$ rpki-client -vvf rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft File: daF-q5BBtk2zdHHPtOv_WR6PaZM.mft (raw, json) Hash identifier: u1U64S+3MjUjvDLpK7J+UWwPJpyZpNbfwJKYjDvx+4I= Subject key identifier: 35:6F:FE:35:23:2A:DF:30:34:40:1A:B1:15:65:FF:14:73:98:D8:A4 Authority key identifier: 75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 Certificate issuer: /CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft Manifest number: 05EC Signing time: Fri 22 Nov 2024 15:06:49 +0000 Manifest this update: Fri 22 Nov 2024 15:06:49 +0000 Manifest next update: Fri 29 Nov 2024 15:06:49 +0000 Files and hashes: 1: daF-q5BBtk2zdHHPtOv_WR6PaZM.crl (hash: 0WNLN2rh40WJ8i6bu/YRDVpK8pmK1xvvPuNJPiFONF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D626/serialNumber=75A17EAB9041B64DB37471CFB4EBFF591E8F6993 Validity Not Before: Nov 22 15:06:49 2024 GMT Not After : Nov 29 15:06:49 2024 GMT Subject: CN=67409e09-ac1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:e7:ae:68:dd:cf:13:05:44:f2:c7:f1:f5: 9f:22:ea:2d:f4:93:c2:42:0e:25:6e:26:99:43:9f: 6a:e6:88:0e:61:cf:f9:ee:9e:a6:97:ea:5a:c7:12: 69:ce:00:56:a5:94:1d:21:dc:6a:84:32:5b:b6:f6: 50:8d:4b:b7:66:ba:5e:af:7f:56:1a:78:44:48:c4: bd:b5:55:70:47:5e:c2:22:ff:6a:3e:5c:ec:b2:c6: f6:af:c2:4b:42:a6:3e:4e:35:8e:21:b0:14:f6:45: 1d:6a:d0:77:43:ee:b8:47:a7:27:64:34:b1:e5:86: 13:95:ee:07:5c:d9:a5:7c:73:ab:8f:82:eb:ea:e3: b3:e6:9f:6a:85:3e:18:7f:da:87:88:b0:eb:97:65: 92:5f:da:e1:40:32:05:24:34:bd:91:7a:b2:2f:db: f6:b5:8b:5b:dc:2f:e2:5a:50:1e:b2:82:d2:70:c4: 6d:c6:b2:07:11:8d:84:cf:b3:b8:3b:75:87:5c:12: e3:37:3c:6b:8a:81:0f:37:9e:8d:32:3d:04:b0:b9: 60:d9:11:ba:f9:31:fe:5c:1a:9b:60:43:88:8b:3e: 4d:c7:b2:7c:bd:e0:09:13:f4:d6:24:91:28:10:35: b8:b7:70:b0:ea:de:be:e8:ca:56:42:60:12:96:33: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6F:FE:35:23:2A:DF:30:34:40:1A:B1:15:65:FF:14:73:98:D8:A4 X509v3 Authority Key Identifier: keyid:75:A1:7E:AB:90:41:B6:4D:B3:74:71:CF:B4:EB:FF:59:1E:8F:69:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daF-q5BBtk2zdHHPtOv_WR6PaZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D626/60081EAC8D7F11EB8D8BD60BC4F9AE02/daF-q5BBtk2zdHHPtOv_WR6PaZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e1:01:c4:f1:1a:7e:01:55:5e:4e:c6:5b:8f:19:74:2a:a0: 48:c0:cf:d8:a5:7d:5c:17:4d:a1:17:4c:46:54:f2:4c:cb:ed: 17:f7:40:b3:92:0b:d6:4c:23:ac:c8:9e:08:22:89:1d:c6:8a: 19:a8:d9:a9:58:12:15:bd:6a:2f:db:2b:40:1c:3a:7b:bb:d2: f2:83:09:87:9e:9d:9f:ec:b7:35:2e:d7:5c:06:bc:89:37:c6: 5f:89:1c:b2:d7:7b:0e:e7:df:c2:93:84:93:cb:54:b8:7e:2c: 02:e0:90:ee:67:e1:2f:58:4a:17:ec:cd:02:8f:65:3c:14:6f: 2e:0c:1e:08:fb:f3:81:2d:8e:c5:29:8e:1b:af:89:8a:24:3f: 67:e3:a5:a7:2c:38:05:8a:58:b8:7a:d8:f5:b3:66:9d:08:a7: 3d:c9:2d:e8:fb:0c:82:c0:01:3b:a2:20:05:1e:60:bb:b7:9e: 23:d4:25:b0:9d:1a:b0:b5:2e:fb:fe:b0:69:b1:7f:87:58:2c: 1b:3f:f4:a6:3c:d9:bb:38:e6:a8:1c:58:30:f1:df:cb:99:fc: 19:ed:8c:1f:2f:35:ae:0b:1f:c2:db:55:c7:a6:5e:65:37:d8: 12:33:54:ac:3c:19:26:ef:16:87:c5:73:93:6b:52:80:7e:55: b7:f2:ed:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2MjYxMTAvBgNVBAUTKDc1QTE3RUFCOTA0MUI2NERCMzc0NzFDRkI0RUJGRjU5 MUU4RjY5OTMwHhcNMjQxMTIyMTUwNjQ5WhcNMjQxMTI5MTUwNjQ5WjAYMRYwFAYD VQQDEw02NzQwOWUwOS1hYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujfnrmjdzxMFRPLH8fWfIuot9JPCQg4lbiaZQ59q5ogOYc/57p6ml+paxxJp zgBWpZQdIdxqhDJbtvZQjUu3Zrper39WGnhESMS9tVVwR17CIv9qPlzsssb2r8JL QqY+TjWOIbAU9kUdatB3Q+64R6cnZDSx5YYTle4HXNmlfHOrj4Lr6uOz5p9qhT4Y f9qHiLDrl2WSX9rhQDIFJDS9kXqyL9v2tYtb3C/iWlAesoLScMRtxrIHEY2Ez7O4 O3WHXBLjNzxrioEPN56NMj0EsLlg2RG6+TH+XBqbYEOIiz5Nx7J8veAJE/TWJJEo EDW4t3Cw6t6+6MpWQmASljPFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVv/jUj Kt8wNEAasRVl/xRzmNikMB8GA1UdIwQYMBaAFHWhfquQQbZNs3Rxz7Tr/1kej2mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDYyNi82MDA4MUVBQzhE N0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRrMnpkSEhQdE92X1dSNlBh Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhRi1xNUJCdGsyemRISFB0T3ZfV1I2UGFaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDYyNi82MDA4MUVBQzhEN0YxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kYUYtcTVCQnRr MnpkSEhQdE92X1dSNlBhWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe4QHE8Rp+AVVeTsZbjxl0KqBIwM/YpX1cF02hF0xGVPJMy+0X90Cz kgvWTCOsyJ4IIokdxooZqNmpWBIVvWov2ytAHDp7u9LygwmHnp2f7Lc1LtdcBryJ N8ZfiRyy13sO59/Ck4STy1S4fiwC4JDuZ+EvWEoX7M0Cj2U8FG8uDB4I+/OBLY7F KY4br4mKJD9n46WnLDgFili4etj1s2adCKc9yS3o+wyCwAE7oiAFHmC7t54j1CWw nRqwtS77/rBpsX+HWCwbP/SmPNm7OOaoHFgw8d/LmfwZ7YwfLzWuCx/C21XHpl5l N9gSM1SsPBkm7xaHxXOTa1KAflW38u1p -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org