$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: t7wSfn3SslrFawmtbOqD+YEyc6Oplb785QZeahBX5UM= Subject key identifier: 62:87:FD:3F:60:27:B5:03:B0:B3:2B:E8:E2:FC:DE:51:D2:8F:6D:B8 Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 03DC Signing time: Sat 23 Nov 2024 00:09:42 +0000 Manifest this update: Sat 23 Nov 2024 00:09:41 +0000 Manifest next update: Sat 30 Nov 2024 00:09:41 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: 72A+y4DAyu3XkSCxj9tpB9tDSzY/LtdSo7y/KZj8GkU=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: FClvPvzoTDmX/ZzIigyjz+g4sikyQbqSLF5/K9p2wok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Nov 23 00:09:41 2024 GMT Not After : Nov 30 00:09:41 2024 GMT Subject: CN=67411d45-dd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:4f:35:69:8f:ee:59:49:93:7a:a4:40:bc: 6b:1a:9a:d5:0d:2a:2e:0f:e8:3e:10:b1:b9:2f:5b: eb:37:22:d7:2c:f4:85:57:f3:a8:f1:fe:32:41:b2: 80:89:c6:77:7b:bb:16:84:d8:f2:81:6e:73:d4:37: 72:98:4f:79:c9:91:01:d0:ca:97:77:42:23:d2:8c: dd:8c:09:0e:f3:ba:3d:c8:d4:e6:14:fc:8c:69:14: 84:65:ab:6f:06:58:96:bc:7b:c1:2f:1f:6d:bc:49: 3a:39:52:a8:bd:fe:f3:17:c1:b3:45:7b:c2:7d:2f: 72:8f:ac:b1:40:63:9f:3d:60:91:82:c4:e7:84:be: 93:a3:85:26:86:e3:15:c3:ac:ee:72:78:cb:25:81: 61:3f:81:6a:77:7e:4c:42:47:20:1a:45:36:24:b4: 0f:0a:7f:49:c0:c7:78:cc:ca:28:7e:e3:08:1a:3d: 1c:a8:7e:eb:43:25:82:99:69:a7:b2:fd:77:22:14: e6:3a:a4:19:f4:d1:ee:b9:a0:9e:a1:41:90:ca:66: ac:c3:85:4d:a3:82:59:3e:c5:c0:1b:bc:bf:f8:33: dd:b0:3a:cf:35:a3:29:82:70:08:7c:16:9b:39:61: 0c:83:db:85:d9:f5:e3:3e:94:17:a9:26:df:45:d6: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:87:FD:3F:60:27:B5:03:B0:B3:2B:E8:E2:FC:DE:51:D2:8F:6D:B8 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:24:65:98:b0:a3:78:3e:4b:6f:6c:5a:7c:5a:4a:21:da:af: 99:36:28:18:fa:1d:d0:7b:ab:23:3b:bd:f5:da:02:bd:1f:32: e5:93:c6:65:af:75:4a:c2:43:0f:55:fc:6d:8d:35:95:58:2b: 70:c2:73:2e:41:66:b5:37:3d:46:5a:86:23:fe:5a:b2:65:33: 3c:2e:58:ef:9f:57:75:ad:87:f7:44:d2:d8:45:6e:a2:91:c3: 18:64:d6:b7:f1:a2:15:88:fb:b7:d0:b9:b5:2b:e0:65:66:ef: c5:67:8c:10:35:36:4c:2a:66:93:0f:29:4f:20:ad:51:29:72: d4:bb:80:7b:4e:1e:0a:2c:21:0c:22:92:f1:43:4f:74:88:50: 3c:db:a9:40:3a:39:a2:9e:78:ab:40:36:40:d1:13:37:94:79: 11:23:6a:73:f0:60:22:0d:96:9d:1e:63:12:a1:85:fb:71:6d: ac:81:c6:db:34:54:bf:15:ca:cf:c1:e1:5e:2e:c6:81:58:3f: 7c:f5:18:3c:12:11:7a:69:6c:ab:ba:39:13:4e:af:f8:fc:77: b6:37:18:af:83:7f:5c:84:7c:90:d7:f0:58:4a:2f:ec:82:c4: 29:31:0b:e1:a4:29:bf:85:06:3f:f5:17:ed:01:af:fb:64:4f: f0:9b:86:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjQxMTIzMDAwOTQxWhcNMjQxMTMwMDAwOTQxWjAYMRYwFAYD VQQDEw02NzQxMWQ0NS1kZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9xPNWmP7llJk3qkQLxrGprVDSouD+g+ELG5L1vrNyLXLPSFV/Oo8f4yQbKA icZ3e7sWhNjygW5z1DdymE95yZEB0MqXd0Ij0ozdjAkO87o9yNTmFPyMaRSEZatv BliWvHvBLx9tvEk6OVKovf7zF8GzRXvCfS9yj6yxQGOfPWCRgsTnhL6To4UmhuMV w6zucnjLJYFhP4Fqd35MQkcgGkU2JLQPCn9JwMd4zMoofuMIGj0cqH7rQyWCmWmn sv13IhTmOqQZ9NHuuaCeoUGQymasw4VNo4JZPsXAG7y/+DPdsDrPNaMpgnAIfBab OWEMg9uF2fXjPpQXqSbfRdbmuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKH/T9g J7UDsLMr6OL83lHSj224MB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUJGWYsKN4PktvbFp8Wkoh2q+ZNigY+h3Qe6sjO7312gK9HzLlk8Zl r3VKwkMPVfxtjTWVWCtwwnMuQWa1Nz1GWoYj/lqyZTM8Lljvn1d1rYf3RNLYRW6i kcMYZNa38aIViPu30Lm1K+BlZu/FZ4wQNTZMKmaTDylPIK1RKXLUu4B7Th4KLCEM IpLxQ090iFA826lAOjminnirQDZA0RM3lHkRI2pz8GAiDZadHmMSoYX7cW2sgcbb NFS/FcrPweFeLsaBWD989Rg8EhF6aWyrujkTTq/4/He2Nxivg39chHyQ1/BYSi/s gsQpMQvhpCm/hQY/9RftAa/7ZE/wm4ag -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org