$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: 9+kKXljeuL41ndMfwkCU0q9PIpuSlcwY9nenxKWGnuM= Subject key identifier: 67:F9:42:0C:63:F1:C8:96:C7:4A:FD:03:CB:E4:A9:96:46:FE:CB:27 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 1D Signing time: Wed 23 Oct 2024 06:33:28 +0000 Manifest this update: Wed 23 Oct 2024 06:33:27 +0000 Manifest next update: Wed 30 Oct 2024 06:33:27 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: TxqLFfuE3+LUttAwtoJQnyNuVdtW4FR5ekLE1daxAMI=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Oct 23 06:33:27 2024 GMT Not After : Oct 30 06:33:27 2024 GMT Subject: CN=671898b8-afa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4a:43:94:de:60:04:44:b9:e3:be:34:2a:18: a5:e6:6a:63:0a:28:a8:4f:72:e8:1b:f7:f4:ba:7e: f1:71:b7:84:bf:1f:79:76:b8:97:ad:fe:de:8a:d8: 06:3c:5c:db:0d:65:60:50:8c:c9:6b:22:eb:4a:b5: 64:00:3d:f7:c8:60:03:65:2c:db:05:55:68:e1:6c: 4e:c4:48:b7:3d:ca:b2:95:71:09:d6:2c:96:2c:e0: 3b:ff:14:c7:8a:9d:fa:88:9d:e4:67:b8:7c:d3:88: f6:d3:6c:12:c5:e5:ea:2e:46:ff:87:03:52:64:24: 1a:9b:26:0d:76:52:3e:a4:ed:30:29:b3:da:dd:1e: 81:74:06:50:53:4c:17:c9:37:39:2a:d2:39:fa:9c: 8b:96:3a:61:b9:07:12:e6:6f:b3:82:ec:84:25:3b: 91:00:3d:61:bf:a0:2a:fa:aa:92:e7:8c:b5:e8:45: 8f:c8:38:77:94:cc:e7:67:79:ae:a9:a3:77:77:0c: 0f:73:8e:ac:72:9a:c6:e3:61:28:bb:48:86:ce:73: de:84:e5:92:24:47:67:e8:5f:db:b0:59:ce:9b:d5: 95:38:7e:e7:46:1c:90:3a:88:5a:b5:d7:12:6d:72: 9b:ae:c0:e6:1a:53:91:80:d7:a1:f4:f0:ec:ec:4b: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:42:0C:63:F1:C8:96:C7:4A:FD:03:CB:E4:A9:96:46:FE:CB:27 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a4:5d:a4:1f:46:d1:a9:b5:7d:82:5c:c9:43:04:62:c1:89: 19:53:84:b7:11:09:fb:31:71:a9:52:0b:f0:9d:8f:f6:1f:c6: 05:0d:11:64:23:bf:9f:58:e9:cc:24:46:0e:09:1a:cb:8d:6d: e2:f5:70:d5:78:b1:69:86:96:cc:3e:77:cb:ec:bf:13:ae:b3: f8:0e:81:b3:0d:b1:17:27:f3:7b:03:4c:22:14:47:70:2c:2c: e5:34:9f:70:ff:e7:35:aa:04:1c:0f:99:c1:78:a8:c5:f3:50: 52:7b:93:9b:c9:3e:3d:98:93:31:4a:b1:07:9f:4c:bc:bb:d5: a0:35:f0:1a:92:25:e8:64:f0:34:8b:06:62:01:8a:e3:0e:43: 69:ec:7d:f9:51:7e:ad:e2:01:17:f4:49:4a:3e:8a:48:1d:89: fb:47:40:b9:d9:e6:6b:74:e2:c0:02:cd:8d:d2:00:da:02:2f: b4:da:b4:c0:45:99:47:9f:cc:ae:f2:92:88:8e:26:4a:f6:dc: 35:18:47:a2:16:d4:69:0d:27:88:ad:1e:3f:33:c5:9e:9f:71: af:58:7d:51:80:8e:bd:0e:77:cf:7b:ec:37:b1:75:3b:c6:b2: ec:2b:cd:d7:6f:f9:d0:7b:dd:6d:18:dc:dc:94:c5:c8:a1:99: 7f:44:d7:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjJEOTExMC8GA1UEBRMoRkYwNjM0M0NBOTlBNjQxMDAwQzcxMUYzMkQ2OUY1OUMx OUFDRjA0MzAeFw0yNDEwMjMwNjMzMjdaFw0yNDEwMzAwNjMzMjdaMBgxFjAUBgNV BAMTDTY3MTg5OGI4LWFmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtSkOU3mAERLnjvjQqGKXmamMKKKhPcugb9/S6fvFxt4S/H3l2uJet/t6K2AY8 XNsNZWBQjMlrIutKtWQAPffIYANlLNsFVWjhbE7ESLc9yrKVcQnWLJYs4Dv/FMeK nfqIneRnuHzTiPbTbBLF5eouRv+HA1JkJBqbJg12Uj6k7TAps9rdHoF0BlBTTBfJ Nzkq0jn6nIuWOmG5BxLmb7OC7IQlO5EAPWG/oCr6qpLnjLXoRY/IOHeUzOdnea6p o3d3DA9zjqxymsbjYSi7SIbOc96E5ZIkR2foX9uwWc6b1ZU4fudGHJA6iFq11xJt cpuuwOYaU5GA16H08OzsS+vJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ/lCDGPx yJbHSv0Dy+Splkb+yycwHwYDVR0jBBgwFoAU/wY0PKmaZBAAxxHzLWn1nBms8EMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMkQ5L0IzMTIwMUUwNjdB QTExRUY4RjQ5OEEyN0M0RjlBRTAyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhF TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3dZMFBLbWFaQkFBeHhIekxXbjFuQm1zOEVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MkQ5L0IzMTIwMUUwNjdBQTExRUY4RjQ5OEEyN0M0RjlBRTAyL193WTBQS21hWkJB QXh4SHpMV24xbkJtczhFTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE6kXaQfRtGptX2CXMlDBGLBiRlThLcRCfsxcalSC/Cdj/YfxgUNEWQj v59Y6cwkRg4JGsuNbeL1cNV4sWmGlsw+d8vsvxOus/gOgbMNsRcn83sDTCIUR3As LOU0n3D/5zWqBBwPmcF4qMXzUFJ7k5vJPj2YkzFKsQefTLy71aA18BqSJehk8DSL BmIBiuMOQ2nsfflRfq3iARf0SUo+ikgdiftHQLnZ5mt04sACzY3SANoCL7TatMBF mUefzK7ykoiOJkr23DUYR6IW1GkNJ4itHj8zxZ6fca9YfVGAjr0Od8977DexdTvG suwrzddv+dB73W0Y3NyUxcihmX9E184= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org