$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: mNfMshbqA5cWdWP4aYZNY3DMTGRtC4fhbM+nWB1OCSw= Subject key identifier: CA:CB:73:35:C0:E7:10:2D:19:E9:39:27:82:94:74:C5:3B:1E:0E:61 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 70 Signing time: Sat 23 Nov 2024 04:50:07 +0000 Manifest this update: Sat 23 Nov 2024 04:50:07 +0000 Manifest next update: Sat 30 Nov 2024 04:50:07 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: L3vEpSOBmptTIEYVGfi6lzrbnsnPxbcb5OuPbVCXLqI=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: 8kO5Y6mBbR8uiBBtuQEnY7XxsIn44iqMDq9T/sqgPbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Nov 23 04:50:07 2024 GMT Not After : Nov 30 04:50:07 2024 GMT Subject: CN=67415eff-f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:dc:3a:75:6c:fd:1b:ff:aa:d8:a9:27:ef: 30:c6:10:de:92:b6:49:ed:88:76:39:2d:26:36:56: 35:a0:31:eb:96:91:17:81:4d:ec:49:33:17:89:14: e6:26:71:ea:fc:cb:e2:46:71:b1:91:ea:8e:be:e3: 3b:e0:44:ea:83:5c:c8:2f:fd:92:fd:dd:52:f4:7f: d1:5b:3a:e4:95:35:a6:1a:32:cc:90:f0:1d:5b:0d: 4e:d8:02:a3:a2:b7:ee:ee:25:90:d4:2f:92:93:e0: f4:c4:06:1e:0b:2f:f9:c4:a5:fe:25:50:79:a9:02: e1:8d:e2:e3:a0:1b:45:81:35:30:16:b4:ab:f2:11: 79:06:c0:b3:c7:ee:b2:e6:3c:a3:de:f4:d6:54:ef: 11:02:0d:69:0e:bf:ee:cf:bc:20:d5:36:16:98:65: d3:bf:48:4d:02:6e:b1:f9:1c:9e:ce:5b:2b:80:83: ec:46:7b:bb:12:8b:89:99:ed:2b:3c:4b:ba:da:4d: 5d:a4:45:ce:00:90:5c:79:82:c2:f8:fe:56:55:fb: 6a:b7:3d:03:a2:38:7d:46:3f:f2:4e:6e:03:17:2b: 0e:f1:e5:79:08:02:bc:a5:27:96:06:91:b3:c3:8a: 74:da:68:62:fe:97:b5:37:c6:ac:30:21:e8:2f:6c: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CB:73:35:C0:E7:10:2D:19:E9:39:27:82:94:74:C5:3B:1E:0E:61 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8a:29:90:71:0e:9d:d3:36:06:2b:98:9f:15:9a:81:3b:94: 2e:ad:7d:b1:77:5b:2a:97:70:cd:07:a7:55:5f:92:55:9c:86: b6:18:d6:1e:b2:c8:c3:81:6a:7f:36:3f:09:1c:bc:c9:3b:c1: 03:3d:ce:13:23:b1:3b:08:eb:ce:81:3c:48:65:48:a4:28:c8: 81:00:93:0c:5f:31:8d:ea:85:13:94:fa:00:5b:ad:17:6e:94: b7:e9:8a:c5:b7:25:b7:a6:f5:63:73:6d:1c:e9:86:a8:b3:00: 0e:9e:71:d5:e3:79:e6:f0:ef:bc:93:36:ae:4c:4f:28:42:4d: eb:58:c5:9e:6a:1b:5d:74:8c:6a:f8:c3:42:8c:7f:f6:6d:f9: b5:b0:96:80:07:5e:f8:2b:8d:43:b2:d7:2d:1e:ba:18:50:f6: fd:b0:d7:c6:fb:bf:83:e4:0b:15:4b:7e:b1:db:1f:40:39:e8: 4c:d5:6e:15:de:74:7c:db:77:94:94:03:b0:ec:85:ac:a6:69: b2:2d:f3:fd:de:6b:7d:72:ca:d2:be:b7:75:4f:94:21:7e:7d: e6:b1:ee:c4:23:57:98:f1:1c:e1:e9:fe:f9:c0:81:ad:f6:aa: d4:b1:97:40:e0:da:f0:7f:5f:4e:ab:47:44:ae:d9:99:73:6f: a0:f6:c7:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhFMjExMC8GA1UEBRMoMEVEQjRBMzcyNzBCRjQ5NDE4NEE0NkU2MDIzMTQ4RkVE NkUzM0ExRTAeFw0yNDExMjMwNDUwMDdaFw0yNDExMzAwNDUwMDdaMBgxFjAUBgNV BAMTDTY3NDE1ZWZmLWY4OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDTtw6dWz9G/+q2Kkn7zDGEN6StkntiHY5LSY2VjWgMeuWkReBTexJMxeJFOYm cer8y+JGcbGR6o6+4zvgROqDXMgv/ZL93VL0f9FbOuSVNaYaMsyQ8B1bDU7YAqOi t+7uJZDUL5KT4PTEBh4LL/nEpf4lUHmpAuGN4uOgG0WBNTAWtKvyEXkGwLPH7rLm PKPe9NZU7xECDWkOv+7PvCDVNhaYZdO/SE0CbrH5HJ7OWyuAg+xGe7sSi4mZ7Ss8 S7raTV2kRc4AkFx5gsL4/lZV+2q3PQOiOH1GP/JObgMXKw7x5XkIArylJ5YGkbPD inTaaGL+l7U3xqwwIegvbIvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUystzNcDn EC0Z6TkngpR0xTseDmEwHwYDVR0jBBgwFoAUDttKNycL9JQYSkbmAjFI/tbjOh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEUyL0FGMzIwODNFRkM2 ODExRUU5OTYxREQ1REM0RjlBRTAyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9o NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHR0S055Y0w5SlFZU2tibUFqRklfdGJqT2g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEUyL0FGMzIwODNFRkM2ODExRUU5OTYxREQ1REM0RjlBRTAyL0R0dEtOeWNMOUpR WVNrYm1BakZJX3Riak9oNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6KKZBxDp3TNgYrmJ8VmoE7lC6tfbF3WyqXcM0Hp1VfklWchrYY1h6y yMOBan82PwkcvMk7wQM9zhMjsTsI686BPEhlSKQoyIEAkwxfMY3qhROU+gBbrRdu lLfpisW3Jbem9WNzbRzphqizAA6ecdXjeebw77yTNq5MTyhCTetYxZ5qG110jGr4 w0KMf/Zt+bWwloAHXvgrjUOy1y0euhhQ9v2w18b7v4PkCxVLfrHbH0A56EzVbhXe dHzbd5SUA7DshaymabIt8/3ea31yytK+t3VPlCF+feax7sQjV5jxHOHp/vnAga32 qtSxl0Dg2vB/X06rR0Su2Zlzb6D2xwo= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:12 2024 by rpki-client on console-ams.rpki-client.org