$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: raBDWSU3J028MHRFP42nwLR5+l95ukbfA0/XJ52D69M= Subject key identifier: 3C:73:4C:E4:75:07:74:1B:89:9A:13:16:C2:44:19:11:EC:A2:9B:1E Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 07A2 Signing time: Fri 22 Nov 2024 20:49:32 +0000 Manifest this update: Fri 22 Nov 2024 20:49:32 +0000 Manifest next update: Fri 29 Nov 2024 20:49:32 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: Nh4EoJgtRdPJH4ftFJqMkwQcR0V0B8+paEEpngj3DQo=) 2: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (hash: hbGM0H2MCBcXGdiy+u5XBSECyzJz0AJtwU9Q9LxYAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Nov 22 20:49:32 2024 GMT Not After : Nov 29 20:49:32 2024 GMT Subject: CN=6740ee5c-c8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:a3:9d:b4:33:42:10:e3:7f:06:e0:a3:f6: ef:61:ae:05:aa:e1:cf:07:12:30:0e:ec:b0:54:06: b5:f8:db:58:31:c9:51:5f:90:1d:a6:7e:ab:19:fd: 95:c0:d4:33:b2:e3:98:75:5e:d5:0e:8c:dc:00:89: cb:02:0e:43:7a:51:fe:6f:11:f4:69:07:fe:aa:9a: be:df:09:c9:27:8d:67:29:a9:ea:75:4c:57:a5:ee: c6:91:27:05:80:a6:62:07:59:45:eb:8e:79:2e:6e: 05:15:a5:ab:05:01:46:55:15:41:5c:2b:27:4e:fc: 7e:78:89:f6:e7:67:83:2e:6a:9d:75:21:9a:3f:a7: f3:52:11:3f:e7:cb:14:1f:82:6b:80:84:b4:8e:36: b8:dd:61:f0:6f:eb:6f:50:f4:8b:e7:fa:2a:ec:82: ad:21:0b:92:88:41:ab:c3:be:b6:47:f5:8d:8b:a6: 3c:28:08:9d:46:5c:c0:98:08:38:a7:53:bc:9e:a0: 43:2a:5b:d4:2e:84:29:a8:07:e9:92:6d:7d:9f:7f: d5:31:28:61:c8:f4:43:23:19:da:8c:08:d1:9a:02: 94:88:b8:52:07:1e:e6:71:1c:eb:9a:3b:36:ce:82: 87:d4:8b:3d:ae:07:50:60:3b:62:01:88:80:5b:a9: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:4C:E4:75:07:74:1B:89:9A:13:16:C2:44:19:11:EC:A2:9B:1E X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8c:0f:55:26:e6:c2:fd:ae:39:4c:52:b3:6a:15:66:2a:13: 74:f8:c7:a1:1f:ff:7a:92:05:b6:f0:24:46:53:f6:eb:30:e5: 7e:e0:77:1c:ea:52:1c:06:92:e8:13:83:1e:63:1a:4f:06:51: e1:04:78:be:52:c1:61:5e:c4:b1:a8:3a:49:9b:3b:5b:9c:91: f5:43:f9:c5:3e:01:40:2f:f7:06:57:03:e4:56:d9:b1:ba:e1: 95:69:62:e4:68:5b:58:9d:21:77:cc:e8:46:6a:8e:c5:92:43: c8:12:9a:e7:1d:4f:ac:a0:94:29:2e:49:19:85:ff:d4:b6:fb: dc:11:0d:1d:1e:c8:9f:36:73:85:e1:44:cc:8d:40:26:fb:cd: 59:bc:51:8f:35:85:4a:c2:63:f4:b8:ec:1d:e2:71:e9:dc:de: 9a:51:00:26:4f:e1:0d:72:76:37:89:1d:d0:87:44:8c:74:60: 26:a4:82:3c:57:f7:34:18:68:34:90:e5:ac:69:84:05:96:f7: e3:e3:ed:3a:25:5d:37:1a:14:fc:c8:d1:81:7e:10:d9:0f:72: 83:10:66:04:f5:74:05:f4:fc:46:14:af:c5:5a:06:1b:a7:56: 64:05:01:4f:26:fe:11:b6:8d:d8:0b:b5:15:71:d0:72:af:74: 50:29:12:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjQxMTIyMjA0OTMyWhcNMjQxMTI5MjA0OTMyWjAYMRYwFAYD VQQDEw02NzQwZWU1Yy1jOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ICjnbQzQhDjfwbgo/bvYa4FquHPBxIwDuywVAa1+NtYMclRX5Adpn6rGf2V wNQzsuOYdV7VDozcAInLAg5DelH+bxH0aQf+qpq+3wnJJ41nKanqdUxXpe7GkScF gKZiB1lF6455Lm4FFaWrBQFGVRVBXCsnTvx+eIn252eDLmqddSGaP6fzUhE/58sU H4JrgIS0jja43WHwb+tvUPSL5/oq7IKtIQuSiEGrw762R/WNi6Y8KAidRlzAmAg4 p1O8nqBDKlvULoQpqAfpkm19n3/VMShhyPRDIxnajAjRmgKUiLhSBx7mcRzrmjs2 zoKH1Is9rgdQYDtiAYiAW6kefwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxzTOR1 B3QbiZoTFsJEGRHsopseMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjA9VJubC/a45TFKzahVmKhN0+MehH/96kgW28CRGU/brMOV+4Hcc 6lIcBpLoE4MeYxpPBlHhBHi+UsFhXsSxqDpJmztbnJH1Q/nFPgFAL/cGVwPkVtmx uuGVaWLkaFtYnSF3zOhGao7FkkPIEprnHU+soJQpLkkZhf/UtvvcEQ0dHsifNnOF 4UTMjUAm+81ZvFGPNYVKwmP0uOwd4nHp3N6aUQAmT+ENcnY3iR3Qh0SMdGAmpII8 V/c0GGg0kOWsaYQFlvfj4+06JV03GhT8yNGBfhDZD3KDEGYE9XQF9PxGFK/FWgYb p1ZkBQFPJv4Rto3YC7UVcdByr3RQKRJz -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:23 2024 by rpki-client on console-ams.rpki-client.org