$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft File: DAUkO371VhHkCk279_5-kSCSplI.mft (raw, json) Hash identifier: sFNkICCeBSec+quaF3G8E6nJLC2pMKobq8lBo95XObU= Subject key identifier: B0:D8:27:C0:1F:E2:00:21:ED:F6:EF:CC:58:16:DE:25:0B:C7:3C:AE Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 Certificate issuer: /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft Manifest number: 28 Signing time: Sat 23 Nov 2024 05:42:14 +0000 Manifest this update: Sat 23 Nov 2024 05:42:13 +0000 Manifest next update: Sat 30 Nov 2024 05:42:13 +0000 Files and hashes: 1: DAUkO371VhHkCk279_5-kSCSplI.crl (hash: dfsF/WKzoLwmVSH/UefZpz7UK9fPU3YWwZcL3EQWLcw=) 2: 04679AF66F3411EF833F4C23C4F9AE02.roa (hash: qmtBKcItw4zamP5piJpoDvSbfjr++V2rBsBO/gGjHLk=) 3: 04EFECDA6F3411EF833F4C23C4F9AE02.roa (hash: m4m6GQSMRy4MQoGkNVYPRI/N4+53Wjd6ulyG+SySVqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652 Validity Not Before: Nov 23 05:42:13 2024 GMT Not After : Nov 30 05:42:13 2024 GMT Subject: CN=67416b35-7e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:c3:ff:eb:b6:65:9d:00:63:95:37:71:d5: f9:dd:93:96:9d:1f:ba:81:14:a6:a9:86:46:e4:ba: 81:c1:b2:26:46:c6:16:a3:9b:35:59:f8:98:5c:72: 12:c4:fb:6b:c7:ae:76:9e:65:3a:0a:30:8c:c4:6e: 6e:56:99:53:f4:9e:a2:e1:10:20:77:2e:9b:66:70: f7:55:d8:2b:db:66:29:32:17:2a:ac:65:ed:41:56: e4:08:eb:8b:a1:f4:47:8a:e1:18:67:8f:1a:c4:34: bb:c2:de:0b:75:cd:16:4c:70:ce:7a:b1:4f:7c:a9: c8:c0:4f:ee:6b:24:33:37:15:7f:4d:ca:bf:ed:d6: 58:f6:9e:c4:d5:ae:9f:dc:fd:41:de:8e:86:e6:24: 5b:ed:db:26:1c:b3:e0:01:71:cc:7b:26:16:ca:08: d0:cc:9a:93:80:82:d4:91:87:6c:a2:ca:20:57:f3: 75:c0:b2:53:6b:0e:28:a8:9b:bc:9b:7f:f1:65:f2: 16:f7:c9:36:fe:01:1c:46:f5:fa:09:ae:e7:df:c1: da:19:b4:39:4d:ab:90:e9:35:10:41:be:6a:d0:0b: f5:59:58:49:00:23:f6:3b:1c:21:99:58:cc:5f:81: d5:d2:3c:9b:cf:24:f2:bd:e7:5f:80:34:6b:80:f0: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D8:27:C0:1F:E2:00:21:ED:F6:EF:CC:58:16:DE:25:0B:C7:3C:AE X509v3 Authority Key Identifier: keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cb:6a:d1:31:33:2a:eb:26:2a:e8:21:b0:63:4c:3b:57:e5: a7:76:76:b4:44:f6:8a:bc:8a:fd:09:24:dc:4b:a0:ee:80:83: 6b:97:6d:60:ad:b7:94:c1:9f:33:5c:b2:cf:3a:17:df:a5:1f: 5a:96:c9:0b:66:52:cc:c8:fb:89:12:a8:a9:c2:60:31:13:c4: af:b9:70:91:e7:ee:f5:c9:c9:13:a2:50:ec:b7:7f:de:d7:dd: d1:9c:eb:14:c3:55:4c:f8:f6:7d:df:b4:68:27:0a:e8:a2:b2: e4:c5:2f:45:26:10:b1:9a:8d:1f:1e:08:85:f7:86:c9:00:7d: d3:93:52:4e:e7:0a:a7:1b:0d:e4:c9:cc:2d:07:ec:15:2a:55: a5:c9:71:8b:39:ae:7e:f0:8f:7f:f5:51:c6:45:35:74:86:5d: e0:03:4f:ea:77:8c:e9:b8:b6:ab:f1:dc:44:52:13:4a:a5:20: 16:5f:d8:9d:dc:c6:69:3b:f3:70:01:da:c1:8f:cf:38:92:14: ac:9e:11:75:04:d6:3f:b4:08:4e:c4:b5:82:d6:cf:65:6f:d3: c3:96:8e:3e:79:5a:2a:47:e4:32:07:96:80:5e:a8:0e:95:1b: b3:38:43:ef:9c:86:0b:b5:aa:dc:b6:a3:36:e3:d0:e5:d6:e6: b7:a6:88:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QThFMjExMC8GA1UEBRMoMEMwNTI0M0I3RUY1NTYxMUU0MEE0REJCRjdGRTdFOTEy MDkyQTY1MjAeFw0yNDExMjMwNTQyMTNaFw0yNDExMzAwNTQyMTNaMBgxFjAUBgNV BAMTDTY3NDE2YjM1LTdlOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw+cP/67ZlnQBjlTdx1fndk5adH7qBFKaphkbkuoHBsiZGxhajmzVZ+JhcchLE +2vHrnaeZToKMIzEbm5WmVP0nqLhECB3LptmcPdV2CvbZikyFyqsZe1BVuQI64uh 9EeK4RhnjxrENLvC3gt1zRZMcM56sU98qcjAT+5rJDM3FX9Nyr/t1lj2nsTVrp/c /UHejobmJFvt2yYcs+ABccx7JhbKCNDMmpOAgtSRh2yiyiBX83XAslNrDiiom7yb f/Fl8hb3yTb+ARxG9foJruffwdoZtDlNq5DpNRBBvmrQC/VZWEkAI/Y7HCGZWMxf gdXSPJvPJPK951+ANGuA8LrlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsNgnwB/i ACHt9u/MWBbeJQvHPK4wHwYDVR0jBBgwFoAUDAUkO371VhHkCk279/5+kSCSplIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBOEUyL0E0NTFEOTg0NkYy RDExRUZCOEYzOTI4MEM0RjlBRTAyL0RBVWtPMzcxVmhIa0NrMjc5XzUta1NDU3Bs SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREFVa08zNzFWaEhrQ2syNzlfNS1rU0NTcGxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB OEUyL0E0NTFEOTg0NkYyRDExRUZCOEYzOTI4MEM0RjlBRTAyL0RBVWtPMzcxVmhI a0NrMjc5XzUta1NDU3BsSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvLatExMyrrJiroIbBjTDtX5ad2drRE9oq8iv0JJNxLoO6Ag2uXbWCt t5TBnzNcss86F9+lH1qWyQtmUszI+4kSqKnCYDETxK+5cJHn7vXJyROiUOy3f97X 3dGc6xTDVUz49n3ftGgnCuiisuTFL0UmELGajR8eCIX3hskAfdOTUk7nCqcbDeTJ zC0H7BUqVaXJcYs5rn7wj3/1UcZFNXSGXeADT+p3jOm4tqvx3ERSE0qlIBZf2J3c xmk783AB2sGPzziSFKyeEXUE1j+0CE7EtYLWz2Vv08OWjj55WipH5DIHloBeqA6V G7M4Q++chgu1qty2ozbj0OXW5remiOg= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org