$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: 2ZmqFgnUjZLEAPyRAa+TF8VQAthCd/MvvjzA+ygsux0= Subject key identifier: E1:FF:7F:BE:7D:4E:0A:C4:00:7E:B2:C6:0D:DC:D2:29:4D:CC:45:19 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0BEA Signing time: Fri 22 Nov 2024 18:24:19 +0000 Manifest this update: Fri 22 Nov 2024 18:24:18 +0000 Manifest next update: Fri 29 Nov 2024 18:24:18 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: cM+NA8CqDCQqPFbs+3+/hiWcLl2AtUWlwSgxQZ4Gv0M=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2GXsJ3lmpDTCyJ0+6RHbUPHuhr06/ng834HAohqlZ5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Nov 22 18:24:18 2024 GMT Not After : Nov 29 18:24:18 2024 GMT Subject: CN=6740cc52-4777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c2:4d:d6:e0:a4:dd:a5:cd:09:be:c5:4c:ea: 92:be:b6:a9:74:1b:e2:9d:e0:f7:d2:32:6e:45:50: 0c:f9:16:4e:6b:3d:be:66:52:2c:b5:94:70:d0:4c: 4d:dd:cb:3d:37:ee:3a:80:03:74:ef:4c:ba:56:1a: 9a:c8:91:17:6b:0d:ce:c2:9b:d4:6b:ea:77:75:ff: e6:bd:53:22:7e:3f:49:5d:9d:51:41:5c:85:7b:0d: c5:0f:45:98:89:2b:ab:4f:d4:bd:1d:43:f4:06:70: 41:2f:8c:29:09:7d:96:97:be:5f:5b:f2:b8:38:75: 3c:a8:5b:cc:d7:0f:77:1d:f7:68:70:e4:2d:39:01: fd:be:c8:5d:80:7d:99:7f:6e:05:24:7b:a0:7e:85: 09:3b:24:dc:52:df:4c:ba:b6:a2:87:76:51:19:5e: b1:7d:ee:93:88:7a:ba:d5:30:b3:3b:71:af:35:37: 8e:7d:22:3f:13:96:da:b4:08:1e:f8:b2:bb:da:4d: 61:7d:ea:3e:5f:8c:c3:51:ef:24:f4:91:65:94:36: c6:d3:0b:52:4c:44:18:4d:cb:35:a2:7e:7f:a9:2f: 97:5b:82:12:92:0f:49:94:02:93:66:e8:c8:cc:01: 85:91:af:60:29:88:b5:0c:ef:5e:f5:c6:ff:f1:a2: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FF:7F:BE:7D:4E:0A:C4:00:7E:B2:C6:0D:DC:D2:29:4D:CC:45:19 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:4c:38:51:79:63:e9:5b:79:2f:35:8f:b0:31:05:6a:be:8b: 2c:a1:e9:6e:f9:28:5f:6c:87:3f:e6:b7:f1:04:fa:38:11:40: 6a:1f:ef:81:2f:ab:0b:f6:94:d1:85:e3:6f:1e:80:fa:d6:65: 64:05:95:3c:77:9d:b7:1b:9c:f2:2d:c9:36:63:06:36:43:af: fc:cd:8f:8c:e4:f6:9e:12:22:cd:b1:0c:30:cb:39:32:e7:d7: b7:f1:56:c3:20:39:7f:9c:06:3a:f2:66:98:62:24:31:d9:34: 4d:b8:5e:34:91:56:e7:08:fa:3d:7d:00:0a:a9:44:12:2b:62: 4b:95:44:fc:b5:14:ec:05:89:27:7c:e9:6f:cd:e5:e2:16:57: 18:ba:29:4a:49:33:01:bf:6f:d4:58:2e:45:4c:37:ed:6d:29: aa:a5:d1:e0:10:75:1d:1e:04:8d:d0:a9:c5:52:f4:ac:e0:50: 6c:c2:38:99:13:cf:40:69:7a:e6:f2:43:5b:97:c2:1e:13:33: 55:ae:c0:25:47:15:2c:d2:9e:2b:93:9b:61:30:b5:ae:3d:6f: 46:98:6b:88:ae:b6:5d:17:4d:ad:b2:5d:ff:d9:15:f5:b5:7a: 87:58:33:f0:43:29:1a:89:b8:82:88:6b:5f:b3:59:bf:6a:a2: fa:2e:d0:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjQxMTIyMTgyNDE4WhcNMjQxMTI5MTgyNDE4WjAYMRYwFAYD VQQDEw02NzQwY2M1Mi00Nzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18JN1uCk3aXNCb7FTOqSvrapdBvineD30jJuRVAM+RZOaz2+ZlIstZRw0ExN 3cs9N+46gAN070y6VhqayJEXaw3OwpvUa+p3df/mvVMifj9JXZ1RQVyFew3FD0WY iSurT9S9HUP0BnBBL4wpCX2Wl75fW/K4OHU8qFvM1w93HfdocOQtOQH9vshdgH2Z f24FJHugfoUJOyTcUt9Muraih3ZRGV6xfe6TiHq61TCzO3GvNTeOfSI/E5batAge +LK72k1hfeo+X4zDUe8k9JFllDbG0wtSTEQYTcs1on5/qS+XW4ISkg9JlAKTZujI zAGFka9gKYi1DO9e9cb/8aIt8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH/f759 TgrEAH6yxg3c0ilNzEUZMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3TDhReWPpW3kvNY+wMQVqvossoelu+ShfbIc/5rfxBPo4EUBqH++B L6sL9pTRheNvHoD61mVkBZU8d523G5zyLck2YwY2Q6/8zY+M5PaeEiLNsQwwyzky 59e38VbDIDl/nAY68maYYiQx2TRNuF40kVbnCPo9fQAKqUQSK2JLlUT8tRTsBYkn fOlvzeXiFlcYuilKSTMBv2/UWC5FTDftbSmqpdHgEHUdHgSN0KnFUvSs4FBswjiZ E89AaXrm8kNbl8IeEzNVrsAlRxUs0p4rk5thMLWuPW9GmGuIrrZdF02tsl3/2RX1 tXqHWDPwQykaibiCiGtfs1m/aqL6LtCV -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org