$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: YVHwFikFAv4cubwPJ2yRzzyrou0+Rs1dwqlp1utRRHQ= Subject key identifier: 43:A4:74:A0:4B:62:17:CB:3E:57:EC:A0:AE:68:B4:01:96:67:9C:9A Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0CB0 Signing time: Fri 22 Nov 2024 18:04:36 +0000 Manifest this update: Fri 22 Nov 2024 18:04:36 +0000 Manifest next update: Fri 29 Nov 2024 18:04:36 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: EixfW3NkP5IObSdJgA7MM42En9SQ0Qc6qx46YDlhGYA=) 2: EEA979F83E6B11EFBB19C578C4F9AE02.roa (hash: RVpS3zQ/9Gk0QriqqYtT9fLHf++gSvvEOftb5uYzJww=) 3: 2328656A840211EEB9348E11C4F9AE02.roa (hash: N3MDXHzjqV4GpQ6x8O8u+w6AmWLtT9oFMdO88Fh9u3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: Nov 22 18:04:36 2024 GMT Not After : Nov 29 18:04:36 2024 GMT Subject: CN=6740c7b4-cd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:3f:6d:74:0f:03:d4:99:14:d6:0b:e2:c4: 0a:e6:6e:08:74:5e:7c:b1:f3:e0:21:92:84:80:37: 43:e2:ea:2a:f9:8f:a9:e3:c5:a7:a8:0c:b3:b9:54: 83:87:a2:d4:79:b3:47:6b:f6:b5:54:8a:6f:f1:b1: 1e:46:b1:b9:36:49:0d:ec:4a:e5:36:fb:cc:56:2d: b1:83:a0:4e:9d:c4:7e:91:9a:21:24:79:ee:f3:8e: e0:90:f2:93:6e:fc:a7:71:08:ef:da:77:9a:b7:f2: 18:a9:27:c3:d9:b5:20:64:b3:9f:c8:3e:b1:ac:40: 07:d3:39:69:68:dd:b1:de:99:ad:b2:25:0b:30:69: ce:62:e9:ac:0e:b8:c3:b4:9b:2f:9a:da:25:70:54: 68:f4:3f:1d:ca:2d:0b:57:1d:b3:bf:aa:db:ef:c6: dc:64:15:b6:43:b4:0d:85:0d:60:df:ec:fb:5b:71: 1b:7e:36:47:52:80:33:4f:27:12:6d:23:3a:4f:0e: 2c:d3:23:d7:8f:0b:6e:ac:68:8e:59:ad:23:b3:9b: 7f:1d:ee:96:68:2b:21:10:0a:4c:a9:da:de:36:21: 8d:e4:3b:6d:98:09:0a:e7:81:c1:b9:fe:29:0e:c8: 99:aa:50:5e:98:09:60:79:dd:0f:49:f4:b2:7a:94: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A4:74:A0:4B:62:17:CB:3E:57:EC:A0:AE:68:B4:01:96:67:9C:9A X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c2:c2:f6:a3:da:1f:6f:28:b9:23:cf:a5:03:61:ae:84:56: 52:c7:47:d5:b1:eb:db:34:22:ae:60:5e:48:4d:e7:d5:67:bb: 4c:c5:7c:8f:e1:7c:9e:b2:a1:53:f6:80:79:7d:dd:b3:7f:f3: b8:18:d4:fc:56:b3:00:9a:7d:f3:bb:2b:90:38:17:7b:62:08: 3b:92:0d:36:b0:e2:87:b7:f4:d0:6e:3d:ad:08:9e:b8:6e:fe: 36:3e:42:17:02:94:55:08:8c:8c:25:f4:9e:5d:3d:7b:ee:42: f2:14:20:46:cd:22:4c:b3:b0:fe:3b:c1:88:4e:67:e7:49:5b: e7:ba:01:3d:fc:41:16:fb:d0:a2:b3:22:fb:e0:0e:61:09:bc: b8:66:2f:a8:5c:72:b1:76:2d:d5:b5:7c:1a:07:ae:ae:cf:01: d2:a6:9e:3d:5b:e7:2a:74:a8:41:5e:ec:cd:f5:7e:fa:c6:66: a8:bd:f4:87:9c:85:18:a9:e4:dd:e1:b4:7e:f3:4e:66:90:75: 8d:09:25:5c:94:12:b0:79:9f:42:69:b4:29:a4:b5:94:d7:32: a2:42:42:59:e0:1a:91:3b:15:e4:43:dd:31:c1:5b:a2:16:ad: 34:1a:07:ef:cd:34:68:21:5d:82:8b:10:28:9f:0e:52:c4:6c: c7:e9:98:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjQxMTIyMTgwNDM2WhcNMjQxMTI5MTgwNDM2WjAYMRYwFAYD VQQDEw02NzQwYzdiNC1jZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaU/bXQPA9SZFNYL4sQK5m4IdF58sfPgIZKEgDdD4uoq+Y+p48WnqAyzuVSD h6LUebNHa/a1VIpv8bEeRrG5NkkN7ErlNvvMVi2xg6BOncR+kZohJHnu847gkPKT bvyncQjv2neat/IYqSfD2bUgZLOfyD6xrEAH0zlpaN2x3pmtsiULMGnOYumsDrjD tJsvmtolcFRo9D8dyi0LVx2zv6rb78bcZBW2Q7QNhQ1g3+z7W3EbfjZHUoAzTycS bSM6Tw4s0yPXjwturGiOWa0js5t/He6WaCshEApMqdreNiGN5DttmAkK54HBuf4p DsiZqlBemAlged0PSfSyepTGzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOkdKBL YhfLPlfsoK5otAGWZ5yaMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTwsL2o9ofbyi5I8+lA2GuhFZSx0fVsevbNCKuYF5ITefVZ7tMxXyP 4XyesqFT9oB5fd2zf/O4GNT8VrMAmn3zuyuQOBd7Ygg7kg02sOKHt/TQbj2tCJ64 bv42PkIXApRVCIyMJfSeXT177kLyFCBGzSJMs7D+O8GITmfnSVvnugE9/EEW+9Ci syL74A5hCby4Zi+oXHKxdi3VtXwaB66uzwHSpp49W+cqdKhBXuzN9X76xmaovfSH nIUYqeTd4bR+805mkHWNCSVclBKweZ9CabQppLWU1zKiQkJZ4BqROxXkQ90xwVui Fq00GgfvzTRoIV2CixAonw5SxGzH6ZiW -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org