$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: nHKnYzaPy8cJ8bFTT+p79Vq8t6RLDHx+hR86yMDwh5I= Subject key identifier: EA:14:46:4D:87:A4:08:05:9C:C1:05:C2:AB:1B:D7:22:A2:47:C4:F4 Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: 015B Signing time: Sat 23 Nov 2024 02:28:01 +0000 Manifest this update: Sat 23 Nov 2024 02:28:01 +0000 Manifest next update: Sat 30 Nov 2024 02:28:01 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: RauZYi2FUjkKCMb+Tdw+s3jvsKv+wJlhCCNFgJ66j1o=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: ghW+JWtx2ipcRK5A8aOJHKLLo0T9QbwhYmPqibO1GoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: Nov 23 02:28:01 2024 GMT Not After : Nov 30 02:28:01 2024 GMT Subject: CN=67413db1-a0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:b5:5f:d1:0d:3e:90:9e:7f:2e:6b:88:3d: 7e:e6:e8:f5:64:91:d1:41:a5:74:69:b1:b3:64:30: db:91:eb:d6:1f:bf:9e:dc:9d:e7:bc:d6:25:44:90: f5:2a:23:b5:d7:71:7c:62:62:11:1f:79:5e:53:36: 1f:8e:66:3f:12:b1:50:08:f6:94:f3:d1:28:5d:7c: 01:11:e4:81:8c:b8:38:5d:0a:d4:c1:31:1d:af:47: 90:c2:c4:8f:46:04:f1:3f:4c:ff:5d:bc:72:8a:b4: 2b:4f:e1:d1:3b:00:03:05:88:d7:45:63:0b:f4:f1: a6:3b:21:45:fd:2d:9b:02:b8:98:c1:b2:24:61:e6: ca:0b:0b:75:af:54:85:df:f2:72:92:2e:9b:a8:fd: 94:2b:f9:08:64:7b:42:78:5f:e8:a5:2f:f1:1b:80: 17:69:0e:4f:75:06:89:c3:89:11:5e:46:f6:7e:a6: ce:da:12:67:63:65:2b:e3:e3:e9:5a:48:2c:33:1e: 3a:7c:3f:f9:c2:7f:d1:7e:76:ce:8b:e1:71:fb:b1: 98:2f:fb:25:63:6f:ff:9e:21:5c:12:1c:17:46:7c: b3:4a:16:d5:78:ea:c7:99:be:4a:f6:c4:03:1e:53: 9e:bb:51:5a:46:ba:8d:4f:06:b9:b9:39:72:e7:99: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:14:46:4D:87:A4:08:05:9C:C1:05:C2:AB:1B:D7:22:A2:47:C4:F4 X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:bc:41:62:7d:5f:a2:1c:21:cb:a8:15:d9:aa:ef:56:1c:75: 20:a1:d7:af:c2:2f:24:90:a6:42:0b:99:00:9c:c4:9c:6c:6a: b7:1b:c9:20:6b:48:c3:ce:d8:cf:d7:46:7f:c4:c8:16:c3:d1: 9f:9a:0f:39:7e:43:25:42:6d:00:a0:2b:e1:86:eb:97:ab:cb: 6d:a2:85:80:9a:54:ed:97:8a:3d:b6:93:a4:0d:a0:8f:cf:f9: e4:81:af:83:91:ee:ab:a5:19:af:87:8d:a6:55:fe:fb:45:40: 64:d3:a6:2a:c5:f1:b0:0c:ef:b8:d5:a1:f5:99:24:95:14:d0: b6:79:c3:42:b9:75:8c:79:e3:a3:c1:d4:b9:1a:22:5b:b8:fb: 0b:f6:1a:ed:b9:e2:84:87:e2:25:63:eb:0e:33:b4:51:f6:99: 0f:b1:29:7b:b2:e8:00:90:dc:b6:7b:f2:96:33:06:14:14:56: 67:e7:61:86:01:47:fe:a4:03:42:0a:4b:3d:42:46:80:b1:04: 50:19:7b:88:9b:d7:30:a6:67:fd:e8:9f:f4:13:00:f6:21:5b: 38:5d:d6:62:00:17:b8:e0:b9:04:c2:0d:73:4d:99:cd:82:7b: 94:a1:01:db:ed:35:b6:5d:9d:8b:68:62:79:5d:61:8f:52:cc: df:81:42:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjQxMTIzMDIyODAxWhcNMjQxMTMwMDIyODAxWjAYMRYwFAYD VQQDEw02NzQxM2RiMS1hMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzu1X9ENPpCefy5riD1+5uj1ZJHRQaV0abGzZDDbkevWH7+e3J3nvNYlRJD1 KiO113F8YmIRH3leUzYfjmY/ErFQCPaU89EoXXwBEeSBjLg4XQrUwTEdr0eQwsSP RgTxP0z/XbxyirQrT+HROwADBYjXRWML9PGmOyFF/S2bAriYwbIkYebKCwt1r1SF 3/Jyki6bqP2UK/kIZHtCeF/opS/xG4AXaQ5PdQaJw4kRXkb2fqbO2hJnY2Ur4+Pp WkgsMx46fD/5wn/RfnbOi+Fx+7GYL/slY2//niFcEhwXRnyzShbVeOrHmb5K9sQD HlOeu1FaRrqNTwa5uTly55lXzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoURk2H pAgFnMEFwqsb1yKiR8T0MB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjvEFifV+iHCHLqBXZqu9WHHUgodevwi8kkKZCC5kAnMScbGq3G8kg a0jDztjP10Z/xMgWw9Gfmg85fkMlQm0AoCvhhuuXq8ttooWAmlTtl4o9tpOkDaCP z/nkga+Dke6rpRmvh42mVf77RUBk06YqxfGwDO+41aH1mSSVFNC2ecNCuXWMeeOj wdS5GiJbuPsL9hrtueKEh+IlY+sOM7RR9pkPsSl7sugAkNy2e/KWMwYUFFZn52GG AUf+pANCCks9QkaAsQRQGXuIm9cwpmf96J/0EwD2IVs4XdZiABe44LkEwg1zTZnN gnuUoQHb7TW2XZ2LaGJ5XWGPUszfgUKu -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org