$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: MmfywQ7Lcu0boThGI+Gzb1/rd1UspRp/IcVnir+B7ck= Subject key identifier: D6:63:60:53:46:88:42:FE:3F:93:E7:0C:6E:0B:FA:7A:FD:89:4A:8A Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 0201 Signing time: Sat 23 Nov 2024 01:36:29 +0000 Manifest this update: Sat 23 Nov 2024 01:36:29 +0000 Manifest next update: Sat 30 Nov 2024 01:36:29 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: wovYt5Ip9JuiMW5Uw0j3Fc8iXW+aKjEu+P7h2ACARTI=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Nov 23 01:36:29 2024 GMT Not After : Nov 30 01:36:29 2024 GMT Subject: CN=6741319d-a0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:85:af:8c:94:9b:ab:ae:50:c8:df:76:dc: 8c:b9:c9:fd:84:9c:18:2f:a8:82:69:61:fa:f8:8d: b6:73:3b:00:74:43:93:2b:7d:59:ec:61:78:51:70: 6b:36:2c:17:bc:a9:e0:b5:0f:31:6d:ae:5d:29:4a: 2d:87:93:f1:fb:0f:8f:1c:67:97:b1:0d:3e:77:fa: f1:e6:c7:c9:f1:bb:51:1f:56:ad:04:0e:a4:33:5e: 67:a5:d2:d7:2d:95:36:57:3b:66:15:07:ff:88:00: 01:6e:67:7d:8f:a5:dc:e7:65:f0:c4:9f:c6:93:e8: 3f:73:a7:e7:ea:fb:4e:6e:51:2e:12:f9:b9:fa:ea: b8:38:74:e4:3b:ac:ae:4b:0f:54:81:85:f1:0f:2c: 60:15:bb:02:d0:b9:ac:39:06:fc:4b:b9:42:55:0c: 6e:08:56:18:c1:85:b8:1a:d7:47:93:b1:20:c3:7c: 0a:2d:8f:35:1e:1c:2a:82:67:13:23:c1:60:69:51: af:45:dd:24:81:b7:be:f9:38:91:e5:09:75:37:2f: f8:a7:ee:4c:54:00:2d:15:25:74:28:36:51:e5:d7: 48:63:8b:08:c2:4c:25:59:11:72:8b:49:94:4f:a5: 82:3f:5b:c2:38:7d:67:2b:f4:65:99:da:12:fb:90: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:60:53:46:88:42:FE:3F:93:E7:0C:6E:0B:FA:7A:FD:89:4A:8A X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:87:e4:31:9f:d6:4b:a6:58:1a:1f:e5:fc:49:b4:ed:ac:f4: 07:27:40:32:a1:0f:1f:fd:d0:84:ac:25:f0:39:c4:50:ea:30: e8:c7:84:eb:68:53:fc:4f:0d:01:39:d0:2c:40:57:76:1e:c4: 25:1f:b9:1a:d2:51:24:9f:42:38:60:41:bf:09:fe:7e:95:cd: 1f:5b:98:ef:4c:1a:d4:a8:4c:f3:40:2a:93:0e:10:a6:f9:b1: e9:6b:8c:b1:63:84:c1:77:22:16:1a:b7:06:c7:76:42:fa:17: 2d:70:2b:27:27:c6:72:c8:7c:25:bb:f2:99:f7:6a:b8:9e:ef: 5e:46:f8:dd:1f:b5:86:61:5c:fa:07:cb:13:da:e1:ca:15:37: 4d:35:e8:12:ba:ef:c7:e3:d7:c3:19:f4:1d:82:3e:55:cf:8b: b6:ff:4b:b7:9a:1d:c7:4f:64:33:f3:5a:ac:68:d4:d5:0f:83: 27:06:09:cf:0a:a4:f6:ae:18:98:6c:56:8c:f1:86:1d:b7:9c: 40:ca:09:5c:1a:14:a3:b1:80:c1:a7:2f:98:cf:27:1b:a3:aa: bd:24:87:5b:4d:06:ae:9f:5f:90:b6:92:19:3e:7d:cc:e8:bf: 90:3b:25:7e:b7:0d:0b:f3:8e:14:41:85:98:99:c2:dc:78:33: 55:f8:1d:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjQxMTIzMDEzNjI5WhcNMjQxMTMwMDEzNjI5WjAYMRYwFAYD VQQDEw02NzQxMzE5ZC1hMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2G6Fr4yUm6uuUMjfdtyMucn9hJwYL6iCaWH6+I22czsAdEOTK31Z7GF4UXBr NiwXvKngtQ8xba5dKUoth5Px+w+PHGeXsQ0+d/rx5sfJ8btRH1atBA6kM15npdLX LZU2VztmFQf/iAABbmd9j6Xc52XwxJ/Gk+g/c6fn6vtOblEuEvm5+uq4OHTkO6yu Sw9UgYXxDyxgFbsC0LmsOQb8S7lCVQxuCFYYwYW4GtdHk7Egw3wKLY81HhwqgmcT I8FgaVGvRd0kgbe++TiR5Ql1Ny/4p+5MVAAtFSV0KDZR5ddIY4sIwkwlWRFyi0mU T6WCP1vCOH1nK/RlmdoS+5DiawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZjYFNG iEL+P5PnDG4L+nr9iUqKMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQh+Qxn9ZLplgaH+X8SbTtrPQHJ0AyoQ8f/dCErCXwOcRQ6jDox4Tr aFP8Tw0BOdAsQFd2HsQlH7ka0lEkn0I4YEG/Cf5+lc0fW5jvTBrUqEzzQCqTDhCm +bHpa4yxY4TBdyIWGrcGx3ZC+hctcCsnJ8ZyyHwlu/KZ92q4nu9eRvjdH7WGYVz6 B8sT2uHKFTdNNegSuu/H49fDGfQdgj5Vz4u2/0u3mh3HT2Qz81qsaNTVD4MnBgnP CqT2rhiYbFaM8YYdt5xAyglcGhSjsYDBpy+Yzycbo6q9JIdbTQaun1+QtpIZPn3M 6L+QOyV+tw0L844UQYWYmcLceDNV+B28 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org