$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: 607vdXKZ+NcGzsam1LYfRgSmVD3VvvR1DrPMGtYi8pM= Subject key identifier: 62:CA:3F:43:31:C5:EA:E0:89:54:D7:60:EE:D7:4F:9E:C1:0F:42:86 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0A9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0A97 Signing time: Fri 22 Nov 2024 19:19:54 +0000 Manifest this update: Fri 22 Nov 2024 19:19:53 +0000 Manifest next update: Fri 29 Nov 2024 19:19:53 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: T5UAq4/La2Hsfk/2YdVZo0Z3EMe1KHH6dRxCzf1i+BI=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: h37YdtlSJGQfGRgpcWil+icDxRwZdSWXjtK+m34N3JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2719 (0xa9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Nov 22 19:19:53 2024 GMT Not After : Nov 29 19:19:53 2024 GMT Subject: CN=6740d95a-5a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:91:bf:0a:b0:1a:69:69:95:88:07:4e:c1: 06:f8:89:1c:95:dd:df:b8:e2:4d:28:9f:8d:d2:43: fa:89:83:f5:d6:a1:63:d1:74:a2:49:a0:7a:9b:c5: bb:d3:da:c7:9d:5f:87:03:2f:7e:4d:7a:db:b3:dc: be:53:c0:62:2f:25:1b:fd:d0:b1:b7:7d:66:89:f8: ba:45:d9:33:f2:43:eb:10:d4:1e:e2:f6:a0:17:1e: a4:f0:78:6d:04:e4:ec:e1:89:26:f1:08:33:b5:9b: 08:c4:d9:eb:4b:14:f3:0e:e9:4d:4a:bf:7c:51:85: 28:b4:4a:ff:bf:f6:6e:64:b5:10:57:e6:20:8c:ec: a3:a1:a4:69:63:9a:fd:d1:4c:46:61:0f:c5:ca:f3: 31:0a:c4:07:8d:b5:eb:b3:f0:73:f0:19:40:67:be: b5:0e:55:a3:df:18:de:e8:7f:a2:76:a5:46:da:68: 0b:98:70:e7:23:84:d6:ee:2f:be:83:b3:8e:44:35: 27:10:a8:73:c8:ec:86:56:d3:87:d6:55:79:81:2c: 62:d3:cd:89:54:c2:ec:4a:aa:1c:8d:28:a4:0d:3a: ec:08:21:b7:3f:db:ca:42:6a:06:78:91:ea:6c:4f: f0:b4:3e:54:16:2b:5c:8d:34:da:d2:5b:79:73:9d: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CA:3F:43:31:C5:EA:E0:89:54:D7:60:EE:D7:4F:9E:C1:0F:42:86 X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:49:c2:33:1d:b0:d6:5c:5f:18:68:75:5e:9f:b5:48:dd:34: 51:b6:c7:64:90:48:fd:46:01:e3:f7:22:8d:6f:5f:98:f1:5a: ee:2d:e1:18:e0:a4:88:0e:7e:33:ae:0f:c8:0c:6f:88:66:ec: 76:3c:d5:e9:50:0f:a9:f9:c7:f9:97:c7:9f:23:7c:5c:28:ad: 66:36:04:33:a1:04:ce:d9:cf:7a:5c:17:8d:f4:5c:01:4a:7d: 85:c7:c9:46:21:9a:5d:dd:3f:68:11:01:f2:b5:87:87:ad:72: 48:0b:a5:ef:10:d4:b8:e3:89:16:1b:14:9e:27:59:37:31:41: b6:63:92:60:ae:64:0c:f6:bf:a2:2b:cd:b8:b1:f3:6a:2a:8c: c9:cf:a0:b2:32:57:14:5a:58:50:6b:f4:29:53:b5:69:6d:51: 00:89:fe:b8:df:80:38:26:39:2c:c9:46:23:3d:dc:4b:51:9e: 73:73:28:49:45:36:de:ef:1c:4e:de:5e:bb:07:8f:50:bc:a5: 50:2f:72:2d:10:5a:07:68:bb:17:3b:0d:72:09:f8:d3:ad:d7: e0:c0:fa:9b:6a:70:8f:c1:cb:68:25:47:cc:f8:e1:11:13:36: 72:fb:3a:ae:23:00:a2:50:ac:56:63:fa:36:cb:d5:d9:f2:98: 27:60:65:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjQxMTIyMTkxOTUzWhcNMjQxMTI5MTkxOTUzWjAYMRYwFAYD VQQDEw02NzQwZDk1YS01YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5mRvwqwGmlplYgHTsEG+Ikcld3fuOJNKJ+N0kP6iYP11qFj0XSiSaB6m8W7 09rHnV+HAy9+TXrbs9y+U8BiLyUb/dCxt31mifi6Rdkz8kPrENQe4vagFx6k8Hht BOTs4Ykm8QgztZsIxNnrSxTzDulNSr98UYUotEr/v/ZuZLUQV+YgjOyjoaRpY5r9 0UxGYQ/FyvMxCsQHjbXrs/Bz8BlAZ761DlWj3xje6H+idqVG2mgLmHDnI4TW7i++ g7OORDUnEKhzyOyGVtOH1lV5gSxi082JVMLsSqocjSikDTrsCCG3P9vKQmoGeJHq bE/wtD5UFitcjTTa0lt5c50JiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLKP0Mx xergiVTXYO7XT57BD0KGMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADScIzHbDWXF8YaHVen7VI3TRRtsdkkEj9RgHj9yKNb1+Y8VruLeEY 4KSIDn4zrg/IDG+IZux2PNXpUA+p+cf5l8efI3xcKK1mNgQzoQTO2c96XBeN9FwB Sn2Fx8lGIZpd3T9oEQHytYeHrXJIC6XvENS444kWGxSeJ1k3MUG2Y5JgrmQM9r+i K824sfNqKozJz6CyMlcUWlhQa/QpU7VpbVEAif6434A4JjksyUYjPdxLUZ5zcyhJ RTbe7xxO3l67B49QvKVQL3ItEFoHaLsXOw1yCfjTrdfgwPqbanCPwctoJUfM+OER EzZy+zquIwCiUKxWY/o2y9XZ8pgnYGVE -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org