$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft File: DBvOAktD_dqH85YV2ZS6NwYkbFA.mft (raw, json) Hash identifier: gVsjg6W1R8mrmRpEAZbfIJ2lYjFP7CkcudDbgz6X6NY= Subject key identifier: 60:D0:78:23:87:3A:48:75:B1:AE:60:34:F7:DD:A4:04:BE:41:37:4B Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft Manifest number: 09 Signing time: Sat 23 Nov 2024 06:05:02 +0000 Manifest this update: Sat 23 Nov 2024 06:05:01 +0000 Manifest next update: Sat 30 Nov 2024 06:05:01 +0000 Files and hashes: 1: DBvOAktD_dqH85YV2ZS6NwYkbFA.crl (hash: jP3WZsd2/sOeelPldLBu/gc6AVtKHA78W53IC2Qo+lg=) 2: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (hash: Cu6EvKx5+axic2G9t78jCRZobiDqkcq6DwLktnKvujw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: Nov 23 06:05:01 2024 GMT Not After : Nov 30 06:05:01 2024 GMT Subject: CN=6741708e-27ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:7c:94:82:7a:20:cb:7f:93:ba:e7:5b:6d: af:ea:53:0f:34:5f:5c:14:03:7a:50:f0:6c:d6:e0: cf:c5:9c:78:2d:9b:60:f9:30:1e:cd:16:e6:8f:91: ee:5f:27:67:50:0d:cb:7e:e6:37:29:2f:c5:d5:e4: 4b:24:80:d8:93:79:b7:01:99:56:92:11:2a:eb:a9: 54:18:c1:0d:41:76:d8:4a:ae:75:d7:ca:4a:10:b1: 65:a1:a4:ad:db:d0:9e:c8:0a:c8:14:44:43:20:12: 35:41:31:9a:dd:e7:93:c2:8a:02:39:82:e8:58:20: 51:77:ab:5a:d0:da:9d:1c:2b:42:58:38:e0:d7:92: 13:4a:df:84:00:95:24:8a:6a:8d:ee:43:0c:44:9a: 1e:76:6a:46:a7:cf:77:3c:f9:4c:77:ae:89:14:db: 2a:be:28:54:47:97:df:6d:ec:79:6e:4b:b9:88:05: f9:39:b7:30:fa:e2:87:aa:d5:3a:88:63:a0:f8:88: 24:48:fd:a7:55:99:8b:dc:a8:02:d4:2e:c8:fc:1e: fb:92:4c:7f:36:ba:9b:83:4d:c5:76:f7:06:6f:b1: 04:d3:58:4e:b4:16:24:9b:e8:5c:4e:86:33:0a:23: c1:98:70:3f:16:7b:a9:39:c8:96:aa:7c:3c:17:cd: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D0:78:23:87:3A:48:75:B1:AE:60:34:F7:DD:A4:04:BE:41:37:4B X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:78:dd:40:0f:7f:36:04:af:01:54:3f:d2:6f:da:05:9a:22: 65:3e:bf:67:cd:2b:d2:62:8d:0c:5a:13:cf:c4:1d:ea:cf:58: 60:40:d3:98:79:da:24:3d:bb:18:28:cd:8f:9c:80:09:fe:f0: 82:83:99:77:23:e0:27:e1:f1:ee:ff:ed:60:a0:2b:ca:8c:07: 10:78:a1:14:3e:44:ad:a3:4d:d7:63:7e:5a:a7:93:15:75:76: 65:6c:15:8c:27:b1:8e:27:9e:2c:6b:ce:a8:f3:bf:96:cb:35: 1e:cd:9c:2c:d9:2a:5f:08:6f:92:47:93:f1:c0:ff:11:15:4c: 3c:05:ce:27:55:21:61:80:27:4b:95:81:c6:1e:8e:9d:8a:1e: 05:49:93:a9:38:ec:5b:0b:38:16:b4:db:99:a5:9a:e2:9e:ad: 06:89:0b:c7:f9:23:f1:c1:e3:7f:25:44:a0:f7:66:df:19:4b: 62:a5:28:39:b0:49:24:94:ad:20:a3:dc:e0:7c:db:27:6d:44: 67:5d:3b:c9:36:22:be:1e:0e:6c:ac:9f:a0:d0:e5:de:2b:d9: d0:33:c9:12:69:05:c2:cc:76:ff:86:04:fa:f7:e5:52:bd:3e: b4:fe:f8:b9:59:6c:87:15:aa:12:34:42:f4:7f:af:2c:a0:47: 60:7b:04:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTczOTExMC8GA1UEBRMoMEMxQkNFMDI0QjQzRkREQTg3RjM5NjE1RDk5NEJBMzcw NjI0NkM1MDAeFw0yNDExMjMwNjA1MDFaFw0yNDExMzAwNjA1MDFaMBgxFjAUBgNV BAMTDTY3NDE3MDhlLTI3ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJGXyUgnogy3+Tuudbba/qUw80X1wUA3pQ8GzW4M/FnHgtm2D5MB7NFuaPke5f J2dQDct+5jcpL8XV5EskgNiTebcBmVaSESrrqVQYwQ1BdthKrnXXykoQsWWhpK3b 0J7ICsgUREMgEjVBMZrd55PCigI5guhYIFF3q1rQ2p0cK0JYOODXkhNK34QAlSSK ao3uQwxEmh52akanz3c8+Ux3rokU2yq+KFRHl99t7HluS7mIBfk5tzD64oeq1TqI Y6D4iCRI/adVmYvcqALULsj8HvuSTH82upuDTcV29wZvsQTTWE60FiSb6FxOhjMK I8GYcD8We6k5yJaqfDwXzbNjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYNB4I4c6 SHWxrmA0992kBL5BN0swHwYDVR0jBBgwFoAUDBvOAktD/dqH85YV2ZS6NwYkbFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNzM5L0M5NUQzOTdDOUY1 MTExRUY5QjYzQ0M1NUM0RjlBRTAyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREJ2T0FrdERfZHFIODVZVjJaUzZOd1lrYkZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NzM5L0M5NUQzOTdDOUY1MTExRUY5QjYzQ0M1NUM0RjlBRTAyL0RCdk9Ba3REX2Rx SDg1WVYyWlM2TndZa2JGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJ43UAPfzYErwFUP9Jv2gWaImU+v2fNK9JijQxaE8/EHerPWGBA05h5 2iQ9uxgozY+cgAn+8IKDmXcj4Cfh8e7/7WCgK8qMBxB4oRQ+RK2jTddjflqnkxV1 dmVsFYwnsY4nnixrzqjzv5bLNR7NnCzZKl8Ib5JHk/HA/xEVTDwFzidVIWGAJ0uV gcYejp2KHgVJk6k47FsLOBa025mlmuKerQaJC8f5I/HB438lRKD3Zt8ZS2KlKDmw SSSUrSCj3OB82ydtRGddO8k2Ir4eDmysn6DQ5d4r2dAzyRJpBcLMdv+GBPr35VK9 PrT++LlZbIcVqhI0QvR/ryygR2B7BPc= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org