$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: r76mLbAilD8z22v26g9wm6lMXQuAY9GEftxnNASYtXk= Subject key identifier: 0F:C8:BE:C6:F2:F0:F1:53:77:1E:30:A5:CD:A4:7B:3A:54:3E:FF:3B Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 3422 Signing time: Sun 24 Nov 2024 15:10:52 +0000 Manifest this update: Sun 24 Nov 2024 15:10:52 +0000 Manifest next update: Sun 01 Dec 2024 15:10:52 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: WioZd2mvip4PCUEFNWYSv0oVRQDwWIjDhIRxZAV4uF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Nov 24 15:10:52 2024 GMT Not After : Dec 1 15:10:52 2024 GMT Subject: CN=674341fc-d3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:71:fc:62:ea:5d:f3:71:ab:69:a9:c5:48: 24:d0:17:36:be:24:83:21:04:0e:cd:16:9a:e7:2f: 2f:79:30:f4:48:1b:7c:c0:0b:51:02:80:78:a2:50: 98:47:38:c8:b2:06:06:16:dc:31:3d:10:94:96:6c: e8:48:4b:36:be:84:f7:d1:f8:7a:67:ff:1e:3d:6e: ee:a2:14:9a:07:af:ee:de:95:3d:4e:65:4f:e6:96: b3:4c:22:79:39:e9:c5:77:10:e4:ec:26:cc:a1:c2: a9:1b:2c:70:32:53:44:4d:64:02:a9:f4:ad:e5:e0: bb:07:f8:57:f1:e6:76:91:4e:65:aa:9d:33:3b:fc: 7f:77:4a:08:fa:ec:80:31:60:b2:e8:27:6a:5a:7f: 96:e7:50:b8:9b:e9:de:df:e0:ad:ee:dc:c5:bf:96: 4d:85:24:9c:01:be:57:96:cc:57:dd:0f:4e:64:2c: 0b:b5:5b:d3:bc:ea:46:c6:13:7a:14:09:61:1e:b6: 9f:0b:b2:9b:b1:d7:48:cf:90:0a:d6:70:ac:85:37: 3d:df:3e:41:db:24:aa:7c:75:29:47:d5:01:b1:aa: 1f:ca:c1:f7:8a:68:59:7b:07:e7:a1:20:ee:9e:74: 70:08:97:14:ff:72:0c:bf:6f:d6:9e:f9:ef:e4:1e: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:BE:C6:F2:F0:F1:53:77:1E:30:A5:CD:A4:7B:3A:54:3E:FF:3B X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c6:c0:94:36:a7:dd:19:3f:e7:bf:98:cb:34:a5:e5:f0:c8: 91:dd:0d:1d:d0:b4:92:63:7d:f0:57:4a:e7:77:e9:39:1f:ad: 6b:45:7f:b4:4b:f9:97:fa:92:d4:ce:74:46:11:3e:99:39:32: 32:dd:48:be:8a:2c:36:4b:c0:9b:86:4b:87:1b:26:03:70:1b: ea:82:63:95:92:4d:b3:58:8e:ca:ed:8f:c3:e7:39:b3:b5:47: 4d:19:c7:9d:75:80:b4:52:87:85:d6:71:ef:da:1f:e1:43:61: 7c:a6:b3:69:d4:7b:a7:22:29:f8:e7:43:1a:fa:c9:23:65:43: b5:1e:28:2d:ef:b3:19:8e:b3:85:94:7b:3b:b4:e2:94:b5:f2: a9:dc:5f:f3:62:73:bd:79:34:34:64:45:9b:a1:d1:36:86:7b: cf:2f:4a:cd:ea:4b:35:52:b0:08:40:cf:52:aa:90:17:f6:7e: 29:19:e1:a2:a6:d5:1a:f5:64:01:fd:e4:36:d0:a5:35:f7:77: 2b:db:13:af:d1:75:dd:a0:2a:31:b7:1c:51:76:b4:3e:88:8e: f5:0c:4d:1d:c9:f2:84:47:58:46:ed:3c:e6:df:e8:44:2f:3f: 5a:50:2a:b2:69:c2:a7:a4:07:73:b9:cd:51:b2:bb:74:54:91: ea:5e:d9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjQxMTI0MTUxMDUyWhcNMjQxMjAxMTUxMDUyWjAYMRYwFAYD VQQDEw02NzQzNDFmYy1kM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRpx/GLqXfNxq2mpxUgk0Bc2viSDIQQOzRaa5y8veTD0SBt8wAtRAoB4olCY RzjIsgYGFtwxPRCUlmzoSEs2voT30fh6Z/8ePW7uohSaB6/u3pU9TmVP5pazTCJ5 OenFdxDk7CbMocKpGyxwMlNETWQCqfSt5eC7B/hX8eZ2kU5lqp0zO/x/d0oI+uyA MWCy6CdqWn+W51C4m+ne3+Ct7tzFv5ZNhSScAb5XlsxX3Q9OZCwLtVvTvOpGxhN6 FAlhHrafC7KbsddIz5AK1nCshTc93z5B2ySqfHUpR9UBsaofysH3imhZewfnoSDu nnRwCJcU/3IMv2/Wnvnv5B5/zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/Ivsby 8PFTdx4wpc2kezpUPv87MB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtxsCUNqfdGT/nv5jLNKXl8MiR3Q0d0LSSY33wV0rnd+k5H61rRX+0 S/mX+pLUznRGET6ZOTIy3Ui+iiw2S8CbhkuHGyYDcBvqgmOVkk2zWI7K7Y/D5zmz tUdNGceddYC0UoeF1nHv2h/hQ2F8prNp1HunIin450Ma+skjZUO1Higt77MZjrOF lHs7tOKUtfKp3F/zYnO9eTQ0ZEWbodE2hnvPL0rN6ks1UrAIQM9SqpAX9n4pGeGi ptUa9WQB/eQ20KU193cr2xOv0XXdoCoxtxxRdrQ+iI71DE0dyfKER1hG7Tzm3+hE Lz9aUCqyacKnpAdzuc1Rsrt0VJHqXtnQ -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org