$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: WmDdXwMWLxEDr6C7gZnJ7taAgWZBui2DZmAYFxcs3lI= Subject key identifier: 2C:13:9F:A0:C6:F0:FD:D7:C2:24:6A:22:BB:E8:41:A7:92:E1:71:01 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0D2B Signing time: Fri 22 Nov 2024 17:57:49 +0000 Manifest this update: Fri 22 Nov 2024 17:57:49 +0000 Manifest next update: Fri 29 Nov 2024 17:57:49 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: w9jkblzcGgo9uDYYwQUPCqP8k0YjxSYSAef3tvGTNgE=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Nov 22 17:57:49 2024 GMT Not After : Nov 29 17:57:49 2024 GMT Subject: CN=6740c61d-f743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:74:33:50:21:f5:23:66:1d:ed:e0:ca:0f: 3c:d1:87:55:df:14:87:5d:0c:18:31:53:a3:cb:79: 10:e2:2c:0f:cd:95:a3:26:a1:19:7a:65:ce:05:b7: 57:19:e2:0f:ca:ea:b7:cd:df:b3:88:33:0f:b2:c7: f0:7b:cb:bb:d8:c0:f5:37:18:86:d0:fd:b1:d6:d2: 03:9d:bc:2e:f6:b8:76:41:62:4e:b9:b3:76:6e:e8: ab:fe:1a:30:39:19:9a:1c:76:a3:5a:d5:52:ad:96: 0a:d1:8b:5f:78:37:a5:4b:79:00:31:81:1e:0a:2b: ca:94:e4:a9:85:e8:aa:e8:1c:c4:e7:79:5d:9b:c1: 7f:6e:f2:ca:84:a9:56:fa:5e:14:ab:2b:6f:50:a7: 91:13:99:62:bc:11:a0:c6:fb:ae:88:7e:e9:86:36: 03:97:97:3e:b7:1c:b3:f9:14:79:82:0c:c5:78:4e: 48:46:6d:30:a2:8c:29:de:56:26:ee:16:01:b2:86: 07:f3:1f:f6:d6:93:38:53:3a:09:52:05:44:39:17: 42:d5:19:ba:33:e8:92:16:2d:21:96:83:f4:25:3a: 70:2e:3b:75:7f:82:4b:ab:6d:c5:ac:52:91:73:8e: d4:47:6c:b2:85:a2:b1:f5:5f:c4:a9:e3:2e:b3:65: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:13:9F:A0:C6:F0:FD:D7:C2:24:6A:22:BB:E8:41:A7:92:E1:71:01 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e3:11:8e:9d:1b:19:66:b0:28:ca:be:ee:a6:8e:6e:31:35: be:b9:6f:7f:06:fd:d2:f0:9a:57:77:72:ff:cd:3d:ed:c2:45: ae:de:c2:80:e1:55:55:ba:5c:ee:98:b0:79:d6:79:18:fc:4e: dc:45:07:48:b7:5e:c3:e7:3b:45:79:1a:9a:3b:2c:a9:bd:9a: e7:3b:60:a0:cc:50:9c:c3:97:0e:96:a3:07:94:74:92:52:55: 0f:0a:f0:25:05:fe:f5:45:64:f4:77:96:0b:87:6b:c9:60:9a: 4d:b0:99:67:e4:d5:b3:b7:72:f9:b1:e5:9e:5f:30:8f:66:7a: 72:c6:53:4c:45:3e:c6:64:73:87:a8:bd:a8:01:a2:1c:72:b3: d7:9f:5c:b2:c3:1e:dc:5a:a3:9f:16:07:0e:bc:0b:0e:86:f8: 3e:b3:c4:4b:13:e7:4a:e7:1b:1b:0d:90:9c:96:c2:c8:69:85: 0c:22:4a:fc:89:dd:8b:1b:5d:42:cb:61:57:13:d0:77:a6:ee: 05:bd:68:36:13:2e:88:57:b2:98:62:02:30:88:60:82:08:be: 55:73:64:e8:7e:1e:a8:2f:66:a1:77:1b:f1:17:0d:f1:6f:dc: e4:5b:8b:f9:92:99:55:44:47:b6:e5:6d:e4:94:f1:fc:69:79: f4:52:1c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjQxMTIyMTc1NzQ5WhcNMjQxMTI5MTc1NzQ5WjAYMRYwFAYD VQQDEw02NzQwYzYxZC1mNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLB0M1Ah9SNmHe3gyg880YdV3xSHXQwYMVOjy3kQ4iwPzZWjJqEZemXOBbdX GeIPyuq3zd+ziDMPssfwe8u72MD1NxiG0P2x1tIDnbwu9rh2QWJOubN2buir/how ORmaHHajWtVSrZYK0YtfeDelS3kAMYEeCivKlOSpheiq6BzE53ldm8F/bvLKhKlW +l4UqytvUKeRE5livBGgxvuuiH7phjYDl5c+txyz+RR5ggzFeE5IRm0woowp3lYm 7hYBsoYH8x/21pM4UzoJUgVEORdC1Rm6M+iSFi0hloP0JTpwLjt1f4JLq23FrFKR c47UR2yyhaKx9V/EqeMus2WDvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwTn6DG 8P3XwiRqIrvoQaeS4XEBMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM4xGOnRsZZrAoyr7upo5uMTW+uW9/Bv3S8JpXd3L/zT3twkWu3sKA 4VVVulzumLB51nkY/E7cRQdIt17D5ztFeRqaOyypvZrnO2CgzFCcw5cOlqMHlHSS UlUPCvAlBf71RWT0d5YLh2vJYJpNsJln5NWzt3L5seWeXzCPZnpyxlNMRT7GZHOH qL2oAaIccrPXn1yywx7cWqOfFgcOvAsOhvg+s8RLE+dK5xsbDZCclsLIaYUMIkr8 id2LG11Cy2FXE9B3pu4FvWg2Ey6IV7KYYgIwiGCCCL5Vc2Tofh6oL2ahdxvxFw3x b9zkW4v5kplVREe25W3klPH8aXn0UhzT -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:13 2024 by rpki-client on console-ams.rpki-client.org