$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: qtXBFIQScSeaqYFUzOGyiXa8cDNQmqMLwXJ9T/+wGGs= Subject key identifier: 85:D3:72:58:EC:29:DC:7A:1D:4F:6E:09:F7:AB:76:FA:AF:69:9D:E5 Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0BA0 Signing time: Fri 22 Nov 2024 18:43:29 +0000 Manifest this update: Fri 22 Nov 2024 18:43:28 +0000 Manifest next update: Fri 29 Nov 2024 18:43:28 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: ZCt+OjcyonQV/CTzYnoZHkbLzrlhw/2TrrzQNRHJSh0=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: Dg1teGxb/7J+RLEhdLIJJbvbaUjJVyctMJV2awJCf2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Nov 22 18:43:28 2024 GMT Not After : Nov 29 18:43:28 2024 GMT Subject: CN=6740d0d1-0c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:69:a0:9d:76:ae:e5:54:60:4b:1c:22:0f: bb:2c:2d:7b:e4:7f:93:70:46:53:f7:46:22:6e:0e: 28:c7:fb:4c:d4:f1:8e:92:75:c9:7a:f1:e3:98:26: 28:b0:36:0c:57:bc:63:74:e9:55:b9:ba:47:9a:1e: 8d:52:50:c9:c6:58:0b:c9:1f:4c:32:45:dc:d3:27: 46:fe:c2:1e:3e:a7:58:22:31:3a:a6:42:17:f8:25: 4d:08:8f:f6:46:2a:c1:1c:a0:1f:06:92:00:ec:a6: c7:f0:3c:f1:fb:ca:f7:e3:ea:63:04:3d:bb:41:66: ce:3d:4e:54:7d:5d:6b:df:56:0f:e4:35:04:d7:3b: 1b:94:b8:29:1c:b6:d0:23:6e:6a:38:86:ba:37:b5: a2:45:df:89:8c:0e:53:41:ab:54:7b:80:22:1d:44: af:a4:75:28:c3:12:f1:89:5d:55:bb:8f:9c:82:1b: aa:a3:dc:a0:02:e6:80:ed:9c:0f:35:a2:5a:a5:1d: a2:99:51:0e:99:12:00:60:9f:d8:52:ee:76:5b:c4: 73:3d:97:f7:5c:7f:63:67:c7:86:89:30:52:4a:a0: 19:91:56:79:27:0d:ed:72:d5:b0:71:26:6a:28:17: 54:88:60:48:33:06:16:94:6d:39:54:60:11:f9:c2: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:72:58:EC:29:DC:7A:1D:4F:6E:09:F7:AB:76:FA:AF:69:9D:E5 X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:05:d5:68:37:62:f2:47:27:81:f0:b2:5f:b7:ee:e1:7a:ee: 66:24:57:49:ae:73:6e:bb:f4:45:1c:0a:05:1a:ea:63:0a:ab: 83:3b:57:d0:0b:74:5b:f0:09:d1:8b:9b:b5:8b:39:4d:1e:4f: 05:6b:20:7c:44:36:87:6f:08:15:cc:0a:5f:ab:36:fe:a1:08: 11:a5:93:c6:66:7f:23:e9:78:7d:67:a6:67:6f:23:c1:97:6d: 47:61:6a:92:5f:24:c7:aa:aa:3c:1f:aa:68:b2:a0:77:7b:54: 8b:43:5e:81:af:5c:77:46:66:d2:0b:ef:8c:f8:be:4a:55:02: 90:da:92:07:1e:93:f2:b8:7a:8d:6e:96:8d:ff:5e:f7:96:b2: 6a:c8:59:bd:bb:97:4d:d4:19:93:db:c5:69:85:a2:ba:57:9b: 79:68:c9:cd:45:89:2f:bd:67:ad:b9:33:1b:b6:41:6d:4a:51: 0c:39:03:8f:86:e1:8c:0c:08:e3:f6:c3:08:b7:29:8a:6b:e5: 75:45:ae:de:39:b5:65:85:aa:00:d7:cc:17:60:9a:d1:f0:30: 38:5e:6d:5f:52:84:a6:21:65:7e:3e:1f:16:cd:1d:cf:cb:19: a6:d6:dd:70:0e:4c:b5:cb:02:47:ee:2b:d5:f8:e2:c9:67:d8: ae:7e:72:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjQxMTIyMTg0MzI4WhcNMjQxMTI5MTg0MzI4WjAYMRYwFAYD VQQDEw02NzQwZDBkMS0wYzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdtpoJ12ruVUYEscIg+7LC175H+TcEZT90Yibg4ox/tM1PGOknXJevHjmCYo sDYMV7xjdOlVubpHmh6NUlDJxlgLyR9MMkXc0ydG/sIePqdYIjE6pkIX+CVNCI/2 RirBHKAfBpIA7KbH8Dzx+8r34+pjBD27QWbOPU5UfV1r31YP5DUE1zsblLgpHLbQ I25qOIa6N7WiRd+JjA5TQatUe4AiHUSvpHUowxLxiV1Vu4+cghuqo9ygAuaA7ZwP NaJapR2imVEOmRIAYJ/YUu52W8RzPZf3XH9jZ8eGiTBSSqAZkVZ5Jw3tctWwcSZq KBdUiGBIMwYWlG05VGAR+cIlnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXTcljs Kdx6HU9uCferdvqvaZ3lMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmBdVoN2LyRyeB8LJft+7heu5mJFdJrnNuu/RFHAoFGupjCquDO1fQ C3Rb8AnRi5u1izlNHk8FayB8RDaHbwgVzApfqzb+oQgRpZPGZn8j6Xh9Z6ZnbyPB l21HYWqSXyTHqqo8H6posqB3e1SLQ16Br1x3RmbSC++M+L5KVQKQ2pIHHpPyuHqN bpaN/173lrJqyFm9u5dN1BmT28VphaK6V5t5aMnNRYkvvWetuTMbtkFtSlEMOQOP huGMDAjj9sMItymKa+V1Ra7eObVlhaoA18wXYJrR8DA4Xm1fUoSmIWV+Ph8WzR3P yxmm1t1wDky1ywJH7ivV+OLJZ9iufnLl -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org