$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft File: WUvRQ79yOI2ipctku8ORCIj2TcU.mft (raw, json) Hash identifier: C7BPajThlBMuAxo0O03W6/QDHDxEIBMFTSahZQBnLLA= Subject key identifier: 0E:2F:FA:4C:D3:6A:98:46:26:CB:F4:AB:33:F1:31:0A:D8:89:AA:59 Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft Manifest number: 35 Signing time: Thu 21 Nov 2024 05:35:06 +0000 Manifest this update: Thu 21 Nov 2024 05:35:06 +0000 Manifest next update: Thu 28 Nov 2024 05:35:06 +0000 Files and hashes: 1: WUvRQ79yOI2ipctku8ORCIj2TcU.crl (hash: KIXLDZWzyPJxDe91iOwKX7snAVhDG66lWRl/opoTV1o=) 2: ACDAB45E592011EF976B8A1BC4F9AE02.roa (hash: U3ZnJBxT1IeYR8+mYBl3G+PAu8VK9/dUHIyNaklFW4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Validity Not Before: Nov 21 05:35:06 2024 GMT Not After : Nov 28 05:35:06 2024 GMT Subject: CN=673ec68a-d51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:ba:57:00:bc:01:3f:cc:63:3d:86:ed:82: 86:86:c1:9b:6c:8a:1f:55:f8:02:b4:70:46:e0:fa: 10:e2:d6:af:7d:38:1f:74:0b:e1:61:14:6d:ec:c6: 26:70:31:1c:08:c2:7c:83:19:cd:67:7e:c3:8a:18: 6d:3e:39:82:d8:8a:2a:f0:8b:df:be:28:1d:d0:e6: 84:81:6a:5f:e4:dc:13:08:a2:78:aa:eb:6d:99:03: ce:f8:d0:c3:41:68:c8:f6:34:c1:05:b1:c8:f6:aa: 2c:a3:8b:e9:66:ab:59:a9:1f:48:e1:f8:9c:44:6e: 7c:ac:20:53:69:bc:04:95:af:06:ad:95:6d:64:c6: 82:e5:f3:56:de:ba:c1:e6:34:af:e8:83:e3:9d:45: 03:4f:63:9a:74:95:1f:ca:d3:0f:2c:d1:a8:ef:80: ca:8e:dd:7c:15:23:cb:e1:17:d6:1a:22:47:cd:eb: d9:3c:6c:8c:db:da:d9:03:d3:c7:ac:aa:76:b0:4d: 6b:ff:d7:ea:74:0c:d6:f9:aa:0b:5c:31:0e:6f:74: 44:93:f2:20:a0:65:dd:1d:ee:ca:05:c1:96:24:d9: 7a:40:bb:ee:99:d1:e9:ef:82:72:d7:f1:a5:3d:0d: 8e:80:5d:96:6d:3e:5f:46:6d:8f:5f:db:f0:d7:b3: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2F:FA:4C:D3:6A:98:46:26:CB:F4:AB:33:F1:31:0A:D8:89:AA:59 X509v3 Authority Key Identifier: keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3e:14:13:89:e6:ae:79:80:73:dd:ff:ab:78:95:e9:29:8b: fc:28:dc:4d:38:c7:a4:c2:96:3d:61:2a:74:05:08:f6:e1:ef: 57:f2:6f:60:18:60:2b:75:2c:3f:54:a0:10:a5:28:85:11:3b: 07:c8:eb:26:fe:99:e7:16:83:6a:dd:93:7a:46:51:c4:af:e4: 5a:53:92:5e:48:11:39:51:a8:95:8d:af:77:bb:59:dc:90:9e: 41:ee:c8:16:39:8c:c7:04:a2:35:7f:8b:e8:15:f7:51:65:d8: 10:f4:c5:cf:0b:51:5e:1b:83:18:69:0e:c4:29:08:91:4f:92: ac:91:c9:28:9d:f2:ff:ea:7e:a1:7b:ba:27:ee:14:af:83:65: c3:94:70:a0:f9:08:92:29:c0:83:bc:07:ac:aa:de:e7:00:71: 77:e2:09:08:0f:ea:cf:7f:11:f0:fc:ba:4a:a9:49:5c:a1:c7: 99:69:1d:2c:52:83:5a:d4:cb:44:35:5e:20:49:a1:70:cb:f3: 01:08:b0:49:84:f6:5c:89:35:04:07:f8:78:37:4f:a6:40:07: 9c:9a:b0:e5:c8:fa:9b:73:6b:23:7b:bb:c4:0b:70:28:b8:07: 4c:d8:9e:e6:d4:77:8c:c6:5f:55:98:94:8d:06:d3:3f:a2:45: 83:25:05:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTUzQTExMC8GA1UEBRMoNTk0QkQxNDNCRjcyMzg4REEyQTVDQjY0QkJDMzkxMDg4 OEY2NERDNTAeFw0yNDExMjEwNTM1MDZaFw0yNDExMjgwNTM1MDZaMBgxFjAUBgNV BAMTDTY3M2VjNjhhLWQ1MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/rbpXALwBP8xjPYbtgoaGwZtsih9V+AK0cEbg+hDi1q99OB90C+FhFG3sxiZw MRwIwnyDGc1nfsOKGG0+OYLYiirwi9++KB3Q5oSBal/k3BMIoniq622ZA8740MNB aMj2NMEFscj2qiyji+lmq1mpH0jh+JxEbnysIFNpvASVrwatlW1kxoLl81beusHm NK/og+OdRQNPY5p0lR/K0w8s0ajvgMqO3XwVI8vhF9YaIkfN69k8bIzb2tkD08es qnawTWv/1+p0DNb5qgtcMQ5vdEST8iCgZd0d7soFwZYk2XpAu+6Z0envgnLX8aU9 DY6AXZZtPl9GbY9f2/DXs9NRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDi/6TNNq mEYmy/SrM/ExCtiJqlkwHwYDVR0jBBgwFoAUWUvRQ79yOI2ipctku8ORCIj2TcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNTNBLzRFNkJDNjZBNTky MDExRUZBNTYwMDA0RUM0RjlBRTAyL1dVdlJRNzl5T0kyaXBjdGt1OE9SQ0lqMlRj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1V2UlE3OXlPSTJpcGN0a3U4T1JDSWoyVGNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB NTNBLzRFNkJDNjZBNTkyMDExRUZBNTYwMDA0RUM0RjlBRTAyL1dVdlJRNzl5T0ky aXBjdGt1OE9SQ0lqMlRjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8+FBOJ5q55gHPd/6t4lekpi/wo3E04x6TClj1hKnQFCPbh71fyb2AY YCt1LD9UoBClKIUROwfI6yb+mecWg2rdk3pGUcSv5FpTkl5IETlRqJWNr3e7WdyQ nkHuyBY5jMcEojV/i+gV91Fl2BD0xc8LUV4bgxhpDsQpCJFPkqyRySid8v/qfqF7 uifuFK+DZcOUcKD5CJIpwIO8B6yq3ucAcXfiCQgP6s9/EfD8ukqpSVyhx5lpHSxS g1rUy0Q1XiBJoXDL8wEIsEmE9lyJNQQH+Hg3T6ZAB5yasOXI+ptzayN7u8QLcCi4 B0zYnubUd4zGX1WYlI0G0z+iRYMlBSY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org