$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft File: wtD9BoMuxNu3G5uxZbvylkCs72g.mft (raw, json) Hash identifier: xjLLVKLcMBEYXdOCpUdVKviiYpjKFgA3lxOY2QOp1wY= Subject key identifier: A6:92:D0:D6:8B:AC:36:0F:ED:8B:1A:D5:5A:A9:34:38:0C:1C:64:09 Authority key identifier: C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68 Certificate issuer: /CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft Manifest number: 0675 Signing time: Fri 22 Nov 2024 21:53:46 +0000 Manifest this update: Fri 22 Nov 2024 21:53:46 +0000 Manifest next update: Fri 29 Nov 2024 21:53:46 +0000 Files and hashes: 1: wtD9BoMuxNu3G5uxZbvylkCs72g.crl (hash: fufIKSiZx6p/Ryx2BnZzed/GhYcZxbRDk2f8MSXE9Mo=) 2: 339BE48C554111EBAE1AA47BC4F9AE02.roa (hash: qjVSrkRyvnMbrPeElNzTYnbOYThbM8dR4zsheJBUbFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.crl rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3DA6/serialNumber=C2D0FD06832EC4DBB71B9BB165BBF29640ACEF68 Validity Not Before: Nov 22 21:53:46 2024 GMT Not After : Nov 29 21:53:46 2024 GMT Subject: CN=6740fd6a-c28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:1d:d0:e9:60:2e:cc:cc:2e:b9:c7:70:6c: f0:38:c9:c1:b4:0d:41:a5:56:a0:c9:51:c3:8a:fe: 29:f9:13:5a:90:78:d5:ce:f8:51:9e:c3:92:5f:6d: 95:7c:e1:b9:21:26:cc:a0:7a:64:e9:ee:b3:9d:99: 44:70:e7:cf:5b:a4:b4:38:9c:ea:31:33:0f:d2:13: 3b:a2:d3:f9:1c:1c:3a:0c:f9:63:58:88:c9:e0:f6: e0:ef:5a:7c:46:51:a4:d4:37:af:94:ac:5c:e2:39: 07:ce:82:63:ce:ff:f5:b9:68:01:6e:74:41:66:14: 06:c1:10:80:9c:16:12:d7:aa:28:c4:a5:1b:d4:48: 6a:9e:ae:49:4f:bb:21:b0:29:2f:f3:d2:1a:aa:6a: 16:b8:8a:b9:9d:29:c7:43:d5:d5:8e:20:87:91:aa: 9e:cd:9a:93:e6:f9:cc:45:f9:d6:ac:e1:58:14:99: 8d:9e:e4:29:39:51:b5:9b:18:3c:d6:92:d5:ae:75: 6b:d6:eb:08:ad:8d:65:7f:af:b2:1d:3d:d3:80:26: cd:ad:ff:e0:3a:fb:e5:5c:ae:69:20:a1:47:41:62: a8:80:90:f4:03:91:e1:d8:0f:e6:f2:d0:d2:5b:40: e6:5e:1b:89:3c:08:e1:1a:17:8a:1f:4f:17:de:a6: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:92:D0:D6:8B:AC:36:0F:ED:8B:1A:D5:5A:A9:34:38:0C:1C:64:09 X509v3 Authority Key Identifier: keyid:C2:D0:FD:06:83:2E:C4:DB:B7:1B:9B:B1:65:BB:F2:96:40:AC:EF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wtD9BoMuxNu3G5uxZbvylkCs72g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DA6/8CA03710553F11EB92C1917AC4F9AE02/wtD9BoMuxNu3G5uxZbvylkCs72g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3b:18:5c:94:75:a5:a3:85:c2:90:03:33:08:eb:c7:a3:77: 77:0f:e3:91:e3:35:57:5f:8a:17:5c:af:3f:f8:17:6c:9a:84: 85:2b:fa:bf:83:e3:23:8b:bb:d6:84:99:15:50:d7:3d:74:92: da:40:71:47:4e:e9:80:21:ad:02:c6:d7:dc:4b:06:59:e1:db: db:28:b4:5a:67:02:98:dd:33:4b:97:03:83:76:b0:22:30:cd: 35:90:a8:d9:17:77:56:fa:9d:b8:7f:63:49:27:7f:bc:4b:f4: 1f:3b:20:b5:07:ea:3e:42:c5:f9:3d:9d:cf:47:e7:c5:f3:cd: 36:05:0e:5b:61:b5:8d:df:6f:74:2d:12:fb:39:4f:56:b1:9a: fe:10:1c:d3:31:70:32:9e:e8:8f:70:96:2a:9a:56:c9:8a:2b: c3:64:59:8c:f4:59:38:60:82:03:8c:98:77:91:aa:f3:ac:ab: 7f:c1:11:dd:e5:b0:50:49:55:3c:08:64:0e:75:c5:8e:a2:7c: ad:0b:8f:bb:be:e4:b9:fb:0d:69:02:15:a1:a3:49:ce:c8:da: cc:8d:50:cf:7c:7a:b0:7b:15:26:99:70:1b:a0:7c:a1:37:d6: ca:5f:e8:f0:db:5e:7e:74:11:af:03:1c:3e:01:f0:8c:f5:4b: e4:e3:c4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEQTYxMTAvBgNVBAUTKEMyRDBGRDA2ODMyRUM0REJCNzFCOUJCMTY1QkJGMjk2 NDBBQ0VGNjgwHhcNMjQxMTIyMjE1MzQ2WhcNMjQxMTI5MjE1MzQ2WjAYMRYwFAYD VQQDEw02NzQwZmQ2YS1jMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zsd0OlgLszMLrnHcGzwOMnBtA1BpVagyVHDiv4p+RNakHjVzvhRnsOSX22V fOG5ISbMoHpk6e6znZlEcOfPW6S0OJzqMTMP0hM7otP5HBw6DPljWIjJ4Pbg71p8 RlGk1DevlKxc4jkHzoJjzv/1uWgBbnRBZhQGwRCAnBYS16ooxKUb1Ehqnq5JT7sh sCkv89IaqmoWuIq5nSnHQ9XVjiCHkaqezZqT5vnMRfnWrOFYFJmNnuQpOVG1mxg8 1pLVrnVr1usIrY1lf6+yHT3TgCbNrf/gOvvlXK5pIKFHQWKogJD0A5Hh2A/m8tDS W0DmXhuJPAjhGheKH08X3qZ1KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaS0NaL rDYP7Ysa1VqpNDgMHGQJMB8GA1UdIwQYMBaAFMLQ/QaDLsTbtxubsWW78pZArO9o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0RBNi84Q0EwMzcxMDU1 M0YxMUVCOTJDMTkxN0FDNEY5QUUwMi93dEQ5Qm9NdXhOdTNHNXV4WmJ2eWxrQ3M3 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d0RDlCb011eE51M0c1dXhaYnZ5bGtDczcyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0RBNi84Q0EwMzcxMDU1M0YxMUVCOTJDMTkxN0FDNEY5QUUwMi93dEQ5Qm9NdXhO dTNHNXV4WmJ2eWxrQ3M3MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmOxhclHWlo4XCkAMzCOvHo3d3D+OR4zVXX4oXXK8/+BdsmoSFK/q/ g+Mji7vWhJkVUNc9dJLaQHFHTumAIa0CxtfcSwZZ4dvbKLRaZwKY3TNLlwODdrAi MM01kKjZF3dW+p24f2NJJ3+8S/QfOyC1B+o+QsX5PZ3PR+fF8802BQ5bYbWN3290 LRL7OU9WsZr+EBzTMXAynuiPcJYqmlbJiivDZFmM9Fk4YIIDjJh3karzrKt/wRHd 5bBQSVU8CGQOdcWOonytC4+7vuS5+w1pAhWho0nOyNrMjVDPfHqwexUmmXAboHyh N9bKX+jw215+dBGvAxw+AfCM9Uvk48Tn -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org