$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft File: We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json) Hash identifier: hrE0BAoXftXxD0O0UKJypJbRjV032L0XSWrmDbYyuVs= Subject key identifier: 51:20:28:9A:10:11:AC:E5:20:AC:FD:85:61:89:CA:A1:39:24:D0:C1 Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 Certificate issuer: /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft Manifest number: 0699 Signing time: Fri 22 Nov 2024 21:48:54 +0000 Manifest this update: Fri 22 Nov 2024 21:48:53 +0000 Manifest next update: Fri 29 Nov 2024 21:48:53 +0000 Files and hashes: 1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: I5CjVdq8B71KKJ9/11GrCe7qVH8c0W7Vp8BNjlA/nno=) 2: A793BA7E492D11EB8BE07D54C4F9AE02.roa (hash: Ga579nkZkyq4VIkIts7tLIJDFgKUxKlr6pMOp8y3MlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Validity Not Before: Nov 22 21:48:53 2024 GMT Not After : Nov 29 21:48:53 2024 GMT Subject: CN=6740fc46-9a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:a0:d6:69:8d:c3:54:e5:17:52:01:f8:75: cd:57:aa:a4:ae:b8:ae:80:49:2a:57:73:cb:18:f8: 1c:3e:87:89:59:4f:41:c2:cd:b3:96:78:e1:f2:1a: 39:89:67:3c:90:d0:59:a7:11:6d:d0:65:8e:e1:d6: ed:be:8d:9e:38:5a:31:10:9e:b2:e6:ff:04:e7:cf: 3c:56:9f:85:54:9b:c5:02:5b:3d:70:9a:d9:ee:04: fb:dd:18:6f:74:76:f1:c3:0a:42:6a:07:9c:f9:09: fc:ee:d5:27:1e:5a:fb:61:e9:58:0c:a4:15:ef:01: e3:e3:fb:e0:a7:db:9f:9a:ca:59:9f:cc:dc:2e:a2: 9d:fc:f8:e6:0d:75:0b:e6:16:8c:eb:2c:79:33:49: 9c:77:c0:9d:81:9e:be:13:7b:a4:63:e9:77:0f:55: 45:42:92:31:72:9e:06:bb:d9:12:af:18:70:88:08: f6:18:20:69:46:f0:27:aa:ac:4b:53:e8:e4:2a:5d: 55:d7:96:72:bf:bb:19:43:91:f1:6e:8b:7b:ca:00: 4f:84:82:58:65:1c:b0:ab:b1:56:87:b5:22:11:55: 01:8a:c7:84:af:a5:e2:60:fc:6e:6a:22:27:a9:2a: bb:fc:7d:65:e7:87:ee:da:f3:ab:55:40:2a:4e:4a: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:28:9A:10:11:AC:E5:20:AC:FD:85:61:89:CA:A1:39:24:D0:C1 X509v3 Authority Key Identifier: keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ec:7a:ed:e7:86:c3:c9:d2:d8:d0:c5:94:66:6c:31:00:a4: c9:bd:78:e9:e5:46:ab:60:1f:72:25:bc:a8:d8:38:b4:30:18: 40:a2:4c:14:22:c7:c0:45:71:7d:1b:b6:e6:a7:ff:54:00:e7: f5:28:ff:a3:71:3b:79:d1:54:04:28:79:a0:e4:da:ec:b9:bf: 02:22:92:a8:ed:13:d1:43:65:e9:db:59:b3:63:e0:5d:9d:cf: e6:7e:ca:4d:25:44:d0:30:36:21:80:a3:d3:ab:0b:dc:6a:bc: d5:60:48:83:2d:ba:e0:96:36:76:34:84:56:70:90:9c:34:1a: a4:16:09:a2:5c:a1:06:e1:0f:05:82:83:a6:ac:b0:c9:ec:b1: 37:43:30:dd:a9:e8:91:ae:d5:d4:7e:1a:36:08:b0:3d:04:63: 62:ea:a9:f3:6e:cf:1c:a6:6e:81:aa:57:2a:9e:68:aa:43:be: 55:4f:b1:88:e2:9c:f0:dc:60:4a:18:be:1b:50:96:8f:e6:51: e5:71:0e:4b:ef:fa:f8:37:27:ec:9d:e3:7f:1a:24:a1:7c:c8: 23:83:b6:ca:7f:7a:a5:fe:be:3a:67:14:21:c4:6a:c8:90:f0: 4a:b7:37:32:b2:99:1b:68:31:19:c8:6c:5b:b6:59:ed:90:e0: a7:73:d2:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGQUYxMTAvBgNVBAUTKDU5RURFODE2OUIwQTJDMzIxNDY5RkYxMUIxNjI4QkRF MEMxRjJDNDEwHhcNMjQxMTIyMjE0ODUzWhcNMjQxMTI5MjE0ODUzWjAYMRYwFAYD VQQDEw02NzQwZmM0Ni05YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSig1mmNw1TlF1IB+HXNV6qkrriugEkqV3PLGPgcPoeJWU9Bws2zlnjh8ho5 iWc8kNBZpxFt0GWO4dbtvo2eOFoxEJ6y5v8E5888Vp+FVJvFAls9cJrZ7gT73Rhv dHbxwwpCagec+Qn87tUnHlr7YelYDKQV7wHj4/vgp9ufmspZn8zcLqKd/PjmDXUL 5haM6yx5M0mcd8CdgZ6+E3ukY+l3D1VFQpIxcp4Gu9kSrxhwiAj2GCBpRvAnqqxL U+jkKl1V15Zyv7sZQ5Hxbot7ygBPhIJYZRywq7FWh7UiEVUBiseEr6XiYPxuaiIn qSq7/H1l54fu2vOrVUAqTkouIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEgKJoQ EazlIKz9hWGJyqE5JNDBMB8GA1UdIwQYMBaAFFnt6BabCiwyFGn/EbFii94MHyxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUZBRi8wNzE3NjI0MDQ5 MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xESVVhZjhSc1dLTDNnd2ZM RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dlM29GcHNLTERJVWFmOFJzV0tMM2d3ZkxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUZBRi8wNzE3NjI0MDQ5MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xE SVVhZjhSc1dLTDNnd2ZMRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz7Hrt54bDydLY0MWUZmwxAKTJvXjp5UarYB9yJbyo2Di0MBhAokwU IsfARXF9G7bmp/9UAOf1KP+jcTt50VQEKHmg5Nrsub8CIpKo7RPRQ2Xp21mzY+Bd nc/mfspNJUTQMDYhgKPTqwvcarzVYEiDLbrgljZ2NIRWcJCcNBqkFgmiXKEG4Q8F goOmrLDJ7LE3QzDdqeiRrtXUfho2CLA9BGNi6qnzbs8cpm6BqlcqnmiqQ75VT7GI 4pzw3GBKGL4bUJaP5lHlcQ5L7/r4NyfsneN/GiShfMgjg7bKf3ql/r46ZxQhxGrI kPBKtzcyspkbaDEZyGxbtlntkOCnc9IW -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org