$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: hSxHgOqWJQHtDrA1sX0ZNSIFhSbjAbPpm3nJXlqdseE= Subject key identifier: 0F:7E:42:E5:D3:6A:31:CB:B8:CE:B7:C7:39:F8:50:19:20:45:E6:73 Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: B0 Signing time: Sat 23 Nov 2024 04:10:59 +0000 Manifest this update: Sat 23 Nov 2024 04:10:58 +0000 Manifest next update: Sat 30 Nov 2024 04:10:58 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: CtAKGBYdaz8QI/caG5spQZq+s8E55muv9xwN1mMzYQk=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Nov 23 04:10:58 2024 GMT Not After : Nov 30 04:10:58 2024 GMT Subject: CN=674155d2-faf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:f2:9d:69:54:25:f8:f2:39:2f:cb:51:08: 89:99:58:1f:1b:45:ab:c1:3a:42:7a:11:5b:60:16: 9e:be:95:46:50:96:f4:ce:be:87:f9:e5:2d:5b:9f: 43:ab:91:16:de:16:e1:ab:70:2f:6e:cf:04:56:fa: e8:e5:98:73:a5:55:ff:3c:bf:e6:cd:11:a5:b7:02: 13:17:65:0f:f0:f7:e2:0c:ee:46:8c:e5:1b:a7:e0: 0e:65:79:75:99:58:94:86:a7:ce:8b:fd:62:6c:2c: ac:46:f8:13:e7:6d:81:83:bb:7b:6b:04:7a:04:74: 17:4a:22:b4:6e:cb:58:1d:3a:e8:3a:56:77:c2:93: 09:b9:74:05:c8:97:48:4c:75:5b:d1:7e:66:99:85: 4e:49:f8:58:95:f9:8d:04:0a:d7:01:bf:f1:b0:ad: a0:59:7b:b2:d2:74:73:f2:ee:18:b8:3d:1f:4c:b3: 08:33:6e:a7:ed:88:b6:68:94:2f:a4:1a:3a:6c:30: 06:28:a1:3c:17:bf:ba:73:64:fb:8d:69:8e:57:55: e9:57:5d:e7:9a:c2:90:db:3a:d8:c8:cf:91:0b:c9: 04:69:5e:0c:f0:ae:24:85:09:d4:97:14:6c:9e:30: 68:ac:2b:15:7b:de:64:60:83:a5:0a:d0:9a:91:10: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:42:E5:D3:6A:31:CB:B8:CE:B7:C7:39:F8:50:19:20:45:E6:73 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:87:11:05:98:ea:a7:5d:8f:bd:03:7a:7c:1a:85:8f:e8:58: 9f:80:17:a8:7f:58:f0:10:2a:d1:0c:64:16:9b:18:b4:0a:0b: b4:1c:c4:12:6e:59:e2:72:77:52:0e:9f:af:3e:2d:3f:ea:4d: 56:74:35:65:26:f9:ce:18:c9:4d:15:15:b9:36:69:7e:2f:e1: 32:4e:44:8c:64:cf:ec:c4:86:0b:75:f2:b0:c6:1d:fb:7b:fd: 83:8f:9d:ca:80:75:34:78:b7:2c:37:e1:ce:5a:9a:04:60:f7: 20:05:52:26:82:c0:7d:57:63:b3:96:32:ac:eb:87:82:03:bd: b1:d8:70:f9:92:2b:4c:2b:1b:93:9f:62:ce:73:45:17:ad:54: 60:69:19:32:19:85:de:21:46:ab:d7:e9:c7:5a:6c:81:df:e0: 24:32:9f:c9:7d:36:69:d2:c5:e1:50:7e:2d:3e:a1:1e:bb:90: 93:b0:99:5a:f3:6e:fa:b8:e3:59:d5:27:da:6a:1f:c3:fa:82: b3:8e:d3:3b:69:7a:e3:ea:7a:b2:ac:63:77:04:0b:e3:d7:80: 3d:a7:01:08:e3:7c:35:09:b7:48:a7:f3:48:77:6a:6d:98:cc: c8:d1:4b:4a:2c:1d:32:8e:b7:16:cc:2f:eb:1c:da:29:8e:6b: dc:e2:f2:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjQxMTIzMDQxMDU4WhcNMjQxMTMwMDQxMDU4WjAYMRYwFAYD VQQDEw02NzQxNTVkMi1mYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SzynWlUJfjyOS/LUQiJmVgfG0WrwTpCehFbYBaevpVGUJb0zr6H+eUtW59D q5EW3hbhq3Avbs8EVvro5ZhzpVX/PL/mzRGltwITF2UP8PfiDO5GjOUbp+AOZXl1 mViUhqfOi/1ibCysRvgT522Bg7t7awR6BHQXSiK0bstYHTroOlZ3wpMJuXQFyJdI THVb0X5mmYVOSfhYlfmNBArXAb/xsK2gWXuy0nRz8u4YuD0fTLMIM26n7Yi2aJQv pBo6bDAGKKE8F7+6c2T7jWmOV1XpV13nmsKQ2zrYyM+RC8kEaV4M8K4khQnUlxRs njBorCsVe95kYIOlCtCakRDn1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9+QuXT ajHLuM63xzn4UBkgReZzMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDshxEFmOqnXY+9A3p8GoWP6FifgBeof1jwECrRDGQWmxi0Cgu0HMQS blnicndSDp+vPi0/6k1WdDVlJvnOGMlNFRW5Nml+L+EyTkSMZM/sxIYLdfKwxh37 e/2Dj53KgHU0eLcsN+HOWpoEYPcgBVImgsB9V2OzljKs64eCA72x2HD5kitMKxuT n2LOc0UXrVRgaRkyGYXeIUar1+nHWmyB3+AkMp/JfTZp0sXhUH4tPqEeu5CTsJla 8276uONZ1Sfaah/D+oKzjtM7aXrj6nqyrGN3BAvj14A9pwEI43w1CbdIp/NId2pt mMzI0UtKLB0yjrcWzC/rHNopjmvc4vIi -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org