$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: QtGIs7ELATvVd0O476XtPqpBvob1RrLp25kyX1QpiYE= Subject key identifier: DC:A9:31:99:04:BE:C0:EA:57:C4:BC:32:EC:C9:8E:D5:35:D3:CF:B2 Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: D1 Signing time: Sat 23 Nov 2024 03:54:54 +0000 Manifest this update: Sat 23 Nov 2024 03:54:53 +0000 Manifest next update: Sat 30 Nov 2024 03:54:53 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: QCDFURsRgKq6Y8pXaRO1YiHJg6p2JM391l69OQcOxAQ=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: xhKR4yggkkDIE2Jc3UBJzAhUDN7Y6iIUFjJh/ZjCHKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Nov 23 03:54:53 2024 GMT Not After : Nov 30 03:54:53 2024 GMT Subject: CN=6741520e-2ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:68:0c:e1:ec:e5:12:31:ee:8c:13:7c:d3: ea:7d:a2:6e:57:ae:17:1f:12:4f:8c:f5:ff:30:9e: c0:5a:0a:7d:66:5f:5c:ce:07:ad:2b:96:c5:c1:29: b5:ef:96:75:a5:23:1e:87:1e:3a:b0:08:f9:72:0d: 4a:ac:5c:36:e2:13:10:6e:fc:5a:45:68:c8:72:78: 6e:db:5c:ce:3f:e1:d0:c5:42:0f:1f:2c:d2:bd:83: 72:a9:d2:87:fa:37:1e:e7:20:1f:e0:22:16:56:7e: 18:75:56:18:00:fc:f8:cf:2f:56:1b:99:42:d2:c5: 0e:f0:53:0e:fe:26:c2:03:82:06:64:37:95:90:20: bc:5e:f8:87:b8:a2:5c:6d:68:0d:41:a3:1b:86:44: 59:e7:50:32:40:a0:e9:5d:05:9b:87:a5:5a:e5:39: ee:e2:22:3e:4e:8a:e5:50:e2:03:ab:58:86:b3:78: 2f:b1:64:7f:74:99:5d:f0:15:95:72:93:5e:d2:f9: d6:4b:04:04:68:69:10:5b:19:e0:dc:9d:c2:a4:96: 87:00:b1:27:96:83:85:bf:7b:44:94:18:10:14:48: 49:4f:ac:a1:19:c8:49:69:0b:4e:61:15:24:a9:38: 80:38:e7:c4:6e:76:a7:4a:72:e5:68:c1:38:5b:24: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:31:99:04:BE:C0:EA:57:C4:BC:32:EC:C9:8E:D5:35:D3:CF:B2 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f5:39:39:0a:25:75:b7:f3:90:67:ce:95:91:30:de:04:1c: 5c:ba:1e:ad:db:38:b4:8a:e7:fa:44:e2:e9:d4:be:d2:27:81: ef:44:4f:5d:6c:74:31:69:0a:38:30:eb:e1:ca:a4:bc:9a:38: e3:7f:c3:94:6d:96:80:53:8e:0a:f9:58:11:d0:7b:1a:f3:98: 0f:71:14:0d:9c:c4:86:c5:01:77:94:e1:d8:57:84:29:f2:ca: 5f:d9:b4:7f:10:30:f1:23:0d:6f:bb:b6:05:52:4b:03:21:ec: 86:d8:b5:46:c7:ad:a7:ff:0b:04:0b:15:f8:ba:cb:c5:30:6b: 33:94:92:c2:e2:42:54:c4:fe:c6:b9:4d:4b:bd:08:a8:f5:b1: cf:94:e6:37:80:ba:84:1d:b2:cb:e9:0b:05:cd:83:94:12:68: e0:ab:93:2e:9e:91:81:94:e5:e5:3c:5b:09:18:48:81:86:f2: 23:15:e9:2f:fe:01:aa:f0:3b:33:64:a0:02:23:76:72:b7:d5: 88:43:40:18:de:c6:94:dd:9a:8e:fb:11:86:ad:30:79:5a:29: 13:ff:d6:f2:63:7b:fe:12:6c:ac:ab:fe:42:ff:6c:65:0b:1a: 15:b6:19:7f:6b:5b:2a:04:bc:25:c3:2e:fe:cd:0f:7e:e3:de: 15:c2:35:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjQxMTIzMDM1NDUzWhcNMjQxMTMwMDM1NDUzWjAYMRYwFAYD VQQDEw02NzQxNTIwZS0yYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YhoDOHs5RIx7owTfNPqfaJuV64XHxJPjPX/MJ7AWgp9Zl9czgetK5bFwSm1 75Z1pSMehx46sAj5cg1KrFw24hMQbvxaRWjIcnhu21zOP+HQxUIPHyzSvYNyqdKH +jce5yAf4CIWVn4YdVYYAPz4zy9WG5lC0sUO8FMO/ibCA4IGZDeVkCC8XviHuKJc bWgNQaMbhkRZ51AyQKDpXQWbh6Va5Tnu4iI+TorlUOIDq1iGs3gvsWR/dJld8BWV cpNe0vnWSwQEaGkQWxng3J3CpJaHALEnloOFv3tElBgQFEhJT6yhGchJaQtOYRUk qTiAOOfEbnanSnLlaME4WyRcCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNypMZkE vsDqV8S8MuzJjtU108+yMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn9Tk5CiV1t/OQZ86VkTDeBBxcuh6t2zi0iuf6ROLp1L7SJ4HvRE9d bHQxaQo4MOvhyqS8mjjjf8OUbZaAU44K+VgR0Hsa85gPcRQNnMSGxQF3lOHYV4Qp 8spf2bR/EDDxIw1vu7YFUksDIeyG2LVGx62n/wsECxX4usvFMGszlJLC4kJUxP7G uU1LvQio9bHPlOY3gLqEHbLL6QsFzYOUEmjgq5MunpGBlOXlPFsJGEiBhvIjFekv /gGq8DszZKACI3Zyt9WIQ0AY3saU3ZqO+xGGrTB5WikT/9byY3v+Emysq/5C/2xl CxoVthl/a1sqBLwlwy7+zQ9+494VwjU6 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org