$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft File: dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json) Hash identifier: aBp73UrqW3XX6PX0K9gQGZ44gK2+s+7Y7qlm/OYauWs= Subject key identifier: 5B:8E:C5:6F:D6:3B:66:CE:A0:73:52:16:85:88:7E:9B:46:8F:2E:41 Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft Manifest number: 051C Signing time: Fri 22 Nov 2024 23:08:43 +0000 Manifest this update: Fri 22 Nov 2024 23:08:43 +0000 Manifest next update: Fri 29 Nov 2024 23:08:43 +0000 Files and hashes: 1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: tKjO6moAls7RNdqK2b9OZaze5R3awenJdTOb7Uyp+Vs=) 2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: RmQ8zbwrgPfWmABubjovTPZFuV0KwF8EcH+Qm23I29E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Validity Not Before: Nov 22 23:08:43 2024 GMT Not After : Nov 29 23:08:43 2024 GMT Subject: CN=67410efb-41d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:4f:99:58:04:85:07:58:b9:a9:79:0f:b9: 18:32:32:f2:35:83:91:56:24:68:c9:38:70:69:c8: dc:79:0a:1a:63:29:dc:e3:16:53:96:4c:31:4b:c7: 5d:11:58:58:f6:07:78:06:1b:9d:d3:0d:2f:b9:db: 7d:d8:f3:00:2c:a3:a7:7d:80:d9:0c:06:54:d3:61: 01:85:17:c5:df:1d:d2:1a:be:2b:ac:a2:1c:42:0d: ad:da:de:eb:4d:40:42:75:c0:88:33:bc:16:f8:35: 7b:1e:e4:a7:28:be:2c:ed:da:46:f7:d0:f8:56:49: be:a8:f1:24:39:03:7c:17:24:bc:06:b7:42:56:21: 58:74:2f:d4:54:62:d7:b7:c2:71:f4:dd:c9:b6:d0: fc:5e:9f:80:dc:11:71:20:f6:b8:8d:fa:1d:af:f9: 87:c2:b0:dc:e7:3a:84:9a:63:a3:57:72:f5:6a:fe: c6:06:38:14:f3:8f:f6:9f:1d:74:97:00:ee:35:2b: 9d:cb:69:8e:4a:fd:48:e2:f6:03:2f:3d:c1:03:98: c7:7b:74:ad:19:0a:9f:ba:53:3a:64:ea:47:b1:d8: b7:2d:da:99:04:b9:0d:1c:93:d3:0b:08:95:c7:1b: a7:76:cd:6e:09:62:b8:65:2e:6a:29:71:c1:9f:49: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8E:C5:6F:D6:3B:66:CE:A0:73:52:16:85:88:7E:9B:46:8F:2E:41 X509v3 Authority Key Identifier: keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:b8:8c:a1:4a:36:03:59:39:f1:8d:44:4d:64:ca:19:70: bd:cf:44:07:18:17:58:64:9c:13:cd:61:c4:57:72:3b:1a:3a: 6f:e5:0c:83:6e:f7:5a:5e:d0:e1:3b:ac:fa:ac:f3:28:eb:cc: c7:0c:62:20:87:a9:35:19:bb:63:5e:dd:1f:25:4c:03:24:ee: 88:ba:b0:32:46:b3:cc:af:8a:f6:c0:e3:d6:37:14:66:d5:36: 61:10:2b:c5:4e:86:8c:25:7c:c3:3a:f4:a8:0b:b6:ca:67:56: 78:2f:07:d4:78:1a:56:43:92:b9:c7:aa:13:07:43:de:eb:e9: d5:19:2f:78:5c:41:ca:4b:5e:28:69:06:34:92:90:ca:f7:81: d2:06:68:11:cc:4e:9f:3e:16:f8:5f:4f:e8:c6:4f:7e:29:e1: 98:5a:d7:d8:2b:fd:c9:34:07:7c:5b:11:60:49:c6:9a:25:e0: 7b:98:19:d0:a0:b7:b8:67:9e:b4:77:e0:09:47:fa:2e:ce:f4: 64:2f:fc:bc:3c:08:5a:42:ad:5d:04:e4:c2:a7:a9:1f:79:1a: 26:02:b4:a9:02:bd:90:72:76:73:2c:11:4f:ed:e0:a6:12:fc: 1a:1f:a5:5e:1d:d1:38:4d:26:a5:ef:71:68:50:88:7f:5c:61: f3:01:2c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE RUZGMzFCQUIwHhcNMjQxMTIyMjMwODQzWhcNMjQxMTI5MjMwODQzWjAYMRYwFAYD VQQDEw02NzQxMGVmYi00MWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLJPmVgEhQdYual5D7kYMjLyNYORViRoyThwacjceQoaYync4xZTlkwxS8dd EVhY9gd4Bhud0w0vudt92PMALKOnfYDZDAZU02EBhRfF3x3SGr4rrKIcQg2t2t7r TUBCdcCIM7wW+DV7HuSnKL4s7dpG99D4Vkm+qPEkOQN8FyS8BrdCViFYdC/UVGLX t8Jx9N3JttD8Xp+A3BFxIPa4jfodr/mHwrDc5zqEmmOjV3L1av7GBjgU84/2nx10 lwDuNSudy2mOSv1I4vYDLz3BA5jHe3StGQqfulM6ZOpHsdi3LdqZBLkNHJPTCwiV xxunds1uCWK4ZS5qKXHBn0mjHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuOxW/W O2bOoHNSFoWIfptGjy5BMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6 Z01DbXZOT09rWWJlX3pHNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHO7iMoUo2A1k58Y1ETWTKGXC9z0QHGBdYZJwTzWHEV3I7Gjpv5QyD bvdaXtDhO6z6rPMo68zHDGIgh6k1GbtjXt0fJUwDJO6IurAyRrPMr4r2wOPWNxRm 1TZhECvFToaMJXzDOvSoC7bKZ1Z4LwfUeBpWQ5K5x6oTB0Pe6+nVGS94XEHKS14o aQY0kpDK94HSBmgRzE6fPhb4X0/oxk9+KeGYWtfYK/3JNAd8WxFgScaaJeB7mBnQ oLe4Z560d+AJR/ouzvRkL/y8PAhaQq1dBOTCp6kfeRomArSpAr2QcnZzLBFP7eCm EvwaH6VeHdE4TSal73FoUIh/XGHzASxm -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org