$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: ymrJQIWp30DoLiFGvI1/VZN3GISRCvUPQu7ZUQPg8iU= Subject key identifier: 2A:B2:FE:36:C1:76:17:20:A7:D8:19:1A:73:C0:A8:D3:BD:48:BC:5C Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: BD Signing time: Sat 23 Nov 2024 04:00:06 +0000 Manifest this update: Sat 23 Nov 2024 04:00:05 +0000 Manifest next update: Sat 30 Nov 2024 04:00:05 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: MTsRJV1nji1AV58j5eKsKa+D2PrFtDcK4rgWoL6izw4=) 2: A3F7EA248C3811EEB3B35061C4F9AE02.roa (hash: 0XTdav9TVDkyjgzAJ3nve2FCy4YqzyvU1miDJoxWVJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: Nov 23 04:00:05 2024 GMT Not After : Nov 30 04:00:05 2024 GMT Subject: CN=67415346-b4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:6c:bd:0e:2d:64:35:c3:c7:a8:47:a0:18: 6e:9b:99:a8:2e:66:fa:f7:88:82:51:6f:55:f4:f9: 2a:70:cf:c3:6a:79:b8:24:b6:75:e0:16:af:c7:f6: 39:48:03:52:41:be:86:1e:54:fd:ae:62:f8:2a:69: 58:ee:22:cd:23:3f:cb:0d:32:80:6e:32:25:26:a3: 22:ad:46:d5:3f:4b:81:b3:7f:04:69:df:0a:23:6d: 93:df:d4:16:92:9e:41:da:74:1f:13:6c:6b:56:04: b2:45:57:a9:b4:28:89:97:00:05:b8:b5:4e:cf:2d: 58:35:5c:a6:98:92:c8:90:f0:b2:3a:2c:65:a3:dc: af:3d:67:21:65:2b:50:53:b1:b3:20:dc:dc:96:ae: 73:b1:b2:51:f4:0d:bb:1f:a0:2b:63:ce:53:0d:89: ca:ea:ae:07:94:8d:4f:c3:59:eb:3e:3f:47:e9:e0: 22:7d:87:05:ed:c5:09:6a:2b:4e:85:c6:2d:ae:8e: db:57:ec:c7:04:1a:7b:87:4d:51:87:44:12:08:78: a9:bd:25:cf:fc:be:b7:53:00:c7:c9:30:f1:6f:c1: 65:2d:61:94:79:4a:36:dd:26:97:bd:52:db:83:69: 58:3c:70:ee:f0:ee:9f:81:f6:e8:b7:f1:0f:90:b2: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B2:FE:36:C1:76:17:20:A7:D8:19:1A:73:C0:A8:D3:BD:48:BC:5C X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2b:31:fd:55:fb:46:f8:9b:2d:3a:ac:f7:a5:33:ff:21:06: 6c:b4:84:19:15:ca:9c:2d:b6:2d:b1:92:0a:fb:00:9a:de:a3: c4:09:40:a9:c8:3e:aa:46:9f:9b:ad:d4:9b:52:2d:1f:4d:83: a9:12:50:9d:a9:a8:d5:0b:ad:2a:fe:f6:a8:88:d5:77:7d:9e: be:21:c6:36:dc:1d:1c:43:3f:25:c0:86:8d:f8:74:e1:1c:aa: 53:cb:7a:f5:5c:99:8f:3d:64:6e:42:d0:70:69:7b:e6:34:fb: 4f:14:26:e4:10:05:48:cd:61:af:63:3a:56:5e:2c:7e:12:06: c2:44:eb:25:09:38:00:de:48:c0:27:67:5d:41:c4:45:28:cb: ad:a9:5a:aa:cb:78:fc:96:fa:7e:70:25:f1:a9:af:e0:18:29: f7:14:2b:56:b3:aa:0d:cf:84:8c:9e:d1:08:34:52:ad:0d:67: 68:ab:ae:c6:21:d4:25:a7:03:cd:02:cd:f4:ee:36:20:68:0f: bc:e0:33:83:1a:42:53:9b:f7:05:d0:1a:9e:ec:90:5f:6f:7d: e7:e8:2b:6b:70:e9:b9:65:88:1f:a2:00:0b:5a:aa:2b:75:4a: c6:84:02:74:f4:7c:68:0d:93:73:28:ee:21:48:74:4b:8b:40: dd:6f:d8:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz NTE5M0Y3NzIwHhcNMjQxMTIzMDQwMDA1WhcNMjQxMTMwMDQwMDA1WjAYMRYwFAYD VQQDEw02NzQxNTM0Ni1iNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUVsvQ4tZDXDx6hHoBhum5moLmb694iCUW9V9PkqcM/Danm4JLZ14Bavx/Y5 SANSQb6GHlT9rmL4KmlY7iLNIz/LDTKAbjIlJqMirUbVP0uBs38Ead8KI22T39QW kp5B2nQfE2xrVgSyRVeptCiJlwAFuLVOzy1YNVymmJLIkPCyOixlo9yvPWchZStQ U7GzINzclq5zsbJR9A27H6ArY85TDYnK6q4HlI1Pw1nrPj9H6eAifYcF7cUJaitO hcYtro7bV+zHBBp7h01Rh0QSCHipvSXP/L63UwDHyTDxb8FlLWGUeUo23SaXvVLb g2lYPHDu8O6fgfbot/EPkLJHaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqy/jbB dhcgp9gZGnPAqNO9SLxcMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5 QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9KzH9VftG+JstOqz3pTP/IQZstIQZFcqcLbYtsZIK+wCa3qPECUCp yD6qRp+brdSbUi0fTYOpElCdqajVC60q/vaoiNV3fZ6+IcY23B0cQz8lwIaN+HTh HKpTy3r1XJmPPWRuQtBwaXvmNPtPFCbkEAVIzWGvYzpWXix+EgbCROslCTgA3kjA J2ddQcRFKMutqVqqy3j8lvp+cCXxqa/gGCn3FCtWs6oNz4SMntEINFKtDWdoq67G IdQlpwPNAs307jYgaA+84DODGkJTm/cF0Bqe7JBfb33n6CtrcOm5ZYgfogALWqor dUrGhAJ09HxoDZNzKO4hSHRLi0Ddb9gB -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org