$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json) Hash identifier: JJlhuJPwCe5voWde6CYJhC2qg4wPqhCsxgmHnQMKOpQ= Subject key identifier: 56:DB:B2:4E:BB:A0:76:E4:7E:14:F5:9F:5A:1B:98:68:70:B1:D0:FB Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft Manifest number: 83 Signing time: Thu 21 Nov 2024 04:43:33 +0000 Manifest this update: Thu 21 Nov 2024 04:43:32 +0000 Manifest next update: Thu 28 Nov 2024 04:43:32 +0000 Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: extNIbxEqfTyUCNSNKKZzvN/r5LpraRGsQ3c3z7XFO0=) 2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: 4ifq9H+2oUaf4XogyDcgufI74BbBk+/yBuSEMG4BFOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Validity Not Before: Nov 21 04:43:32 2024 GMT Not After : Nov 28 04:43:32 2024 GMT Subject: CN=673eba74-5a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:62:22:3c:04:32:fd:d8:58:3c:14:2c:73: ab:d5:3b:64:78:96:88:e8:44:01:b9:62:be:d9:d9: 34:69:6c:0f:0a:a6:52:44:ed:e2:b0:e4:f4:dc:dd: fd:03:be:29:2c:bb:8c:00:f5:8c:1f:0d:98:86:80: 22:58:8e:92:61:d1:96:26:90:54:9b:0c:31:2a:f0: 2b:48:92:a5:4f:cb:0e:71:38:6f:2b:91:fb:3e:10: 4e:c3:4e:80:22:c2:39:5f:50:50:6a:1d:62:8a:91: d7:c5:50:d2:df:0b:e2:95:86:7b:4c:ea:7c:7f:b3: 5e:e4:a7:df:ca:4d:d7:94:ba:cd:42:58:cf:d7:ca: 41:8c:bd:10:bb:21:33:ab:5c:0d:10:61:6e:17:73: 49:4b:6f:a4:06:9e:8f:0b:06:f6:80:07:5e:d3:e2: 88:d6:e0:2e:1c:91:e1:e4:b4:d6:0e:da:d0:56:dc: d2:61:ad:1c:d4:7e:98:62:24:e0:7c:e9:28:de:29: d0:cc:b7:bf:06:30:a0:ae:34:4a:fa:ec:7c:5b:4c: a1:a8:f4:ff:bc:03:45:ec:c3:c9:d1:6a:78:24:fa: 21:d2:de:1e:07:76:df:61:37:cf:21:4b:f8:c6:5e: f8:85:b9:e1:54:cf:76:8b:7e:e5:99:e3:95:a5:80: c9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DB:B2:4E:BB:A0:76:E4:7E:14:F5:9F:5A:1B:98:68:70:B1:D0:FB X509v3 Authority Key Identifier: keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:1a:10:3c:b8:60:04:4b:47:24:1a:da:d5:c1:bf:ae:42: 14:67:95:33:b8:1e:de:3f:49:92:94:53:db:ba:93:74:2b:63: 92:12:86:5e:de:e8:7d:48:e6:46:ce:70:ff:09:21:df:cd:9a: 4d:e4:e3:96:d3:28:5c:c8:87:0c:3e:c0:8c:cf:4e:b7:bb:05: 2b:b7:70:b2:64:fd:c5:9c:6a:9a:f7:8c:34:51:f0:0d:70:47: 42:c6:16:64:47:80:27:ec:c6:a7:94:a3:ba:50:8e:eb:21:04: 5a:2e:60:0a:05:92:c5:c4:53:79:a6:06:ab:47:29:9d:e2:aa: f9:5e:22:48:80:46:68:58:91:f4:2a:10:45:d3:a7:cf:b4:7d: f6:fb:dd:00:34:8e:c3:7b:7a:75:a1:ee:d7:f0:af:70:2e:21: 59:8b:80:20:5a:80:3c:14:95:24:ea:92:7b:54:ac:99:8a:cd: 2e:30:d7:31:41:0b:cc:26:9c:43:e6:a8:95:cd:5e:2e:e4:f3: 4e:93:54:0a:bd:96:33:f3:be:04:1a:05:40:18:af:8d:45:9d: d9:05:7a:02:e1:a8:b2:b1:f8:83:e4:8b:cf:00:77:28:71:14: 8f:36:fd:33:42:f4:32:a8:b8:bb:ba:e1:20:7f:ae:8a:8f:75: 98:82:73:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKEJGRjU4MTUxMThDM0JDREQ4RDVBQzIzMTdEQkJDRkEz OTk3RTM1RjYwHhcNMjQxMTIxMDQ0MzMyWhcNMjQxMTI4MDQ0MzMyWjAYMRYwFAYD VQQDEw02NzNlYmE3NC01YTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIBiIjwEMv3YWDwULHOr1TtkeJaI6EQBuWK+2dk0aWwPCqZSRO3isOT03N39 A74pLLuMAPWMHw2YhoAiWI6SYdGWJpBUmwwxKvArSJKlT8sOcThvK5H7PhBOw06A IsI5X1BQah1iipHXxVDS3wvilYZ7TOp8f7Ne5Kffyk3XlLrNQljP18pBjL0QuyEz q1wNEGFuF3NJS2+kBp6PCwb2gAde0+KI1uAuHJHh5LTWDtrQVtzSYa0c1H6YYiTg fOko3inQzLe/BjCgrjRK+ux8W0yhqPT/vANF7MPJ0Wp4JPoh0t4eB3bfYTfPIUv4 xl74hbnhVM92i37lmeOVpYDJVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbbsk67 oHbkfhT1n1obmGhwsdD7MB8GA1UdIwQYMBaAFL/1gVEYw7zdjVrCMX27z6OZfjX2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9EREM5NDJBQURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZOMk5Xc0l4ZmJ2UG81bC1O ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5mWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9EREM5NDJBQURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZO Mk5Xc0l4ZmJ2UG81bC1OZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/RoQPLhgBEtHJBra1cG/rkIUZ5UzuB7eP0mSlFPbupN0K2OSEoZe 3uh9SOZGznD/CSHfzZpN5OOW0yhcyIcMPsCMz063uwUrt3CyZP3FnGqa94w0UfAN cEdCxhZkR4An7ManlKO6UI7rIQRaLmAKBZLFxFN5pgarRymd4qr5XiJIgEZoWJH0 KhBF06fPtH32+90ANI7De3p1oe7X8K9wLiFZi4AgWoA8FJUk6pJ7VKyZis0uMNcx QQvMJpxD5qiVzV4u5PNOk1QKvZYz874EGgVAGK+NRZ3ZBXoC4aiysfiD5IvPAHco cRSPNv0zQvQyqLi7uuEgf66Kj3WYgnMo -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:06 2024 by rpki-client on console-ams.rpki-client.org