$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json) Hash identifier: mKMVa1KI4TKNHeYIiJwlJCKRqO8EKtYXnI0UX6Zhpnw= Subject key identifier: 0A:50:99:10:11:50:16:15:87:48:4C:07:C0:95:5C:08:B3:36:36:CD Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45 Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft Manifest number: 71 Signing time: Sat 23 Nov 2024 04:50:40 +0000 Manifest this update: Sat 23 Nov 2024 04:50:39 +0000 Manifest next update: Sat 30 Nov 2024 04:50:39 +0000 Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: sx7UcORCCkczSQERO6npP3e4INaCfZzZcWUbOmm1jao=) 2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: SVtEtagldlvERL46wSvdbr/iqqig+8tKes1xS1nFqcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145 Validity Not Before: Nov 23 04:50:39 2024 GMT Not After : Nov 30 04:50:39 2024 GMT Subject: CN=67415f20-3d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:02:cc:a5:ff:79:de:47:d0:e7:00:87:5b: 30:6f:89:9f:c7:cc:ed:48:b7:74:d3:2f:d5:0b:c9: 4f:cf:2b:22:09:a7:92:ed:a4:cb:0f:f5:23:ed:99: 7a:e9:15:42:2b:56:b3:08:23:f4:5d:da:07:7d:fa: 76:2a:f9:f9:f3:29:56:85:a3:72:d2:f7:ba:49:93: 4c:fe:74:91:0f:b0:83:8b:af:c2:7d:f3:f7:ae:54: f5:b4:cf:87:a8:ae:e2:76:40:95:e7:93:63:f1:7d: 1f:98:b1:b4:d7:4f:70:d9:a9:31:9e:36:c2:ef:39: f5:84:bd:17:26:80:12:02:93:49:60:b0:74:0b:ed: 8c:79:6b:e5:38:f4:c8:43:e7:bc:69:97:81:71:c8: 9e:86:e7:d9:a7:ed:4d:11:0a:f3:e2:a2:af:98:bc: fd:bb:75:94:28:d2:e1:a3:8f:65:36:e2:f8:42:d3: af:f5:a8:63:c1:e4:92:d4:df:80:fb:1b:45:99:3e: a9:37:9f:0d:e6:42:60:a3:65:ea:d0:80:4c:fe:86: 8d:a2:9d:c8:36:d0:5c:84:c0:1b:18:de:47:c3:46: be:47:bb:c1:cd:cb:d3:e1:12:6a:d7:33:6b:4b:20: 4a:c1:95:16:86:ed:b9:66:4f:8c:a7:22:e7:07:2f: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:99:10:11:50:16:15:87:48:4C:07:C0:95:5C:08:B3:36:36:CD X509v3 Authority Key Identifier: keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:31:ed:25:57:7b:3a:3a:28:df:39:25:ca:3d:06:2c:2b:14: 18:e7:b5:55:41:ff:e2:28:27:90:7f:1b:63:09:c9:0b:22:53: a4:72:cf:3c:83:c1:f8:28:93:7f:f8:65:ff:55:6b:28:7a:94: a6:97:db:d5:21:58:63:c7:42:53:cf:23:b7:3a:8e:0e:f7:f0: bf:25:22:e0:a3:19:fe:e4:84:07:3b:22:b3:60:20:a8:af:2c: 45:41:35:c5:96:b4:80:e5:df:f5:da:f9:8f:98:2c:36:fa:16: 53:02:7b:a9:0c:47:4d:92:be:66:30:a2:bc:43:fa:7f:92:58: f6:44:a9:16:3b:a2:79:ad:a2:5d:25:9d:b3:1a:67:71:fb:4d: 93:ab:a6:05:2b:f5:36:ef:ec:19:cb:aa:ed:83:29:23:c4:73: 00:5c:b4:e4:7e:11:3d:36:a9:ba:b0:4d:84:73:f7:94:50:f5: 2d:80:f1:a5:20:1a:67:3c:78:4d:68:6c:01:11:6e:40:71:11: 47:98:7a:3c:3c:e4:06:b5:44:55:fb:3e:44:48:4f:50:b4:db: 90:de:31:f6:9f:0c:57:f6:1c:f5:51:55:b5:ea:f9:39:dd:9a: 94:e6:a2:37:f1:c1:9e:37:c0:f3:98:a9:a6:81:b6:d1:b2:f5: ca:ba:13:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNzY5NTM2ODM0MDIwOTM0OTUyMjk3RUJEQjc4MTg5MzU3 QjEzQTE0NTAeFw0yNDExMjMwNDUwMzlaFw0yNDExMzAwNDUwMzlaMBgxFjAUBgNV BAMTDTY3NDE1ZjIwLTNkODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9SgLMpf953kfQ5wCHWzBviZ/HzO1It3TTL9ULyU/PKyIJp5LtpMsP9SPtmXrp FUIrVrMII/Rd2gd9+nYq+fnzKVaFo3LS97pJk0z+dJEPsIOLr8J98/euVPW0z4eo ruJ2QJXnk2PxfR+YsbTXT3DZqTGeNsLvOfWEvRcmgBICk0lgsHQL7Yx5a+U49MhD 57xpl4FxyJ6G59mn7U0RCvPioq+YvP27dZQo0uGjj2U24vhC06/1qGPB5JLU34D7 G0WZPqk3nw3mQmCjZerQgEz+ho2incg20FyEwBsY3kfDRr5Hu8HNy9PhEmrXM2tL IErBlRaG7blmT4ynIucHLyqJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUClCZEBFQ FhWHSEwHwJVcCLM2Ns0wHwYDVR0jBBgwFoAUdpU2g0Agk0lSKX69t4GJNXsToUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzUwQUQwNzE4RkQ0 NTExRUVBQjNBRDcxQkM0RjlBRTAyL2RwVTJnMEFnazBsU0tYNjl0NEdKTlhzVG9V VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHBVMmcwQWdrMGxTS1g2OXQ0R0pOWHNUb1VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzUwQUQwNzE4RkQ0NTExRUVBQjNBRDcxQkM0RjlBRTAyL2RwVTJnMEFnazBs U0tYNjl0NEdKTlhzVG9VVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4x7SVXezo6KN85Jco9BiwrFBjntVVB/+IoJ5B/G2MJyQsiU6RyzzyD wfgok3/4Zf9Vayh6lKaX29UhWGPHQlPPI7c6jg738L8lIuCjGf7khAc7IrNgIKiv LEVBNcWWtIDl3/Xa+Y+YLDb6FlMCe6kMR02SvmYworxD+n+SWPZEqRY7onmtol0l nbMaZ3H7TZOrpgUr9Tbv7BnLqu2DKSPEcwBctOR+ET02qbqwTYRz95RQ9S2A8aUg Gmc8eE1obAERbkBxEUeYejw85Aa1RFX7PkRIT1C025DeMfafDFf2HPVRVbXq+Tnd mpTmojfxwZ43wPOYqaaBttGy9cq6E6A= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:21 2024 by rpki-client on console-fra.rpki-client.org