$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: gGBhxG1qOFRV0x7owV0wucuVhFaNgGE3ESXhOkIetxY= Subject key identifier: FE:B9:18:5F:51:89:BF:3D:DB:19:57:BD:F3:6B:97:3E:B1:F2:20:98 Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 0141 Signing time: Sat 23 Nov 2024 02:38:22 +0000 Manifest this update: Sat 23 Nov 2024 02:38:21 +0000 Manifest next update: Sat 30 Nov 2024 02:38:21 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: Nyq/dx0kw0vaEO2bK4OurtjUucg8g8HRF/Tj3rcHY2E=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: qbMXYGmGBXCQU/LDnYPVYWq6qwCJyfwTqXecOU2YUsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Nov 23 02:38:21 2024 GMT Not After : Nov 30 02:38:21 2024 GMT Subject: CN=6741401d-cc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:b0:b7:f1:35:81:05:56:80:ed:03:6d:3f: 78:ce:1a:55:ff:ed:21:34:45:d8:5c:1d:b2:56:a6: 55:1b:d5:5f:32:68:15:59:dd:f0:9a:ee:7e:62:b4: 67:5a:9f:62:94:d0:1f:d0:1e:d6:97:11:13:60:f7: ff:8c:fe:c3:5d:fc:37:a4:ab:2a:5a:ce:6b:97:54: 00:98:09:1a:81:d5:9f:82:dc:01:9a:13:24:18:ae: 47:ef:63:bb:31:44:cc:c1:6b:22:4e:ac:03:97:88: 82:c3:58:44:9b:82:be:56:83:65:0a:5b:27:e6:4e: 8d:27:f4:f1:fc:15:b8:0d:7c:75:37:5f:5c:3b:e2: a1:53:e4:c4:2c:00:10:92:7d:6a:91:a5:f5:fe:11: f0:b8:07:a6:b0:7d:cd:b0:6b:65:be:6e:57:4b:02: 85:fd:a7:a8:95:35:e6:e8:ef:1b:ab:e9:3b:0a:ab: df:b8:e7:e7:a4:0a:23:a6:e3:7e:5e:0f:5b:47:dc: 7a:ba:9e:91:ce:be:1c:b4:55:47:a7:f2:95:05:f4: ba:df:3e:aa:4a:55:67:96:b9:09:8c:5b:03:22:5e: 4c:65:95:de:f7:2c:c2:e8:de:aa:62:cd:28:3a:be: 1b:ae:b9:3c:20:43:10:a3:11:af:5d:02:ab:d8:17: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:18:5F:51:89:BF:3D:DB:19:57:BD:F3:6B:97:3E:B1:F2:20:98 X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ef:2f:bf:fa:d1:b9:49:39:47:7d:b0:b2:ab:2a:86:87:ef: 8b:51:6b:d3:dd:6a:3e:a0:32:73:0c:3f:a1:52:34:9e:87:1e: 1f:49:87:f3:47:22:97:25:41:7e:1e:7d:8d:c9:23:03:84:72: c4:48:2a:ce:f4:a8:ca:54:5a:25:52:fc:64:51:4a:4c:3e:bf: c3:7e:29:8d:00:ea:84:ab:2e:c0:46:65:d5:b9:0b:01:45:7d: a3:66:5e:32:82:c4:45:ee:11:60:c8:d8:96:93:76:f7:8d:63: d8:e1:39:0c:ed:58:be:b2:db:47:03:79:d0:ff:d2:be:f9:72: 0c:ea:95:c7:89:8d:0b:aa:f6:44:de:9d:ac:c4:b3:4f:ba:1c: 7c:c7:dd:22:de:b1:2c:04:b4:7f:07:8b:82:4b:bc:83:1f:af: af:15:7c:6a:3b:c7:22:ed:1a:da:ab:1f:3b:dd:62:b0:02:57: d9:45:ee:06:07:c8:95:ec:2c:f7:b9:84:c4:92:e7:ca:81:ff: ab:c7:d9:7b:5e:04:2e:93:b2:59:86:f1:83:74:6a:a1:17:d3: 08:39:a8:d0:2f:fc:83:3e:d6:e0:d4:9f:65:b3:57:af:34:d8: 37:30:68:18:e7:8d:22:c9:08:f2:2c:ed:56:a0:75:49:82:16: 47:a5:0e:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjQxMTIzMDIzODIxWhcNMjQxMTMwMDIzODIxWjAYMRYwFAYD VQQDEw02NzQxNDAxZC1jYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtKwt/E1gQVWgO0DbT94zhpV/+0hNEXYXB2yVqZVG9VfMmgVWd3wmu5+YrRn Wp9ilNAf0B7WlxETYPf/jP7DXfw3pKsqWs5rl1QAmAkagdWfgtwBmhMkGK5H72O7 MUTMwWsiTqwDl4iCw1hEm4K+VoNlClsn5k6NJ/Tx/BW4DXx1N19cO+KhU+TELAAQ kn1qkaX1/hHwuAemsH3NsGtlvm5XSwKF/aeolTXm6O8bq+k7CqvfuOfnpAojpuN+ Xg9bR9x6up6Rzr4ctFVHp/KVBfS63z6qSlVnlrkJjFsDIl5MZZXe9yzC6N6qYs0o Or4brrk8IEMQoxGvXQKr2BcxowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP65GF9R ib892xlXvfNrlz6x8iCYMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB17y+/+tG5STlHfbCyqyqGh++LUWvT3Wo+oDJzDD+hUjSehx4fSYfz RyKXJUF+Hn2NySMDhHLESCrO9KjKVFolUvxkUUpMPr/DfimNAOqEqy7ARmXVuQsB RX2jZl4ygsRF7hFgyNiWk3b3jWPY4TkM7Vi+sttHA3nQ/9K++XIM6pXHiY0LqvZE 3p2sxLNPuhx8x90i3rEsBLR/B4uCS7yDH6+vFXxqO8ci7Rraqx873WKwAlfZRe4G B8iV7Cz3uYTEkufKgf+rx9l7XgQuk7JZhvGDdGqhF9MIOajQL/yDPtbg1J9ls1ev NNg3MGgY540iyQjyLO1WoHVJghZHpQ7b -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org