$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft File: WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json) Hash identifier: auhl1Y5Zk3o+F8QPRDHodBpVskcnA4UpbE2Jd2FtXKc= Subject key identifier: 26:3C:E8:91:A6:90:7A:F0:1C:53:76:5C:E8:F5:0B:71:84:32:52:E2 Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA Certificate issuer: /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft Manifest number: 0160 Signing time: Sat 23 Nov 2024 02:21:52 +0000 Manifest this update: Sat 23 Nov 2024 02:21:52 +0000 Manifest next update: Sat 30 Nov 2024 02:21:52 +0000 Files and hashes: 1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: nzgDLgwvQZR/VmGZDmDc9IErnCYNYKlJj1vqnt3PmyE=) 2: ECD869468DDB11ED8FBBE183C4F9AE02.roa (hash: kJ8K5Z7wF3B9Su3djk5lndtlAsjhENGMBn46PphNQJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Validity Not Before: Nov 23 02:21:52 2024 GMT Not After : Nov 30 02:21:52 2024 GMT Subject: CN=67413c40-aa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:5f:96:0d:91:9e:8e:f7:88:a0:5b:52:ea: 34:78:2e:62:5e:70:b2:35:d0:06:df:20:20:a7:bd: e2:11:4c:d8:06:bb:15:8f:9d:48:3a:13:71:a5:8d: 13:e7:91:7e:99:fb:2d:7e:f8:42:48:f0:50:34:2e: 9b:a5:d2:4f:6e:d4:27:91:4b:65:3d:45:9c:a4:c4: 17:72:90:52:9b:ad:cd:64:af:00:32:ac:8d:37:72: a4:b3:a9:62:91:ab:9c:af:16:bb:4d:62:a8:3d:e9: 60:2f:e1:ba:af:e0:18:f1:d2:5e:21:0b:65:f9:f2: ae:80:08:ee:60:fe:aa:68:60:64:1a:ae:d2:e3:92: 9c:fb:d6:24:0b:3d:99:09:7b:83:74:ac:24:9e:c4: dc:71:3b:2a:43:58:d6:a1:41:39:2b:89:fd:fe:7e: 4e:26:42:8c:36:23:ed:14:64:fc:18:c5:a6:ea:92: b5:80:0a:0e:87:00:90:49:39:7f:81:f2:fc:16:dc: 15:9f:c3:b1:d2:7b:34:3f:27:c2:a7:66:81:04:b1: fa:b1:90:91:91:a6:dd:d6:56:7a:fc:2f:28:60:f7: 0c:a8:d1:81:c9:8e:9a:e7:16:25:69:0f:d6:00:64: f4:82:48:72:d6:84:88:fa:0d:f9:9c:c7:75:4a:67: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3C:E8:91:A6:90:7A:F0:1C:53:76:5C:E8:F5:0B:71:84:32:52:E2 X509v3 Authority Key Identifier: keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bb:7d:f3:e7:cf:fb:20:c0:ae:08:4c:9f:c7:27:b4:55:ba: bf:bb:86:af:8d:b0:84:59:98:e4:0c:2e:18:83:55:78:b5:f5: af:68:6d:8c:9d:87:9d:9c:8e:a6:f6:eb:a8:34:d5:3c:92:ba: 1d:65:79:9c:dc:b6:b5:70:32:7d:d5:94:06:bd:34:be:cb:a1: 63:c5:c0:2e:40:17:89:82:8c:50:5b:24:21:17:6f:17:6f:92: 2b:ed:e0:9d:4b:32:61:49:5c:59:99:26:3b:64:d0:42:02:b2: f5:e2:67:3f:d7:49:19:4f:89:ac:e8:7d:07:aa:ad:b7:33:71: d5:6c:99:a1:64:2f:4b:3a:97:84:97:9b:de:62:1f:88:60:1e: 2b:90:1c:ac:75:aa:c2:f2:18:8a:d5:7f:e9:17:5d:ff:44:3f: 9b:ae:92:1a:f0:61:ef:45:6a:70:65:a7:85:59:d0:d0:45:b2: 53:bb:46:c7:fa:24:3c:74:86:b1:84:7d:fe:75:72:6d:19:dd: 98:d3:35:fb:db:83:34:75:e0:57:9a:bf:f4:3e:c0:42:eb:68: 26:68:d5:e4:38:55:c1:63:4a:71:09:c7:2d:f2:e4:de:7b:4f: 2f:85:44:88:ca:ac:83:fc:0e:ab:44:51:e9:9f:71:6b:53:ef: 15:86:f5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3 RDFBMUE2Q0EwHhcNMjQxMTIzMDIyMTUyWhcNMjQxMTMwMDIyMTUyWjAYMRYwFAYD VQQDEw02NzQxM2M0MC1hYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdZflg2Rno73iKBbUuo0eC5iXnCyNdAG3yAgp73iEUzYBrsVj51IOhNxpY0T 55F+mfstfvhCSPBQNC6bpdJPbtQnkUtlPUWcpMQXcpBSm63NZK8AMqyNN3Kks6li kaucrxa7TWKoPelgL+G6r+AY8dJeIQtl+fKugAjuYP6qaGBkGq7S45Kc+9YkCz2Z CXuDdKwknsTccTsqQ1jWoUE5K4n9/n5OJkKMNiPtFGT8GMWm6pK1gAoOhwCQSTl/ gfL8FtwVn8Ox0ns0PyfCp2aBBLH6sZCRkabd1lZ6/C8oYPcMqNGByY6a5xYlaQ/W AGT0gkhy1oSI+g35nMd1SmewewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY86JGm kHrwHFN2XOj1C3GEMlLiMB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhB VklWQVMwWE1OVXA5R2hwc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6u33z58/7IMCuCEyfxye0Vbq/u4avjbCEWZjkDC4Yg1V4tfWvaG2M nYednI6m9uuoNNU8krodZXmc3La1cDJ91ZQGvTS+y6FjxcAuQBeJgoxQWyQhF28X b5Ir7eCdSzJhSVxZmSY7ZNBCArL14mc/10kZT4ms6H0Hqq23M3HVbJmhZC9LOpeE l5veYh+IYB4rkBysdarC8hiK1X/pF13/RD+brpIa8GHvRWpwZaeFWdDQRbJTu0bH +iQ8dIaxhH3+dXJtGd2Y0zX724M0deBXmr/0PsBC62gmaNXkOFXBY0pxCcct8uTe e08vhUSIyqyD/A6rRFHpn3FrU+8VhvUT -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org