$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: v4Uz8+UrMWSDd8gdCzbtn4LCpLVfCYsV/KT6ZNLOwgI= Subject key identifier: EF:58:81:6A:0F:74:37:FD:41:60:2F:E3:A2:61:AE:50:62:F3:99:8E Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 04DF Signing time: Fri 22 Nov 2024 23:17:35 +0000 Manifest this update: Fri 22 Nov 2024 23:17:34 +0000 Manifest next update: Fri 29 Nov 2024 23:17:34 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: +aPW9NLt0PVW6mCOje4XMUORllnIjOEs06SLiBrD6VY=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 5ctxZQMCBBanRgJSVxk2lsTuco//bC5Osf3fvZWriiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: Nov 22 23:17:34 2024 GMT Not After : Nov 29 23:17:34 2024 GMT Subject: CN=6741110e-4f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:e7:9a:d1:8c:ed:a8:76:97:8a:10:f5:44: 55:0e:a2:9c:a5:45:90:b6:a0:2f:61:92:87:84:b0: da:85:6c:cf:fe:d1:2b:29:86:80:f2:e7:32:98:77: 43:a5:8d:77:28:5e:d6:6b:11:f9:8d:44:c9:f5:bd: 7f:cb:7d:eb:f4:17:db:5c:e8:d7:8d:84:2c:da:21: ca:cb:26:59:00:9e:f8:13:52:d2:ee:ba:58:1e:e2: 13:33:b6:53:80:93:31:37:02:cf:b7:1b:f0:bf:4a: d9:b4:06:fa:01:28:6c:72:86:ef:ff:27:0d:1d:f5: e0:a7:1e:e8:ba:03:2a:4b:91:03:9b:3f:63:58:e4: fd:10:71:e3:66:da:70:ae:36:31:96:21:a9:80:28: 8b:7f:67:6c:c3:8d:70:5b:f1:07:c5:6e:38:2c:e3: c1:8c:57:8f:ce:f3:16:2c:88:fc:f6:71:25:2f:73: 45:ea:c8:c2:17:28:b3:57:fa:f3:71:47:3a:ce:a7: bd:2b:37:44:8b:da:11:97:31:1a:d8:0e:c6:db:af: 5b:cf:f7:1b:65:bf:11:db:4b:5b:b9:07:a4:91:0f: d8:6b:64:f8:92:c5:0b:24:b9:5b:75:13:a9:e1:bd: 3f:3f:90:74:88:4d:a1:54:2c:be:1b:f4:70:d9:07: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:58:81:6A:0F:74:37:FD:41:60:2F:E3:A2:61:AE:50:62:F3:99:8E X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:68:33:55:09:a3:7a:dd:cb:f1:fd:fe:0b:f4:01:f8:f8:9d: b1:20:8e:95:99:7e:b4:43:fa:65:49:8a:fb:30:90:2b:75:4b: a6:c7:73:ed:49:f8:17:1c:89:9c:2b:fb:91:83:ce:d7:98:e2: d2:2c:0e:39:cb:ad:a4:25:04:00:ad:3e:11:70:82:17:c6:5c: 36:e6:ab:ab:ce:09:11:c9:17:4f:a9:9f:fc:55:70:d8:4a:cb: b7:ae:2d:47:d3:d0:3e:56:8a:51:0f:ad:84:ff:0e:d5:4e:d3: 01:42:3d:38:c0:1d:3d:02:5d:a6:ef:56:56:52:9d:1f:3e:20: 30:92:c6:95:bd:f2:ca:4a:93:a4:a2:e0:5f:f8:89:3f:4b:8f: 7b:6c:98:ae:50:88:3f:4e:75:1e:94:fe:ea:0d:48:23:55:c9: 35:da:d1:76:4a:4c:cc:ec:52:d1:4e:9f:67:7a:c6:65:7a:7f: 50:e3:61:ce:99:e6:93:03:40:f9:8f:bd:d1:fa:79:e2:de:5f: 57:8f:ec:b9:59:12:08:39:c7:bb:cf:2c:cd:0e:80:d1:0a:07: 74:de:6f:fa:e4:80:1a:11:d6:54:fa:c3:44:26:31:ab:6a:a3: 38:74:9e:40:c4:70:67:76:7e:36:68:3f:a1:e7:4e:5e:7b:e2: fb:ec:0c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjQxMTIyMjMxNzM0WhcNMjQxMTI5MjMxNzM0WjAYMRYwFAYD VQQDEw02NzQxMTEwZS00ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL/nmtGM7ah2l4oQ9URVDqKcpUWQtqAvYZKHhLDahWzP/tErKYaA8ucymHdD pY13KF7WaxH5jUTJ9b1/y33r9BfbXOjXjYQs2iHKyyZZAJ74E1LS7rpYHuITM7ZT gJMxNwLPtxvwv0rZtAb6AShscobv/ycNHfXgpx7ougMqS5EDmz9jWOT9EHHjZtpw rjYxliGpgCiLf2dsw41wW/EHxW44LOPBjFePzvMWLIj89nElL3NF6sjCFyizV/rz cUc6zqe9KzdEi9oRlzEa2A7G269bz/cbZb8R20tbuQekkQ/Ya2T4ksULJLlbdROp 4b0/P5B0iE2hVCy+G/Rw2QdVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9YgWoP dDf9QWAv46JhrlBi85mOMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmaDNVCaN63cvx/f4L9AH4+J2xII6VmX60Q/plSYr7MJArdUumx3Pt SfgXHImcK/uRg87XmOLSLA45y62kJQQArT4RcIIXxlw25qurzgkRyRdPqZ/8VXDY Ssu3ri1H09A+VopRD62E/w7VTtMBQj04wB09Al2m71ZWUp0fPiAwksaVvfLKSpOk ouBf+Ik/S497bJiuUIg/TnUelP7qDUgjVck12tF2SkzM7FLRTp9nesZlen9Q42HO meaTA0D5j73R+nni3l9Xj+y5WRIIOce7zyzNDoDRCgd03m/65IAaEdZU+sNEJjGr aqM4dJ5AxHBndn42aD+h505ee+L77Azg -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org