$ rpki-client -vvf rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft File: wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft (raw, json) Hash identifier: 1oRXuhuK2ivr0i3cnTgtLsp6c33vGZy5mFUhcICaROQ= Subject key identifier: DC:15:00:6F:C7:DC:EA:74:94:13:77:24:C1:4C:97:39:99:89:59:7A Authority key identifier: C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 Certificate issuer: /CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft Manifest number: 0160 Signing time: Sat 23 Nov 2024 02:21:38 +0000 Manifest this update: Sat 23 Nov 2024 02:21:38 +0000 Manifest next update: Sat 30 Nov 2024 02:21:38 +0000 Files and hashes: 1: wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl (hash: xZFwqwqGvuWDXECPU8YE7+9H6v6Uo/fapd2k7/mpt6A=) 2: 34FF021A8DA111EDBDB7DC23C4F9AE02.roa (hash: n1asAh/kYK96PocnYNBrmITqyGqCFenAeW5UTm2vba0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Validity Not Before: Nov 23 02:21:38 2024 GMT Not After : Nov 30 02:21:38 2024 GMT Subject: CN=67413c32-9dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dd:64:0e:da:81:98:b7:3e:ee:31:b3:5c:26: 03:4e:59:62:6e:44:1d:56:87:de:6e:4d:39:e8:90: 40:f6:4e:0e:85:e3:d0:e6:97:4d:85:7b:ae:3c:08: 5e:52:1a:e5:75:34:f3:aa:a0:53:ec:62:d2:d3:41: 7f:8f:f1:73:67:2e:26:81:3d:dc:93:b4:af:bd:d4: c4:a3:29:11:1a:9d:e1:bc:21:dd:d1:87:3a:b3:06: 05:9e:e7:82:ff:6e:7a:97:ac:74:2a:b5:83:42:e4: cb:52:e5:ae:b5:a7:3e:28:8e:05:9c:e1:5c:28:e7: 14:db:42:98:c1:23:7a:30:41:0b:09:c2:ea:70:5a: 64:21:5b:5f:14:1e:70:ef:f8:07:23:50:0d:6e:23: 21:ee:ee:b1:25:c2:fc:f7:c5:74:e5:b1:60:1b:86: ea:fc:c0:48:e7:70:10:1a:f5:38:55:f2:0f:ba:70: d7:03:b8:fd:c8:32:86:40:0b:68:a1:96:e8:05:cf: 0f:e4:9e:eb:6c:9c:42:14:c1:d6:db:7b:40:70:22: 26:0a:11:54:7e:6c:9b:b4:9f:2b:6c:c2:1a:04:8e: 6f:bd:ed:d5:3c:98:05:a5:86:44:ea:95:93:b2:81: bb:ab:ce:2e:45:1e:d8:9b:9f:8d:b7:27:da:2c:05: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:15:00:6F:C7:DC:EA:74:94:13:77:24:C1:4C:97:39:99:89:59:7A X509v3 Authority Key Identifier: keyid:C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:05:b5:1e:52:45:f1:47:0d:20:44:22:bf:47:7c:51:2d:ce: f9:22:20:bb:37:b7:c6:fa:16:20:87:1a:46:32:bf:25:c2:ea: bc:a9:04:cb:d0:52:ab:50:4c:d1:c4:2a:d9:ca:a5:ff:12:9c: a1:3d:69:dd:d4:2e:06:82:62:18:9b:27:60:6e:45:71:4a:fd: 79:17:36:88:cb:0e:a4:e2:83:6a:8d:26:82:6f:7d:0a:24:26: 6c:40:d9:ee:99:df:ff:11:04:2a:79:ed:29:03:50:e4:b9:aa: d9:aa:1a:1f:9e:05:cd:6e:bb:7b:e7:7d:17:49:da:b7:52:d6: 16:3d:29:6a:5c:3f:b1:49:4b:21:68:eb:a2:49:2e:95:39:67: 07:17:ed:9a:e6:dd:e4:9c:97:c9:2f:19:ce:73:b5:d9:d2:01: 7f:60:22:49:09:0a:ee:c0:01:ba:52:a8:67:4d:60:d0:23:c9: f3:b6:d7:2b:a9:d6:a9:58:7e:9d:d0:22:80:e9:0d:53:ac:6d: 6e:0f:fb:9d:84:55:ef:1b:64:90:a5:f3:8c:44:b7:94:f0:35: c5:a3:94:30:97:0d:de:fe:02:e0:69:d5:cc:e8:53:cd:ad:7f: dd:61:21:d4:4b:b4:43:33:e7:0c:9a:68:89:63:90:aa:27:50: 19:49:da:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U4NjgxMTAvBgNVBAUTKEMyNjQzMzcwQjdDREIxQjYxNTlBQkQyRDdENjc3MkM2 RjZEMkZCNjUwHhcNMjQxMTIzMDIyMTM4WhcNMjQxMTMwMDIyMTM4WjAYMRYwFAYD VQQDEw02NzQxM2MzMi05ZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6d1kDtqBmLc+7jGzXCYDTllibkQdVofebk056JBA9k4OhePQ5pdNhXuuPAhe UhrldTTzqqBT7GLS00F/j/FzZy4mgT3ck7SvvdTEoykRGp3hvCHd0Yc6swYFnueC /256l6x0KrWDQuTLUuWutac+KI4FnOFcKOcU20KYwSN6MEELCcLqcFpkIVtfFB5w 7/gHI1ANbiMh7u6xJcL898V05bFgG4bq/MBI53AQGvU4VfIPunDXA7j9yDKGQAto oZboBc8P5J7rbJxCFMHW23tAcCImChFUfmybtJ8rbMIaBI5vve3VPJgFpYZE6pWT soG7q84uRR7Ym5+NtyfaLAUxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwVAG/H 3Op0lBN3JMFMlzmZiVl6MB8GA1UdIwQYMBaAFMJkM3C3zbG2FZq9LX1ncsb20vtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTg2OC83NDZBRjBCMjhE OUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNiWVZtcjB0ZldkeXh2YlMt MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dtUXpjTGZOc2JZVm1yMHRmV2R5eHZiUy0yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTg2OC83NDZBRjBCMjhEOUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNi WVZtcjB0ZldkeXh2YlMtMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjBbUeUkXxRw0gRCK/R3xRLc75IiC7N7fG+hYghxpGMr8lwuq8qQTL 0FKrUEzRxCrZyqX/EpyhPWnd1C4GgmIYmydgbkVxSv15FzaIyw6k4oNqjSaCb30K JCZsQNnumd//EQQqee0pA1DkuarZqhofngXNbrt7530XSdq3UtYWPSlqXD+xSUsh aOuiSS6VOWcHF+2a5t3knJfJLxnOc7XZ0gF/YCJJCQruwAG6UqhnTWDQI8nzttcr qdapWH6d0CKA6Q1TrG1uD/udhFXvG2SQpfOMRLeU8DXFo5Qwlw3e/gLgadXM6FPN rX/dYSHUS7RDM+cMmmiJY5CqJ1AZSdpx -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org