$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: mmkb/G/6EJ+bh/exhhHiCqb7BmuJF3I/kRKjfev5xXY= Subject key identifier: 7E:32:77:AB:22:CF:51:8A:0F:DE:E7:E1:80:D1:EB:42:52:75:D3:B1 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: 8F Signing time: Sat 23 Nov 2024 04:31:13 +0000 Manifest this update: Sat 23 Nov 2024 04:31:12 +0000 Manifest next update: Sat 30 Nov 2024 04:31:12 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: RlyAdWI/q/dXYtqRFbpQvHrdzlVaaRFZtRsZDI1LbK0=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: Nov 23 04:31:12 2024 GMT Not After : Nov 30 04:31:12 2024 GMT Subject: CN=67415a91-cfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:20:08:41:36:d7:88:b2:bd:02:a0:b9:55: 13:a3:db:fe:0c:42:18:43:23:7d:8b:32:44:f4:e3: b3:30:e4:9c:d6:ca:f0:b4:d7:10:1a:18:64:50:41: c2:17:92:b6:69:81:50:ef:d9:54:73:b2:37:67:6d: b1:0a:bf:d3:25:2b:18:da:3f:9a:2c:1b:20:c8:16: 21:72:97:84:24:36:13:9a:8c:0a:fa:46:7c:80:c5: f5:e3:11:98:b2:57:ea:b8:07:52:66:36:b9:ba:bf: 3d:4c:40:64:17:c3:24:53:25:69:30:b1:cd:e3:be: aa:aa:12:d8:1b:83:02:3d:e0:70:82:c2:3a:c9:4a: e0:98:a3:66:77:b1:6b:69:43:7e:ff:02:82:b1:bb: 9e:f4:b7:1d:ed:b1:af:58:03:bf:93:08:7e:7b:ad: ba:97:48:08:13:fd:58:73:d7:6e:2f:2b:80:bb:37: 2b:9a:53:cc:04:c4:24:5a:e0:f1:4a:f3:d7:85:0a: 43:fc:de:96:d1:fc:d7:64:36:a9:a7:c0:7c:06:4f: 97:75:1a:af:f4:f9:11:3c:c6:88:e9:fa:6c:cc:0b: e6:1a:10:cb:05:34:c4:bb:12:4a:9d:e5:6a:6e:f6: 00:c4:df:fa:ab:80:d4:47:42:66:7c:b9:30:5d:af: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:32:77:AB:22:CF:51:8A:0F:DE:E7:E1:80:D1:EB:42:52:75:D3:B1 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3c:cd:a4:62:21:d3:e6:3f:a9:0c:34:59:a7:a2:07:ac:e1: 90:fe:c8:de:4e:92:52:57:ff:21:18:4f:27:93:31:5e:e3:02: d0:b6:95:72:27:75:af:30:19:ad:81:23:83:cb:86:42:ab:e2: af:bc:09:9a:63:f0:a1:69:4d:e5:2a:92:62:be:36:0a:33:0d: 72:9c:23:38:5d:c7:06:87:0e:7d:5f:90:e3:8e:58:d8:77:eb: b2:66:49:53:55:94:50:99:18:ae:9b:7f:a4:a4:df:a6:bf:b1: 3e:0c:32:5e:01:00:a2:19:e8:33:57:88:c8:e2:7e:a3:0b:27: 92:f1:81:65:0f:fd:1f:ad:20:e0:4b:ee:30:6c:1f:cf:af:d3: cf:9c:17:19:24:26:05:30:da:62:12:74:3b:c1:84:c5:e5:42: 54:da:e8:2a:8e:34:ef:bd:c0:38:78:3d:e9:b9:bb:84:19:b3: fe:ca:31:6b:a2:42:ce:4d:19:82:29:30:91:0f:ae:6b:ae:61: df:cd:45:9b:cb:97:bd:7b:50:c0:41:68:e0:aa:0c:9d:fc:d8: 25:fb:6d:a1:3a:73:ed:7b:33:23:c7:88:dd:3c:3d:0e:78:92: 67:f9:e0:f5:9c:81:40:d8:0e:7d:40:46:f7:16:45:e6:ec:0c: d6:0e:e7:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3QjYxMTAvBgNVBAUTKDBDRDkwNEM3RUIzOTBBRDFBNTVEQkFGNEZDNTAwNTRD MDg1NDZFMkIwHhcNMjQxMTIzMDQzMTEyWhcNMjQxMTMwMDQzMTEyWjAYMRYwFAYD VQQDEw02NzQxNWE5MS1jZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoEgCEE214iyvQKguVUTo9v+DEIYQyN9izJE9OOzMOSc1srwtNcQGhhkUEHC F5K2aYFQ79lUc7I3Z22xCr/TJSsY2j+aLBsgyBYhcpeEJDYTmowK+kZ8gMX14xGY slfquAdSZja5ur89TEBkF8MkUyVpMLHN476qqhLYG4MCPeBwgsI6yUrgmKNmd7Fr aUN+/wKCsbue9Lcd7bGvWAO/kwh+e626l0gIE/1Yc9duLyuAuzcrmlPMBMQkWuDx SvPXhQpD/N6W0fzXZDapp8B8Bk+XdRqv9PkRPMaI6fpszAvmGhDLBTTEuxJKneVq bvYAxN/6q4DUR0JmfLkwXa/NWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4yd6si z1GKD97n4YDR60JSddOxMB8GA1UdIwQYMBaAFAzZBMfrOQrRpV269PxQBUwIVG4r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDdCNi85MDVEN0ZFRUNF QzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0R2xYYnIwX0ZBRlRBaFVi aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDdCNi85MDVEN0ZFRUNFQzExMUVFOENGMDE3NDBDNEY5QUUwMi9ETmtFeC1zNUN0 R2xYYnIwX0ZBRlRBaFViaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPM2kYiHT5j+pDDRZp6IHrOGQ/sjeTpJSV/8hGE8nkzFe4wLQtpVy J3WvMBmtgSODy4ZCq+KvvAmaY/ChaU3lKpJivjYKMw1ynCM4XccGhw59X5DjjljY d+uyZklTVZRQmRium3+kpN+mv7E+DDJeAQCiGegzV4jI4n6jCyeS8YFlD/0frSDg S+4wbB/Pr9PPnBcZJCYFMNpiEnQ7wYTF5UJU2ugqjjTvvcA4eD3pubuEGbP+yjFr okLOTRmCKTCRD65rrmHfzUWby5e9e1DAQWjgqgyd/Ngl+22hOnPtezMjx4jdPD0O eJJn+eD1nIFA2A59QEb3FkXm7AzWDue/ -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org