$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: fWLfcsBMnrLKKRI4qkY/VRx8qZBWrUUMl9u4hQruNB8= Subject key identifier: D2:0C:CF:6D:EE:8F:F6:5C:CA:42:29:8E:A4:BB:EB:C2:3A:6D:9D:30 Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 342F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 3429 Signing time: Fri 22 Nov 2024 14:48:32 +0000 Manifest this update: Fri 22 Nov 2024 14:48:31 +0000 Manifest next update: Fri 29 Nov 2024 14:48:31 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: cR7VdlTV8TD/y58e65QuVvrEDHQQ+3qt30YKJlqfBa0=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: 2qvXU+tp2d+3MZx3p0J67Vu1ntJd9jwcAIOzjZKqJZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13359 (0x342f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: Nov 22 14:48:31 2024 GMT Not After : Nov 29 14:48:31 2024 GMT Subject: CN=674099bf-fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:42:ed:e1:f5:65:84:7d:72:25:7f:94:c6: 8a:18:4f:c6:11:8e:4b:7f:ba:b8:84:93:2a:21:0a: 10:a2:c6:09:1e:87:45:e2:99:2f:6c:48:1b:7c:29: 23:f2:5e:fb:cf:f5:04:37:cd:22:fc:ed:3a:b2:69: f4:ad:7f:c2:40:2f:98:b2:de:85:e4:ad:15:36:f5: eb:e8:8b:99:be:ef:71:33:25:4c:d2:d3:58:ed:31: 68:7f:61:f4:c2:5b:cc:ee:70:a5:5b:1a:40:fe:dc: 26:0a:2a:da:09:0d:14:e3:05:3c:4a:bc:20:4a:dd: 82:ce:e6:b9:0e:dd:f3:f0:25:19:fc:86:4d:5d:0c: 86:c9:b6:15:5e:36:a1:8c:ff:75:ce:24:13:91:c9: 77:8f:7e:63:58:95:e9:28:8e:ce:62:0e:19:eb:5c: ac:94:ab:80:a0:cb:28:67:93:af:de:27:bb:3b:cc: ec:24:c8:58:4f:bd:d6:96:60:a7:3a:fa:ef:f0:ae: b7:d9:77:08:3e:59:a6:c8:22:c1:8a:07:91:e2:e9: 57:de:f7:5e:dc:0a:a8:7c:94:25:92:39:2d:df:f5: dd:ed:e2:91:48:df:ff:30:41:1b:81:e2:75:90:58: fd:9f:7b:f2:bd:72:20:06:4a:74:90:c1:9d:5c:3e: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:CF:6D:EE:8F:F6:5C:CA:42:29:8E:A4:BB:EB:C2:3A:6D:9D:30 X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:95:90:07:b7:b4:5f:5c:bc:e5:a0:07:42:9a:c9:eb:e5:34: 56:b1:d8:49:c1:e3:6c:1d:14:bf:14:44:53:60:e7:03:83:ac: 6f:28:f8:75:e7:25:ba:e2:b5:d7:e4:c4:70:fe:84:f9:12:6d: f2:5d:91:8b:81:fa:81:f8:77:61:54:52:7a:5e:82:b0:64:7f: 9e:3e:d9:b2:7c:35:b1:c5:95:d7:a3:49:d5:74:65:c0:7b:f6: 55:a8:67:08:4c:d3:34:17:b6:aa:f4:d1:e5:a0:e5:90:be:cf: bf:15:a3:ca:d8:cc:ca:4a:b2:af:03:9e:88:a9:cd:7d:a6:35: 13:a0:75:8f:28:47:da:ab:fe:5b:9f:ad:29:4e:be:1b:34:33: 5c:ee:5f:e9:54:4c:54:59:a4:f4:28:58:7b:f1:ba:58:ef:f7: b9:05:3b:e9:0d:76:09:31:45:ea:27:64:28:dd:f9:72:e0:a7: 83:27:fd:1c:e4:dd:44:2c:e5:1a:59:47:22:3b:b8:7d:36:82: d1:1f:02:be:45:2f:57:fe:35:9f:f5:b6:1b:4c:6f:f6:82:8c: 92:d6:07:4a:ed:8e:7c:f1:53:52:0a:ea:2d:ce:cb:8b:84:bf: 5b:d7:b3:10:1e:e5:06:15:d3:53:32:3f:08:39:59:a1:28:4b: 21:af:06:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjQxMTIyMTQ0ODMxWhcNMjQxMTI5MTQ0ODMxWjAYMRYwFAYD VQQDEw02NzQwOTliZi1mZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0R5C7eH1ZYR9ciV/lMaKGE/GEY5Lf7q4hJMqIQoQosYJHodF4pkvbEgbfCkj 8l77z/UEN80i/O06smn0rX/CQC+Yst6F5K0VNvXr6IuZvu9xMyVM0tNY7TFof2H0 wlvM7nClWxpA/twmCiraCQ0U4wU8SrwgSt2Czua5Dt3z8CUZ/IZNXQyGybYVXjah jP91ziQTkcl3j35jWJXpKI7OYg4Z61yslKuAoMsoZ5Ov3ie7O8zsJMhYT73WlmCn Ovrv8K632XcIPlmmyCLBigeR4ulX3vde3AqofJQlkjkt3/Xd7eKRSN//MEEbgeJ1 kFj9n3vyvXIgBkp0kMGdXD44bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIMz23u j/ZcykIpjqS768I6bZ0wMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtlZAHt7RfXLzloAdCmsnr5TRWsdhJweNsHRS/FERTYOcDg6xvKPh1 5yW64rXX5MRw/oT5Em3yXZGLgfqB+HdhVFJ6XoKwZH+ePtmyfDWxxZXXo0nVdGXA e/ZVqGcITNM0F7aq9NHloOWQvs+/FaPK2MzKSrKvA56Iqc19pjUToHWPKEfaq/5b n60pTr4bNDNc7l/pVExUWaT0KFh78bpY7/e5BTvpDXYJMUXqJ2Qo3fly4KeDJ/0c 5N1ELOUaWUciO7h9NoLRHwK+RS9X/jWf9bYbTG/2goyS1gdK7Y588VNSCuotzsuL hL9b17MQHuUGFdNTMj8IOVmhKEshrwbK -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org