$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: kbL1VVJudX0rZkpcTOMs5Bp1hBLoc6TpvljmZAQczIQ= Subject key identifier: 88:F3:92:62:86:30:36:43:65:E8:25:93:5A:6D:2B:8A:C4:74:22:49 Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 10EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 10E2 Signing time: Mon 02 Dec 2024 17:15:00 +0000 Manifest this update: Mon 02 Dec 2024 17:14:59 +0000 Manifest next update: Mon 09 Dec 2024 17:14:59 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: g9f9u8Y5I7M8OHPVG0wwsRju+pbqaWGRj8HJdKujkpA=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: gFAOXeGkc2eCk0nFhSOjgbpqiUaf2WF1/qXSm8cRYI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Dec 2024 17:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: Dec 2 17:14:59 2024 GMT Not After : Dec 9 17:14:59 2024 GMT Subject: CN=674deb13-9644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:1e:f0:f4:cd:93:6d:07:48:21:32:9a:08: 19:7c:4e:0d:b6:7f:65:10:81:cd:f1:a6:2d:f3:6c: 94:57:8e:73:eb:5e:ea:63:3c:49:bc:be:3d:c0:49: a1:2c:31:f6:aa:2e:e7:43:a3:5e:84:7a:1f:8b:c8: 89:d9:63:ae:1e:b6:e9:b0:83:90:01:32:a2:cd:24: fe:b2:22:f0:11:54:4f:cf:d4:9f:97:7f:4b:d7:46: 18:99:31:a1:74:5f:6c:65:ed:e2:ce:ef:c6:70:24: c1:f4:01:fd:a7:63:0a:6e:11:db:fd:45:1f:ef:89: 08:ed:96:ab:73:71:0e:f4:29:2c:9d:2d:26:04:96: ca:e9:2f:c2:4b:8a:3b:b7:af:9b:18:7c:a4:24:fd: 8f:6f:a9:af:7d:42:a3:46:4e:c1:a2:22:51:0f:87: 7c:38:a3:a4:17:a6:91:a2:36:e9:35:a5:49:fd:be: d9:ac:4a:38:e6:f3:b7:77:e1:58:2c:e3:3c:fe:72: 00:0f:c0:9a:37:6c:7f:ba:ff:95:95:d0:c2:fc:e5: 45:12:f2:e0:a9:6d:bd:36:c2:57:ee:40:2a:23:41: 0f:95:f7:aa:e5:c7:33:ea:c8:db:f8:0b:91:03:19: d7:38:76:d5:45:88:d3:52:04:da:f4:26:db:21:79: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F3:92:62:86:30:36:43:65:E8:25:93:5A:6D:2B:8A:C4:74:22:49 X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ad:e9:0e:1e:e0:91:08:a7:cc:a4:19:63:17:0c:7f:d4:33: ce:76:a1:49:71:78:d2:ae:ba:ba:11:71:42:90:f6:35:ee:4f: 8a:fa:89:c5:3d:d5:b4:63:a2:a7:48:13:a3:22:7c:c0:57:3f: 82:40:e4:03:0f:24:9c:1b:45:75:fb:59:99:d9:ec:00:d9:23: 67:67:df:27:6a:22:19:63:26:8f:1b:91:a7:52:b8:14:8c:89: b7:59:47:20:6a:80:6a:94:a1:c5:7b:2e:a4:0b:c8:a8:4e:5a: c8:15:bd:3d:8d:c2:03:c8:9f:60:76:88:b5:f4:57:bd:81:83: a9:f9:6e:03:9d:67:35:1d:01:5b:5e:10:b4:10:b5:fc:6e:51: 87:48:f5:84:63:a6:90:44:30:c1:4e:48:cc:44:e8:72:df:7b: 1c:13:a2:31:d7:48:56:3d:ac:3b:9e:95:55:a8:77:62:70:bd: 82:eb:6a:0d:bc:04:90:f5:02:ca:c7:aa:1a:83:58:56:d2:71: e8:77:ef:3a:6f:5f:44:fd:a8:fe:bf:4a:eb:02:fd:03:b1:51: d3:e2:ec:11:06:07:99:6f:2b:50:1a:2c:31:40:91:5b:c0:04: 7e:2d:bf:48:02:9d:c3:cd:36:70:3d:75:95:02:29:93:07:ea: 55:3e:f1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjQxMjAyMTcxNDU5WhcNMjQxMjA5MTcxNDU5WjAYMRYwFAYD VQQDEw02NzRkZWIxMy05NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywYe8PTNk20HSCEymggZfE4Ntn9lEIHN8aYt82yUV45z617qYzxJvL49wEmh LDH2qi7nQ6NehHofi8iJ2WOuHrbpsIOQATKizST+siLwEVRPz9Sfl39L10YYmTGh dF9sZe3izu/GcCTB9AH9p2MKbhHb/UUf74kI7Zarc3EO9CksnS0mBJbK6S/CS4o7 t6+bGHykJP2Pb6mvfUKjRk7BoiJRD4d8OKOkF6aRojbpNaVJ/b7ZrEo45vO3d+FY LOM8/nIAD8CaN2x/uv+VldDC/OVFEvLgqW29NsJX7kAqI0EPlfeq5ccz6sjb+AuR AxnXOHbVRYjTUgTa9CbbIXl0OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjzkmKG MDZDZeglk1ptK4rEdCJJMB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADrekOHuCRCKfMpBljFwx/1DPOdqFJcXjSrrq6EXFCkPY17k+K+onF PdW0Y6KnSBOjInzAVz+CQOQDDyScG0V1+1mZ2ewA2SNnZ98naiIZYyaPG5GnUrgU jIm3WUcgaoBqlKHFey6kC8ioTlrIFb09jcIDyJ9gdoi19Fe9gYOp+W4DnWc1HQFb XhC0ELX8blGHSPWEY6aQRDDBTkjMROhy33scE6Ix10hWPaw7npVVqHdicL2C62oN vASQ9QLKx6oag1hW0nHod+86b19E/aj+v0rrAv0DsVHT4uwRBgeZbytQGiwxQJFb wAR+Lb9IAp3DzTZwPXWVAimTB+pVPvHe -----END CERTIFICATE-----Generated at Mon Dec 2 20:25:00 2024 by rpki-client on console-ams.rpki-client.org