:bb:89:91:33:aa:7a:92:0e:1f:4c:5a:0d:dc:51:03:2f: 76:98:79:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx NjQwREQzM0EwHhcNMjQxMTIzMDQxNzE0WhcNMjQxMTMwMDQxNzE0WjAYMRYwFAYD VQQDEw02NzQxNTc0YS0wOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9TRp0JZt2XqHh+CVeavCvVI3UVs7tFRBh+hNhU+FMubRIM1eiJ8e+cPx+vh tnp2bw/SPih3vN2bOQvh4m+BB3IvzVC1gehlk+vYE0uaqESff2D2+GppjxnmYYvv BlmpCtrJ7huSTCOept1JPkuhzMeXmbu7YNNtj+CNbUfTWk+qdUfb1T5iYQCEMuvk YqimmU1BiZltYMLTyh3jlR4NA3u2DBESg65az8RhEIZ9wk0XSXAnI8KYjW2TV9QB 5qonYSNvAbym1QOMoYmlpPyb4X+IfEHEWScfep+0oM2fvrA7YEm3kFWFa+y01/ek 8eE17xEj8MkS59P/58mJJ/WMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICidX6w fW/OgTRg20s2BwyA01GUMB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1 Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsi6OJhRm5QRcKuF0rjU8Ll2j1/iK7qxaDEOfaQV6zQhQLihsPpxYT NV7moNZwqtmHHDJn7o1KTL642bfC4bcje0YsoiTqoixWc40A0qh7YLwblOBUlfmE sFa8LM6gYYLArYi6m3Q6wQzpCkDHbU4oddzF89FZpSuqChtPzCqkmHfvaMarw5WE C6lleVoyQvbQaMLl5OdLREJ6Debn9n6xyJLjCLvv36jWFhWj+CdOczi2vbJfPrFe xnYdHdDc79tAfj7oJKN2AHNpe63ocBF+m8jLxwkeTU+wXRhR7ZXSoTLKnMTTWzfP NxBTbbuJkTOqepIOH0xaDdxRAy92mHlU -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org