$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: B2EC6JprrtCVPlhGetyRoz5EN+Vis2sPNdZ3ihjCQec= Subject key identifier: EF:3E:E6:FB:81:35:6E:29:D7:C5:6F:60:1B:91:07:14:EB:E0:25:03 Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 089C Signing time: Fri 22 Nov 2024 20:16:51 +0000 Manifest this update: Fri 22 Nov 2024 20:16:51 +0000 Manifest next update: Fri 29 Nov 2024 20:16:51 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: y+ykQeCWy+UXW2nHwZ8k5PcZkQ1Z9GFk3Fb8U9X6xEU=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: k0bqnFEQ7zHA/CEuw/ns0UItLaD/wwB6kXZVqIRsW2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: Nov 22 20:16:51 2024 GMT Not After : Nov 29 20:16:51 2024 GMT Subject: CN=6740e6b3-1998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:50:ef:04:ab:bd:ef:b0:ef:4a:91:fc:27: 48:82:8d:6f:83:1e:9c:75:80:a0:62:ae:a8:3b:58: 63:33:ec:c8:6c:3d:d5:20:8c:67:a5:0e:62:a6:cf: 51:07:a5:80:b6:a0:e9:8f:4a:b2:92:fa:f3:93:04: b9:89:2e:88:c1:48:c0:d5:fa:0d:1b:29:00:2f:9f: 04:6c:96:8e:6d:f9:0d:42:fe:58:f8:77:42:3e:4d: f4:eb:01:df:8c:0e:81:30:c6:9a:31:f0:19:61:d2: 36:20:ac:65:ca:b6:18:e3:76:d3:90:cb:87:3a:6f: 6d:90:ec:f5:04:aa:b3:61:af:f8:f3:20:79:95:f6: 6b:f6:d4:c1:87:81:53:be:5f:a6:68:46:f3:f6:1d: 46:66:3d:7c:e4:6f:b7:e8:26:43:a5:3c:cb:b7:a3: bb:98:eb:1c:e6:6e:8f:88:9b:db:d3:c4:b2:71:43: 37:9d:fe:ee:8f:35:1b:8c:80:82:4d:20:aa:bb:17: fc:b0:b0:86:24:b0:21:eb:88:9c:4c:b5:3b:2a:3e: 21:71:45:be:2f:61:bc:a0:8c:14:54:89:69:d5:b4: 63:bf:7f:2c:e2:d7:c6:a4:a6:aa:37:8e:26:d7:5f: 07:21:b4:33:91:06:80:1c:df:e9:23:2c:03:6a:d3: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3E:E6:FB:81:35:6E:29:D7:C5:6F:60:1B:91:07:14:EB:E0:25:03 X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c5:eb:45:ea:ae:ac:1a:d4:65:20:02:4e:9a:25:1c:ce:90: e6:b7:de:1d:04:e5:02:48:09:8e:dd:e1:54:d8:3f:cb:fb:da: e7:6c:71:92:92:3c:36:68:47:1d:22:a5:84:0b:75:c2:9a:7c: df:5c:c8:7c:fa:9e:6d:75:a9:47:56:48:9f:d6:df:03:ac:f2: a2:bd:22:ef:2f:ce:64:df:eb:6d:e8:04:ab:c7:31:5e:f7:f8: 1b:1b:1d:3b:f0:88:84:57:e0:63:81:71:9c:b0:d5:2f:34:4e: 97:09:87:77:f0:d9:f5:c9:f5:92:1d:25:52:9b:cc:a2:62:a7: c1:55:3a:1d:1d:3c:43:27:87:40:c9:75:e0:07:03:91:1d:a8: a2:33:0e:05:a7:a4:cd:9c:0d:69:0a:96:eb:b1:d3:33:64:55: 35:b4:78:4c:77:2f:53:ed:f5:d9:a9:86:99:b1:10:01:8a:87: ac:2b:76:3d:5a:10:af:9e:d2:1a:88:d5:b7:78:22:25:48:71: ce:19:67:9b:05:b3:00:52:9c:ab:19:cb:a3:cb:76:ad:44:23: 70:87:3f:73:54:09:25:64:cc:5c:6e:d3:4e:5d:0e:4b:4c:2f: 92:79:32:0e:03:4f:41:1f:60:68:24:6d:eb:b5:81:be:6f:82: e1:16:c8:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjQxMTIyMjAxNjUxWhcNMjQxMTI5MjAxNjUxWjAYMRYwFAYD VQQDEw02NzQwZTZiMy0xOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosFQ7wSrve+w70qR/CdIgo1vgx6cdYCgYq6oO1hjM+zIbD3VIIxnpQ5ips9R B6WAtqDpj0qykvrzkwS5iS6IwUjA1foNGykAL58EbJaObfkNQv5Y+HdCPk306wHf jA6BMMaaMfAZYdI2IKxlyrYY43bTkMuHOm9tkOz1BKqzYa/48yB5lfZr9tTBh4FT vl+maEbz9h1GZj185G+36CZDpTzLt6O7mOsc5m6PiJvb08SycUM3nf7ujzUbjICC TSCquxf8sLCGJLAh64icTLU7Kj4hcUW+L2G8oIwUVIlp1bRjv38s4tfGpKaqN44m 118HIbQzkQaAHN/pIywDatP4ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8+5vuB NW4p18VvYBuRBxTr4CUDMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkxetF6q6sGtRlIAJOmiUczpDmt94dBOUCSAmO3eFU2D/L+9rnbHGS kjw2aEcdIqWEC3XCmnzfXMh8+p5tdalHVkif1t8DrPKivSLvL85k3+tt6ASrxzFe 9/gbGx078IiEV+BjgXGcsNUvNE6XCYd38Nn1yfWSHSVSm8yiYqfBVTodHTxDJ4dA yXXgBwORHaiiMw4Fp6TNnA1pCpbrsdMzZFU1tHhMdy9T7fXZqYaZsRABioesK3Y9 WhCvntIaiNW3eCIlSHHOGWebBbMAUpyrGcujy3atRCNwhz9zVAklZMxcbtNOXQ5L TC+SeTIOA09BH2BoJG3rtYG+b4LhFshA -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org