$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: G6eqVlUsBtsh5LwfC5NA34LYiTXos80mVpxaYUEAbec= Subject key identifier: 48:3E:E0:D8:5C:AF:42:43:BA:BA:9E:41:40:F7:66:F4:68:D3:E5:9A Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 02BF Signing time: Sat 23 Nov 2024 00:59:24 +0000 Manifest this update: Sat 23 Nov 2024 00:59:24 +0000 Manifest next update: Sat 30 Nov 2024 00:59:24 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: stDdgNZ41pbXoToBGFqMKyLjZL8712dahsj4fhqFSm0=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Nov 23 00:59:24 2024 GMT Not After : Nov 30 00:59:24 2024 GMT Subject: CN=674128ec-56a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ae:b0:62:d0:7b:db:fa:94:a1:92:b1:f3:40: 65:b5:b4:8c:5c:23:1e:e7:82:b1:43:86:1e:cc:c6: 58:ab:79:97:67:19:78:d7:9e:08:78:b4:04:df:fd: 81:eb:61:08:9c:6d:2b:d1:1a:38:6f:23:2a:14:81: bc:5b:6a:88:48:60:c2:58:00:45:a4:56:39:3f:f9: 03:1c:00:21:62:6b:75:f6:20:78:43:f5:a9:8f:01: a7:5f:17:30:50:5e:18:0f:64:e5:3b:8a:26:91:33: b3:e3:8b:e2:bf:27:59:d8:d2:86:7b:36:32:d7:9d: 1f:fc:a2:c2:f4:32:0f:94:24:69:07:ec:3e:05:50: a4:fd:7b:be:95:58:e9:d3:c0:24:c9:04:61:8a:2d: 54:20:77:17:bf:57:e4:10:9c:c1:02:10:d9:b0:70: 60:8c:53:2f:b5:e4:e9:ce:dd:74:54:52:65:09:7b: 70:4e:d2:cd:3c:f0:cd:4d:75:a7:a8:0b:3d:38:78: b5:ea:2f:6b:3f:42:1b:f9:33:7e:29:94:a5:cf:6b: 8c:83:fc:75:50:2c:60:8c:d3:89:64:a4:b3:eb:d5: ba:6e:d0:8f:df:5b:f3:2a:13:17:24:aa:b1:77:35: b1:9b:81:d1:9c:09:c1:e2:60:c3:4a:1d:69:36:24: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3E:E0:D8:5C:AF:42:43:BA:BA:9E:41:40:F7:66:F4:68:D3:E5:9A X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:c2:23:52:43:19:47:7f:68:21:18:1e:6c:86:6a:d0:5c:cc: 7f:11:51:ce:f1:45:73:42:50:8d:06:3a:3b:ea:e8:fe:9b:ee: 33:58:cd:d5:a4:f2:6a:f9:30:4e:19:04:2d:76:6f:28:5d:3a: 92:47:30:31:ae:e9:b5:ee:e2:20:79:76:2d:e0:04:30:70:e0: fa:33:28:2f:1d:c8:71:e7:dc:d3:0f:ae:97:0e:23:3e:af:23: 55:2c:c7:0d:ab:83:6f:9f:52:75:b3:5d:21:c3:c3:b4:75:af: 02:fe:d8:b1:2e:57:87:42:98:35:04:60:f9:79:45:13:da:23: 6f:6a:46:5b:83:3b:83:1e:a0:79:75:5e:b8:5c:cb:f1:02:16: 71:fc:1b:7d:c2:eb:64:a1:17:bf:6f:63:aa:ca:a8:4b:77:cb: ed:76:f5:a7:f2:e2:9e:9a:3b:42:43:99:cf:10:39:6d:35:f9: 5a:ee:07:a5:0f:18:ed:a7:71:58:53:73:8f:85:3a:d4:97:1b: 03:61:63:f2:04:bd:ff:60:3a:67:f8:a7:bf:2e:ac:ae:23:bb: 97:20:49:ad:54:a2:aa:31:24:78:48:01:6a:af:5d:b5:0e:1c: ca:d3:48:9e:cf:f0:7f:43:b1:5d:ec:d8:36:90:d6:d8:6d:c8: 0d:29:ab:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjQxMTIzMDA1OTI0WhcNMjQxMTMwMDA1OTI0WjAYMRYwFAYD VQQDEw02NzQxMjhlYy01NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA166wYtB72/qUoZKx80BltbSMXCMe54KxQ4YezMZYq3mXZxl4154IeLQE3/2B 62EInG0r0Ro4byMqFIG8W2qISGDCWABFpFY5P/kDHAAhYmt19iB4Q/WpjwGnXxcw UF4YD2TlO4omkTOz44vivydZ2NKGezYy150f/KLC9DIPlCRpB+w+BVCk/Xu+lVjp 08AkyQRhii1UIHcXv1fkEJzBAhDZsHBgjFMvteTpzt10VFJlCXtwTtLNPPDNTXWn qAs9OHi16i9rP0Ib+TN+KZSlz2uMg/x1UCxgjNOJZKSz69W6btCP31vzKhMXJKqx dzWxm4HRnAnB4mDDSh1pNiRmZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEg+4Nhc r0JDurqeQUD3ZvRo0+WaMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZwiNSQxlHf2ghGB5shmrQXMx/EVHO8UVzQlCNBjo76uj+m+4zWM3V pPJq+TBOGQQtdm8oXTqSRzAxrum17uIgeXYt4AQwcOD6MygvHchx59zTD66XDiM+ ryNVLMcNq4Nvn1J1s10hw8O0da8C/tixLleHQpg1BGD5eUUT2iNvakZbgzuDHqB5 dV64XMvxAhZx/Bt9wutkoRe/b2OqyqhLd8vtdvWn8uKemjtCQ5nPEDltNfla7gel Dxjtp3FYU3OPhTrUlxsDYWPyBL3/YDpn+Ke/LqyuI7uXIEmtVKKqMSR4SAFqr121 DhzK00iez/B/Q7Fd7Ng2kNbYbcgNKat2 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org