$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: +/+r/rry+1x/D0/IJkveAnfUag4BhWO2qrwVR4HPfPo= Subject key identifier: 38:57:85:CE:7C:C7:67:FF:5F:5F:16:24:B9:96:49:70:CF:59:7D:B6 Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 04F8 Signing time: Wed 20 Nov 2024 23:15:56 +0000 Manifest this update: Wed 20 Nov 2024 23:15:55 +0000 Manifest next update: Wed 27 Nov 2024 23:15:55 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: h/aRX1E1PBt7EK8FMNagLiNx2pArmWggECq6aVX99KI=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Nov 20 23:15:55 2024 GMT Not After : Nov 27 23:15:55 2024 GMT Subject: CN=673e6dac-0697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:55:87:73:31:00:58:da:15:f3:dd:e4:11: 02:50:ac:50:25:01:fc:b8:eb:51:56:a6:51:46:c5: 80:fe:4b:8d:b1:20:f6:ec:5e:35:c3:25:61:c9:8e: 51:3a:78:f9:de:2d:69:45:9d:68:98:69:8c:fc:b6: 53:99:8f:3d:02:dd:56:ed:36:ac:c4:12:7c:c1:0e: eb:93:f0:ef:7b:17:b1:e7:da:20:9e:e6:0a:f3:b0: e6:aa:e0:91:5b:70:fd:61:9a:03:c2:d2:b7:fd:51: 7f:ad:49:b0:22:e6:ec:e3:95:27:c4:ca:60:cd:1e: 52:66:33:d9:d1:8b:31:88:8b:a8:7b:b2:f3:2d:be: cc:7c:da:a4:6b:e4:50:f3:d2:48:4e:56:01:15:4e: 87:cc:5e:27:8a:77:dc:31:b9:91:30:0a:c8:7b:41: 8f:2a:d1:c0:58:5d:2d:f5:17:ed:2e:e4:9f:eb:21: ca:f8:a7:19:48:a3:45:4b:8b:34:2c:75:85:11:73: c0:c5:fc:e3:cf:b4:4e:ba:8a:ce:fc:16:ee:35:da: 7d:f4:45:5c:dd:07:ba:da:6d:59:0c:cf:6f:c2:58: 18:a4:dc:0c:95:d6:df:48:25:54:3a:c0:09:85:c2: 9e:d6:52:b0:82:d1:67:27:98:a1:93:55:1d:2e:cf: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:85:CE:7C:C7:67:FF:5F:5F:16:24:B9:96:49:70:CF:59:7D:B6 X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:77:9a:e3:d1:80:ac:7e:d1:37:36:9b:97:35:46:24:cd:1d: af:b5:28:1c:0d:fa:35:c2:a3:25:03:fb:7d:c2:3d:26:6d:7e: e3:83:90:4c:6d:56:34:04:0d:b5:37:1e:3f:4d:22:b8:15:8d: d0:57:fd:58:84:63:cc:79:3f:e4:2a:64:2c:b0:01:bd:08:f3: 03:72:cd:e5:73:cc:2d:7e:71:ff:16:e6:93:a7:8c:22:f8:8c: b3:81:d0:78:1c:59:2a:a0:6b:1e:4c:97:52:2d:9a:71:2a:a9: 99:3e:77:01:23:97:b1:08:4c:92:11:96:ae:0a:9a:43:87:3e: db:4a:6f:4e:b7:16:48:0b:51:ef:5c:4b:b4:cb:a7:3a:54:0e: e0:87:fd:08:8b:95:85:67:12:63:ff:dc:49:bc:be:b9:ce:b3: b7:96:9f:ac:e4:5d:5f:18:3e:18:f4:46:f1:2d:8b:2d:34:7e: 3e:6c:3a:3b:70:55:0c:d5:e0:13:d1:e3:07:13:d3:75:fc:32: db:2c:df:22:b0:51:9d:62:20:6c:62:ca:16:b0:c0:47:9d:d7: 3a:58:3a:e4:f4:ee:f3:0f:76:a3:b4:06:85:3d:95:25:ba:04: c2:f1:6a:e4:e0:2b:2a:2f:2a:83:34:ae:7b:f2:31:b4:f6:f4: a5:5c:ac:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjQxMTIwMjMxNTU1WhcNMjQxMTI3MjMxNTU1WjAYMRYwFAYD VQQDEw02NzNlNmRhYy0wNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+RVh3MxAFjaFfPd5BECUKxQJQH8uOtRVqZRRsWA/kuNsSD27F41wyVhyY5R Onj53i1pRZ1omGmM/LZTmY89At1W7TasxBJ8wQ7rk/Dvexex59ognuYK87DmquCR W3D9YZoDwtK3/VF/rUmwIubs45UnxMpgzR5SZjPZ0YsxiIuoe7LzLb7MfNqka+RQ 89JITlYBFU6HzF4ninfcMbmRMArIe0GPKtHAWF0t9RftLuSf6yHK+KcZSKNFS4s0 LHWFEXPAxfzjz7ROuorO/BbuNdp99EVc3Qe62m1ZDM9vwlgYpNwMldbfSCVUOsAJ hcKe1lKwgtFnJ5ihk1UdLs98WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhXhc58 x2f/X18WJLmWSXDPWX22MB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNd5rj0YCsftE3NpuXNUYkzR2vtSgcDfo1wqMlA/t9wj0mbX7jg5BM bVY0BA21Nx4/TSK4FY3QV/1YhGPMeT/kKmQssAG9CPMDcs3lc8wtfnH/FuaTp4wi +IyzgdB4HFkqoGseTJdSLZpxKqmZPncBI5exCEySEZauCppDhz7bSm9OtxZIC1Hv XEu0y6c6VA7gh/0Ii5WFZxJj/9xJvL65zrO3lp+s5F1fGD4Y9EbxLYstNH4+bDo7 cFUM1eAT0eMHE9N1/DLbLN8isFGdYiBsYsoWsMBHndc6WDrk9O7zD3ajtAaFPZUl ugTC8Wrk4CsqLyqDNK578jG09vSlXKym -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org