$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: cmi3zVrgebqqGS1HN4vU8JiUV2nysUMUOCmUGHEiFCk= Subject key identifier: E5:DE:D6:B6:91:FB:FC:02:A5:CE:C0:88:78:0F:29:95:2F:09:1A:3C Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0C4D Signing time: Fri 22 Nov 2024 18:11:13 +0000 Manifest this update: Fri 22 Nov 2024 18:11:13 +0000 Manifest next update: Fri 29 Nov 2024 18:11:13 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: h8FnNAWWwfEUXppa5MN+KUXygiXWMmQgsqojx77eHXE=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: 82U9PEBppNYTLTnVZfk76Z3820ETIwuj4FadkxaLsM8=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: Xkhnhp/YYrsg/8iOJitqtcK1opPWFPFJhxWePm8Stnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Nov 22 18:11:13 2024 GMT Not After : Nov 29 18:11:13 2024 GMT Subject: CN=6740c941-e379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:63:a7:fc:97:35:f1:2f:d8:d3:4a:cb:fd:b2: 00:e5:e1:dc:de:7c:ac:ff:43:24:b9:1a:69:c4:98: 33:f5:d7:89:7a:31:6f:54:35:33:9b:e6:8b:d0:57: bc:19:18:7b:ed:c4:92:4f:4d:11:a4:b3:5e:9b:6a: a7:a1:ed:cc:7a:ad:05:04:84:84:83:da:6c:18:fa: ff:78:83:38:92:d1:b5:39:e9:14:a5:21:c2:a8:bf: a4:8b:a0:84:9b:13:ec:e7:14:d5:43:04:40:26:01: 74:7b:a0:07:54:7e:65:e7:af:fb:0d:7d:d7:8c:2d: b4:f2:f3:ca:f8:58:60:3a:6b:0c:96:30:63:21:06: db:0b:87:16:9c:b1:2c:e9:9f:62:50:c2:ba:b0:50: c9:24:54:ce:12:b9:ec:00:4a:22:82:2a:de:63:c5: ca:93:0c:83:f5:4c:fd:3f:d7:ae:b3:af:23:b4:d9: e9:1a:5e:4b:19:ed:ed:61:a6:0b:e9:54:91:98:0d: 63:82:7b:6d:d3:c4:b0:1b:71:0d:da:1f:65:ab:68: d9:01:68:3d:ba:8f:74:76:0f:97:a9:eb:69:20:89: 86:df:dc:ee:d3:75:a2:07:ff:6f:4c:44:e1:56:83: a3:67:26:83:4b:ef:23:b3:24:16:53:17:e9:f1:82: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DE:D6:B6:91:FB:FC:02:A5:CE:C0:88:78:0F:29:95:2F:09:1A:3C X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:5f:47:82:22:44:8d:05:15:5c:40:d5:3f:c2:38:6a:1c: b5:36:e7:ca:50:1a:03:c5:fd:4f:8e:db:a2:64:b2:19:a0:54: 0d:9f:1a:d3:ee:00:c9:f1:51:96:cd:73:b5:6a:3b:f2:56:66: dd:26:c6:29:19:2b:b3:86:c3:bd:f8:0f:9f:64:2f:be:08:d1: df:fb:68:33:a6:25:53:1d:64:10:eb:52:bf:75:db:9a:d4:f4: 55:7b:d9:88:f9:ec:09:40:e2:82:83:f1:c0:2e:e0:19:07:b7: ca:e3:11:d8:cb:15:d1:7b:54:f1:49:60:e6:7c:d0:87:15:06: 2f:72:31:63:57:69:2f:d9:c9:4a:26:d3:fd:11:48:50:64:1f: 67:13:d0:e8:50:da:b3:e0:a6:a5:75:d4:bf:e8:62:ca:6f:e6: 8e:98:d0:27:7f:1e:0b:64:d2:a8:cc:d3:6e:9d:a2:f9:3c:ec: 24:7d:4c:e1:2f:d7:66:63:98:5b:f8:ee:20:22:5d:5c:07:45: 27:55:dc:66:bd:ef:5c:d2:85:08:ef:3a:a7:d8:26:d7:a2:85: ef:6e:34:f4:50:db:da:0d:1f:af:59:55:3e:6f:cc:23:23:68: 00:3a:2a:5e:e3:30:bf:45:df:cf:f6:7a:14:c3:6d:8e:c3:32: 69:48:5a:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjQxMTIyMTgxMTEzWhcNMjQxMTI5MTgxMTEzWjAYMRYwFAYD VQQDEw02NzQwYzk0MS1lMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9mOn/Jc18S/Y00rL/bIA5eHc3nys/0MkuRppxJgz9deJejFvVDUzm+aL0Fe8 GRh77cSST00RpLNem2qnoe3Meq0FBISEg9psGPr/eIM4ktG1OekUpSHCqL+ki6CE mxPs5xTVQwRAJgF0e6AHVH5l56/7DX3XjC208vPK+FhgOmsMljBjIQbbC4cWnLEs 6Z9iUMK6sFDJJFTOErnsAEoigireY8XKkwyD9Uz9P9eus68jtNnpGl5LGe3tYaYL 6VSRmA1jgntt08SwG3EN2h9lq2jZAWg9uo90dg+XqetpIImG39zu03WiB/9vTETh VoOjZyaDS+8jsyQWUxfp8YJQvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXe1raR +/wCpc7AiHgPKZUvCRo8MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg919HgiJEjQUVXEDVP8I4ahy1NufKUBoDxf1PjtuiZLIZoFQNnxrT 7gDJ8VGWzXO1ajvyVmbdJsYpGSuzhsO9+A+fZC++CNHf+2gzpiVTHWQQ61K/ddua 1PRVe9mI+ewJQOKCg/HALuAZB7fK4xHYyxXRe1TxSWDmfNCHFQYvcjFjV2kv2clK JtP9EUhQZB9nE9DoUNqz4KalddS/6GLKb+aOmNAnfx4LZNKozNNunaL5POwkfUzh L9dmY5hb+O4gIl1cB0UnVdxmve9c0oUI7zqn2CbXooXvbjT0UNvaDR+vWVU+b8wj I2gAOipe4zC/Rd/P9noUw22OwzJpSFpj -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org