$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: V6nDhPDdcz2RxjlvV6dlNaQxRq9AsOKjNUPZDXMEixU= Subject key identifier: 84:19:1F:14:04:A2:BC:01:0B:6B:32:A3:51:0C:63:90:CC:1C:55:11 Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 3437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 342E Signing time: Fri 22 Nov 2024 15:16:31 +0000 Manifest this update: Fri 22 Nov 2024 15:16:31 +0000 Manifest next update: Fri 29 Nov 2024 15:16:31 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: IHyfmXzf+1RsB/tdHoPYqGH9iVaf6Xx3xvQ0yiiQ1SY=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: PN3PImrt+QJI7xYO7BeFUBTImo3X6zJHE8IHPHYYZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13367 (0x3437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Nov 22 15:16:31 2024 GMT Not After : Nov 29 15:16:31 2024 GMT Subject: CN=6740a04f-6d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:19:4a:4e:14:a8:55:c4:db:d8:6a:5b:ce: 50:37:d1:b2:be:f2:01:d3:1d:f2:03:77:ce:10:2c: 04:2d:78:37:48:83:32:b4:0c:b6:63:d3:07:b2:be: 00:d4:01:3f:03:f5:44:0e:2e:77:7f:04:12:f9:a4: 10:df:71:a9:0b:22:f1:8b:1d:ba:5d:31:7b:1e:72: a2:bd:9d:5e:d5:c0:a4:79:a2:b6:34:67:67:63:d6: 4d:c5:74:36:85:3a:c0:d9:58:55:99:c3:20:9e:ba: f2:d6:0d:cb:0e:4d:59:18:ed:ec:46:a1:12:d5:2a: 43:e1:0d:44:9e:95:06:77:ef:fc:b1:ad:4d:c6:c9: a4:a8:74:ed:2d:89:5e:f6:39:46:6a:ff:25:04:85: 86:be:d8:99:f4:ee:50:98:42:e7:fa:bf:de:a9:b7: 15:4c:13:51:92:f5:7c:48:58:db:0b:2e:24:49:d1: 27:e4:1d:e3:14:75:bd:0a:22:e0:fa:b0:93:9e:65: cf:5c:e0:86:5d:37:1c:1c:9b:e2:a6:4a:d8:63:e5: 19:85:1c:7b:c4:c2:f9:1f:a1:2d:49:a5:fc:a9:e8: ca:8b:53:16:1f:0e:69:da:00:21:f3:39:a3:22:94: 79:98:b3:00:8f:ea:4f:f7:e8:bc:88:a5:df:b3:89: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:19:1F:14:04:A2:BC:01:0B:6B:32:A3:51:0C:63:90:CC:1C:55:11 X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:92:5e:1c:d3:e5:33:c6:7e:6e:03:19:cd:8e:1e:04:b3:c6: a1:02:be:4d:cc:b4:83:3f:30:cd:7e:43:7e:af:f3:86:8f:d3: 0f:aa:41:d8:d0:f4:11:a0:db:8d:c5:4b:48:8c:82:c2:9f:05: f1:f1:c6:77:62:6f:43:36:a5:df:68:27:21:48:13:7f:1a:0f: 73:a1:59:07:f7:94:9b:94:2f:a3:d0:e8:da:96:e5:20:5d:83: 8d:db:fa:98:23:dc:b3:c9:0c:2e:23:23:25:05:3f:92:b9:6e: c1:7f:ef:a6:21:31:3f:17:d2:8b:0f:a2:cf:82:73:3c:80:3c: 7c:01:f3:0e:66:f9:ce:af:4f:14:60:51:1d:c0:f3:87:e3:5e: bd:18:26:60:c3:e6:ef:f2:37:b1:5a:ec:2d:54:81:56:09:d1: a4:f3:23:ff:95:60:27:22:0b:7f:5e:89:91:4d:3e:ed:52:6e: 81:cd:31:5a:05:3d:23:ff:d3:3a:3e:c9:c3:1d:80:43:8a:4d: eb:44:ff:04:74:13:b6:2a:31:c7:f8:95:9a:f8:a5:ec:a1:d1: 93:aa:d7:48:31:b3:05:98:22:9b:53:c6:47:ec:f3:9a:bf:b6: 0d:cd:10:b6:a9:9b:bf:d9:5f:40:f8:c0:75:e7:7c:ab:01:e7: 5b:3d:03:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjQxMTIyMTUxNjMxWhcNMjQxMTI5MTUxNjMxWjAYMRYwFAYD VQQDEw02NzQwYTA0Zi02ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC0ZSk4UqFXE29hqW85QN9GyvvIB0x3yA3fOECwELXg3SIMytAy2Y9MHsr4A 1AE/A/VEDi53fwQS+aQQ33GpCyLxix26XTF7HnKivZ1e1cCkeaK2NGdnY9ZNxXQ2 hTrA2VhVmcMgnrry1g3LDk1ZGO3sRqES1SpD4Q1EnpUGd+/8sa1NxsmkqHTtLYle 9jlGav8lBIWGvtiZ9O5QmELn+r/eqbcVTBNRkvV8SFjbCy4kSdEn5B3jFHW9CiLg +rCTnmXPXOCGXTccHJvipkrYY+UZhRx7xML5H6EtSaX8qejKi1MWHw5p2gAh8zmj IpR5mLMAj+pP9+i8iKXfs4mWpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQZHxQE orwBC2syo1EMY5DMHFURMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrkl4c0+Uzxn5uAxnNjh4Es8ahAr5NzLSDPzDNfkN+r/OGj9MPqkHY 0PQRoNuNxUtIjILCnwXx8cZ3Ym9DNqXfaCchSBN/Gg9zoVkH95SblC+j0OjaluUg XYON2/qYI9yzyQwuIyMlBT+SuW7Bf++mITE/F9KLD6LPgnM8gDx8AfMOZvnOr08U YFEdwPOH4169GCZgw+bv8jexWuwtVIFWCdGk8yP/lWAnIgt/XomRTT7tUm6BzTFa BT0j/9M6PsnDHYBDik3rRP8EdBO2KjHH+JWa+KXsodGTqtdIMbMFmCKbU8ZH7POa v7YNzRC2qZu/2V9A+MB153yrAedbPQOU -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:15 2024 by rpki-client on console-ams.rpki-client.org