$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: 0E+WU7H35nUVbse15Jah/7DzE9IU8YIyMJbqVWwpFho= Subject key identifier: 78:0C:A4:31:4B:B0:60:D9:D0:5F:38:25:E8:5F:B2:14:68:5F:E4:9D Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 04E4 Signing time: Wed 20 Nov 2024 23:17:56 +0000 Manifest this update: Wed 20 Nov 2024 23:17:55 +0000 Manifest next update: Wed 27 Nov 2024 23:17:55 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: gQ+1EFNJdTO5laQwDbrscOg7EBpquIH1RiXFjSmrsVI=) 2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: N3l8NbXI6PWZv8XLkMHP80swkTXCmSPPyHudla60h0Y=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: +s3RfgfZleOkFSX6tECNHJYojBeQ3ve3IeKnyvn0+N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Nov 20 23:17:55 2024 GMT Not After : Nov 27 23:17:55 2024 GMT Subject: CN=673e6e23-a19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:a1:f5:25:cd:16:94:10:42:8f:e7:8f:84: d9:32:47:6b:e3:d6:35:a3:45:22:8a:ff:b4:17:71: b3:24:c6:57:58:72:46:21:28:3f:57:f3:c2:d3:69: ec:66:ce:38:f8:79:38:79:8b:a4:97:f5:03:13:8e: 43:20:94:9e:ca:36:c7:d8:bf:67:39:6c:cc:d8:91: 1b:4b:d5:fa:4f:6e:e9:09:60:1e:07:54:1a:6f:43: 5a:0f:12:69:c6:af:95:71:97:ea:06:09:c6:4b:07: f2:f0:be:cd:49:82:53:b0:40:a2:b3:26:be:c5:c5: b2:02:6d:46:1f:e5:a8:48:ab:72:35:71:7e:b1:59: 1c:bf:19:f4:db:46:da:a6:14:12:4c:b3:76:c3:de: ba:5a:c8:b8:d3:88:2c:6c:42:20:69:f9:f4:58:e9: 23:e9:8a:eb:19:8f:0e:67:ab:75:2d:db:d2:3f:76: e1:7c:9b:ef:83:e1:99:32:64:3a:2f:7f:d4:f8:a0: 5c:b0:e3:62:26:04:81:68:fc:8f:f1:6f:18:da:b6: ac:ea:99:98:ed:4f:7c:67:64:e5:8f:50:3a:37:73: 37:9d:01:a1:f7:88:bb:3d:f3:a0:29:50:b0:62:3a: a7:9c:e6:17:d0:fd:59:6d:d8:08:5f:83:5c:2f:3e: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:A4:31:4B:B0:60:D9:D0:5F:38:25:E8:5F:B2:14:68:5F:E4:9D X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:24:46:a4:c8:a8:aa:03:d9:64:f9:d3:d6:fa:f4:62:24:19: 78:99:c7:67:84:f5:21:0f:d4:35:3e:49:74:c0:68:bd:82:f2: 1c:25:58:8e:42:de:f4:85:ab:b3:ac:43:ae:fd:c8:45:4a:87: c2:17:20:dc:9c:51:8c:5c:da:0d:d2:77:44:18:7b:8a:14:f4: 8e:2e:48:96:9c:cd:ed:8b:84:71:5c:86:cd:3a:d2:40:ea:7a: b0:44:8c:a2:a4:d6:5c:90:9e:2e:55:60:e9:7b:18:f0:7b:78: b7:9c:c0:7b:37:83:8c:8d:da:50:62:5a:f6:e8:c1:ba:10:99: ed:dc:aa:13:77:9c:5e:52:d2:82:49:be:2e:f1:20:76:13:b7: d1:8c:18:eb:54:85:24:f4:01:65:86:64:bd:6f:4d:24:94:3e: 3a:45:b8:e7:82:19:14:9b:a8:d8:97:67:c5:c3:42:ee:e3:4d: f7:6c:66:78:e5:34:d0:a0:75:6a:23:a6:5f:2f:22:de:21:2e: 41:5e:e9:66:00:5e:aa:8a:09:40:38:ec:ae:2d:4b:36:bc:c9: c9:01:c8:0c:e4:6f:86:5d:fb:e8:a7:5c:63:cd:f5:14:47:1a: b3:b5:6e:90:87:cc:76:90:89:8c:e7:be:a1:41:63:72:92:3d: 9e:64:ea:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjQxMTIwMjMxNzU1WhcNMjQxMTI3MjMxNzU1WjAYMRYwFAYD VQQDEw02NzNlNmUyMy1hMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCqh9SXNFpQQQo/nj4TZMkdr49Y1o0Uiiv+0F3GzJMZXWHJGISg/V/PC02ns Zs44+Hk4eYukl/UDE45DIJSeyjbH2L9nOWzM2JEbS9X6T27pCWAeB1Qab0NaDxJp xq+VcZfqBgnGSwfy8L7NSYJTsECisya+xcWyAm1GH+WoSKtyNXF+sVkcvxn020ba phQSTLN2w966Wsi404gsbEIgafn0WOkj6YrrGY8OZ6t1LdvSP3bhfJvvg+GZMmQ6 L3/U+KBcsONiJgSBaPyP8W8Y2ras6pmY7U98Z2Tlj1A6N3M3nQGh94i7PfOgKVCw YjqnnOYX0P1ZbdgIX4NcLz7ihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgMpDFL sGDZ0F84JehfshRoX+SdMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhJEakyKiqA9lk+dPW+vRiJBl4mcdnhPUhD9Q1Pkl0wGi9gvIcJViO Qt70hauzrEOu/chFSofCFyDcnFGMXNoN0ndEGHuKFPSOLkiWnM3ti4RxXIbNOtJA 6nqwRIyipNZckJ4uVWDpexjwe3i3nMB7N4OMjdpQYlr26MG6EJnt3KoTd5xeUtKC Sb4u8SB2E7fRjBjrVIUk9AFlhmS9b00klD46RbjnghkUm6jYl2fFw0Lu4033bGZ4 5TTQoHVqI6ZfLyLeIS5BXulmAF6qiglAOOyuLUs2vMnJAcgM5G+GXfvop1xjzfUU RxqztW6Qh8x2kImM576hQWNykj2eZOqz -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:01 2024 by rpki-client on console-ams.rpki-client.org