$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: mFfsdmXEyv9ItsEOxjP782an+n0DI7GfEdCbW3s1kZQ= Subject key identifier: 98:93:88:C1:4E:62:0B:D1:C4:6C:F0:38:59:03:38:17:C3:E8:5B:74 Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 100B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 1000 Signing time: Fri 22 Nov 2024 17:25:13 +0000 Manifest this update: Fri 22 Nov 2024 17:25:13 +0000 Manifest next update: Fri 29 Nov 2024 17:25:13 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: qHpc9z5fxUGJF78AX4qCaXKskhRZw1XBdwaiHeqZRDU=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 3uEvau4LmZq2DpE2z3DPriV9G2TAsCRZC5hyBAIi04A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4107 (0x100b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Nov 22 17:25:13 2024 GMT Not After : Nov 29 17:25:13 2024 GMT Subject: CN=6740be79-d3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:a5:91:4d:dd:57:86:bf:39:f5:1e:31:59: 62:3c:f8:75:06:ec:67:68:27:c2:2c:a1:b9:b8:f1: 6c:08:a3:f9:12:47:03:92:fe:87:59:38:78:9b:4d: 1c:73:6f:cd:7e:66:87:d7:7c:44:2f:d0:e4:76:72: d6:7e:1d:ef:20:ab:4a:a2:16:a7:b3:d4:41:81:06: 7a:97:f3:56:fc:25:e1:65:38:7a:14:54:24:b9:e3: e0:51:68:32:a5:c2:5c:6e:e7:cb:0c:fd:d9:e4:7d: 5d:6e:27:18:2e:2b:1c:b3:46:14:c1:92:e9:06:10: be:9d:49:f8:c4:15:1a:8a:8c:8a:17:01:6f:c9:62: eb:bf:01:12:33:f8:e3:38:39:34:0f:f4:c6:eb:69: 91:eb:16:40:9f:77:7b:79:a9:b3:03:7b:6c:69:57: a0:20:99:88:ee:d1:ca:7b:73:08:0b:9a:7a:5c:09: ca:e4:24:72:47:63:c6:54:b7:c5:32:e8:97:74:0f: 7f:6b:ab:3b:af:d4:79:b0:6a:f7:d1:34:41:a7:20: 3b:2e:7c:fe:48:4d:53:fd:cc:7c:5b:4f:64:e9:9f: ae:05:53:1e:05:70:b3:30:1d:0e:e3:5b:d5:68:ba: 22:f5:4d:47:c5:5f:ec:c6:91:54:1e:d9:e6:a8:b6: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:93:88:C1:4E:62:0B:D1:C4:6C:F0:38:59:03:38:17:C3:E8:5B:74 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:91:6f:88:59:3e:d1:7b:03:c9:74:9d:f4:9f:61:4a:05:b3: 26:17:a6:97:67:8c:e2:b4:19:54:8f:ef:65:1e:47:5a:96:9b: 04:a3:4f:70:fd:d2:bd:08:8e:d3:48:b5:d4:0d:48:3b:6b:46: e1:c2:0d:1e:cf:31:29:8b:56:8d:37:56:34:11:dd:f3:5d:cd: e3:77:6c:5d:3f:20:e5:8f:9f:28:25:c5:6f:08:ed:8a:ee:11: f1:35:07:d6:22:31:a6:ac:f9:8d:e2:8c:a2:88:26:1e:f3:00: 62:23:db:9a:38:43:1d:aa:0d:13:ce:7c:ba:e1:ce:b3:8d:66: 6f:3e:d7:5f:5f:51:8e:59:20:a7:26:21:a6:33:6d:3d:0d:25: 07:f7:c7:78:9c:46:e0:54:dc:88:11:31:e2:fc:3f:c1:30:2b: 40:41:b7:8c:69:d9:20:22:3e:2b:bc:8f:83:bf:6a:68:0e:d5: a7:4a:e6:ff:9e:f1:12:8d:c0:43:72:f8:6b:a1:34:d5:30:7d: b3:eb:d8:36:7c:2d:cb:2b:b0:c5:1c:33:8d:35:e8:1b:35:14: eb:97:4c:a7:45:1a:06:b5:6a:2d:0a:3a:29:0a:a8:44:1f:06: 5c:55:e2:5f:3e:97:67:0d:47:51:fb:61:f1:c9:e2:47:13:bd: 79:98:3a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjQxMTIyMTcyNTEzWhcNMjQxMTI5MTcyNTEzWjAYMRYwFAYD VQQDEw02NzQwYmU3OS1kM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMelkU3dV4a/OfUeMVliPPh1BuxnaCfCLKG5uPFsCKP5EkcDkv6HWTh4m00c c2/NfmaH13xEL9DkdnLWfh3vIKtKohans9RBgQZ6l/NW/CXhZTh6FFQkuePgUWgy pcJcbufLDP3Z5H1dbicYLiscs0YUwZLpBhC+nUn4xBUaioyKFwFvyWLrvwESM/jj ODk0D/TG62mR6xZAn3d7eamzA3tsaVegIJmI7tHKe3MIC5p6XAnK5CRyR2PGVLfF MuiXdA9/a6s7r9R5sGr30TRBpyA7Lnz+SE1T/cx8W09k6Z+uBVMeBXCzMB0O41vV aLoi9U1HxV/sxpFUHtnmqLaf0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiTiMFO YgvRxGzwOFkDOBfD6Ft0MB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANkW+IWT7RewPJdJ30n2FKBbMmF6aXZ4zitBlUj+9lHkdalpsEo09w /dK9CI7TSLXUDUg7a0bhwg0ezzEpi1aNN1Y0Ed3zXc3jd2xdPyDlj58oJcVvCO2K 7hHxNQfWIjGmrPmN4oyiiCYe8wBiI9uaOEMdqg0Tzny64c6zjWZvPtdfX1GOWSCn JiGmM209DSUH98d4nEbgVNyIETHi/D/BMCtAQbeMadkgIj4rvI+Dv2poDtWnSub/ nvESjcBDcvhroTTVMH2z69g2fC3LK7DFHDONNegbNRTrl0ynRRoGtWotCjopCqhE HwZcVeJfPpdnDUdR+2HxyeJHE715mDoi -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org