$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: RSES2P4/ko52zOhCZDpY3ww4qlqcGbr5bEvvxFN3Zt8= Subject key identifier: D6:BF:BC:21:A7:2D:AC:BE:E0:3B:84:B8:4D:AA:A3:30:4F:CE:99:40 Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 95 Signing time: Thu 21 Nov 2024 04:15:23 +0000 Manifest this update: Thu 21 Nov 2024 04:15:22 +0000 Manifest next update: Thu 28 Nov 2024 04:15:22 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: 5q6/ZL7ueKhCSj0FIxptsQSdbsxhcUpbefvXeZQ9Rag=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Nov 21 04:15:22 2024 GMT Not After : Nov 28 04:15:22 2024 GMT Subject: CN=673eb3da-acc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:51:3b:44:42:e3:3d:3f:c2:2e:83:69:d7: 2c:6a:18:3c:b6:77:ab:b2:26:6b:85:09:8b:c6:ef: ea:e3:29:7e:a7:1c:42:17:8d:d3:2d:77:a4:11:f2: c2:3f:49:c2:a6:cd:d9:22:21:e3:bd:48:ef:c0:4c: 7a:d2:bd:2f:df:f8:ce:03:a8:07:ed:4f:9a:28:9b: cf:1b:8c:7a:9a:d6:69:9b:24:c5:52:1e:93:e1:0a: e7:79:08:4e:30:53:60:14:8d:5b:19:b8:14:38:4c: 55:bd:09:74:da:20:86:3c:b5:f4:2b:5f:ec:18:af: af:07:60:98:19:d8:c2:35:a9:22:08:24:c0:96:d1: f8:db:0d:e2:40:d1:8c:4f:86:ba:b7:eb:fe:dd:8a: 4e:5a:ac:56:3f:45:73:8c:e0:36:12:f2:ce:ba:d1: 60:af:16:99:f1:e1:da:b3:52:45:ad:12:d1:21:e6: 05:f4:a9:47:53:68:6d:c8:a2:97:9f:7a:85:d8:0d: 4a:cf:0b:45:53:03:8e:97:88:a1:4b:4c:c6:df:27: df:59:9b:c1:40:d5:a1:06:22:42:36:a6:7a:58:34: 70:9c:76:01:36:96:50:e2:68:3b:41:0f:4d:77:b0: 08:18:01:22:c6:68:e5:90:86:cc:8d:70:2c:e7:6a: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:BC:21:A7:2D:AC:BE:E0:3B:84:B8:4D:AA:A3:30:4F:CE:99:40 X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:9a:da:6b:ef:bb:d4:d1:15:7d:8e:02:99:0f:05:be:d7:d2: 2b:01:9b:ad:39:ca:8e:ed:66:9c:54:db:4e:9d:76:3c:f2:2c: 4f:c9:c7:33:7c:1e:3a:8f:1f:11:07:2a:12:36:3c:72:eb:28: 57:f6:ad:9b:c2:91:80:45:79:08:e6:e4:d4:f9:d5:93:71:cf: cb:61:12:a5:57:66:50:78:d2:24:f9:30:c0:c5:39:38:1d:5c: a2:7c:c5:dc:60:07:8e:f6:45:6c:9d:1b:b1:ae:a4:4d:4d:40: c0:47:42:38:e1:a7:98:bb:cd:9f:a0:fa:84:5e:8a:b3:2b:7e: be:6a:74:ce:12:c9:27:59:b2:b0:f4:46:1f:55:56:dd:a2:a7: 5a:93:6b:7d:98:f0:81:f4:df:f7:26:47:44:f1:35:4e:9e:c0: 82:63:d2:6d:14:b2:c2:8c:0c:bd:f7:c4:c2:5e:eb:1d:9f:e2: 8e:0e:19:2b:99:c6:e4:b0:3e:32:4d:e0:19:d5:48:95:76:9e: d4:85:4a:c4:a3:1c:ba:d7:75:b2:33:a7:4f:94:15:3c:85:cc: c7:ed:84:71:a3:2b:63:c0:86:ed:1f:1e:28:c1:61:9a:9a:c3: 90:6e:46:d7:82:98:42:de:57:66:21:c8:62:5d:1e:c3:46:61: 4b:7e:0c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjQxMTIxMDQxNTIyWhcNMjQxMTI4MDQxNTIyWjAYMRYwFAYD VQQDEw02NzNlYjNkYS1hY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVNRO0RC4z0/wi6Dadcsahg8tnersiZrhQmLxu/q4yl+pxxCF43TLXekEfLC P0nCps3ZIiHjvUjvwEx60r0v3/jOA6gH7U+aKJvPG4x6mtZpmyTFUh6T4QrneQhO MFNgFI1bGbgUOExVvQl02iCGPLX0K1/sGK+vB2CYGdjCNakiCCTAltH42w3iQNGM T4a6t+v+3YpOWqxWP0VzjOA2EvLOutFgrxaZ8eHas1JFrRLRIeYF9KlHU2htyKKX n3qF2A1KzwtFUwOOl4ihS0zG3yffWZvBQNWhBiJCNqZ6WDRwnHYBNpZQ4mg7QQ9N d7AIGAEixmjlkIbMjXAs52pzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa/vCGn Lay+4DuEuE2qozBPzplAMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAimtpr77vU0RV9jgKZDwW+19IrAZutOcqO7WacVNtOnXY88ixPyccz fB46jx8RByoSNjxy6yhX9q2bwpGARXkI5uTU+dWTcc/LYRKlV2ZQeNIk+TDAxTk4 HVyifMXcYAeO9kVsnRuxrqRNTUDAR0I44aeYu82foPqEXoqzK36+anTOEsknWbKw 9EYfVVbdoqdak2t9mPCB9N/3JkdE8TVOnsCCY9JtFLLCjAy998TCXusdn+KODhkr mcbksD4yTeAZ1UiVdp7UhUrEoxy613WyM6dPlBU8hczH7YRxoytjwIbtHx4owWGa msOQbkbXgphC3ldmIchiXR7DRmFLfgwY -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org