$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: X8md+nGgIGF22AHY5Ep5jqAxAgf13fCL1gH2rUiwktE= Subject key identifier: E3:D9:E5:5D:0B:FC:29:74:ED:26:45:44:E7:9D:85:11:2D:40:30:7F Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: 80 Signing time: Sat 23 Nov 2024 04:40:26 +0000 Manifest this update: Sat 23 Nov 2024 04:40:26 +0000 Manifest next update: Sat 30 Nov 2024 04:40:26 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: n60eVGSVZFhy3O8Qyi5VOSHxWN8d0RxCoMzqUNEFmos=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: qmFjn7wAfMqWkF24WNm8IekVR4ecxQdIio3RLzGcoHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Nov 23 04:40:26 2024 GMT Not After : Nov 30 04:40:26 2024 GMT Subject: CN=67415cba-8b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:41:e8:65:2b:77:5f:2a:f5:6c:6d:83:fc: 5c:ec:01:ea:b8:ea:2b:e1:7e:ca:c5:ef:e0:f9:c9: fb:f1:ac:3d:16:a6:97:50:a1:fb:05:3d:f9:4d:a1: 41:8f:4d:b3:f2:64:d1:c0:2e:67:1f:2f:43:ac:ef: e3:c9:f6:67:8f:82:b8:ea:47:39:d4:d9:f6:1d:35: ee:21:55:5b:93:0e:a6:5c:7a:4d:3d:1f:f6:69:9e: dd:8d:e5:27:ef:9d:c5:17:4a:05:b8:23:c9:6b:0b: 9a:74:31:7e:84:17:3c:38:c1:5f:23:fd:fe:15:fc: 4c:47:08:c3:85:45:a7:48:e2:8d:58:18:f1:04:14: 63:d2:41:7c:e6:9e:54:c7:45:38:8b:87:b4:64:45: 5e:8f:b8:c7:31:ad:b8:44:aa:e7:f2:16:f2:f8:8c: bd:3d:a5:92:7d:31:e4:5f:54:ea:49:52:2a:2d:77: 32:fb:27:46:d8:2d:d8:12:34:21:e1:62:47:7f:ed: 9c:6c:03:cc:43:e3:da:12:69:b9:1f:2b:0f:2a:89: 57:80:7f:ed:69:cc:96:7b:31:79:94:7c:d1:df:2d: 95:df:30:67:a3:b0:d7:be:54:2b:a3:da:02:16:43: c9:ef:8c:5b:86:a7:25:1e:4e:ca:54:62:88:3e:a4: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:E5:5D:0B:FC:29:74:ED:26:45:44:E7:9D:85:11:2D:40:30:7F X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f2:73:f7:5c:c3:43:42:31:2e:41:17:a3:c9:25:cb:70:3c: 2f:a7:37:17:7b:28:d7:d0:da:6b:dc:db:21:a3:2a:80:66:ca: af:35:e1:14:c0:cf:0d:e9:ab:60:09:73:54:1a:ba:eb:9f:cd: 81:2b:94:a1:b9:ed:b1:e5:3f:1e:69:dd:1a:f6:67:96:2e:5b: 9b:b7:42:4b:bc:d2:0c:09:52:08:9b:eb:9f:6e:52:23:e6:f8: 29:58:96:e2:72:43:97:9f:73:e9:1e:52:59:e5:65:83:68:0f: 42:6b:2b:b6:ef:85:e6:4d:39:41:bb:53:96:df:ba:6b:aa:65: ff:fd:03:1f:bb:40:98:1f:f1:d0:0c:b6:9a:48:93:73:55:a1: ba:ec:1c:ec:d7:4e:24:32:9f:e5:2e:d4:27:f2:25:44:69:c9: eb:f4:43:3a:f7:71:02:b7:cc:e2:89:42:7a:e8:75:90:11:ec: 13:45:02:b1:09:32:23:2e:38:39:18:22:36:0b:fd:a3:d2:55: 54:dd:d0:4e:e8:ab:ad:49:4d:06:54:c8:07:8b:dc:ee:44:01: 0c:7e:f4:ac:72:99:22:8e:2d:b5:f3:f2:7d:e3:b8:36:8e:2b: a8:04:84:35:86:d0:44:dc:5a:8e:cd:6b:c2:e6:38:93:19:bb: 9a:84:37:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjQxMTIzMDQ0MDI2WhcNMjQxMTMwMDQ0MDI2WjAYMRYwFAYD VQQDEw02NzQxNWNiYS04Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeRB6GUrd18q9Wxtg/xc7AHquOor4X7Kxe/g+cn78aw9FqaXUKH7BT35TaFB j02z8mTRwC5nHy9DrO/jyfZnj4K46kc51Nn2HTXuIVVbkw6mXHpNPR/2aZ7djeUn 753FF0oFuCPJawuadDF+hBc8OMFfI/3+FfxMRwjDhUWnSOKNWBjxBBRj0kF85p5U x0U4i4e0ZEVej7jHMa24RKrn8hby+Iy9PaWSfTHkX1TqSVIqLXcy+ydG2C3YEjQh 4WJHf+2cbAPMQ+PaEmm5HysPKolXgH/tacyWezF5lHzR3y2V3zBno7DXvlQro9oC FkPJ74xbhqclHk7KVGKIPqRN0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPZ5V0L /Cl07SZFROedhREtQDB/MB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs8nP3XMNDQjEuQRejySXLcDwvpzcXeyjX0Npr3NshoyqAZsqvNeEU wM8N6atgCXNUGrrrn82BK5Shue2x5T8ead0a9meWLlubt0JLvNIMCVIIm+ufblIj 5vgpWJbickOXn3PpHlJZ5WWDaA9Cayu274XmTTlBu1OW37prqmX//QMfu0CYH/HQ DLaaSJNzVaG67Bzs104kMp/lLtQn8iVEacnr9EM693ECt8ziiUJ66HWQEewTRQKx CTIjLjg5GCI2C/2j0lVU3dBO6KutSU0GVMgHi9zuRAEMfvSscpkiji218/J947g2 jiuoBIQ1htBE3FqOzWvC5jiTGbuahDdI -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org