$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: GehbPhi4MmoFD9gERfaE2LHfeFh1eGo6rh0FmAhERKU= Subject key identifier: 59:35:4D:0C:FA:E8:AD:D9:FF:0E:4D:D2:32:D3:E5:DA:F4:C6:AB:BA Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 0196 Signing time: Sat 23 Nov 2024 01:59:45 +0000 Manifest this update: Sat 23 Nov 2024 01:59:45 +0000 Manifest next update: Sat 30 Nov 2024 01:59:45 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: nyThBPoYHU4wNq4rSotripfdl9wLzMk5tM7cGY0n5PY=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: kRaDTp8G2EF9JgUPQyISIt8vSz18lBQQZApo1JhwgSs=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: vtgz51LBnXCjasbYYNdcwEbODswLBdHKmcuBHw2i27Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: Nov 23 01:59:45 2024 GMT Not After : Nov 30 01:59:45 2024 GMT Subject: CN=67413711-c006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:00:a9:8b:c4:de:46:67:7f:2a:1d:9f:83: 71:57:7e:cd:a5:2d:a5:91:8e:74:4a:b7:bc:28:99: f1:43:a5:43:db:df:02:7a:4b:fd:84:f6:41:74:1d: ca:c8:23:50:61:75:c5:1d:5b:bd:41:38:06:11:b0: 0b:cf:94:ee:e3:73:89:ae:4f:d7:69:17:cb:97:3c: b0:a7:c4:18:2c:94:b6:8f:0c:08:40:c7:d0:d9:ac: 6d:0d:e5:cf:f4:76:7d:46:0d:f2:4d:88:f1:5e:2f: c0:26:8f:c0:6e:2a:4e:95:e8:b0:7e:40:7e:5f:ed: ea:db:3c:93:6b:15:56:ec:e6:77:e4:0d:3d:bf:e6: be:89:d9:c4:6c:8b:08:00:f7:97:8f:2f:e8:23:00: 10:2e:10:a3:5c:96:fd:74:f2:5a:6f:a1:7d:6b:cb: 35:ba:ec:c9:e1:30:12:d0:c0:24:b6:2b:dc:d2:e4: 62:67:8f:5a:b6:58:a7:d0:30:22:3b:fa:5d:9e:8d: 6c:57:a7:0f:32:cd:05:4c:2d:98:ad:6c:07:32:5c: b4:c0:1f:e1:43:a4:86:bd:2d:d4:45:37:4c:99:5f: 84:79:bf:e1:b2:9d:5c:00:cb:dc:95:3b:04:db:8c: 43:f7:5a:ce:bb:62:a5:c4:8e:2a:be:8e:1b:3e:33: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:4D:0C:FA:E8:AD:D9:FF:0E:4D:D2:32:D3:E5:DA:F4:C6:AB:BA X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:42:5d:23:a7:27:92:14:9a:5d:af:91:94:07:d1:ca:97:06: 66:9c:61:74:55:cd:4d:bb:e9:bc:eb:f4:d1:ef:56:f3:2b:c6: f1:74:41:06:b2:f6:55:43:24:55:9c:bc:20:78:d4:88:ec:7d: 69:59:eb:74:6d:91:87:3b:ea:2c:8b:a5:c5:01:8f:39:c8:60: 83:9c:e4:e0:6e:58:59:a5:a4:d4:6d:50:96:bc:36:7b:61:11: 50:8d:3d:40:86:e3:52:b6:7d:7b:10:b7:3b:c6:d2:88:f7:b6: 0c:c3:00:33:b7:b1:2c:c4:ca:d4:14:85:a5:ac:84:03:63:f1: bf:d0:5d:54:84:b1:92:88:ef:89:37:03:14:c6:b5:5c:ad:ff: 31:f3:fa:cf:ae:28:89:c4:8e:50:c1:67:a4:a3:df:05:68:99: a0:68:8f:fe:68:b5:58:bd:ec:73:98:bf:8f:f6:0d:89:fb:8a: 67:9e:9f:d0:89:d5:7b:9a:de:85:1c:b1:d4:64:d1:de:5e:b8: 99:a4:93:02:d0:60:c1:d1:eb:39:8a:37:57:90:25:d4:2a:10: 5d:13:ff:b6:80:c6:f8:32:95:47:40:dc:f1:63:b9:e4:db:4e: 5e:2d:8f:30:f4:90:53:95:b6:87:bb:ce:45:9d:be:a3:70:20: 9d:f3:f7:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjQxMTIzMDE1OTQ1WhcNMjQxMTMwMDE1OTQ1WjAYMRYwFAYD VQQDEw02NzQxMzcxMS1jMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH8AqYvE3kZnfyodn4NxV37NpS2lkY50Sre8KJnxQ6VD298Cekv9hPZBdB3K yCNQYXXFHVu9QTgGEbALz5Tu43OJrk/XaRfLlzywp8QYLJS2jwwIQMfQ2axtDeXP 9HZ9Rg3yTYjxXi/AJo/AbipOleiwfkB+X+3q2zyTaxVW7OZ35A09v+a+idnEbIsI APeXjy/oIwAQLhCjXJb9dPJab6F9a8s1uuzJ4TAS0MAktivc0uRiZ49atlin0DAi O/pdno1sV6cPMs0FTC2YrWwHMly0wB/hQ6SGvS3URTdMmV+Eeb/hsp1cAMvclTsE 24xD91rOu2KlxI4qvo4bPjNs/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk1TQz6 6K3Z/w5N0jLT5dr0xqu6MB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Ql0jpyeSFJpdr5GUB9HKlwZmnGF0Vc1Nu+m86/TR71bzK8bxdEEG svZVQyRVnLwgeNSI7H1pWet0bZGHO+osi6XFAY85yGCDnOTgblhZpaTUbVCWvDZ7 YRFQjT1AhuNStn17ELc7xtKI97YMwwAzt7EsxMrUFIWlrIQDY/G/0F1UhLGSiO+J NwMUxrVcrf8x8/rPriiJxI5QwWeko98FaJmgaI/+aLVYvexzmL+P9g2J+4pnnp/Q idV7mt6FHLHUZNHeXriZpJMC0GDB0es5ijdXkCXUKhBdE/+2gMb4MpVHQNzxY7nk 205eLY8w9JBTlbaHu85Fnb6jcCCd8/ey -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org