$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: DySlwC95AcjcCzEw/bN//ziioPi/7jtDJrsdVpmGyX4= Subject key identifier: 2D:EB:AF:89:4F:FB:67:C2:3D:37:16:93:A2:32:7A:4B:C1:EA:12:56 Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 05E0 Signing time: Fri 22 Nov 2024 23:36:39 +0000 Manifest this update: Fri 22 Nov 2024 23:36:38 +0000 Manifest next update: Fri 29 Nov 2024 23:36:38 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: 5nkUwARxvi21SZhOQcefp4Ok8KPLmWIffOi742I1BFs=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Nov 22 23:36:38 2024 GMT Not After : Nov 29 23:36:38 2024 GMT Subject: CN=67411587-2c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:ab:c9:0b:55:a3:ac:2f:9e:04:b6:d1:81: 6a:e7:d0:99:77:0d:8a:d8:00:13:fe:7e:6a:3a:e2: 63:86:09:77:bf:04:af:3a:6c:80:66:78:85:0c:9e: 55:fe:09:d1:02:30:0a:e4:fa:0c:71:cf:a0:7e:eb: 7e:f8:d7:2e:23:53:1e:c5:78:d9:19:2a:e2:d7:d1: aa:f2:25:4c:61:96:80:ba:4d:d4:c6:d7:63:73:9e: 7e:6b:64:65:0f:e4:85:20:47:87:d0:dd:d3:fc:12: 2b:0b:f0:17:22:93:79:11:d0:09:4d:af:19:22:6a: ae:e1:eb:b6:70:dc:b9:0e:29:7b:e0:04:05:19:7a: f9:90:7d:11:99:d6:e6:a9:cf:1b:e6:54:7c:74:c0: f5:13:94:05:62:2f:59:10:2d:eb:ef:46:88:6f:36: fe:28:fe:d7:4a:62:d5:f8:50:fc:00:6b:14:3d:f8: c3:30:2a:e6:fe:8a:8c:99:b3:2e:ed:db:82:da:d4: 7c:18:5a:b2:40:db:2a:ff:4a:25:d3:3e:6c:b7:f8: 55:8c:bc:a0:61:71:69:9d:2a:75:3f:a6:33:e5:10: d6:84:93:97:a1:9f:37:82:0d:23:3c:d7:3f:d4:97: f1:08:1d:11:dd:54:7b:88:3e:71:a0:93:4f:8a:de: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EB:AF:89:4F:FB:67:C2:3D:37:16:93:A2:32:7A:4B:C1:EA:12:56 X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c8:be:89:0a:54:3e:32:b8:1b:d5:6d:90:ff:38:2a:59:d7: 84:29:39:34:aa:af:c1:03:06:44:0f:87:d5:7e:74:9c:56:8d: ba:b3:1f:d3:92:18:36:45:86:52:e2:b7:13:63:71:9b:95:ad: 49:80:be:cb:c3:ab:6c:3e:1e:f4:51:a7:c9:58:99:34:5f:bd: 28:15:02:48:cd:fd:e9:6e:8d:80:ee:77:dc:02:94:4a:f0:1e: 59:e0:03:3a:b2:56:d4:8f:9a:c1:12:6e:b4:1f:1a:ef:0a:79: 48:48:52:83:65:ed:b1:f6:a4:fd:95:5c:f1:2d:6f:99:9b:d5: c6:1a:37:36:0f:02:5c:b3:9e:f5:11:75:ce:30:b3:29:17:fe: 06:2a:c7:c5:59:e6:b4:14:43:c9:0d:41:17:3e:42:15:cc:f0: f1:8c:5e:3d:76:da:5b:49:25:c7:41:0b:bc:71:60:16:0d:02: 1c:59:ca:1d:eb:4c:04:2e:b5:14:c2:10:04:e5:0d:44:bb:dc: d7:f6:96:ba:6a:b9:e8:8b:9c:1e:eb:9c:fa:ab:8e:bd:56:fa: c1:a0:ed:98:c3:85:20:65:b3:11:b5:19:57:bf:62:8a:83:36: 2f:f7:f9:58:69:0f:eb:1b:ef:1d:94:05:aa:14:73:fc:c7:77: 45:84:bb:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjQxMTIyMjMzNjM4WhcNMjQxMTI5MjMzNjM4WjAYMRYwFAYD VQQDEw02NzQxMTU4Ny0yYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBuryQtVo6wvngS20YFq59CZdw2K2AAT/n5qOuJjhgl3vwSvOmyAZniFDJ5V /gnRAjAK5PoMcc+gfut++NcuI1MexXjZGSri19Gq8iVMYZaAuk3Uxtdjc55+a2Rl D+SFIEeH0N3T/BIrC/AXIpN5EdAJTa8ZImqu4eu2cNy5Dil74AQFGXr5kH0Rmdbm qc8b5lR8dMD1E5QFYi9ZEC3r70aIbzb+KP7XSmLV+FD8AGsUPfjDMCrm/oqMmbMu 7duC2tR8GFqyQNsq/0ol0z5st/hVjLygYXFpnSp1P6Yz5RDWhJOXoZ83gg0jPNc/ 1JfxCB0R3VR7iD5xoJNPit5SiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3rr4lP +2fCPTcWk6IyekvB6hJWMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWyL6JClQ+Mrgb1W2Q/zgqWdeEKTk0qq/BAwZED4fVfnScVo26sx/T khg2RYZS4rcTY3Gbla1JgL7Lw6tsPh70UafJWJk0X70oFQJIzf3pbo2A7nfcApRK 8B5Z4AM6slbUj5rBEm60HxrvCnlISFKDZe2x9qT9lVzxLW+Zm9XGGjc2DwJcs571 EXXOMLMpF/4GKsfFWea0FEPJDUEXPkIVzPDxjF49dtpbSSXHQQu8cWAWDQIcWcod 60wELrUUwhAE5Q1Eu9zX9pa6arnoi5we65z6q469VvrBoO2Yw4UgZbMRtRlXv2KK gzYv9/lYaQ/rG+8dlAWqFHP8x3dFhLvQ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org