$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: 4jEfV3utPHiv/bkwIc7oMoJvm3wHefOPTjNzRcZ0xzc= Subject key identifier: C8:13:1E:A2:34:A3:3C:91:99:28:2D:A6:FD:FF:C0:09:B0:3A:E7:8D Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 092D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 0922 Signing time: Fri 22 Nov 2024 20:03:50 +0000 Manifest this update: Fri 22 Nov 2024 20:03:50 +0000 Manifest next update: Fri 29 Nov 2024 20:03:50 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: 9QqbeXcqBSgnudPj7xx8wIZ+E3JxdV16B9Dz495trkc=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: 5CFKnjcy5F9IXxk31F+vn5LjvcxiJFwvGmhruhqdGmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2349 (0x92d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Nov 22 20:03:50 2024 GMT Not After : Nov 29 20:03:50 2024 GMT Subject: CN=6740e3a6-cea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:fc:6d:ad:d1:0e:5a:b5:de:ca:f3:10:d5: 88:0a:0c:33:e2:2e:03:83:a7:90:54:7b:50:bb:e7: b1:ed:b6:78:5a:1f:da:55:2e:06:d6:09:06:50:db: e9:bd:97:ca:02:b4:3a:41:66:68:e7:e4:1f:ca:3f: 12:04:c3:2f:70:34:c2:e5:a6:a3:11:9c:5e:e7:cf: 1e:24:a3:bd:4a:cc:d5:c6:7c:0c:dd:5f:8c:b2:36: b5:c9:7d:8a:53:8d:e8:13:f9:9c:72:e6:08:36:e2: d3:b1:c6:56:e5:f4:a9:9d:1c:3e:20:3e:9f:93:87: a6:d1:89:9b:3c:9e:88:55:a7:d0:25:a8:7a:4a:ff: c4:4e:e5:1f:8d:4c:0a:a0:f0:db:ea:c5:da:4a:75: 32:31:eb:7f:2a:07:e4:c2:99:32:8d:fe:38:20:20: 18:59:22:62:90:6f:e5:c6:3d:4e:34:b2:cf:e3:07: 98:f0:76:f6:0f:a6:40:56:df:c8:8f:44:53:72:a3: 63:d5:be:bd:f4:92:da:e7:67:28:1b:be:d9:aa:1a: 35:a2:3e:35:54:66:31:a2:fc:58:cc:fd:3d:d7:8e: e6:66:6e:ce:f9:82:ea:86:37:36:3b:12:3b:7d:56: b6:97:fa:70:48:6e:81:f8:00:45:ab:21:b6:c8:4f: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:13:1E:A2:34:A3:3C:91:99:28:2D:A6:FD:FF:C0:09:B0:3A:E7:8D X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d7:96:34:29:a9:0a:46:b5:d8:0c:dd:b1:50:87:a4:2f:78: 8f:45:07:80:30:5e:41:2b:10:76:e3:76:38:d9:0c:0c:a3:74: 9b:4e:0f:63:86:e1:97:c4:d3:60:93:f5:4b:ec:e6:b6:02:08: 85:84:20:24:aa:90:59:28:e4:6b:9f:cb:06:66:81:e7:bf:e2: 17:37:e8:1d:58:a1:13:61:d8:ad:7b:bc:9e:7d:62:19:0a:64: 06:aa:06:3b:89:6f:f9:82:a0:9f:53:a8:b2:53:ef:2a:79:73: b6:1d:7d:69:70:51:15:9d:22:5f:77:9b:27:bd:79:f4:3d:32: 0b:3a:ea:84:00:06:3f:4c:5d:20:04:77:f4:0d:59:f0:d7:a7: 3d:bb:34:83:39:ec:d4:a1:07:e8:dc:de:13:d5:0f:22:43:ff: 80:45:a4:ee:b1:38:b6:3a:99:c4:dd:c1:ae:9f:c5:5a:1b:10: c4:15:18:22:4e:18:54:2e:58:73:f4:29:bb:6c:37:75:aa:94: b1:cd:62:e7:d5:8a:72:dc:c9:e4:b1:67:8c:90:f6:db:07:3c: f8:e9:f8:0c:5c:59:76:d1:b7:ba:35:bc:0a:f5:fa:59:be:03: 7d:b2:b1:3b:f9:a7:17:ef:c2:52:08:69:35:2a:4c:2b:be:b2: a9:ec:90:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjQxMTIyMjAwMzUwWhcNMjQxMTI5MjAwMzUwWjAYMRYwFAYD VQQDEw02NzQwZTNhNi1jZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCz8ba3RDlq13srzENWICgwz4i4Dg6eQVHtQu+ex7bZ4Wh/aVS4G1gkGUNvp vZfKArQ6QWZo5+Qfyj8SBMMvcDTC5aajEZxe588eJKO9SszVxnwM3V+Msja1yX2K U43oE/mccuYINuLTscZW5fSpnRw+ID6fk4em0YmbPJ6IVafQJah6Sv/ETuUfjUwK oPDb6sXaSnUyMet/Kgfkwpkyjf44ICAYWSJikG/lxj1ONLLP4weY8Hb2D6ZAVt/I j0RTcqNj1b699JLa52coG77Zqho1oj41VGYxovxYzP09147mZm7O+YLqhjc2OxI7 fVa2l/pwSG6B+ABFqyG2yE/QvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgTHqI0 ozyRmSgtpv3/wAmwOueNMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK15Y0KakKRrXYDN2xUIekL3iPRQeAMF5BKxB243Y42QwMo3SbTg9j huGXxNNgk/VL7Oa2AgiFhCAkqpBZKORrn8sGZoHnv+IXN+gdWKETYdite7yefWIZ CmQGqgY7iW/5gqCfU6iyU+8qeXO2HX1pcFEVnSJfd5snvXn0PTILOuqEAAY/TF0g BHf0DVnw16c9uzSDOezUoQfo3N4T1Q8iQ/+ARaTusTi2OpnE3cGun8VaGxDEFRgi ThhULlhz9Cm7bDd1qpSxzWLn1Ypy3MnksWeMkPbbBzz46fgMXFl20be6NbwK9fpZ vgN9srE7+acX78JSCGk1KkwrvrKp7JCP -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org