$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json) Hash identifier: rpZWSSV0equyvHjPdW2WnHFXj6x1lL8Csxx+nwMblKs= Subject key identifier: A2:16:66:09:53:25:1D:AD:93:6D:69:E4:18:89:D2:23:43:CF:A8:49 Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft Manifest number: 1221 Signing time: Fri 22 Nov 2024 19:36:19 +0000 Manifest this update: Fri 22 Nov 2024 19:36:18 +0000 Manifest next update: Fri 29 Nov 2024 19:36:18 +0000 Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: QHR0Lt7/YeLyZ+aQmrdiYjtPAxDWkwCdYHuz7iiWuzI=) 2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: xCoGLzXH0o2fU2zmUG8/SFNRjo0IkmsetsLkqXjuT7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: Nov 22 19:36:18 2024 GMT Not After : Nov 29 19:36:18 2024 GMT Subject: CN=6740dd33-e124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:2d:c1:dd:98:fc:3b:6f:3e:bb:70:5f:52: fd:13:6c:47:dd:85:26:eb:f9:e3:c7:5d:88:fa:6d: ce:48:32:24:aa:09:ab:0e:8c:97:16:47:8b:3c:7a: 2f:a0:af:75:cc:3b:b2:95:53:04:f0:c9:e1:25:4b: 82:89:71:c0:71:9c:9b:64:14:17:3e:ba:e9:ac:4b: 45:ec:8f:67:5c:d9:9c:63:01:d3:b9:cd:5f:85:84: 2f:20:02:5e:cc:63:ae:a8:26:27:61:ac:23:32:fc: 62:56:2d:63:03:e1:97:ee:31:8c:ed:96:95:7f:ec: c4:8a:54:88:c6:72:6e:59:dd:c2:7f:18:67:f7:19: 94:39:98:b3:7e:fa:ce:d6:70:b3:9e:e1:f4:f8:19: 3a:06:c8:3a:50:6e:34:c6:74:f4:ab:d8:e4:75:0a: 8b:4d:0b:a2:e7:1f:b6:48:ba:1b:e3:0c:0f:8e:fc: b5:a0:e6:7d:54:a0:0c:d5:3e:34:a6:30:55:d4:9a: 99:8e:fb:07:3d:56:bc:6f:52:9b:4a:ec:af:82:30: ff:1d:0d:77:8a:04:cf:ca:e2:8f:cb:0e:06:e6:03: 7d:8a:7a:36:36:15:ca:bd:a8:64:1e:ec:ab:ed:13: d7:ce:05:1a:83:b6:bb:a7:fb:9f:86:f9:64:db:41: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:66:09:53:25:1D:AD:93:6D:69:E4:18:89:D2:23:43:CF:A8:49 X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:37:22:06:d8:08:39:86:9a:c2:bc:65:29:81:87:dc:81:40: 33:27:bf:61:ce:0d:d5:16:4f:3a:48:8d:75:90:27:79:20:7b: c4:38:d1:85:13:71:e7:e0:f5:ca:67:9e:c3:3c:20:f3:d6:4f: b3:81:2f:61:32:e3:f7:33:9b:7c:7c:89:b9:35:22:a9:d0:a3: 12:ce:96:ad:cb:fb:a9:43:ee:7a:aa:e1:58:d0:2b:c2:26:fe: 40:ee:2a:1a:41:c2:d2:bc:81:f7:b2:89:bc:7d:20:9b:56:00: d8:5e:bf:1f:d3:30:1d:cb:b7:2d:81:cb:6c:af:bd:82:02:f0: a9:87:1c:bc:61:ae:a0:eb:4b:75:ac:74:48:27:cf:63:bb:ec: cb:9f:5c:ab:e4:f9:12:5d:ee:7b:f9:22:03:1f:ab:3e:82:12: 50:39:2f:11:87:bb:10:dd:dc:5b:83:99:93:93:26:c1:85:98: 80:2a:ca:f3:8b:df:cc:50:6f:a4:82:a0:51:44:44:54:f6:5c: d3:27:9e:11:b9:c5:07:50:74:16:ad:69:dc:6f:e2:09:64:6f: 82:9d:89:52:ac:19:5f:a8:95:0f:0b:f5:10:3e:18:1b:c1:ec: 3b:d6:23:ea:ec:e6:08:34:e8:30:8d:ff:13:37:96:f5:4b:98: ec:bb:65:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTVBQTExMC8GA1UEBRMoMENGQ0NDNTk4MEY1N0U2QkM4NERGMTFCNEM1NzE5MzVE MjVEQUNDQTAeFw0yNDExMjIxOTM2MThaFw0yNDExMjkxOTM2MThaMBgxFjAUBgNV BAMTDTY3NDBkZDMzLWUxMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPkC3B3Zj8O28+u3BfUv0TbEfdhSbr+ePHXYj6bc5IMiSqCasOjJcWR4s8ei+g r3XMO7KVUwTwyeElS4KJccBxnJtkFBc+uumsS0Xsj2dc2ZxjAdO5zV+FhC8gAl7M Y66oJidhrCMy/GJWLWMD4ZfuMYztlpV/7MSKVIjGcm5Z3cJ/GGf3GZQ5mLN++s7W cLOe4fT4GToGyDpQbjTGdPSr2OR1CotNC6LnH7ZIuhvjDA+O/LWg5n1UoAzVPjSm MFXUmpmO+wc9VrxvUptK7K+CMP8dDXeKBM/K4o/LDgbmA32KejY2Fcq9qGQe7Kvt E9fOBRqDtrun+5+G+WTbQX4vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUohZmCVMl Ha2TbWnkGInSI0PPqEkwHwYDVR0jBBgwFoAUDPzMWYD1fmvITfEbTFcZNdJdrMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNUFBLzNFRkEyNDE0NjJF MDExRUFBNkQ1OUEyQ0M0RjlBRTAyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFB6TVdZRDFmbXZJVGZFYlRGY1pOZEpkck1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NUFBLzNFRkEyNDE0NjJFMDExRUFBNkQ1OUEyQ0M0RjlBRTAyL0RQek1XWUQxZm12 SVRmRWJURmNaTmRKZHJNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADk3IgbYCDmGmsK8ZSmBh9yBQDMnv2HODdUWTzpIjXWQJ3kge8Q40YUT cefg9cpnnsM8IPPWT7OBL2Ey4/czm3x8ibk1IqnQoxLOlq3L+6lD7nqq4VjQK8Im /kDuKhpBwtK8gfeyibx9IJtWANhevx/TMB3Lty2By2yvvYIC8KmHHLxhrqDrS3Ws dEgnz2O77MufXKvk+RJd7nv5IgMfqz6CElA5LxGHuxDd3FuDmZOTJsGFmIAqyvOL 38xQb6SCoFFERFT2XNMnnhG5xQdQdBatadxv4glkb4KdiVKsGV+olQ8L9RA+GBvB 7DvWI+rs5gg06DCN/xM3lvVLmOy7ZUE= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org