$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: frWyyPa/8iXY6PW/CZ41v6yQSJdDACYKyv49ejkPxFw= Subject key identifier: AB:63:32:FB:3E:AF:F7:3E:82:DC:E8:67:C9:55:57:FA:55:2C:8B:32 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 04B1 Signing time: Wed 20 Nov 2024 23:29:58 +0000 Manifest this update: Wed 20 Nov 2024 23:29:57 +0000 Manifest next update: Wed 27 Nov 2024 23:29:57 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: weENgoKL+W1uS5tj7BXyedXBjOVxxk4Z4dLPsEYWnF4=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: YWeX1DfSGs4BQndSEpvjXp//SRdFsIHjRaQTZ+32G1w=) 4: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: dwJddnm1ntnsj4XMzYCHtwqdcwWHva5rTpsA08hxqqs=) 6: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: YiFunTZL5LVn069EwrhiVsys5tG1ZsT1/SQk8scoDqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Nov 20 23:29:57 2024 GMT Not After : Nov 27 23:29:57 2024 GMT Subject: CN=673e70f6-e62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:b8:5d:81:a8:18:34:3d:23:70:af:94:ee: 6f:57:19:a5:d1:21:e9:d3:a3:0b:ab:e0:14:89:2f: 97:9d:35:13:bd:29:79:5d:52:63:0b:b2:f6:1c:d2: 4f:68:4a:5a:7f:ee:dd:f5:8e:52:3f:19:66:49:27: 67:5a:f7:10:7e:f9:bd:5f:a4:a9:06:c0:0f:ac:80: dd:33:62:89:13:a2:71:ba:2f:90:bc:74:19:0a:b5: e3:90:ac:16:e6:62:40:1d:6f:99:45:cd:75:88:0b: 91:df:ba:e9:85:52:c7:10:5f:b9:0d:9e:95:11:d3: e3:82:e4:9c:25:cf:7c:61:00:a6:0d:ee:8b:0b:61: 07:81:49:2f:af:c8:f0:ad:6e:64:1e:61:5b:ef:30: 14:1d:c5:ae:8e:09:86:3f:01:c6:da:dd:40:77:25: 0c:d0:34:cb:e7:e5:82:2d:8c:34:cd:64:6b:1e:37: 3a:d4:ed:ad:7c:27:13:00:d1:a2:9b:a0:70:90:f3: 49:ce:46:5a:c9:8c:f1:de:f3:83:e2:10:6a:8f:9d: c6:cd:24:fc:d9:a3:1d:47:60:21:c2:6b:22:c0:bc: 86:8a:09:c4:72:59:70:86:a1:07:09:4f:82:4b:8f: 5c:a2:9a:28:31:64:30:b9:98:b3:16:d3:4e:9f:32: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:32:FB:3E:AF:F7:3E:82:DC:E8:67:C9:55:57:FA:55:2C:8B:32 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:c2:e5:b3:e3:0c:73:b5:0d:27:1f:b9:bc:8c:ba:46:f0: fb:b6:92:2c:51:0b:af:e7:05:95:b3:de:3e:6c:b5:7f:83:a4: b8:1b:c6:69:d7:a4:47:e2:ec:b8:bd:24:6c:29:e9:96:e0:29: 50:b8:87:d3:ea:92:f1:ca:a3:b9:a5:64:ad:28:21:e6:73:03: 8c:db:da:75:44:5e:4e:57:5f:07:7d:06:94:38:24:83:3c:78: f6:02:f9:ca:0e:f6:8d:69:3a:78:05:03:bf:7e:b0:e9:e0:f8: ef:7c:d7:ae:80:d0:98:79:b0:51:7d:6a:44:cd:f7:1a:5b:dd: a3:26:3a:97:82:d2:a9:a6:d5:94:6f:76:3d:3c:80:32:df:29: 67:85:9d:de:58:6c:48:1d:a8:0d:9e:3a:59:96:63:10:c7:0e: 8f:53:75:c6:e4:d5:0f:71:0e:6f:72:af:c1:2d:7f:30:e4:f5: ac:85:61:b9:4d:5c:06:ab:b6:de:ec:29:f3:8f:23:b6:ba:de: 25:e3:e6:bb:9b:af:34:4a:ea:ef:b5:95:f8:cd:a5:96:ca:92: 1e:67:75:2d:35:d3:79:72:a7:f9:e6:8f:8a:ae:bb:96:d9:df: 55:d9:4a:e5:e6:26:c3:0e:29:84:c2:e1:6e:55:4f:08:81:72: 03:0e:f0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjQxMTIwMjMyOTU3WhcNMjQxMTI3MjMyOTU3WjAYMRYwFAYD VQQDEw02NzNlNzBmNi1lNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwne4XYGoGDQ9I3CvlO5vVxml0SHp06MLq+AUiS+XnTUTvSl5XVJjC7L2HNJP aEpaf+7d9Y5SPxlmSSdnWvcQfvm9X6SpBsAPrIDdM2KJE6Jxui+QvHQZCrXjkKwW 5mJAHW+ZRc11iAuR37rphVLHEF+5DZ6VEdPjguScJc98YQCmDe6LC2EHgUkvr8jw rW5kHmFb7zAUHcWujgmGPwHG2t1AdyUM0DTL5+WCLYw0zWRrHjc61O2tfCcTANGi m6BwkPNJzkZayYzx3vOD4hBqj53GzST82aMdR2AhwmsiwLyGignEcllwhqEHCU+C S49copooMWQwuZizFtNOnzIUuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtjMvs+ r/c+gtzoZ8lVV/pVLIsyMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFScLls+MMc7UNJx+5vIy6RvD7tpIsUQuv5wWVs94+bLV/g6S4G8Zp 16RH4uy4vSRsKemW4ClQuIfT6pLxyqO5pWStKCHmcwOM29p1RF5OV18HfQaUOCSD PHj2AvnKDvaNaTp4BQO/frDp4PjvfNeugNCYebBRfWpEzfcaW92jJjqXgtKpptWU b3Y9PIAy3ylnhZ3eWGxIHagNnjpZlmMQxw6PU3XG5NUPcQ5vcq/BLX8w5PWshWG5 TVwGq7be7CnzjyO2ut4l4+a7m680SurvtZX4zaWWypIeZ3UtNdN5cqf55o+KrruW 2d9V2Url5ibDDimEwuFuVU8IgXIDDvA9 -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:57 2024 by rpki-client on console-ams.rpki-client.org