$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: VNL7RRq4J+PHZRAWcAEAmGYY+QlSopG2URiLZEisPTI= Subject key identifier: C6:4D:C2:B2:02:23:09:7A:CE:8D:7F:6E:62:25:7F:4E:6D:2A:E0:B3 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0931 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 091D Signing time: Wed 20 Nov 2024 20:02:38 +0000 Manifest this update: Wed 20 Nov 2024 20:02:38 +0000 Manifest next update: Wed 27 Nov 2024 20:02:38 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: OB4m0dCb7ZKhgrTgyb7XfDxbndz02PmtaK3cWNwHoCo=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: rU8ueRHigkcnrboSiyuAgDPtglpiwxpoV+xUGO9FxD4=) 3: 7C3B57D48FBE11EA9797847DC4F9AE02.roa (hash: tVnphRRZgGFSH92354sv/OpGtYFdnNRhky6OfyETCg4=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: Y60lVXZCMvlg24lDH++SKV1ufImtIdM82ov4PLfGH4o=) 5: 7CD5A60E8FBE11EA9797847DC4F9AE02.roa (hash: 0N7KnyWQo6VcQUYOyNzJ4ZYibJk8iB5HaQ5JSpbobWM=) 6: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: ccG1BUs0i4CV7gjyI57tTXWxoo2ZO3TQ4gdTjDhcm5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2353 (0x931) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Nov 20 20:02:38 2024 GMT Not After : Nov 27 20:02:38 2024 GMT Subject: CN=673e405e-98c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:ee:38:3c:72:a4:78:aa:57:8b:a2:f7:50: 12:7a:39:1d:45:17:dd:d5:2c:c5:3f:67:55:50:c9: 39:53:79:f7:b3:b4:4a:24:7e:89:75:4d:98:6d:6d: d3:64:0e:71:74:ad:b4:bb:f6:66:d4:b0:67:bc:51: 7a:db:39:3d:8a:b7:f6:9e:56:d2:c2:96:84:5a:21: 66:c0:f1:dd:fe:62:64:ed:dd:c1:a8:ba:e5:80:45: 34:07:8f:b4:2f:f3:64:ff:b0:00:08:0b:d7:82:ae: 34:10:dd:9f:bc:43:cf:92:69:0e:bb:b2:79:32:b0: 05:6b:88:f7:8b:85:f6:bf:89:34:33:f7:6f:4b:c8: 77:56:4c:c0:3a:dc:24:83:72:26:b9:1b:eb:a5:4b: 9a:06:d8:e0:21:b0:a3:97:2d:3e:02:ee:c1:90:ce: ee:34:00:3d:97:a5:7f:69:0f:56:b0:a3:72:d1:cc: 65:0c:bd:4a:1f:13:45:50:8a:24:8d:b7:b6:65:24: 75:e9:be:93:b8:4c:fa:9a:c4:41:a2:43:43:28:33: cb:55:04:98:b2:b7:11:4b:60:cd:67:3d:f6:d0:4c: a1:92:29:79:41:ce:ff:e8:dd:9f:c8:3a:0f:87:ea: 9d:90:a9:98:cd:00:ed:94:fb:1c:b4:e3:ba:69:18: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:C2:B2:02:23:09:7A:CE:8D:7F:6E:62:25:7F:4E:6D:2A:E0:B3 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:17:e5:1a:3e:f0:4f:b9:91:ec:e3:17:3a:b0:61:d9:d5: 45:99:9d:c3:8f:b4:2a:0f:48:ee:50:b8:a4:69:ff:74:5c:9d: c1:ef:95:27:b2:25:55:2e:25:79:c9:e0:73:cb:74:91:f2:7c: 1c:b5:64:9c:c0:45:0e:b6:f8:11:0e:fe:e7:52:63:c5:3b:f6: 6c:01:9e:c2:e1:c4:00:32:07:06:46:42:54:8a:5d:c6:c8:78: 07:0c:ad:cb:7a:36:b6:ac:b6:f3:78:b2:ed:5b:34:fa:ca:08: f0:85:c3:a4:f8:fa:4b:63:c9:54:9b:5b:33:6e:12:55:8f:a2: 46:66:e7:36:4c:55:d1:bd:a3:b4:68:2b:34:10:9d:33:80:26: c5:15:72:19:49:b0:8f:6a:da:33:64:c7:28:30:cc:a0:50:d1: 69:32:86:c9:64:5b:e0:03:8d:06:99:02:35:0a:9d:3f:7d:cd: ce:dd:d5:a3:d1:d3:ae:47:48:d3:60:a1:e1:78:64:77:88:18: 53:17:da:95:15:cf:90:bf:d9:3d:09:70:70:69:dc:f4:0f:23: 28:8f:95:2f:98:64:84:1d:65:22:3a:1b:e5:55:bb:a7:08:c0: ed:9a:4a:9a:a9:ba:34:56:f9:cf:59:30:fe:b7:17:46:2c:fb: dc:ce:ac:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjQxMTIwMjAwMjM4WhcNMjQxMTI3MjAwMjM4WjAYMRYwFAYD VQQDEw02NzNlNDA1ZS05OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoHuODxypHiqV4ui91ASejkdRRfd1SzFP2dVUMk5U3n3s7RKJH6JdU2YbW3T ZA5xdK20u/Zm1LBnvFF62zk9irf2nlbSwpaEWiFmwPHd/mJk7d3BqLrlgEU0B4+0 L/Nk/7AACAvXgq40EN2fvEPPkmkOu7J5MrAFa4j3i4X2v4k0M/dvS8h3VkzAOtwk g3ImuRvrpUuaBtjgIbCjly0+Au7BkM7uNAA9l6V/aQ9WsKNy0cxlDL1KHxNFUIok jbe2ZSR16b6TuEz6msRBokNDKDPLVQSYsrcRS2DNZz320Eyhkil5Qc7/6N2fyDoP h+qdkKmYzQDtlPsctOO6aRgSAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZNwrIC Iwl6zo1/bmIlf05tKuCzMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVBhflGj7wT7mR7OMXOrBh2dVFmZ3Dj7QqD0juULikaf90XJ3B75Un siVVLiV5yeBzy3SR8nwctWScwEUOtvgRDv7nUmPFO/ZsAZ7C4cQAMgcGRkJUil3G yHgHDK3Leja2rLbzeLLtWzT6ygjwhcOk+PpLY8lUm1szbhJVj6JGZuc2TFXRvaO0 aCs0EJ0zgCbFFXIZSbCPatozZMcoMMygUNFpMobJZFvgA40GmQI1Cp0/fc3O3dWj 0dOuR0jTYKHheGR3iBhTF9qVFc+Qv9k9CXBwadz0DyMoj5UvmGSEHWUiOhvlVbun CMDtmkqaqbo0VvnPWTD+txdGLPvczqyE -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org