$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: IZm9OxAMma164HJO5TC084AhlC1wEIB2nFONvyIf2X4= Subject key identifier: 29:AF:C7:67:40:E4:7B:0C:40:2F:E1:5C:D8:3E:C1:F7:E2:74:4B:DA Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: F5 Signing time: Sat 23 Nov 2024 03:21:58 +0000 Manifest this update: Sat 23 Nov 2024 03:21:58 +0000 Manifest next update: Sat 30 Nov 2024 03:21:57 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: QH2B5VP8jgCk+nu6cQCgcUW4jmEyZGxzjJtrTPRLzaY=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: YH1Nm5sXHdp6f2aOSmPXsxfDGLzWgDg+3RJO69rwbXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: Nov 23 03:21:58 2024 GMT Not After : Nov 30 03:21:57 2024 GMT Subject: CN=67414a56-2037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:21:d3:22:03:f2:2a:f5:2f:f6:88:4b:77:27: f5:8e:a4:ca:02:df:67:92:0d:9f:83:1e:f0:6f:66: 19:51:4b:a4:41:35:e0:1e:7e:d3:18:73:44:c6:ab: 24:d2:bf:51:2a:24:53:21:51:ce:8a:a4:69:8d:b9: eb:86:6f:42:64:b4:6c:ca:a8:85:a9:48:d4:04:3e: 82:73:5f:18:c1:cf:db:0a:00:de:41:17:49:78:d8: c1:b7:2a:17:e2:3a:51:1b:5b:5e:84:43:e8:67:e3: e0:72:f5:3b:6d:6a:72:06:c9:99:37:bf:5a:8b:f5: 13:1f:7b:ae:66:a6:01:93:78:e2:a1:c8:c7:d4:7c: 12:5c:9c:06:36:e6:81:40:6f:93:8f:7a:6f:37:ac: 7e:c7:55:49:7c:28:13:54:a9:15:7e:91:e9:2a:d0: 8a:68:ca:30:a2:1c:8b:fe:a5:4b:45:09:45:2c:ff: 8e:51:a3:ca:33:ad:25:5b:c4:02:71:bb:e9:d3:d4: 21:22:90:59:b8:db:0a:98:39:13:5f:5b:88:be:0c: de:f5:58:8b:3f:98:13:10:fb:fb:ed:62:0e:99:c9: dc:f8:9f:87:b2:90:c4:a6:be:cc:79:e8:29:a3:1f: 29:c8:00:a4:47:ed:89:11:4b:57:80:24:4a:ab:d3: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:C7:67:40:E4:7B:0C:40:2F:E1:5C:D8:3E:C1:F7:E2:74:4B:DA X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ba:bc:00:e5:61:b3:1d:fd:bb:e5:1d:f4:4a:59:69:3c:31: db:1b:b3:c3:a7:7f:a6:c5:0d:61:f9:6f:b4:1c:8e:86:78:38: 09:15:a5:f5:ea:cb:e3:b9:6f:b3:bc:71:22:7e:f9:d7:71:c5: 7b:82:e0:a3:91:e3:64:e2:03:67:03:59:86:93:04:5f:fb:d4: ac:04:76:3d:ce:f9:be:ae:26:d6:3e:e1:01:bf:19:43:fb:15: 87:47:e3:d4:4c:38:d6:a0:1b:d0:fa:19:5f:e1:f8:bc:69:26: 14:9c:b4:e8:37:38:50:8c:80:45:f1:89:7a:c9:f7:36:60:0e: 04:f4:d9:de:4e:55:31:38:5c:8d:c0:f2:ca:2e:d2:b1:4c:cc: ce:3d:c7:22:85:6f:b2:59:c2:e4:e9:fd:e2:e1:f8:73:0f:69: a0:fc:7b:70:07:1d:e9:b8:51:db:22:e0:47:b6:d9:b6:67:87: 55:4b:fb:43:cc:f1:45:35:94:83:d2:93:d2:b6:aa:0f:7a:79: c5:b3:da:b0:cb:02:55:a6:f9:be:f8:08:f0:d5:34:72:e5:39: 91:af:0e:a6:a4:f7:ec:3c:9e:f2:2b:06:ca:7c:f7:57:ed:23: ee:22:d0:e8:9d:19:ea:0e:44:75:15:01:84:d7:49:da:e9:f6: 4a:9b:5e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjQxMTIzMDMyMTU4WhcNMjQxMTMwMDMyMTU3WjAYMRYwFAYD VQQDEw02NzQxNGE1Ni0yMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iHTIgPyKvUv9ohLdyf1jqTKAt9nkg2fgx7wb2YZUUukQTXgHn7TGHNExqsk 0r9RKiRTIVHOiqRpjbnrhm9CZLRsyqiFqUjUBD6Cc18Ywc/bCgDeQRdJeNjBtyoX 4jpRG1tehEPoZ+PgcvU7bWpyBsmZN79ai/UTH3uuZqYBk3jiocjH1HwSXJwGNuaB QG+Tj3pvN6x+x1VJfCgTVKkVfpHpKtCKaMowohyL/qVLRQlFLP+OUaPKM60lW8QC cbvp09QhIpBZuNsKmDkTX1uIvgze9ViLP5gTEPv77WIOmcnc+J+HspDEpr7Meegp ox8pyACkR+2JEUtXgCRKq9NF3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmvx2dA 5HsMQC/hXNg+wffidEvaMB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdurwA5WGzHf275R30SllpPDHbG7PDp3+mxQ1h+W+0HI6GeDgJFaX1 6svjuW+zvHEifvnXccV7guCjkeNk4gNnA1mGkwRf+9SsBHY9zvm+ribWPuEBvxlD +xWHR+PUTDjWoBvQ+hlf4fi8aSYUnLToNzhQjIBF8Yl6yfc2YA4E9NneTlUxOFyN wPLKLtKxTMzOPccihW+yWcLk6f3i4fhzD2mg/HtwBx3puFHbIuBHttm2Z4dVS/tD zPFFNZSD0pPStqoPennFs9qwywJVpvm++Ajw1TRy5TmRrw6mpPfsPJ7yKwbKfPdX 7SPuItDonRnqDkR1FQGE10na6fZKm16/ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org