$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json) Hash identifier: lwx/+N4vXrpqxOuFHdAG+yTlC8cRcVjHvBElRnaU7CE= Subject key identifier: B7:95:E6:0B:C3:F7:C3:1C:8D:C7:B7:48:82:B8:92:B6:C7:0A:23:FD Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft Manifest number: 3459 Signing time: Fri 22 Nov 2024 14:38:01 +0000 Manifest this update: Fri 22 Nov 2024 14:38:00 +0000 Manifest next update: Fri 29 Nov 2024 14:38:00 +0000 Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: Bq9+PLavo3cUwBH3P0nUXY4ZIxg0iC54dr/pmyDCamI=) 2: 93215346C57811EA8440684AC4F9AE02.roa (hash: aQwUipFelnXNZZsX8ffdswm2bvUoYzaPrvgd4Hz86Uc=) 3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: u4c1qwJ9TWATgmKTAMcATmYWWDAvo7ixDAZ/9U/tdpY=) 4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: w1bbBa3f8haD8dXl0Sh3tS90MqNdPu73xuXaH88DKo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Validity Not Before: Nov 22 14:38:00 2024 GMT Not After : Nov 29 14:38:00 2024 GMT Subject: CN=67409749-ec0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:85:64:25:63:81:10:33:79:c3:7d:32:f0: 36:b6:24:61:90:d3:1a:80:7f:27:66:44:a0:6d:d9: 07:ce:3b:7f:b8:f4:8a:28:28:8b:17:6a:6f:8e:4c: df:f0:3e:d9:2f:da:b2:79:63:f9:89:93:7b:41:a7: a5:82:e6:ee:2e:51:90:ed:8f:04:9e:3c:42:6b:cf: 28:93:b1:8f:1b:78:6f:05:7a:f7:62:20:b0:9e:7c: f5:aa:66:0f:aa:ea:1e:e9:cc:76:e8:7d:fd:f4:91: d6:08:67:df:da:90:7a:20:44:71:6e:64:d7:27:91: cf:66:1f:15:3c:91:0b:eb:ea:8a:ba:08:94:2c:7e: c5:9e:b4:a1:b8:64:14:16:74:06:15:11:e7:65:de: 4d:7a:02:11:69:c4:b6:7b:4c:51:28:f9:f9:7a:c8: 16:ff:fe:03:0a:4c:10:e2:74:cc:ae:87:5b:82:79: cd:23:b7:b4:c9:91:17:ff:54:d2:74:05:08:f3:72: cc:a9:28:db:ab:ba:cd:c4:36:15:f7:ef:54:bc:f4: 95:e0:8f:57:87:e7:ec:7f:02:e1:d0:14:f7:06:ed: 8d:48:4b:02:09:a6:fe:4e:e7:94:31:88:d9:a3:bc: ca:68:35:81:14:2d:ec:d6:fe:2f:77:0b:52:b2:d0: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:95:E6:0B:C3:F7:C3:1C:8D:C7:B7:48:82:B8:92:B6:C7:0A:23:FD X509v3 Authority Key Identifier: keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:94:17:3d:de:68:ae:89:85:2a:55:ce:ac:87:66:b6:a1:54: 8c:35:3c:88:47:13:8d:d0:1c:ad:f7:9c:32:b2:85:09:2b:2d: 97:52:85:75:22:b4:1e:ef:29:d2:9e:6f:84:56:5d:55:aa:26: 07:84:ea:28:ca:bd:24:c5:86:7d:37:d0:8d:43:ca:5d:e1:3a: e6:90:d7:ed:74:00:bc:e9:c1:4e:d1:23:87:fc:8b:fe:91:cf: 14:cc:c7:e8:e1:47:69:cf:ca:da:a3:7d:9d:ad:b7:7c:df:5c: a7:fe:ff:bb:48:85:93:c5:b3:7c:f6:7c:18:3a:84:54:be:00: ab:1d:33:74:92:f5:09:0b:10:4f:a7:1f:26:64:72:bc:a4:91: 10:07:93:4c:5e:a9:3f:a4:0b:52:67:d5:a4:a0:f7:f3:1a:8b: d7:31:14:a6:7f:b5:b7:05:fc:2f:51:d5:c8:59:a8:ab:33:7b: f3:47:68:2b:e5:92:12:71:bd:d4:34:d2:e5:aa:a2:15:ee:d6: ef:59:86:3b:1d:1c:18:ab:a9:7b:98:e3:4e:25:69:d5:91:14: 7e:56:c3:74:01:b2:a9:be:03:3e:65:8a:4a:10:64:2b:20:b5: 49:e5:a7:9f:c2:06:e8:44:f5:1a:c0:03:02:73:03:ef:d0:f9: b2:23:6f:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy QTdEODdEOEQwHhcNMjQxMTIyMTQzODAwWhcNMjQxMTI5MTQzODAwWjAYMRYwFAYD VQQDEw02NzQwOTc0OS1lYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKqFZCVjgRAzecN9MvA2tiRhkNMagH8nZkSgbdkHzjt/uPSKKCiLF2pvjkzf 8D7ZL9qyeWP5iZN7QaelgubuLlGQ7Y8EnjxCa88ok7GPG3hvBXr3YiCwnnz1qmYP quoe6cx26H399JHWCGff2pB6IERxbmTXJ5HPZh8VPJEL6+qKugiULH7FnrShuGQU FnQGFRHnZd5NegIRacS2e0xRKPn5esgW//4DCkwQ4nTMrodbgnnNI7e0yZEX/1TS dAUI83LMqSjbq7rNxDYV9+9UvPSV4I9Xh+fsfwLh0BT3Bu2NSEsCCab+TueUMYjZ o7zKaDWBFC3s1v4vdwtSstBSQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeV5gvD 98Mcjce3SIK4krbHCiP9MB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjU5Qy83MzVEQzRENjFEOEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtm Qk9EdnJWMlNSTUFxZllmWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9lBc93miuiYUqVc6sh2a2oVSMNTyIRxON0Byt95wysoUJKy2XUoV1 IrQe7ynSnm+EVl1VqiYHhOooyr0kxYZ9N9CNQ8pd4TrmkNftdAC86cFO0SOH/Iv+ kc8UzMfo4Udpz8rao32drbd831yn/v+7SIWTxbN89nwYOoRUvgCrHTN0kvUJCxBP px8mZHK8pJEQB5NMXqk/pAtSZ9WkoPfzGovXMRSmf7W3BfwvUdXIWairM3vzR2gr 5ZIScb3UNNLlqqIV7tbvWYY7HRwYq6l7mONOJWnVkRR+VsN0AbKpvgM+ZYpKEGQr ILVJ5aefwgboRPUawAMCcwPv0PmyI28p -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org