$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: xnzhbq1ZzPSxYgAJUT/BgUlWUe+UsBea7zJYTE98CVg= Subject key identifier: 46:E9:6A:FF:1A:AE:49:5C:38:E7:63:7D:45:BB:2B:AE:11:A6:E3:98 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 029D Signing time: Sat 23 Nov 2024 01:06:26 +0000 Manifest this update: Sat 23 Nov 2024 01:06:25 +0000 Manifest next update: Sat 30 Nov 2024 01:06:25 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: aduucvrEDLZkRSjtGdA08e3Nw5+1kk8B2G6mCYMoJrw=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dQViwk1iBrJGr2fBwaPfSS5giTEUliECggf7nT0Erg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Nov 23 01:06:25 2024 GMT Not After : Nov 30 01:06:25 2024 GMT Subject: CN=67412a91-e8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:40:d5:b5:8c:a4:38:ef:34:d7:df:31:e7: e9:3d:92:fa:ff:1c:85:2d:7a:27:6e:48:a2:a3:6c: 37:b9:94:94:2f:ef:93:15:49:35:24:eb:0f:0f:65: 02:7a:1f:4a:b6:e7:35:4b:ba:b8:71:2a:72:b3:30: 56:c9:15:67:c1:d2:0f:e8:e9:ce:7e:eb:61:90:d9: d2:3b:91:17:c6:e8:15:62:8e:96:7d:8f:5b:d7:71: 39:9c:ec:3f:d2:b7:ef:a4:6c:f2:36:d9:d3:ff:dc: 74:50:92:3f:ef:e2:1b:a2:5d:53:b1:6d:53:e5:12: 1c:a4:9d:8e:ad:b9:0a:05:96:ac:55:0e:04:f9:e5: 7e:9a:93:96:77:80:8a:58:b5:f3:a8:fb:f9:de:68: 19:12:2e:fa:9d:4c:a6:58:9e:bf:b8:b5:6e:45:16: d1:e4:af:2a:e6:df:32:2d:5d:67:f4:b4:a5:a2:bf: e5:ab:ba:9f:51:52:c3:7e:29:cf:19:80:20:6a:60: f7:fd:7b:a4:dc:e5:c9:7b:03:54:8d:19:b9:44:80: 2e:e6:af:cd:b1:e6:f5:a6:cf:50:71:07:66:24:7f: 60:76:3c:bd:b0:8a:f5:89:be:60:44:e6:73:cf:b5: 79:fc:4e:c9:cd:2d:ef:c4:8d:e5:f0:1c:a4:fb:a2: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:6A:FF:1A:AE:49:5C:38:E7:63:7D:45:BB:2B:AE:11:A6:E3:98 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:48:5a:a2:a0:5a:12:ed:7b:0e:53:1e:99:1c:fb:95:b6:e1: a3:f5:5a:a0:be:29:4d:21:2e:07:3d:8a:9a:25:1a:48:c1:4b: d8:2f:1a:ad:e5:6c:78:05:e8:d6:ca:38:fa:b9:23:0d:1b:2d: 02:48:b4:64:9b:1b:0c:4c:20:1f:33:65:b3:9b:89:7e:a4:6a: 55:5d:a8:d2:d4:3a:e3:62:aa:9f:74:b0:9c:1e:4d:9c:50:ff: 90:12:cc:68:bb:e3:9d:fe:a9:ff:18:a0:81:af:dc:a8:d5:69: 96:6d:24:d1:fe:85:a1:77:1f:ff:f6:93:c7:0e:48:99:44:ba: 33:71:63:fd:a6:a4:43:c4:d4:1c:93:32:73:b2:4b:3e:bc:ed: c0:5a:0a:8b:22:94:e8:d9:51:30:7a:46:69:59:e7:a6:99:c1: fa:c2:6f:0c:c2:58:44:f0:68:f3:92:83:60:14:37:2d:d6:d6: b5:f3:45:d0:cc:c0:c3:06:fc:9b:29:59:d6:19:54:2d:3b:fb: f1:22:7e:cd:76:ea:1a:55:70:f9:40:c5:9f:ac:a6:23:9b:c4: b7:68:0c:22:cb:19:ef:f0:1b:91:8f:30:34:05:fb:6a:57:21: 0f:04:ad:5c:df:2c:be:98:e1:da:d8:3c:ef:91:f5:ba:94:53: 93:1d:98:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjQxMTIzMDEwNjI1WhcNMjQxMTMwMDEwNjI1WjAYMRYwFAYD VQQDEw02NzQxMmE5MS1lOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApulA1bWMpDjvNNffMefpPZL6/xyFLXonbkiio2w3uZSUL++TFUk1JOsPD2UC eh9Ktuc1S7q4cSpyszBWyRVnwdIP6OnOfuthkNnSO5EXxugVYo6WfY9b13E5nOw/ 0rfvpGzyNtnT/9x0UJI/7+Ibol1TsW1T5RIcpJ2OrbkKBZasVQ4E+eV+mpOWd4CK WLXzqPv53mgZEi76nUymWJ6/uLVuRRbR5K8q5t8yLV1n9LSlor/lq7qfUVLDfinP GYAgamD3/Xuk3OXJewNUjRm5RIAu5q/Nseb1ps9QcQdmJH9gdjy9sIr1ib5gROZz z7V5/E7JzS3vxI3l8Byk+6IODwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbpav8a rklcOOdjfUW7K64RpuOYMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnSFqioFoS7XsOUx6ZHPuVtuGj9VqgvilNIS4HPYqaJRpIwUvYLxqt 5Wx4BejWyjj6uSMNGy0CSLRkmxsMTCAfM2Wzm4l+pGpVXajS1DrjYqqfdLCcHk2c UP+QEsxou+Od/qn/GKCBr9yo1WmWbSTR/oWhdx//9pPHDkiZRLozcWP9pqRDxNQc kzJzsks+vO3AWgqLIpTo2VEwekZpWeemmcH6wm8MwlhE8GjzkoNgFDct1ta180XQ zMDDBvybKVnWGVQtO/vxIn7NduoaVXD5QMWfrKYjm8S3aAwiyxnv8BuRjzA0Bftq VyEPBK1c3yy+mOHa2DzvkfW6lFOTHZgq -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org