$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: wJ0UMJdsZwSzSIpqmJtWHZmrkWFYgqPv/1cK2ABY7i0= Subject key identifier: DF:92:CD:53:4B:68:DE:6E:00:8E:10:81:EA:99:03:56:8A:5E:44:92 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 1F9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1820 Signing time: Wed 20 Nov 2024 17:16:48 +0000 Manifest this update: Wed 20 Nov 2024 17:16:47 +0000 Manifest next update: Wed 27 Nov 2024 17:16:47 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: HzqahzPePvIh/Q1JFkV85CoIuoA/I5ER/7qXnPvHkg8=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: zrGhz5eTWvxDs7l8u0FFEcHmthdaKI1r05igm+ZZOCA=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: 8vFyR44qzve6eQFGrf+0iU1ZgE7HJhnti0y5mu5nwao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8095 (0x1f9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Nov 20 17:16:47 2024 GMT Not After : Nov 27 17:16:47 2024 GMT Subject: CN=673e197f-c9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:29:c2:96:9c:8b:0c:f4:71:67:7a:28:fa: ad:ab:e6:8a:e7:31:0e:0f:dd:e8:e8:bc:88:18:bf: 9e:80:11:ce:49:d1:99:e0:52:a9:5a:ef:28:c2:e6: f9:d7:53:0b:2f:7c:07:e4:60:21:49:1b:5e:98:e9: fc:36:7e:a5:49:b2:3c:59:8d:b8:3f:a8:01:18:d0: 4b:72:ed:b9:8c:c7:6c:9f:e6:7c:41:a2:80:51:97: 91:39:14:af:3a:12:b6:dd:b6:0c:52:83:26:a9:12: e1:62:fe:85:23:8f:e6:52:7b:c9:3c:91:ab:ac:de: b9:e5:9f:b9:7d:26:35:3e:fd:d9:4d:c1:a1:78:94: 4a:68:c4:1a:71:45:75:41:a1:1d:e3:57:bb:64:e0: 7b:0b:cd:fd:a7:41:86:9d:7a:e8:37:fb:a5:2f:ea: 33:8e:01:93:17:68:97:15:9f:51:81:cf:0a:9b:60: 66:d1:20:15:57:a8:05:8a:64:d8:d8:c8:80:6f:48: 6d:ff:3b:49:6a:f8:dc:3d:57:a5:5a:41:a4:7c:0a: 33:cd:db:26:71:44:b8:cd:39:69:c7:a3:7e:58:ee: bc:a5:89:3a:f6:7c:fc:59:f9:25:92:f6:2e:89:88: d0:70:b1:7a:cd:d0:6c:15:66:0a:58:80:d9:7a:3c: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:92:CD:53:4B:68:DE:6E:00:8E:10:81:EA:99:03:56:8A:5E:44:92 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:03:77:d9:4f:da:b7:d4:14:0a:bf:5c:8b:73:8e:36:72:c2: 58:99:b7:90:6c:40:ab:c6:09:6c:a6:d2:b9:87:ec:54:8f:6f: 6b:fa:08:19:bc:43:8d:be:0f:d0:60:c4:9f:60:a1:73:3a:27: 1b:51:4b:71:0d:28:0f:69:83:ab:cd:ab:43:80:6a:1f:37:76: f8:e5:54:2b:ae:b7:81:27:50:2b:92:7d:bb:c4:37:15:b5:07: d3:ea:c3:7b:e0:d4:c0:f9:18:d7:e4:f8:49:1f:e3:97:a4:f2: 17:2b:18:0b:d8:c4:b2:87:f1:ef:05:fd:61:46:3e:dc:10:10: 05:82:fc:26:6f:56:7c:0b:aa:7f:c3:04:e8:79:9a:b7:81:75: 17:65:da:b4:f0:8b:14:6a:d6:d9:83:e3:a4:4a:ad:24:45:6c: a4:ee:61:c9:e0:f7:a7:b8:34:58:2f:26:46:ed:69:29:23:f6: af:73:24:5c:af:c4:b0:9d:68:4f:04:03:e9:f2:7e:c7:8b:29: cf:a8:15:62:5e:69:86:46:6c:d2:e7:e1:3a:3a:57:94:e8:a7: 74:6a:ec:5d:bf:aa:02:2b:36:2e:c5:5e:0e:0e:71:83:7d:1d: 2b:93:e0:b3:fe:22:be:02:5e:25:93:7a:43:6e:5e:77:60:54: d2:21:38:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjQxMTIwMTcxNjQ3WhcNMjQxMTI3MTcxNjQ3WjAYMRYwFAYD VQQDEw02NzNlMTk3Zi1jOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyIpwpaciwz0cWd6KPqtq+aK5zEOD93o6LyIGL+egBHOSdGZ4FKpWu8owub5 11MLL3wH5GAhSRtemOn8Nn6lSbI8WY24P6gBGNBLcu25jMdsn+Z8QaKAUZeRORSv OhK23bYMUoMmqRLhYv6FI4/mUnvJPJGrrN655Z+5fSY1Pv3ZTcGheJRKaMQacUV1 QaEd41e7ZOB7C839p0GGnXroN/ulL+ozjgGTF2iXFZ9Rgc8Km2Bm0SAVV6gFimTY 2MiAb0ht/ztJavjcPVelWkGkfAozzdsmcUS4zTlpx6N+WO68pYk69nz8WfklkvYu iYjQcLF6zdBsFWYKWIDZejwXmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+SzVNL aN5uAI4QgeqZA1aKXkSSMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlA3fZT9q31BQKv1yLc442csJYmbeQbECrxglsptK5h+xUj29r+ggZ vEONvg/QYMSfYKFzOicbUUtxDSgPaYOrzatDgGofN3b45VQrrreBJ1Arkn27xDcV tQfT6sN74NTA+RjX5PhJH+OXpPIXKxgL2MSyh/HvBf1hRj7cEBAFgvwmb1Z8C6p/ wwToeZq3gXUXZdq08IsUatbZg+OkSq0kRWyk7mHJ4PenuDRYLyZG7WkpI/avcyRc r8SwnWhPBAPp8n7HiynPqBViXmmGRmzS5+E6OleU6Kd0auxdv6oCKzYuxV4ODnGD fR0rk+Cz/iK+Al4lk3pDbl53YFTSITgJ -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:02 2024 by rpki-client on console-fra.rpki-client.org