$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: Bt81PcePRDXUbMDvUNnJ7jFkO1ye01jnMo3V2tucAMA= Subject key identifier: E7:8C:D9:93:6C:80:3C:01:A5:7B:0D:68:50:67:2F:F1:62:4C:D0:70 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 346E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 3446 Signing time: Fri 22 Nov 2024 14:52:07 +0000 Manifest this update: Fri 22 Nov 2024 14:52:06 +0000 Manifest next update: Fri 29 Nov 2024 14:52:06 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: r4CzXtbpmhudZWpPKU415RGM4q3eNY4porhe7FMkdHo=) 2: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: t3uXAAC7DVCjGuatTrRz2OAtGNPalTSBDR1N9KBgHdA=) 3: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: nRD/T47inGKAn9En+tnYlmjaobyb5sc63EuqnAao/uo=) 4: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: YfDacBEiPF3CeN27NKXelSKWfUi5i0nrYOCRqMwl/Uw=) 5: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: lwqszE9XmV3ojkKqpjP9ezJUW9y6Q4zXvvKRbnBNqTk=) 6: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: lvmwTBTj+aW7778QCB0A/mKl1ZlqDguHNz77kc5mchQ=) 7: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: dkWNK4jxbpzIxES4Gj9U+we0c/5UWZUM/X3Kdhehu+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13422 (0x346e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Nov 22 14:52:06 2024 GMT Not After : Nov 29 14:52:06 2024 GMT Subject: CN=67409a96-4373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:00:2b:e2:b1:39:7b:35:42:f0:f2:1c:5b: c8:2f:15:30:7b:96:f0:ba:15:39:6d:91:c7:1e:6f: a2:7f:e6:05:d8:14:b1:da:94:7a:9f:84:0c:9e:57: 58:f0:10:dc:18:9d:1d:5f:4d:64:2e:74:7f:b8:40: c2:29:98:a8:97:03:e6:fe:67:26:2d:9d:a6:ae:54: 88:67:91:75:2b:7d:cc:59:0f:07:1e:d9:46:f6:44: f5:4f:fe:bb:b1:5b:56:c6:ea:93:72:6a:d5:6d:1a: 3b:0b:92:ad:3c:8d:3d:50:5c:dd:2e:05:b8:0a:84: 70:8e:90:67:4e:6f:d6:8a:8e:8c:17:a4:83:a1:e2: c1:e5:b7:cb:4b:90:c5:ea:d9:96:96:b3:c4:ca:fc: ff:7b:d0:03:73:ce:7b:e9:1e:4b:01:02:db:31:05: f6:af:d5:4f:aa:68:7c:76:1c:d6:8b:5e:8a:82:73: f1:4f:00:fb:e0:b9:7e:8e:aa:32:98:d7:50:aa:fd: f8:35:6f:d4:88:58:e3:3f:af:83:35:5a:b1:57:05: c6:94:30:9a:40:82:59:bf:c6:5b:8d:f1:cb:ff:39: e0:35:a8:49:67:40:49:3c:90:52:16:ba:c2:80:b9: 97:40:fe:44:0e:85:b5:ae:91:ee:4b:2b:35:5c:70: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8C:D9:93:6C:80:3C:01:A5:7B:0D:68:50:67:2F:F1:62:4C:D0:70 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:49:db:11:eb:e1:f4:d9:e7:dd:de:4e:dd:76:5d:50:dc:1f: a6:e8:e5:fc:92:f3:a1:82:b4:51:88:3f:50:cf:76:88:99:49: 2e:60:55:51:15:3e:20:2f:d6:71:22:a8:69:96:70:cc:32:a5: 30:c1:61:a2:8d:08:24:58:74:90:fe:39:db:ce:df:c5:39:cc: 3c:6c:d6:97:40:d5:83:d7:3e:2c:0b:b5:4e:79:ad:6e:6e:54: 65:1b:76:cb:c1:1a:78:58:06:99:7f:49:e2:db:61:1b:2a:31: e9:65:b7:f0:e1:d9:04:d3:95:85:29:84:ea:92:b2:e5:9b:1b: af:7d:ad:e6:ba:ad:d2:56:79:d8:ea:35:ff:3f:c2:be:76:74: 71:9a:85:bb:82:64:f9:7a:ca:00:80:d8:fe:d9:5c:17:90:b4: d5:f8:6a:d9:c6:cc:32:f5:42:b8:5c:ce:fb:4f:bc:47:de:fa: 5f:5a:7a:11:ac:9b:ba:41:a9:3d:17:6a:fe:b0:b7:29:cc:3b: 16:fc:8a:3f:b2:ee:29:c5:cf:4c:13:f9:af:47:b6:21:66:fa: ea:58:72:2b:08:6a:8b:8a:df:6d:43:ed:2e:da:50:80:fc:f0: 95:b8:c9:69:06:5e:17:dc:1a:89:79:37:d5:9f:2d:34:3c:71: 37:af:62:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjQxMTIyMTQ1MjA2WhcNMjQxMTI5MTQ1MjA2WjAYMRYwFAYD VQQDEw02NzQwOWE5Ni00MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW8AK+KxOXs1QvDyHFvILxUwe5bwuhU5bZHHHm+if+YF2BSx2pR6n4QMnldY 8BDcGJ0dX01kLnR/uEDCKZiolwPm/mcmLZ2mrlSIZ5F1K33MWQ8HHtlG9kT1T/67 sVtWxuqTcmrVbRo7C5KtPI09UFzdLgW4CoRwjpBnTm/Wio6MF6SDoeLB5bfLS5DF 6tmWlrPEyvz/e9ADc8576R5LAQLbMQX2r9VPqmh8dhzWi16KgnPxTwD74Ll+jqoy mNdQqv34NW/UiFjjP6+DNVqxVwXGlDCaQIJZv8ZbjfHL/zngNahJZ0BJPJBSFrrC gLmXQP5EDoW1rpHuSys1XHDFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeM2ZNs gDwBpXsNaFBnL/FiTNBwMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjSdsR6+H02efd3k7ddl1Q3B+m6OX8kvOhgrRRiD9Qz3aImUkuYFVR FT4gL9ZxIqhplnDMMqUwwWGijQgkWHSQ/jnbzt/FOcw8bNaXQNWD1z4sC7VOea1u blRlG3bLwRp4WAaZf0ni22EbKjHpZbfw4dkE05WFKYTqkrLlmxuvfa3muq3SVnnY 6jX/P8K+dnRxmoW7gmT5esoAgNj+2VwXkLTV+GrZxswy9UK4XM77T7xH3vpfWnoR rJu6Qak9F2r+sLcpzDsW/Io/su4pxc9ME/mvR7YhZvrqWHIrCGqLit9tQ+0u2lCA /PCVuMlpBl4X3BqJeTfVny00PHE3r2JD -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org