$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: a2vKm4kJMkOaegA5wiJUL3syUushVGYh/lFgYc49CiY= Subject key identifier: BF:36:98:93:A4:2E:E7:F5:DA:EB:AE:67:C1:CC:25:BD:1C:77:43:D3 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 03EF Signing time: Thu 21 Nov 2024 00:08:03 +0000 Manifest this update: Thu 21 Nov 2024 00:08:02 +0000 Manifest next update: Thu 28 Nov 2024 00:08:02 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: E3j8cn+gyxQv/XPZXLiP6o0yAwPhw8cVleJ2X9opS9g=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 6p9TqnChUnyfm26ZZLBLmmyndB/671MOguxKaFX62F4=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: WtBhf+2wV0FG+D0dG09G0N6uOWOutj/QTC9UQ4o3FqU=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: GXouMFAOJVC9NIYsZ23uZYKCTXWXo1NKnPdMvbwSfZE=) 5: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: HEB34Hkp/m9L/BxeJv7XDWdKw2MGO2ilQuFX47vSU/I=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: lvDZyQvH6vwmBGRDdLDTP57gwAxKU5Khp3dfalr0lOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Nov 21 00:08:02 2024 GMT Not After : Nov 28 00:08:02 2024 GMT Subject: CN=673e79e3-95ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:58:9c:dd:56:b3:42:1d:14:97:5d:3d:35: f9:21:8e:f1:b3:ea:74:12:d6:d1:82:6b:94:54:fe: 88:a9:1a:ae:25:a8:c3:0f:1e:25:27:01:61:a2:2a: a3:83:01:22:43:26:d9:c3:72:63:8c:65:b1:b6:84: 5d:39:c4:29:0b:5c:66:dd:c3:e9:a5:72:ab:54:10: 34:d4:ca:4e:33:42:ed:b3:1c:9f:1c:fd:7a:f5:bf: 64:3b:41:2a:05:5b:62:ec:60:b9:98:23:90:c0:8a: 44:64:92:5d:8a:29:b7:e1:5f:7b:6b:08:60:06:0f: e8:b7:c1:45:62:dd:3c:2e:45:55:52:73:9b:64:00: 67:54:bc:53:9f:75:db:62:eb:b2:45:1d:92:86:7d: 42:98:2f:f3:90:30:bb:aa:c5:b2:e4:5a:28:95:ad: f3:d6:5e:be:50:04:9f:dc:be:67:f7:57:7b:43:48: 9f:a4:5f:c0:02:ca:46:20:7f:af:cc:9b:aa:ff:7c: 6d:06:b0:5b:5d:9b:da:26:48:2a:41:a5:fb:e0:6a: d8:64:7d:b5:5e:8f:e3:86:a4:b0:fa:d3:37:0f:99: b6:f4:1c:93:42:d3:8e:b6:ae:03:32:ae:bb:ee:6f: 2e:3d:36:46:ed:cc:67:51:fc:45:dc:f3:dd:05:f5: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:36:98:93:A4:2E:E7:F5:DA:EB:AE:67:C1:CC:25:BD:1C:77:43:D3 X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:69:29:7f:1c:35:55:e8:65:71:fc:7e:5a:36:c8:93:7a:cf: 14:c1:0d:ee:0b:23:21:b8:34:a6:70:81:81:99:99:70:38:3c: 64:db:ac:47:21:a6:48:d0:a4:99:4a:ce:bb:39:8a:2d:06:91: a2:73:68:54:1e:e1:2b:2d:45:3a:fd:a6:fb:63:ec:5b:e1:8d: 95:37:b3:d6:57:69:eb:b9:a4:61:fd:9b:3e:74:23:8e:b5:83: d0:56:72:5c:6b:e0:91:89:86:0c:d8:ef:14:d0:63:ea:2f:06: 7f:98:ec:d9:0c:36:56:f1:bb:1d:77:8a:e1:b4:ea:cd:1a:28: e5:9b:99:3f:60:2c:b5:71:14:86:4f:06:56:c1:ec:ae:08:90: 4a:e2:b5:88:1f:44:ea:6d:f1:59:0f:46:aa:95:b4:34:6f:4b: a8:56:ed:a5:42:89:75:69:93:74:de:20:6e:a3:85:be:bb:9b: 29:57:7b:05:8d:91:5d:c5:5a:69:18:57:34:e1:12:16:ba:91: 9c:36:45:74:26:0d:fe:d3:65:a2:61:a1:c6:9c:fc:fd:65:96: 96:78:57:98:64:84:3b:1d:6e:8e:66:80:32:14:dd:07:9c:d0: c8:93:14:ca:c2:39:6f:ad:90:73:90:2d:36:18:f1:47:f7:20: 7a:68:9a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjQxMTIxMDAwODAyWhcNMjQxMTI4MDAwODAyWjAYMRYwFAYD VQQDEw02NzNlNzllMy05NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7ZYnN1Ws0IdFJddPTX5IY7xs+p0EtbRgmuUVP6IqRquJajDDx4lJwFhoiqj gwEiQybZw3JjjGWxtoRdOcQpC1xm3cPppXKrVBA01MpOM0LtsxyfHP169b9kO0Eq BVti7GC5mCOQwIpEZJJdiim34V97awhgBg/ot8FFYt08LkVVUnObZABnVLxTn3Xb YuuyRR2Shn1CmC/zkDC7qsWy5Foola3z1l6+UASf3L5n91d7Q0ifpF/AAspGIH+v zJuq/3xtBrBbXZvaJkgqQaX74GrYZH21Xo/jhqSw+tM3D5m29ByTQtOOtq4DMq67 7m8uPTZG7cxnUfxF3PPdBfWw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL82mJOk Luf12uuuZ8HMJb0cd0PTMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyaSl/HDVV6GVx/H5aNsiTes8UwQ3uCyMhuDSmcIGBmZlwODxk26xH IaZI0KSZSs67OYotBpGic2hUHuErLUU6/ab7Y+xb4Y2VN7PWV2nruaRh/Zs+dCOO tYPQVnJca+CRiYYM2O8U0GPqLwZ/mOzZDDZW8bsdd4rhtOrNGijlm5k/YCy1cRSG TwZWweyuCJBK4rWIH0TqbfFZD0aqlbQ0b0uoVu2lQol1aZN03iBuo4W+u5spV3sF jZFdxVppGFc04RIWupGcNkV0Jg3+02WiYaHGnPz9ZZaWeFeYZIQ7HW6OZoAyFN0H nNDIkxTKwjlvrZBzkC02GPFH9yB6aJqa -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:55 2024 by rpki-client on console-fra.rpki-client.org