$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: ug+IpVfRNjoeG6zfL7A8cFc1Fw1xT8Mdu0VZ9BVRWRg= Subject key identifier: C5:5D:B4:4B:64:A7:A8:BB:38:4B:6E:88:EF:78:D9:85:AA:5F:85:D8 Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 0753 Signing time: Fri 22 Nov 2024 21:04:22 +0000 Manifest this update: Fri 22 Nov 2024 21:04:22 +0000 Manifest next update: Fri 29 Nov 2024 21:04:22 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: yhzJv9VC7lkOO/2iR8fZm+nW5SJq5OWgdl/LPajFz6A=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 1cNfAYmpbOEdoWLSyXtNNq6uEMwh87XzDRUaAEMQHxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Nov 22 21:04:22 2024 GMT Not After : Nov 29 21:04:22 2024 GMT Subject: CN=6740f1d6-e95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:1d:07:26:90:f5:24:23:85:0c:b5:6f:ed: a3:d3:27:f6:63:a6:f4:45:85:5f:bf:44:45:ba:df: 41:73:86:d1:cc:24:7b:d9:84:eb:49:ae:57:18:f6: 18:a0:bf:49:49:96:dd:c0:9e:5d:38:2b:b0:a3:30: ac:12:5b:e4:6e:2d:f0:8e:40:4c:19:6b:76:48:91: a7:08:0d:5a:e4:2e:98:d5:f4:13:18:5d:01:10:5b: 92:cb:97:35:63:66:50:91:35:e4:cf:db:7f:fa:7c: 98:2c:21:aa:86:eb:26:44:68:25:9b:45:89:3a:fa: 1f:16:cc:d7:b0:0c:60:1b:30:2e:18:ba:82:f4:38: 21:8a:e8:77:be:c2:1e:35:fc:49:4f:64:e4:64:2a: 32:83:9b:02:bd:95:b3:b0:ba:8e:1e:69:47:09:8a: 75:b0:7c:ed:82:7d:6c:63:28:3d:36:61:9e:cb:4f: 88:a9:36:5f:6a:54:2e:14:35:cc:63:d2:79:f1:17: 78:fb:58:09:64:c3:af:f9:a8:58:68:22:8d:c5:da: c8:5f:3d:82:f2:c8:07:b7:96:9d:a5:50:b6:5c:69: a4:73:17:d0:b4:b9:48:ab:82:43:89:19:61:59:8e: 11:14:13:f9:fd:94:a1:09:fa:ca:09:a2:04:1e:84: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:B4:4B:64:A7:A8:BB:38:4B:6E:88:EF:78:D9:85:AA:5F:85:D8 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c8:b5:73:fd:57:e3:45:ea:96:f9:db:67:94:72:a7:fb:8a: bc:5d:2e:41:9d:bc:c0:da:f6:d6:59:97:03:a0:f3:03:7d:8a: 1f:bd:3c:6a:68:93:62:b8:86:13:fa:0b:1f:14:52:d1:e2:2a: df:08:8e:cd:b7:19:18:7a:d0:d4:a2:0a:96:7a:93:bb:98:67: 2e:2d:38:3e:1f:af:c3:52:a6:cf:4a:f0:0a:20:50:e5:4d:31: da:70:67:2a:9d:5c:d2:f2:82:15:f3:3c:fb:fa:2c:67:4d:ba: 8a:71:b2:c6:b8:20:30:f6:c1:8f:ae:d6:f4:d2:e0:63:07:65: a1:ea:2a:85:39:3e:14:72:4a:3c:6e:6e:53:70:f9:9a:b0:ff: fb:4e:41:4d:3b:b2:c1:86:99:65:ff:28:9f:cf:9b:db:54:86: 95:9e:14:32:95:1d:54:27:98:38:c4:bc:57:d2:8a:14:7e:82: 32:3f:7e:cd:d7:1c:93:b5:2f:d3:f3:ec:9c:92:ea:d0:46:23: 29:20:71:82:e9:e9:88:ec:9b:c4:a2:b5:ea:e0:46:cd:a6:80: f8:2a:03:59:ac:c8:81:f0:00:3f:94:ee:81:45:0e:3d:e0:c5: 6c:b0:8f:f8:b8:0e:a0:29:48:14:7b:18:d7:22:05:82:b8:c8: 3b:f8:88:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjQxMTIyMjEwNDIyWhcNMjQxMTI5MjEwNDIyWjAYMRYwFAYD VQQDEw02NzQwZjFkNi1lOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw28dByaQ9SQjhQy1b+2j0yf2Y6b0RYVfv0RFut9Bc4bRzCR72YTrSa5XGPYY oL9JSZbdwJ5dOCuwozCsElvkbi3wjkBMGWt2SJGnCA1a5C6Y1fQTGF0BEFuSy5c1 Y2ZQkTXkz9t/+nyYLCGqhusmRGglm0WJOvofFszXsAxgGzAuGLqC9Dghiuh3vsIe NfxJT2TkZCoyg5sCvZWzsLqOHmlHCYp1sHztgn1sYyg9NmGey0+IqTZfalQuFDXM Y9J58Rd4+1gJZMOv+ahYaCKNxdrIXz2C8sgHt5adpVC2XGmkcxfQtLlIq4JDiRlh WY4RFBP5/ZShCfrKCaIEHoTRBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVdtEtk p6i7OEtuiO942YWqX4XYMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiyLVz/VfjReqW+dtnlHKn+4q8XS5BnbzA2vbWWZcDoPMDfYofvTxq aJNiuIYT+gsfFFLR4irfCI7NtxkYetDUogqWepO7mGcuLTg+H6/DUqbPSvAKIFDl TTHacGcqnVzS8oIV8zz7+ixnTbqKcbLGuCAw9sGPrtb00uBjB2Wh6iqFOT4Ucko8 bm5TcPmasP/7TkFNO7LBhpll/yifz5vbVIaVnhQylR1UJ5g4xLxX0ooUfoIyP37N 1xyTtS/T8+yckurQRiMpIHGC6emI7JvEorXq4EbNpoD4KgNZrMiB8AA/lO6BRQ49 4MVssI/4uA6gKUgUexjXIgWCuMg7+Ijo -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org