$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft File: DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json) Hash identifier: P+XPnhGBEwE9fFDNRt92PPik5RHXp8FBGT9KG7mT+iM= Subject key identifier: 49:8C:78:47:1E:B9:A0:67:F6:CA:E5:53:BA:4F:24:3A:C6:D2:4A:D4 Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA Certificate issuer: /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft Manifest number: 90 Signing time: Sat 23 Nov 2024 04:29:32 +0000 Manifest this update: Sat 23 Nov 2024 04:29:31 +0000 Manifest next update: Sat 30 Nov 2024 04:29:31 +0000 Files and hashes: 1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: NNQj+vHTxbu0nQzHg5/9w3/rGEqCdxZLB9u3+ZyoHGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Validity Not Before: Nov 23 04:29:31 2024 GMT Not After : Nov 30 04:29:31 2024 GMT Subject: CN=67415a2b-77d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:8e:1c:12:b8:eb:7c:e1:a6:b1:9d:d0:e5: f7:8f:27:b4:ba:53:0f:76:e4:5e:dc:8f:b6:ec:42: 6e:a1:6b:b6:95:ee:f8:34:1b:62:0e:93:57:32:f8: 26:42:af:fa:1b:18:ed:ff:96:ed:f0:72:66:99:af: 5f:9a:58:2b:18:ca:f9:39:70:1a:84:13:ad:0c:d7: 79:73:cd:2c:f3:ea:d6:ec:60:b1:90:b8:46:88:e2: 13:c1:64:b1:bd:ab:cb:a3:4a:9d:14:09:e0:b8:96: a9:6f:e3:a0:00:c5:88:81:98:9c:b1:eb:0b:84:96: 5c:61:c7:3d:f2:c9:5f:5c:dd:9c:3b:1f:79:5c:5c: e6:ac:6d:cf:22:a6:24:e4:30:fd:e1:68:2f:66:b6: eb:a3:57:e0:61:02:37:ae:16:2a:65:65:21:9c:41: 7d:07:8b:84:2b:6b:66:46:dd:be:79:20:52:e0:9e: 91:5a:ae:54:3e:42:e4:04:9b:1d:33:cf:cf:c2:c1: 5d:f7:4f:0f:df:ae:b2:da:72:c5:99:ee:52:44:40: 91:01:32:69:db:91:3b:60:8e:71:58:98:90:c2:86: 67:94:c9:34:42:12:72:e8:38:58:b2:fd:69:e5:1c: 35:00:e4:c8:06:16:b6:09:74:db:de:e1:7a:24:d7: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:78:47:1E:B9:A0:67:F6:CA:E5:53:BA:4F:24:3A:C6:D2:4A:D4 X509v3 Authority Key Identifier: keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:ec:0b:1a:26:83:29:eb:8a:9b:a1:a4:2d:37:1e:3d:08:01: 0a:57:7a:97:f2:d1:50:ee:2a:28:a6:8f:85:b7:21:1d:2b:8c: 12:7c:89:f5:47:9e:13:68:06:9f:0d:a4:28:ed:f5:4c:1a:8c: ac:22:d4:c4:77:79:9d:7f:b7:b8:f5:43:9e:34:a7:88:ea:7e: e2:ff:8a:cf:54:58:33:c6:31:42:f6:22:0e:8c:61:c5:99:6b: 25:1d:b2:fc:c7:49:08:27:f8:4e:43:11:ae:42:36:e6:56:64: 62:5c:6e:8d:75:0d:eb:a7:24:81:b5:53:c6:7b:c9:60:82:f0: 61:56:ef:c1:6e:d4:ad:f1:32:6e:82:a1:f1:c0:2a:12:a1:7e: 3a:14:78:0e:c4:ee:73:da:30:d4:a8:71:c2:ef:0a:38:1e:6f: 47:fb:a1:17:aa:2b:15:27:70:14:cd:90:a3:38:ea:19:f4:db: 1e:70:07:30:6e:1b:c7:ad:6b:ad:4c:de:3a:3e:a7:8a:d5:fd: aa:f9:bc:7e:63:d0:7e:9c:85:c0:56:14:88:e5:e6:3c:65:27: f7:17:0c:95:11:12:30:13:f1:60:ca:0f:af:5e:d0:dd:c4:ee: c4:8d:1c:3d:0d:8a:af:2c:4d:6c:0d:31:71:7b:3c:eb:46:f2: a6:06:14:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4MUIxMTAvBgNVBAUTKDBFNjI2QkVCM0Q0MjA1OTMzMzNCRkI0Qzg1ODMwN0E4 OTlFQTdEQ0EwHhcNMjQxMTIzMDQyOTMxWhcNMjQxMTMwMDQyOTMxWjAYMRYwFAYD VQQDEw02NzQxNWEyYi03N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyReOHBK463zhprGd0OX3jye0ulMPduRe3I+27EJuoWu2le74NBtiDpNXMvgm Qq/6Gxjt/5bt8HJmma9fmlgrGMr5OXAahBOtDNd5c80s8+rW7GCxkLhGiOITwWSx vavLo0qdFAnguJapb+OgAMWIgZicsesLhJZcYcc98slfXN2cOx95XFzmrG3PIqYk 5DD94WgvZrbro1fgYQI3rhYqZWUhnEF9B4uEK2tmRt2+eSBS4J6RWq5UPkLkBJsd M8/PwsFd908P366y2nLFme5SRECRATJp25E7YI5xWJiQwoZnlMk0QhJy6DhYsv1p 5Rw1AOTIBha2CXTb3uF6JNfVYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmMeEce uaBn9srlU7pPJDrG0krUMB8GA1UdIwQYMBaAFA5ia+s9QgWTMzv7TIWDB6iZ6n3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9DNThDRjg0Q0NB OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9EbUpyNnoxQ0JaTXpPX3RNaFlNSHFKbnFm Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtSnI2ejFDQlpNek9fdE1oWU1IcUpucWZjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTgxQi9DNThDRjg0Q0NBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9EbUpyNnoxQ0Ja TXpPX3RNaFlNSHFKbnFmY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDY7AsaJoMp64qboaQtNx49CAEKV3qX8tFQ7ioopo+FtyEdK4wSfIn1 R54TaAafDaQo7fVMGoysItTEd3mdf7e49UOeNKeI6n7i/4rPVFgzxjFC9iIOjGHF mWslHbL8x0kIJ/hOQxGuQjbmVmRiXG6NdQ3rpySBtVPGe8lggvBhVu/BbtSt8TJu gqHxwCoSoX46FHgOxO5z2jDUqHHC7wo4Hm9H+6EXqisVJ3AUzZCjOOoZ9NsecAcw bhvHrWutTN46PqeK1f2q+bx+Y9B+nIXAVhSI5eY8ZSf3FwyVERIwE/Fgyg+vXtDd xO7EjRw9DYqvLE1sDTFxezzrRvKmBhRd -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org