$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: j1CYp6cjjuU3wM4ZlDBdsVpNU0YeSV6UWHvJstBYV+E= Subject key identifier: 27:01:D3:1F:7B:28:20:5B:C6:C8:27:EF:17:5B:09:C9:0A:33:95:DF Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 08B0 Signing time: Wed 20 Nov 2024 20:11:18 +0000 Manifest this update: Wed 20 Nov 2024 20:11:17 +0000 Manifest next update: Wed 27 Nov 2024 20:11:17 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: J+WCq8EskMuaQva6eNrBl5tmRNaUYpChdJp1EPfrrNk=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: gOCw5zLl7y7h+UWFzAOSwX3oI4JmJwwAJxjqn+jEKuo=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: NQ+08YGOdEaF/ITWmOcqyCWrC35sSFn/SumNIjZOhls=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: mVbCZmxbw75/wJuw2lQw2e9EqjrrEqzYVc8QSZMYsH8=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: c5z4KkXkym8vqTv49IzGrRHtzbiepV0IBMzX8Mue6BQ=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: ya3/+CFVUd26DRczFvF0+d7fGBWWa9IkA5jh/NTOjQU=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: qBySD0Ql5ISyNIpBRQOOsUE/7hyokJQg1egqkA93Wgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Nov 20 20:11:17 2024 GMT Not After : Nov 27 20:11:17 2024 GMT Subject: CN=673e4266-b9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:95:48:f9:cd:e6:cc:7c:3b:c3:1c:20:9a: 36:94:d8:19:a2:d3:5d:ff:43:c8:4f:c0:b2:09:92: 8f:5c:ad:07:bf:a4:05:b4:99:0d:9b:83:2f:11:3c: e2:f0:81:93:c4:25:40:6c:54:08:cf:91:f8:e7:80: 62:21:43:bf:ba:0c:56:6a:18:55:fb:73:da:82:a3: bf:9a:d4:4b:13:9f:64:40:51:76:54:81:97:e2:28: 59:9e:75:67:41:d6:85:b3:dd:09:43:95:f9:2a:32: e6:a5:10:11:53:25:96:c4:f0:d6:6a:f7:4f:cc:af: 1a:73:e3:44:ce:3f:33:4d:08:fb:a2:54:12:74:e7: 78:02:ca:32:19:ed:85:10:c0:f9:cb:8b:0d:b6:62: 6f:7f:65:f2:ae:ce:d9:75:9d:2f:1e:d6:e4:1d:15: d0:d0:72:f3:26:f7:1b:f1:39:3a:8e:33:77:01:ec: d6:96:d6:bb:f1:02:27:46:7f:1f:5f:96:c6:1a:3e: ca:3a:3e:52:25:2d:4b:cf:10:4f:96:cb:f0:c9:fc: bf:80:97:47:70:e2:49:76:7b:0c:93:74:8a:d6:c3: b1:24:ce:67:c2:ca:fb:cf:8e:2d:4a:15:d8:04:cf: e3:68:e1:26:51:8d:09:dc:5f:d6:b3:94:73:50:9e: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:D3:1F:7B:28:20:5B:C6:C8:27:EF:17:5B:09:C9:0A:33:95:DF X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:42:a9:f5:26:3c:8a:a0:71:4f:cc:ef:ec:5c:fe:20:7a:d0: d6:c4:c7:ad:27:53:83:30:f8:b7:e4:cb:20:da:7c:5b:00:80: 05:fc:dc:61:83:5b:b2:aa:ac:4b:f6:43:5f:e1:fd:89:f0:de: 69:50:ac:1d:82:62:1a:a0:38:d2:46:af:e1:2a:e2:02:66:14: 3f:84:2a:6b:62:52:a6:70:ed:d4:ea:fd:96:54:af:3d:49:d1: fb:03:f1:52:ac:6e:82:09:24:57:14:9d:d0:76:ce:85:d9:a5: db:41:24:9a:5a:f1:fb:67:88:32:ed:c6:67:38:7a:66:c1:c2: 6e:4f:3f:3e:ef:72:7c:24:d2:22:64:3a:64:57:79:23:a2:b2: 33:64:90:ce:ea:c2:d7:40:7a:d2:ec:bf:64:17:89:b9:a5:ee: 7b:65:d7:b1:70:9c:8c:f0:59:53:0f:4c:3f:1f:b5:c4:7c:df: 29:25:05:a0:dc:f0:bd:ac:0d:ba:18:70:d9:c8:d8:4a:36:9a: 93:30:c1:02:8f:20:14:2b:33:63:40:9a:cb:4c:96:df:13:19: 28:ca:45:b2:27:57:77:d2:c2:01:61:83:09:29:21:63:28:c5: 82:32:87:ce:cb:08:12:03:c6:e2:bd:90:45:65:36:5b:7d:e9: 02:c6:ee:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjQxMTIwMjAxMTE3WhcNMjQxMTI3MjAxMTE3WjAYMRYwFAYD VQQDEw02NzNlNDI2Ni1iOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2GVSPnN5sx8O8McIJo2lNgZotNd/0PIT8CyCZKPXK0Hv6QFtJkNm4MvETzi 8IGTxCVAbFQIz5H454BiIUO/ugxWahhV+3PagqO/mtRLE59kQFF2VIGX4ihZnnVn QdaFs90JQ5X5KjLmpRARUyWWxPDWavdPzK8ac+NEzj8zTQj7olQSdOd4AsoyGe2F EMD5y4sNtmJvf2Xyrs7ZdZ0vHtbkHRXQ0HLzJvcb8Tk6jjN3AezWlta78QInRn8f X5bGGj7KOj5SJS1LzxBPlsvwyfy/gJdHcOJJdnsMk3SK1sOxJM5nwsr7z44tShXY BM/jaOEmUY0J3F/Ws5RzUJ6XGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcB0x97 KCBbxsgn7xdbCckKM5XfMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQQqn1JjyKoHFPzO/sXP4getDWxMetJ1ODMPi35Msg2nxbAIAF/Nxh g1uyqqxL9kNf4f2J8N5pUKwdgmIaoDjSRq/hKuICZhQ/hCprYlKmcO3U6v2WVK89 SdH7A/FSrG6CCSRXFJ3Qds6F2aXbQSSaWvH7Z4gy7cZnOHpmwcJuTz8+73J8JNIi ZDpkV3kjorIzZJDO6sLXQHrS7L9kF4m5pe57ZdexcJyM8FlTD0w/H7XEfN8pJQWg 3PC9rA26GHDZyNhKNpqTMMECjyAUKzNjQJrLTJbfExkoykWyJ1d30sIBYYMJKSFj KMWCMofOywgSA8bivZBFZTZbfekCxu7Y -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:04 2024 by rpki-client on console-ams.rpki-client.org