$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: NG1CBqgUzFUwj+ueR83AQNriRZrJfX+DbIXnI46UqCk= Subject key identifier: 15:B1:88:30:89:03:E3:99:AA:17:34:F0:29:24:82:C8:15:BE:04:93 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: B8 Signing time: Thu 21 Nov 2024 04:14:30 +0000 Manifest this update: Thu 21 Nov 2024 04:14:29 +0000 Manifest next update: Thu 28 Nov 2024 04:14:29 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: 0zywZBXosnA5RtRIVabeezD4FQhRs6NEOdUcis1L8eM=) 2: 7D9A528A990E11EE87118E20C4F9AE02.roa (hash: fA6lgiU9W1T/RJxMZL8rvR0alvlrDGh5DnihGCPmKPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Nov 21 04:14:29 2024 GMT Not After : Nov 28 04:14:29 2024 GMT Subject: CN=673eb3a6-7316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:fb:87:dc:0f:64:4f:27:3c:59:f6:45:7f: 30:6c:51:94:f3:90:85:25:82:ed:1d:bf:9e:0e:71: 9c:89:3c:83:0a:0f:60:e1:0e:d0:c4:14:b6:21:a8: fc:90:2f:47:57:28:29:02:44:8c:6f:2f:ee:76:e3: 52:b1:8b:3d:5e:98:8f:ab:25:9b:a6:2c:a9:5a:23: 07:c2:31:58:c9:f5:54:01:6d:e4:54:56:80:e5:a0: 85:2c:d0:83:3b:4f:0b:02:e5:d1:af:4a:fa:36:b5: d9:18:4f:89:a9:c9:6e:33:a5:d4:c1:18:37:db:c4: 35:56:1c:e7:47:cf:e0:46:7c:fd:2f:9e:03:70:38: ff:65:dd:e2:91:96:dc:ec:6f:fd:aa:e5:f3:5b:a2: 89:68:c0:30:14:61:63:61:c5:66:d6:2d:45:4e:06: 3c:d1:af:71:70:03:ad:49:ea:03:a8:e3:5f:81:b5: 5d:c9:cb:ae:92:ec:d4:4d:dc:59:a8:ca:96:a2:37: 4d:74:fa:f0:20:01:21:7a:cb:fe:d0:ca:b1:ea:20: 84:70:0a:12:8c:22:6a:5a:d1:9d:2c:88:21:89:57: fd:7c:8f:2f:2e:99:6b:2c:8d:f5:6f:57:25:ca:50: d1:38:a5:a1:98:e3:1d:75:64:6f:72:fa:62:4c:ef: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:88:30:89:03:E3:99:AA:17:34:F0:29:24:82:C8:15:BE:04:93 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:f4:16:c4:dd:3d:f6:97:10:21:06:4a:26:d2:bf:87:d5: 99:61:48:88:77:42:9a:c9:40:35:68:af:61:15:45:9b:da:4a: a6:2d:af:a5:4f:58:db:71:dd:31:19:fc:d8:2f:0e:a6:cd:20: b7:6e:72:9e:fb:54:cc:68:b2:04:f8:13:58:dc:b1:4a:67:1d: cc:11:f7:38:1c:23:31:16:d5:18:90:3b:08:2a:f0:06:6c:44: c7:33:69:2e:ca:00:50:d7:bc:67:f7:f0:42:a2:cf:34:c9:df: d5:97:45:53:ea:ea:7a:ad:de:ac:20:0a:9b:60:7b:df:68:8f: a7:78:af:1c:28:66:b9:2b:f0:87:4c:01:55:6a:25:be:1f:73: 6d:8d:fd:cf:b2:8c:50:33:a6:84:8b:16:ef:2b:bd:5f:a0:5a: b0:1e:47:72:63:d2:c7:3a:e7:c6:17:ca:09:f8:81:e0:01:78: 51:61:b0:37:1f:9f:07:dc:22:0c:14:8f:97:ae:a1:f0:f0:1b: 84:8b:ec:cc:4d:16:4a:0a:ab:f8:78:22:d4:a4:60:2b:bb:8d: 9a:3b:c6:70:e7:a8:03:3b:da:d2:50:34:6a:91:45:ce:b1:1b: b9:8b:9b:f4:5a:28:cf:cf:a3:9c:8b:ca:22:2d:5f:f5:2c:c1: ab:11:1b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjQxMTIxMDQxNDI5WhcNMjQxMTI4MDQxNDI5WjAYMRYwFAYD VQQDEw02NzNlYjNhNi03MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd37h9wPZE8nPFn2RX8wbFGU85CFJYLtHb+eDnGciTyDCg9g4Q7QxBS2Iaj8 kC9HVygpAkSMby/uduNSsYs9XpiPqyWbpiypWiMHwjFYyfVUAW3kVFaA5aCFLNCD O08LAuXRr0r6NrXZGE+JqcluM6XUwRg328Q1VhznR8/gRnz9L54DcDj/Zd3ikZbc 7G/9quXzW6KJaMAwFGFjYcVm1i1FTgY80a9xcAOtSeoDqONfgbVdycuukuzUTdxZ qMqWojdNdPrwIAEhesv+0Mqx6iCEcAoSjCJqWtGdLIghiVf9fI8vLplrLI31b1cl ylDROKWhmOMddWRvcvpiTO/VgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWxiDCJ A+OZqhc08CkkgsgVvgSTMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmHPQWxN099pcQIQZKJtK/h9WZYUiId0KayUA1aK9hFUWb2kqmLa+l T1jbcd0xGfzYLw6mzSC3bnKe+1TMaLIE+BNY3LFKZx3MEfc4HCMxFtUYkDsIKvAG bETHM2kuygBQ17xn9/BCos80yd/Vl0VT6up6rd6sIAqbYHvfaI+neK8cKGa5K/CH TAFVaiW+H3Ntjf3PsoxQM6aEixbvK71foFqwHkdyY9LHOufGF8oJ+IHgAXhRYbA3 H58H3CIMFI+XrqHw8BuEi+zMTRZKCqv4eCLUpGAru42aO8Zw56gDO9rSUDRqkUXO sRu5i5v0WijPz6Oci8oiLV/1LMGrERuA -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:22 2024 by rpki-client on console-ams.rpki-client.org