$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: uujI9nablZamLFxB9o6A5KG2Oq0UkVJuVkhxSfyTJEc= Subject key identifier: 4D:4D:E5:0D:3F:A6:73:2E:65:85:33:F0:B4:26:8F:29:ED:E7:29:1C Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 02D7 Signing time: Wed 27 Nov 2024 00:55:30 +0000 Manifest this update: Wed 27 Nov 2024 00:55:29 +0000 Manifest next update: Wed 04 Dec 2024 00:55:29 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: WDh7LzQdEsSdjf1vaWhqjFOSygxsEA4rMgHFHXqQcgM=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: BPc2ul74OB2iZzZj4zYG4tzM+HpQpkLBKywQ3Rl7cOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 00:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: Nov 27 00:55:29 2024 GMT Not After : Dec 4 00:55:29 2024 GMT Subject: CN=67466e02-6cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:43:0b:e9:01:a6:0a:fa:77:6b:1f:f9:d3: 24:fe:3b:82:80:c8:17:ea:9a:40:be:ae:bc:04:8b: aa:50:75:fe:01:a2:ba:86:75:12:cb:da:f5:37:51: 90:9b:6b:b9:20:b6:f1:49:a3:31:67:30:f0:54:17: da:7f:e9:08:47:d5:5d:07:33:50:fa:c0:10:7b:c7: 52:39:e2:84:7a:69:f7:b0:ad:66:15:82:27:86:2d: e5:55:e3:8c:c2:d3:75:ae:90:ad:1d:2c:8a:42:8e: 4f:98:0d:b5:96:55:dd:18:62:70:3b:60:2d:4c:c7: 48:87:04:72:0b:a7:91:20:94:61:8d:ad:df:f0:00: 5e:b7:74:ac:66:01:fa:da:9d:63:96:f1:b2:f9:e1: 82:7c:8e:b1:35:b6:3a:d3:d5:10:9b:6a:25:3d:e7: 5f:22:8d:41:f6:42:10:27:74:e3:cb:b0:77:9e:b4: 04:57:b5:fc:e7:e6:3e:b5:ec:37:37:8f:54:22:c5: 3d:80:1f:cb:76:aa:6f:51:a8:7a:d8:1e:0a:e6:b4: 69:28:d6:9c:21:f9:9d:e0:b3:b0:84:b4:98:64:66: 36:bb:68:36:b3:3c:f6:83:f2:e3:86:9d:b6:d2:d1: 60:30:70:8a:2f:42:ca:c4:d3:10:fc:13:fe:06:65: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:E5:0D:3F:A6:73:2E:65:85:33:F0:B4:26:8F:29:ED:E7:29:1C X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5c:a2:9a:53:96:fd:7e:dc:a2:ed:6e:66:23:e7:7e:3b:32: af:99:58:86:ec:7a:87:77:00:90:d5:79:56:9d:e1:0e:4c:1d: 4b:a6:5b:8b:e8:25:88:77:4c:da:d2:0b:bf:40:e3:7e:6c:c4: 81:19:4a:72:1c:e9:58:4b:66:71:cc:77:26:24:5e:1c:99:50: 1f:69:ea:b9:90:b2:e0:b2:12:91:56:63:e5:eb:03:cb:1a:32: 4b:f6:43:b5:3d:82:cd:ba:ca:7c:2f:d2:03:1f:9f:4e:33:66: 31:3c:a1:bb:4e:96:cc:cb:45:d1:7b:da:f9:6e:26:30:9c:a6: fa:72:20:b7:1a:b2:f9:57:50:5a:3c:0e:8e:c2:b4:38:90:53: 4a:87:26:4e:40:d6:10:db:87:1b:f2:78:a4:80:af:54:3b:3c: 01:85:0a:b4:d7:f9:8d:37:f4:e7:6d:81:58:bc:8e:b7:e1:93: 09:45:64:85:df:de:28:2f:43:7e:15:6d:36:8e:a2:79:a7:ae: 0f:49:ff:79:4e:23:6d:02:92:b7:da:28:97:43:4a:fb:4e:bb: 41:98:1b:0d:ee:d6:9a:2c:93:bc:74:cd:93:03:33:65:e7:74: 9d:3e:2e:8e:50:e6:a2:45:99:45:c9:b6:97:a3:81:56:22:02: 9b:7b:e0:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjQxMTI3MDA1NTI5WhcNMjQxMjA0MDA1NTI5WjAYMRYwFAYD VQQDEw02NzQ2NmUwMi02Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO9DC+kBpgr6d2sf+dMk/juCgMgX6ppAvq68BIuqUHX+AaK6hnUSy9r1N1GQ m2u5ILbxSaMxZzDwVBfaf+kIR9VdBzNQ+sAQe8dSOeKEemn3sK1mFYInhi3lVeOM wtN1rpCtHSyKQo5PmA21llXdGGJwO2AtTMdIhwRyC6eRIJRhja3f8ABet3SsZgH6 2p1jlvGy+eGCfI6xNbY609UQm2olPedfIo1B9kIQJ3Tjy7B3nrQEV7X85+Y+tew3 N49UIsU9gB/LdqpvUah62B4K5rRpKNacIfmd4LOwhLSYZGY2u2g2szz2g/Ljhp22 0tFgMHCKL0LKxNMQ/BP+BmUC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1N5Q0/ pnMuZYUz8LQmjynt5ykcMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXKKaU5b9ftyi7W5mI+d+OzKvmViG7HqHdwCQ1XlWneEOTB1LpluL 6CWId0za0gu/QON+bMSBGUpyHOlYS2ZxzHcmJF4cmVAfaeq5kLLgshKRVmPl6wPL GjJL9kO1PYLNusp8L9IDH59OM2YxPKG7TpbMy0XRe9r5biYwnKb6ciC3GrL5V1Ba PA6OwrQ4kFNKhyZOQNYQ24cb8nikgK9UOzwBhQq01/mNN/TnbYFYvI634ZMJRWSF 394oL0N+FW02jqJ5p64PSf95TiNtApK32iiXQ0r7TrtBmBsN7taaLJO8dM2TAzNl 53SdPi6OUOaiRZlFybaXo4FWIgKbe+DQ -----END CERTIFICATE-----Generated at Wed Nov 27 02:21:04 2024 by rpki-client on console-fra.rpki-client.org