$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: DvM+m4GHreG482Jk79DmAjimdEvXtWHzXgKGwlI+un0= Subject key identifier: BA:E6:77:64:AC:B4:38:7C:72:33:E7:4F:99:19:EF:DD:40:6D:F8:D0 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: 19 Signing time: Sat 23 Nov 2024 05:56:44 +0000 Manifest this update: Sat 23 Nov 2024 05:56:43 +0000 Manifest next update: Sat 30 Nov 2024 05:56:43 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: 78QY7pdAoJyOcpe03d5wxC/aiFGHw6p/CzfH/+7wryw=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: YUDcoFmZ6Z8eSf+ykpnCcDAS77nR9kd6RW9K0Z7WPIA=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: fQEPggKeUXGb8ZTYlH41koJENtuHoAxNSC/aql+imTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Nov 23 05:56:43 2024 GMT Not After : Nov 30 05:56:43 2024 GMT Subject: CN=67416e9b-0be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:04:fe:7a:59:f8:23:eb:71:2c:2f:bf:2e: f6:c3:23:93:d3:99:28:9f:c1:d9:ef:ba:8d:70:ac: d6:ce:5b:dd:22:a2:a8:d7:19:10:d0:cc:71:69:f0: 5d:03:53:a2:ce:68:1e:94:1a:1b:f6:a7:ae:8e:af: 36:d1:aa:a2:37:f5:d9:43:83:b6:63:f8:2d:45:c7: 23:85:aa:a6:ca:c2:ba:6a:be:9d:9b:3e:8c:b4:bf: 33:82:d1:66:91:67:b7:d4:5a:97:4e:a7:68:e6:cf: 0a:85:05:de:15:58:8c:bf:b5:68:5c:0b:f8:7f:a9: ac:69:be:70:5c:84:46:9f:77:91:2b:f6:ed:8f:a0: da:3b:d4:5a:e0:8e:25:9d:e7:48:b4:70:60:73:9d: e2:14:34:60:80:e5:f6:70:fe:c8:db:3b:ac:31:00: aa:dc:5f:06:1d:e4:3a:f7:06:e2:ab:a6:54:e2:c1: ba:f0:31:06:e5:e4:e5:ed:a2:1d:14:0b:dd:58:c4: 40:b5:72:de:0c:a1:30:b6:0b:65:be:06:52:72:73: a6:af:52:57:b9:c4:32:ce:52:10:61:c1:c5:6c:95: 23:8b:95:51:99:c5:81:da:a1:ed:16:38:37:0a:69: de:95:e4:6b:d8:4d:f3:94:2b:9d:b2:a5:a9:96:eb: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:77:64:AC:B4:38:7C:72:33:E7:4F:99:19:EF:DD:40:6D:F8:D0 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0b:ca:22:7f:e1:d0:91:da:c5:0b:66:f3:4c:7f:24:9c:fe: cb:f9:25:0a:ea:9d:13:8d:9a:4f:cf:1b:ac:6d:7f:aa:31:eb: 30:f9:d5:6a:20:e1:92:78:6d:99:ea:6b:00:89:2d:22:8c:27: 58:5b:56:f3:2d:6d:92:9f:cd:45:5f:3c:53:82:f3:ef:7a:48: 95:e3:f8:01:a9:68:2e:c4:7d:18:34:e8:8f:df:3a:71:cc:2c: f6:f7:1a:7a:dc:6a:4a:58:44:7d:26:a3:cc:27:70:a9:30:b4: 86:26:74:1c:b1:a0:0f:f7:23:a5:fa:a3:e6:0d:0e:c7:ae:ac: 52:c1:74:ad:5a:b9:5b:97:57:a7:08:27:d2:cf:60:6b:6b:b0: a7:13:fb:dd:5d:3e:a2:ad:fe:76:78:31:75:65:ca:35:fd:49: 29:16:aa:80:3f:92:87:95:d2:7c:97:3e:59:3e:04:1d:67:9e: b2:da:a2:84:32:2a:a8:02:8f:08:3d:31:05:2c:3d:6b:5d:2a: 57:66:7d:27:45:b0:b8:fa:32:b9:1e:f9:ce:2b:72:70:9c:a8: 80:4b:e9:21:02:22:e2:72:34:9f:06:84:ba:7c:58:17:d5:ca: c8:5b:03:0b:74:45:cd:27:c4:02:d2:6e:57:6d:ec:c6:ef:a3: 7d:fb:01:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF REZBRjExMC8GA1UEBRMoMEU2NjNDQjQ5MDBFRjREODIyRjk5QUJERTI3RkE0MDNB QjlGNEM0MDAeFw0yNDExMjMwNTU2NDNaFw0yNDExMzAwNTU2NDNaMBgxFjAUBgNV BAMTDTY3NDE2ZTliLTBiZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2lgT+eln4I+txLC+/LvbDI5PTmSifwdnvuo1wrNbOW90ioqjXGRDQzHFp8F0D U6LOaB6UGhv2p66OrzbRqqI39dlDg7Zj+C1FxyOFqqbKwrpqvp2bPoy0vzOC0WaR Z7fUWpdOp2jmzwqFBd4VWIy/tWhcC/h/qaxpvnBchEafd5Er9u2PoNo71FrgjiWd 50i0cGBzneIUNGCA5fZw/sjbO6wxAKrcXwYd5Dr3BuKrplTiwbrwMQbl5OXtoh0U C91YxEC1ct4MoTC2C2W+BlJyc6avUle5xDLOUhBhwcVslSOLlVGZxYHaoe0WODcK ad6V5GvYTfOUK52ypamW6/2HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuuZ3ZKy0 OHxyM+dPmRnv3UBt+NAwHwYDVR0jBBgwFoAUDmY8tJAO9Ngi+Zq94n+kA6ufTEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVERkFGLzk3QkU5MzBFOENC QzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG1ZOHRKQU85TmdpLVpxOTRuLWtBNnVmVEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE RkFGLzk3QkU5MzBFOENCQzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5n aS1acTk0bi1rQTZ1ZlRFQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABULyiJ/4dCR2sULZvNMfySc/sv5JQrqnRONmk/PG6xtf6ox6zD51Wog 4ZJ4bZnqawCJLSKMJ1hbVvMtbZKfzUVfPFOC8+96SJXj+AGpaC7EfRg06I/fOnHM LPb3GnrcakpYRH0mo8wncKkwtIYmdByxoA/3I6X6o+YNDseurFLBdK1auVuXV6cI J9LPYGtrsKcT+91dPqKt/nZ4MXVlyjX9SSkWqoA/koeV0nyXPlk+BB1nnrLaooQy KqgCjwg9MQUsPWtdKldmfSdFsLj6Mrke+c4rcnCcqIBL6SECIuJyNJ8GhLp8WBfV yshbAwt0Rc0nxALSbldt7Mbvo337AUc= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org