$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: 9EiuSqPCL055UvLvRn+Vna/wrfeX/CbhPib/HjQDAwY= Subject key identifier: CE:53:3B:66:65:F0:68:4F:BD:4B:56:A4:FD:63:93:70:A0:0C:18:75 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 0373 Signing time: Sat 23 Nov 2024 00:27:05 +0000 Manifest this update: Sat 23 Nov 2024 00:27:05 +0000 Manifest next update: Sat 30 Nov 2024 00:27:05 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: ZfA8WELWtbnnYdLZhQuAvvyQBmaY6ihJKig6hCfhemE=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: W1x/EXO8bWreNOkmC081MRTGEO62/pX9uJW9+p1JmgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Nov 23 00:27:05 2024 GMT Not After : Nov 30 00:27:05 2024 GMT Subject: CN=67412159-37de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:60:7e:26:28:5c:73:60:e0:f0:63:26:4e: 49:2d:a5:8f:f5:79:a3:d9:62:ac:e3:47:bf:2c:05: 4f:96:da:cc:78:5f:18:a5:36:5e:51:58:be:c9:9d: 4c:36:78:b2:06:bf:40:20:f8:ad:1f:05:a3:32:04: 4a:6b:e1:89:35:23:2f:3d:37:b2:f9:e4:67:e9:04: 71:5d:d1:d0:44:b7:85:b7:39:36:35:be:36:c7:59: d9:9a:e9:6b:5e:e9:46:ac:3b:74:e2:f8:eb:2a:22: 58:49:87:6f:e4:6b:73:42:37:c3:97:46:0d:04:6e: 30:33:5c:82:87:3d:3a:c1:15:18:02:2a:3d:50:7d: af:2d:e0:9b:8a:ac:ef:af:4a:31:25:44:23:dc:ce: 46:e4:0b:2d:a4:2c:fa:2f:6d:52:c9:a9:8a:ac:24: c4:86:a2:5b:4a:03:a3:c8:b9:78:29:e7:69:60:0d: 46:51:a1:9c:ed:04:8c:10:73:89:08:ca:a8:3c:66: 74:5a:6e:04:52:86:60:fc:c9:a0:49:c4:2f:b3:8d: 34:bf:07:5d:5b:2e:74:68:24:f2:1a:b5:46:23:da: 1b:7a:25:da:8d:ae:ea:53:60:78:72:25:16:68:ab: 30:9c:6a:bf:01:87:2d:5f:21:ae:c5:cb:a2:ef:d8: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:53:3B:66:65:F0:68:4F:BD:4B:56:A4:FD:63:93:70:A0:0C:18:75 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b1:e7:45:29:bf:05:bd:88:95:cd:18:5b:f1:8d:3d:c3:b9: be:0e:67:f4:ef:03:b9:b7:b6:13:4f:79:b8:12:29:7b:79:a2: c0:5c:62:3f:c5:2c:4a:c7:15:c5:7c:1a:92:2a:d0:a4:ae:e8: 3e:38:d9:ff:46:93:27:17:f2:8c:49:2b:08:08:81:de:73:cc: f3:fd:fc:67:02:77:81:99:d7:08:1e:e8:dc:2b:e3:3a:35:ed: fe:e1:4e:4a:88:bd:04:2b:07:d1:08:93:5f:84:bb:66:9c:0d: 08:14:0b:f2:32:90:52:c5:d9:65:1f:35:d4:83:d3:fb:3c:0c: 3d:b0:b9:37:4a:3d:50:d1:b4:15:55:0e:cd:ab:a1:93:ab:0f: 5d:7f:b2:3f:74:0d:5d:9d:17:c6:4e:11:d5:79:fb:29:6f:7c: 1f:a0:72:96:28:b7:15:65:f9:a5:6d:a3:e8:40:4a:3f:b2:bb: 37:ee:72:51:f5:76:8a:56:b2:3f:75:57:fd:b8:0f:73:e0:b5: 87:63:dc:e0:df:7b:45:5a:63:a0:ff:e0:e0:eb:6c:c1:2a:4b: 2e:ca:b1:e0:50:75:a7:a3:f2:40:77:df:0d:88:4a:2e:4f:d3: 9c:1d:d4:bf:1c:34:be:fe:0c:eb:72:59:67:74:59:3b:ba:d3: 0c:09:14:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjQxMTIzMDAyNzA1WhcNMjQxMTMwMDAyNzA1WjAYMRYwFAYD VQQDEw02NzQxMjE1OS0zN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvORgfiYoXHNg4PBjJk5JLaWP9Xmj2WKs40e/LAVPltrMeF8YpTZeUVi+yZ1M NniyBr9AIPitHwWjMgRKa+GJNSMvPTey+eRn6QRxXdHQRLeFtzk2Nb42x1nZmulr XulGrDt04vjrKiJYSYdv5GtzQjfDl0YNBG4wM1yChz06wRUYAio9UH2vLeCbiqzv r0oxJUQj3M5G5AstpCz6L21SyamKrCTEhqJbSgOjyLl4KedpYA1GUaGc7QSMEHOJ CMqoPGZ0Wm4EUoZg/MmgScQvs400vwddWy50aCTyGrVGI9obeiXaja7qU2B4ciUW aKswnGq/AYctXyGuxcui79jbEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5TO2Zl 8GhPvUtWpP1jk3CgDBh1MB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8sedFKb8FvYiVzRhb8Y09w7m+Dmf07wO5t7YTT3m4Eil7eaLAXGI/ xSxKxxXFfBqSKtCkrug+ONn/RpMnF/KMSSsICIHec8zz/fxnAneBmdcIHujcK+M6 Ne3+4U5KiL0EKwfRCJNfhLtmnA0IFAvyMpBSxdllHzXUg9P7PAw9sLk3Sj1Q0bQV VQ7Nq6GTqw9df7I/dA1dnRfGThHVefspb3wfoHKWKLcVZfmlbaPoQEo/srs37nJR 9XaKVrI/dVf9uA9z4LWHY9zg33tFWmOg/+Dg62zBKksuyrHgUHWno/JAd98NiEou T9OcHdS/HDS+/gzrcllndFk7utMMCRSe -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org