$ rpki-client -vvf rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft File: DOpooCxSn4h1LGQt4NL--fXXoUo.mft (raw, json) Hash identifier: FkiAOkjjjbd1dCsU0eQ4O+l9B30YKYdIgmW+C3voFjc= Subject key identifier: A5:35:16:15:69:69:A8:21:50:EC:D1:8D:4A:9A:8F:84:BD:86:9A:B4 Authority key identifier: 0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A Certificate issuer: /CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft Manifest number: 066C Signing time: Wed 20 Nov 2024 21:58:01 +0000 Manifest this update: Wed 20 Nov 2024 21:58:01 +0000 Manifest next update: Wed 27 Nov 2024 21:58:01 +0000 Files and hashes: 1: DOpooCxSn4h1LGQt4NL--fXXoUo.crl (hash: 7YEBx8ZcuJf89vxOK9KmzczMPoNbDqA00jgCNfU1uTQ=) 2: E072F73492DF11EE9803F859C4F9AE02.roa (hash: nGQeEW39Od+vQgXs87Jbi/bqrVd4uaNCNXUbjbZuGDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913025C/serialNumber=0CEA68A02C529F88752C642DE0D2FEF9F5D7A14A Validity Not Before: Nov 20 21:58:01 2024 GMT Not After : Nov 27 21:58:01 2024 GMT Subject: CN=673e5b69-f514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:55:74:c5:a0:4b:70:81:54:64:21:b2:b8: d9:7b:38:06:b7:06:d1:2f:e6:41:dc:cb:d2:ed:da: 29:84:b5:24:61:44:3b:fd:bf:52:07:c0:10:d8:ef: 23:6e:0b:83:94:50:b4:63:69:ad:56:d2:c9:12:2f: 0f:e7:31:12:cf:86:b6:0c:38:95:65:57:b3:bf:c2: af:90:d6:bf:30:24:fc:28:f0:71:95:95:0f:7d:95: cc:68:2e:1d:fd:ec:c3:82:9c:d1:9c:ee:cf:c4:2a: 6a:ed:1b:f1:25:45:9b:6a:13:9d:79:94:d1:47:07: ba:71:40:ef:6b:f5:b4:f6:a7:76:c0:9f:eb:9f:ba: ae:9e:a0:a3:29:f7:fd:37:76:48:0a:1b:67:88:db: 49:12:f8:19:19:89:4b:cc:73:18:23:3c:24:45:35: 47:22:b3:0d:dc:c9:17:6a:4b:18:d9:7f:48:1c:4e: 75:1c:2e:96:0d:7e:80:0c:6f:d9:d1:00:b6:1f:91: fa:de:04:d3:04:1d:05:f6:a0:6e:40:14:63:d5:e0: c8:e8:f4:b7:57:0c:98:12:38:85:96:1f:56:71:88: ce:35:d2:02:ba:fd:f6:23:1f:53:73:d8:03:de:ec: 73:9e:f7:27:ac:30:37:e4:b5:e6:74:c0:91:52:ba: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:16:15:69:69:A8:21:50:EC:D1:8D:4A:9A:8F:84:BD:86:9A:B4 X509v3 Authority Key Identifier: keyid:0C:EA:68:A0:2C:52:9F:88:75:2C:64:2D:E0:D2:FE:F9:F5:D7:A1:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOpooCxSn4h1LGQt4NL--fXXoUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913025C/AC0558265E2511EBAB29892AC4F9AE02/DOpooCxSn4h1LGQt4NL--fXXoUo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:c7:6b:ed:75:5d:34:63:b7:94:c4:ac:cd:aa:55:a1:1f: fd:f5:90:5e:90:83:ce:9b:d1:a3:86:a0:07:0f:0d:05:46:77: a5:84:cb:b5:0b:7a:fb:5b:64:90:3e:13:f5:3c:e6:a8:20:be: 1f:5f:29:19:c5:3b:b7:0e:7e:a3:e1:63:23:43:bc:6c:cc:58: 7e:70:c7:d5:ec:21:72:af:74:ae:b0:20:54:d0:e7:b6:a0:b0: de:fe:ce:29:af:b0:7e:c5:47:cd:c1:b7:87:40:d6:d7:1e:6b: 3b:a7:e3:77:d4:19:05:5d:96:63:cc:5c:9d:82:9a:e6:8e:d6: 9c:77:1a:7a:d0:b2:f3:ba:fc:e8:18:2a:9f:11:04:55:bf:53: 8a:1e:b5:c0:8f:63:d8:e9:e0:b3:ce:20:42:c3:85:12:0c:5b: 11:80:c6:78:04:1a:86:75:23:93:64:52:b7:63:e3:35:25:9e: 95:8e:20:4e:c8:41:a3:d5:4b:a1:5c:3d:46:14:52:c3:0f:e5: 2c:55:34:a4:b6:d2:4e:ff:a3:e6:8a:c0:d5:e7:fe:c8:38:f0: 35:fc:c9:34:d4:39:81:64:dd:9b:1b:7b:93:cb:d3:28:4b:d0: e2:11:c2:ec:2e:51:9b:b7:a7:0e:c7:a1:b5:0f:ae:aa:1e:29: 26:cc:3c:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyNUMxMTAvBgNVBAUTKDBDRUE2OEEwMkM1MjlGODg3NTJDNjQyREUwRDJGRUY5 RjVEN0ExNEEwHhcNMjQxMTIwMjE1ODAxWhcNMjQxMTI3MjE1ODAxWjAYMRYwFAYD VQQDEw02NzNlNWI2OS1mNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtpVdMWgS3CBVGQhsrjZezgGtwbRL+ZB3MvS7dophLUkYUQ7/b9SB8AQ2O8j bguDlFC0Y2mtVtLJEi8P5zESz4a2DDiVZVezv8KvkNa/MCT8KPBxlZUPfZXMaC4d /ezDgpzRnO7PxCpq7RvxJUWbahOdeZTRRwe6cUDva/W09qd2wJ/rn7qunqCjKff9 N3ZIChtniNtJEvgZGYlLzHMYIzwkRTVHIrMN3MkXaksY2X9IHE51HC6WDX6ADG/Z 0QC2H5H63gTTBB0F9qBuQBRj1eDI6PS3VwyYEjiFlh9WcYjONdICuv32Ix9Tc9gD 3uxznvcnrDA35LXmdMCRUrqgcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU1FhVp aaghUOzRjUqaj4S9hpq0MB8GA1UdIwQYMBaAFAzqaKAsUp+IdSxkLeDS/vn116FK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDI1Qy9BQzA1NTgyNjVF MjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240aDFMR1F0NE5MLS1mWFhv VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPcG9vQ3hTbjRoMUxHUXQ0TkwtLWZYWG9Vby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDI1Qy9BQzA1NTgyNjVFMjUxMUVCQUIyOTg5MkFDNEY5QUUwMi9ET3Bvb0N4U240 aDFMR1F0NE5MLS1mWFhvVW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyisdr7XVdNGO3lMSszapVoR/99ZBekIPOm9GjhqAHDw0FRnelhMu1 C3r7W2SQPhP1POaoIL4fXykZxTu3Dn6j4WMjQ7xszFh+cMfV7CFyr3SusCBU0Oe2 oLDe/s4pr7B+xUfNwbeHQNbXHms7p+N31BkFXZZjzFydgprmjtacdxp60LLzuvzo GCqfEQRVv1OKHrXAj2PY6eCzziBCw4USDFsRgMZ4BBqGdSOTZFK3Y+M1JZ6VjiBO yEGj1UuhXD1GFFLDD+UsVTSkttJO/6PmisDV5/7IOPA1/Mk01DmBZN2bG3uTy9Mo S9DiEcLsLlGbt6cOx6G1D66qHikmzDyX -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:43 2024 by rpki-client on console-fra.rpki-client.org