$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json) Hash identifier: 11gnpqC2uwKzSEb7jgU+qi9YOoBgPIr22TjSsol5x0Y= Subject key identifier: 9A:9F:24:74:DD:8D:9F:C5:80:D7:5C:FD:1E:52:83:A5:B0:41:83:B7 Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft Manifest number: 0632 Signing time: Sun 24 Nov 2024 21:55:46 +0000 Manifest this update: Sun 24 Nov 2024 21:55:46 +0000 Manifest next update: Sun 01 Dec 2024 21:55:46 +0000 Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: 2ukPad4w7REJBoluVP4NCIOISuYNDbIHVyOlK0Zbo8k=) 2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: nbo+aRpaKhKrr9ll2EHatjWC4IcNme0KBXjobYgnQ18=) 3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: K06objCZTkF4R2m4Es3RoZwatUsJt3KTozD/Y+CKlGA=) 4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: dk7hZcw60oBzYDsH/VfIiPOBe+wfd9KvvAO7IK7LLKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Validity Not Before: Nov 24 21:55:46 2024 GMT Not After : Dec 1 21:55:46 2024 GMT Subject: CN=6743a0e2-9e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:f1:80:c0:0c:5d:8c:77:fe:5c:1a:09:55: a9:d7:40:31:06:32:b7:b1:4a:11:2c:45:eb:93:54: 07:da:e4:c6:5a:49:4f:f8:bf:91:02:e4:9a:6b:d5: 7b:99:95:c4:74:e3:2f:a8:89:9c:a5:dd:39:01:9f: 85:aa:b3:66:da:68:a1:71:1c:74:a5:8c:e8:ac:75: 99:fd:2a:1f:f8:aa:9b:0c:fc:86:f7:90:87:c3:c4: 51:41:63:ab:17:12:73:b9:4d:02:86:d1:e7:14:4c: 40:f2:32:0e:5c:c1:f1:57:04:1a:0c:5c:39:1d:3f: 20:44:c1:1f:23:80:2b:df:0c:90:fe:7e:8d:7f:85: 94:b7:86:a6:fd:d5:16:fe:91:f8:fb:fb:14:b3:2a: 6a:9f:57:aa:ba:18:55:18:76:c7:da:e6:43:de:c4: 3d:47:3b:da:88:ae:de:aa:a8:af:9a:92:af:0e:1a: f6:68:e2:b1:2e:7c:f4:8a:d5:3d:a0:8b:aa:e0:73: 50:da:64:6d:8d:95:47:1d:47:78:2c:bc:bb:99:58: 62:1a:07:97:6d:73:6f:0c:cf:bc:2e:1d:11:75:7e: 8c:92:a0:aa:71:9e:69:ed:f9:c3:d1:09:b9:8a:a2: 88:40:b1:fe:61:4a:17:b6:57:f2:80:05:03:27:14: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:24:74:DD:8D:9F:C5:80:D7:5C:FD:1E:52:83:A5:B0:41:83:B7 X509v3 Authority Key Identifier: keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a2:cb:b3:f6:6b:5e:3b:b9:07:ba:22:8a:4c:7c:b8:c6:ed: bb:c8:c3:4f:d3:f7:32:4d:b2:e6:79:0e:00:08:76:73:b0:41: 86:90:5d:60:d9:a6:19:df:0f:e3:15:13:c9:99:c0:d4:07:e5: 6b:03:85:0d:ed:e1:78:18:75:16:85:02:e0:c6:5d:96:0b:02: f8:7c:45:c0:d2:6d:6d:4f:68:26:39:b1:43:3c:5b:7a:9b:99: 1f:04:85:9a:53:bb:e9:e0:08:3e:58:51:a0:9a:2d:ad:e0:8f: 4e:69:0d:1e:d5:08:53:35:e9:67:d2:7e:5e:6f:00:4d:7f:02: 6e:5e:72:9e:0e:4e:8e:6a:fe:c5:51:1f:fc:52:21:78:75:ae: 32:59:66:19:c4:70:1b:e9:06:55:a2:5a:1b:81:58:65:08:d8: 41:69:87:0c:05:f4:53:8a:76:74:ce:7f:da:54:fc:34:de:45: c1:67:7c:2a:f2:84:9b:bc:f1:2c:c3:b2:7b:bf:c2:f9:e3:06: 77:21:02:6f:54:de:f8:6c:29:28:4a:2f:b6:bc:12:f2:b2:a5: e7:7c:c8:ba:9d:2f:ef:73:c1:08:f7:6e:63:c8:35:14:6f:99: 76:f1:6d:c9:84:c2:ff:0f:0b:d9:33:bd:1c:1c:41:67:e0:43: 0b:8e:3e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG QzdCNjlBMUIwHhcNMjQxMTI0MjE1NTQ2WhcNMjQxMjAxMjE1NTQ2WjAYMRYwFAYD VQQDEw02NzQzYTBlMi05ZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjHxgMAMXYx3/lwaCVWp10AxBjK3sUoRLEXrk1QH2uTGWklP+L+RAuSaa9V7 mZXEdOMvqImcpd05AZ+FqrNm2mihcRx0pYzorHWZ/Sof+KqbDPyG95CHw8RRQWOr FxJzuU0ChtHnFExA8jIOXMHxVwQaDFw5HT8gRMEfI4Ar3wyQ/n6Nf4WUt4am/dUW /pH4+/sUsypqn1equhhVGHbH2uZD3sQ9RzvaiK7eqqivmpKvDhr2aOKxLnz0itU9 oIuq4HNQ2mRtjZVHHUd4LLy7mVhiGgeXbXNvDM+8Lh0RdX6MkqCqcZ5p7fnD0Qm5 iqKIQLH+YUoXtlfygAUDJxSYawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqfJHTd jZ/FgNdc/R5Sg6WwQYO3MB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2 bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5osuz9mteO7kHuiKKTHy4xu27yMNP0/cyTbLmeQ4ACHZzsEGGkF1g 2aYZ3w/jFRPJmcDUB+VrA4UN7eF4GHUWhQLgxl2WCwL4fEXA0m1tT2gmObFDPFt6 m5kfBIWaU7vp4Ag+WFGgmi2t4I9OaQ0e1QhTNeln0n5ebwBNfwJuXnKeDk6Oav7F UR/8UiF4da4yWWYZxHAb6QZVolobgVhlCNhBaYcMBfRTinZ0zn/aVPw03kXBZ3wq 8oSbvPEsw7J7v8L54wZ3IQJvVN74bCkoSi+2vBLysqXnfMi6nS/vc8EI925jyDUU b5l28W3JhML/DwvZM70cHEFn4EMLjj5+ -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:00 2024 by rpki-client on console-ams.rpki-client.org