$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: zBdA3fIyQ4EFJ2vyuWDhqQ0s3UT0Ehna7dlGkPFGGUo= Subject key identifier: E6:19:40:9A:85:7E:A1:61:B5:50:DA:D7:8A:F9:3C:07:C9:59:49:21 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: DA Signing time: Sat 23 Nov 2024 03:43:14 +0000 Manifest this update: Sat 23 Nov 2024 03:43:14 +0000 Manifest next update: Sat 30 Nov 2024 03:43:14 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: 4RiNqHa7MdVVZIt+mrrHUXmEqONRSaRNMVfVLx79FMs=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Nov 23 03:43:14 2024 GMT Not After : Nov 30 03:43:14 2024 GMT Subject: CN=67414f52-0dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:ec:c4:a2:99:f2:44:5d:8a:da:b8:6a:e5: 5f:dd:e8:d2:1f:e1:80:a4:58:58:fe:ca:03:a2:12: 5e:a9:67:ac:01:6b:7f:f9:2f:85:5f:fd:68:77:16: d6:ff:c5:f4:d0:b4:56:5d:93:07:50:9b:b4:e6:2b: 64:4a:5e:11:ff:ea:51:60:23:fa:3c:cd:51:af:86: bf:af:21:c5:8b:b0:25:08:14:56:5e:f6:9a:f1:db: 07:07:02:f6:1d:cc:be:65:f2:75:51:29:0d:2e:83: 33:cc:4a:82:83:23:3d:fe:a7:e1:b9:6f:91:56:aa: e8:7f:8d:22:ce:3f:8b:dc:06:63:3b:44:fd:3f:7f: 5d:99:a5:bc:e1:46:c2:34:46:53:e3:75:64:b2:15: 5e:d3:b2:c3:09:3a:fa:54:85:bc:5c:83:dc:a8:4f: f4:f7:63:40:71:12:98:8c:4a:51:d7:d0:87:eb:ab: 03:bc:4c:75:7e:18:af:79:79:53:40:0b:1e:13:f5: b0:3e:41:e9:5c:47:77:5c:6a:37:b7:5d:7e:a5:d7: 20:75:37:8e:f9:f4:1d:d4:3d:81:0a:41:f4:98:55: 60:d0:62:2e:93:94:5d:58:2e:3f:f1:48:55:56:0b: 8c:34:39:4f:e7:af:bb:db:d7:14:91:08:7c:d7:07: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:19:40:9A:85:7E:A1:61:B5:50:DA:D7:8A:F9:3C:07:C9:59:49:21 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:eb:cd:d3:79:ae:a6:8d:11:02:8d:b1:e6:ce:4e:72:da:ba: 3c:7d:53:1f:db:4f:2e:ac:33:70:ce:47:3a:c8:1e:4c:1b:6a: 27:3e:c0:93:a8:9b:76:48:e2:88:6c:38:ae:91:a8:62:af:e9: 85:14:38:e5:4b:6c:8e:b0:d2:33:11:33:f0:3a:79:c9:dd:67: cb:26:df:09:d9:63:5f:7f:e1:bc:58:14:4e:74:6b:8b:76:84: 4f:d6:d6:41:c0:f8:cc:93:3a:cf:2a:f6:29:af:38:5f:ca:70: 10:00:c4:63:b7:be:0c:e5:5d:41:4f:a8:8e:1a:89:f1:25:8d: 8d:c9:a6:56:8c:4f:97:4b:8c:62:3e:42:ae:18:c4:47:e1:b5: 32:2a:d2:2c:ba:98:d8:31:f9:27:4c:05:a8:26:b5:6a:10:97: a0:62:4f:53:4a:b1:76:24:3f:a9:49:9f:30:67:a9:ec:2a:59: 48:de:54:7f:54:95:fa:8b:34:b2:5c:b7:ba:9b:47:91:5d:c9: 55:a8:01:08:e3:ae:60:4b:2f:f8:a7:af:2c:c5:25:40:49:fe: e4:52:2b:dc:3c:70:51:3e:17:06:8d:8f:17:99:14:ab:b6:80: d8:3b:cd:09:cc:41:42:a5:42:db:21:e9:bf:60:58:dd:d8:75: 42:3b:eb:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjQxMTIzMDM0MzE0WhcNMjQxMTMwMDM0MzE0WjAYMRYwFAYD VQQDEw02NzQxNGY1Mi0wZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIDsxKKZ8kRditq4auVf3ejSH+GApFhY/soDohJeqWesAWt/+S+FX/1odxbW /8X00LRWXZMHUJu05itkSl4R/+pRYCP6PM1Rr4a/ryHFi7AlCBRWXvaa8dsHBwL2 Hcy+ZfJ1USkNLoMzzEqCgyM9/qfhuW+RVqrof40izj+L3AZjO0T9P39dmaW84UbC NEZT43VkshVe07LDCTr6VIW8XIPcqE/092NAcRKYjEpR19CH66sDvEx1fhiveXlT QAseE/WwPkHpXEd3XGo3t11+pdcgdTeO+fQd1D2BCkH0mFVg0GIuk5RdWC4/8UhV VguMNDlP56+729cUkQh81weVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYZQJqF fqFhtVDa14r5PAfJWUkhMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/683Tea6mjRECjbHmzk5y2ro8fVMf208urDNwzkc6yB5MG2onPsCT qJt2SOKIbDiukahir+mFFDjlS2yOsNIzETPwOnnJ3WfLJt8J2WNff+G8WBROdGuL doRP1tZBwPjMkzrPKvYprzhfynAQAMRjt74M5V1BT6iOGonxJY2NyaZWjE+XS4xi PkKuGMRH4bUyKtIsupjYMfknTAWoJrVqEJegYk9TSrF2JD+pSZ8wZ6nsKllI3lR/ VJX6izSyXLe6m0eRXclVqAEI465gSy/4p68sxSVASf7kUivcPHBRPhcGjY8XmRSr toDYO80JzEFCpULbIem/YFjd2HVCO+ug -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org