$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft File: dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft (raw, json) Hash identifier: MWBy0lozeFWrZMVmScMXb2llld1F0bWKMFpjuQko0O8= Subject key identifier: 28:3D:15:68:D8:C9:28:DF:D9:07:32:97:80:44:0D:3F:3C:D8:61:91 Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 Certificate issuer: /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft Manifest number: 0674 Signing time: Fri 22 Nov 2024 21:54:21 +0000 Manifest this update: Fri 22 Nov 2024 21:54:21 +0000 Manifest next update: Fri 29 Nov 2024 21:54:21 +0000 Files and hashes: 1: dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl (hash: 8kkIxf2zx+vY4oFP+T/26yL+K4BnnmI1W/FeQE08sic=) 2: 33EA4CE055AE11EBA5EFA876C4F9AE02.roa (hash: z83yYebf2sYxVFu5kCi6t2rocwUEw/IAoFmnGJ1jIIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724 Validity Not Before: Nov 22 21:54:21 2024 GMT Not After : Nov 29 21:54:21 2024 GMT Subject: CN=6740fd8d-4941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:0c:d9:2e:42:5b:7a:f0:4c:c0:e9:9e:3f: ad:0c:7e:59:be:4b:e2:7e:94:5d:11:31:c2:44:2a: dd:02:a1:0a:70:ad:8d:4f:4e:6f:19:98:e1:93:ad: a8:11:68:26:54:0f:da:76:17:15:cd:d5:45:60:9a: 1f:16:3a:a7:6c:8d:e4:35:6c:f3:57:11:73:51:46: f1:6f:36:97:bd:fe:a3:c0:b7:a6:2a:26:3d:d5:d4: b1:e5:c4:cb:f5:9b:a7:e8:01:2c:fd:1b:b3:7b:5b: ca:0c:8b:c7:c7:bb:7c:e0:2f:d9:a0:6d:43:27:0d: 29:55:53:6d:44:b7:6d:34:3d:18:d2:d0:c4:93:3e: 24:d7:7e:04:87:6e:69:26:a5:d6:2b:fc:36:4d:fa: 98:94:52:45:3c:98:c6:d4:0a:fc:91:9a:18:20:3e: 77:88:80:3b:2a:c9:de:91:33:70:b4:a6:d3:36:12: 6d:fe:f6:cc:3c:72:0f:85:b3:fe:38:c3:5b:26:2f: 43:f2:fc:bd:5d:2f:79:33:c8:1c:64:b6:d7:fe:b1: 8c:cc:7d:f2:30:26:e4:b3:9b:10:9c:aa:7a:30:51: 00:2c:a3:3b:33:a2:f7:5d:e6:90:29:34:ef:03:0e: f0:7c:39:c0:76:93:7d:b9:5d:20:18:11:a4:15:a9: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:15:68:D8:C9:28:DF:D9:07:32:97:80:44:0D:3F:3C:D8:61:91 X509v3 Authority Key Identifier: keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d4:b4:19:97:a7:ce:70:e6:4b:7c:a3:44:f9:3e:7d:38:c9: 25:00:6a:ad:11:06:23:e3:08:e5:7d:75:93:6c:6e:f6:15:89: 94:ba:2a:f5:64:f0:93:98:2f:cc:13:60:73:0b:86:53:8d:39: 6e:06:17:61:48:93:5f:91:d5:28:11:e9:6a:3b:a7:d7:8b:8e: 2b:cc:68:9f:db:5b:6c:fe:3b:a6:70:26:36:66:8e:c1:9a:06: a8:76:33:9d:8c:9c:c6:36:2d:aa:f0:70:28:d5:ac:dd:3a:85: da:ba:34:1e:23:ef:4c:cb:a5:d7:a1:6c:cf:f2:60:40:14:f3: 15:4e:22:4e:c9:1e:a6:78:4e:5d:8b:1a:ee:b3:f2:48:bd:e1: b0:20:41:12:90:31:b8:46:80:b5:0b:47:bc:10:96:2a:98:05: 4d:7e:5b:cf:ca:09:2f:61:34:26:39:f5:c2:93:ad:d7:e2:6d: 92:07:d3:4f:69:ed:a6:60:9a:2e:12:de:69:f6:60:c4:2e:d4: 55:a2:88:10:01:88:d8:cd:f5:41:ac:fd:bf:9d:8a:d3:35:1e: c8:32:0d:55:e1:50:c3:60:e7:23:b0:d0:9e:5e:83:fd:b6:4d: 0b:54:9b:e4:a4:e4:9c:a2:dc:ae:6b:12:8b:d1:88:64:1f:0a: 65:6e:56:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4 RTU3NzM3MjQwHhcNMjQxMTIyMjE1NDIxWhcNMjQxMTI5MjE1NDIxWjAYMRYwFAYD VQQDEw02NzQwZmQ4ZC00OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+YM2S5CW3rwTMDpnj+tDH5ZvkvifpRdETHCRCrdAqEKcK2NT05vGZjhk62o EWgmVA/adhcVzdVFYJofFjqnbI3kNWzzVxFzUUbxbzaXvf6jwLemKiY91dSx5cTL 9Zun6AEs/Ruze1vKDIvHx7t84C/ZoG1DJw0pVVNtRLdtND0Y0tDEkz4k134Eh25p JqXWK/w2TfqYlFJFPJjG1Ar8kZoYID53iIA7KsnekTNwtKbTNhJt/vbMPHIPhbP+ OMNbJi9D8vy9XS95M8gcZLbX/rGMzH3yMCbks5sQnKp6MFEALKM7M6L3XeaQKTTv Aw7wfDnAdpN9uV0gGBGkFamzlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg9FWjY ySjf2Qcyl4BEDT882GGRMB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1 OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzhBRS83MDcwQTBGMDU1OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2 TDFwWEM1bFJmS0NPVjNOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh1LQZl6fOcOZLfKNE+T59OMklAGqtEQYj4wjlfXWTbG72FYmUuir1 ZPCTmC/ME2BzC4ZTjTluBhdhSJNfkdUoEelqO6fXi44rzGif21ts/jumcCY2Zo7B mgaodjOdjJzGNi2q8HAo1azdOoXaujQeI+9My6XXoWzP8mBAFPMVTiJOyR6meE5d ixrus/JIveGwIEESkDG4RoC1C0e8EJYqmAVNflvPygkvYTQmOfXCk63X4m2SB9NP ae2mYJouEt5p9mDELtRVoogQAYjYzfVBrP2/nYrTNR7IMg1V4VDDYOcjsNCeXoP9 tk0LVJvkpOScotyuaxKL0YhkHwplblbY -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org