$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: MPpp3433u6qasE2NdDPUsuaiJIj5bcoMhMH7wXZ6fLM= Subject key identifier: 58:2D:F4:B7:02:B0:78:E4:A6:CA:99:ED:F4:F0:CB:05:84:6D:D1:A2 Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 0FE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 0FD3 Signing time: Fri 22 Nov 2024 17:28:14 +0000 Manifest this update: Fri 22 Nov 2024 17:28:13 +0000 Manifest next update: Fri 29 Nov 2024 17:28:13 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: XevhnU0miCbO+BrDqRdlPdv5O9iK2Fppj3tg6SOSpRs=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: 1xAA2p3bRzKtkuwJYgmnpWotzfIy6qgcGQhWEvGOqKo=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: KDtUJt1Jtjn2LNZNEN2QFLXYazsl0VQjLQGBBHjjEOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4070 (0xfe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Nov 22 17:28:13 2024 GMT Not After : Nov 29 17:28:13 2024 GMT Subject: CN=6740bf2e-8d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:03:54:b4:17:60:3d:eb:e7:f8:a0:02:56: 2d:a9:76:79:b1:d5:12:f6:42:95:47:d4:09:c5:1d: 5f:4d:3d:a0:cb:58:41:ed:7b:5a:b6:82:bd:c6:25: 55:49:65:f0:d8:ff:10:1d:68:9a:97:49:15:32:5b: 38:59:c2:56:8c:02:72:90:d0:9e:1b:ee:18:48:98: d6:05:65:30:6d:57:5f:ad:38:0a:e8:4a:2a:5e:cb: 0f:5a:61:b7:91:9b:9c:71:0a:9a:96:5e:21:ea:0c: 7f:3c:86:4c:61:69:66:64:fe:b6:10:b4:7f:81:5e: 0d:ba:13:15:65:19:eb:ee:e7:26:4e:5e:97:ef:27: 46:d4:74:18:71:dc:84:85:0c:ab:41:f2:98:21:f6: ac:d1:4e:7e:56:42:14:51:72:47:5e:57:e7:c2:67: 1b:09:a4:f0:56:6a:c8:62:87:04:e6:41:bd:20:da: 6f:7f:b8:25:c5:06:67:7e:d2:33:60:66:eb:c9:c0: 7e:b6:7e:2a:de:31:80:ed:fb:77:58:91:0e:8b:e0: 49:ad:b2:3d:b9:bc:cd:d8:81:f5:84:69:5d:93:0f: 5a:07:e0:88:f0:75:4c:08:54:f5:6a:87:a5:65:ab: 77:e9:79:3d:94:d7:98:5d:e9:4f:73:6b:01:19:12: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2D:F4:B7:02:B0:78:E4:A6:CA:99:ED:F4:F0:CB:05:84:6D:D1:A2 X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:82:83:95:99:52:7e:f1:f1:6b:d3:da:2d:6e:1e:d4:01:c0: c6:02:5f:bc:b3:38:e4:2e:e7:59:b0:f2:a8:e5:a1:d1:50:06: ed:e6:64:a1:61:30:48:83:86:e9:33:e9:84:ae:b1:4e:27:fe: b8:e4:95:1a:67:86:e0:b3:bf:92:a8:2b:a7:7a:ff:65:5c:97: d0:8b:7f:0e:a9:8b:2e:a0:c8:e3:19:ef:d2:05:5a:a7:c2:12: ce:27:d2:4e:8e:d8:86:c9:70:29:ed:3b:40:fc:d0:8e:da:7f: a6:89:c4:28:fc:df:a2:16:3b:f7:74:86:d0:63:60:f7:a7:9b: b9:bd:d4:79:93:ba:40:8f:9a:7a:15:6a:47:b3:60:61:3a:97: 3e:93:1a:2c:ba:f2:6b:0e:65:69:c5:a2:2a:38:07:ee:00:80: e7:7f:33:2f:1c:58:76:e5:8f:13:97:fa:67:a3:ca:0c:0a:35: 92:13:ab:05:66:99:f0:29:5a:fd:39:1f:2d:aa:f3:75:58:72: 84:a3:25:ea:90:21:57:67:c1:86:55:ee:f5:9c:40:14:c5:58: c6:cd:c9:61:7b:46:3d:3d:2a:20:30:16:a2:87:9c:cb:8d:ed: 72:51:04:5f:db:fa:36:dd:f0:e4:7f:d9:d6:a9:94:bc:58:39: 83:9a:ca:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjQxMTIyMTcyODEzWhcNMjQxMTI5MTcyODEzWjAYMRYwFAYD VQQDEw02NzQwYmYyZS04ZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ4DVLQXYD3r5/igAlYtqXZ5sdUS9kKVR9QJxR1fTT2gy1hB7XtatoK9xiVV SWXw2P8QHWial0kVMls4WcJWjAJykNCeG+4YSJjWBWUwbVdfrTgK6EoqXssPWmG3 kZuccQqall4h6gx/PIZMYWlmZP62ELR/gV4NuhMVZRnr7ucmTl6X7ydG1HQYcdyE hQyrQfKYIfas0U5+VkIUUXJHXlfnwmcbCaTwVmrIYocE5kG9INpvf7glxQZnftIz YGbrycB+tn4q3jGA7ft3WJEOi+BJrbI9ubzN2IH1hGldkw9aB+CI8HVMCFT1aoel Zat36Xk9lNeYXelPc2sBGRItPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgt9LcC sHjkpsqZ7fTwywWEbdGiMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFgoOVmVJ+8fFr09otbh7UAcDGAl+8szjkLudZsPKo5aHRUAbt5mSh YTBIg4bpM+mErrFOJ/645JUaZ4bgs7+SqCunev9lXJfQi38OqYsuoMjjGe/SBVqn whLOJ9JOjtiGyXAp7TtA/NCO2n+micQo/N+iFjv3dIbQY2D3p5u5vdR5k7pAj5p6 FWpHs2BhOpc+kxosuvJrDmVpxaIqOAfuAIDnfzMvHFh25Y8Tl/pno8oMCjWSE6sF ZpnwKVr9OR8tqvN1WHKEoyXqkCFXZ8GGVe71nEAUxVjGzclhe0Y9PSogMBaih5zL je1yUQRf2/o23fDkf9nWqZS8WDmDmso/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org