$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: JSi6oo2zWiGWooQnHAyX7WJu5XQJkmF/r1QaUX/iN4M= Subject key identifier: FC:5C:81:61:8E:21:90:A9:A9:9F:6B:5B:FE:3D:E9:A7:B0:23:01:6B Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: B5 Signing time: Sat 23 Nov 2024 04:33:26 +0000 Manifest this update: Sat 23 Nov 2024 04:33:25 +0000 Manifest next update: Sat 30 Nov 2024 04:33:25 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: EU8STKEjkf3Fg7g6M9+oMs5axAHvhB+z+GcUnGBw6Y8=) 2: 860FE244E7F211EEA82C4340C4F9AE02.roa (hash: tJJTcGQ2m2pshzd0U/DwfkAv50Vcbcpb9AnTouLN/sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Nov 23 04:33:25 2024 GMT Not After : Nov 30 04:33:25 2024 GMT Subject: CN=67415b15-a284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:f3:ed:a8:5f:95:cf:a7:af:bb:26:ec:eb: 28:c2:32:b8:8c:01:59:d7:c0:d6:25:43:bd:93:45: df:99:18:3c:ac:0a:bb:b7:8e:0e:b4:d6:12:8c:40: 75:fb:d9:20:22:37:32:2d:40:a5:40:58:c5:43:f5: e1:17:f5:f2:83:08:c1:9c:78:4c:17:f4:5e:73:11: d4:d6:91:e5:6d:99:d3:6d:c8:0f:25:71:54:35:19: e8:6b:4f:9a:93:61:b7:09:2f:3f:b2:b3:24:73:b9: f7:46:26:a5:18:8a:6c:2d:cc:59:a2:12:f8:6d:7e: 7d:b1:6d:25:bf:7a:64:d2:8b:77:73:0e:e8:98:12: 8b:e8:9e:ec:b4:a7:2d:6d:4f:37:1b:62:05:0c:df: 46:dc:e5:54:cf:26:13:51:a6:3f:b2:ac:d4:28:2d: 54:94:09:09:23:05:02:fd:f0:fb:f9:f4:84:d9:db: 10:4f:42:e2:61:c8:b2:99:8d:5e:e8:34:81:d6:c0: 90:78:ad:44:2c:16:85:61:c0:ac:7b:51:ed:ef:39: 26:b2:eb:ea:73:39:af:1a:ef:26:12:29:19:d9:36: 63:07:92:9d:be:b3:f5:e4:1f:30:47:c5:82:ea:b4: 6a:c2:88:b6:e3:56:b2:11:fe:29:29:7b:90:50:72: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:81:61:8E:21:90:A9:A9:9F:6B:5B:FE:3D:E9:A7:B0:23:01:6B X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bb:38:cc:ee:83:67:ff:58:6a:39:9b:89:6b:cb:41:13:8d: a6:ad:68:30:42:53:2e:f7:bf:cf:be:79:43:ff:25:04:f2:26: 18:bc:c9:17:cc:8c:73:2e:b9:82:86:74:bd:b0:aa:2f:25:78: a2:61:0d:19:ca:d4:22:32:21:c9:81:e8:d2:2a:b8:6a:a5:16: 44:5b:67:86:14:73:36:b2:e6:d5:76:12:ea:41:cc:57:30:5a: f4:54:2f:70:98:58:84:0c:cf:40:62:a7:ce:35:b8:42:82:71: 70:5d:25:d7:93:c7:a6:5c:73:06:42:65:eb:f8:a6:e9:cd:ae: 70:ca:38:1a:89:78:93:35:75:0a:6f:20:37:46:f2:69:5d:fe: 56:18:be:9f:6c:df:5d:c5:32:57:5a:08:eb:a7:22:48:70:26: b5:b8:d4:55:50:47:06:34:12:46:0e:2c:13:5f:b1:c7:b6:c3: 85:34:12:02:d4:d5:59:01:f3:06:8b:b1:a2:2c:a1:75:6b:dc: b9:dd:32:64:53:fd:11:8a:ce:d1:96:b8:6f:f5:1d:b8:63:29: 20:aa:53:5b:69:f2:77:ad:1c:8f:a0:4e:b3:98:b2:16:84:90: 06:3b:98:67:48:1f:65:12:25:bd:27:53:3a:cd:75:75:4e:32: 55:07:7d:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjQxMTIzMDQzMzI1WhcNMjQxMTMwMDQzMzI1WjAYMRYwFAYD VQQDEw02NzQxNWIxNS1hMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjHz7ahflc+nr7sm7OsowjK4jAFZ18DWJUO9k0XfmRg8rAq7t44OtNYSjEB1 +9kgIjcyLUClQFjFQ/XhF/XygwjBnHhMF/RecxHU1pHlbZnTbcgPJXFUNRnoa0+a k2G3CS8/srMkc7n3RialGIpsLcxZohL4bX59sW0lv3pk0ot3cw7omBKL6J7stKct bU83G2IFDN9G3OVUzyYTUaY/sqzUKC1UlAkJIwUC/fD7+fSE2dsQT0LiYciymY1e 6DSB1sCQeK1ELBaFYcCse1Ht7zkmsuvqczmvGu8mEikZ2TZjB5KdvrP15B8wR8WC 6rRqwoi241ayEf4pKXuQUHJFnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxcgWGO IZCpqZ9rW/496aewIwFrMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2uzjM7oNn/1hqOZuJa8tBE42mrWgwQlMu97/PvnlD/yUE8iYYvMkX zIxzLrmChnS9sKovJXiiYQ0ZytQiMiHJgejSKrhqpRZEW2eGFHM2subVdhLqQcxX MFr0VC9wmFiEDM9AYqfONbhCgnFwXSXXk8emXHMGQmXr+Kbpza5wyjgaiXiTNXUK byA3RvJpXf5WGL6fbN9dxTJXWgjrpyJIcCa1uNRVUEcGNBJGDiwTX7HHtsOFNBIC 1NVZAfMGi7GiLKF1a9y53TJkU/0Ris7Rlrhv9R24YykgqlNbafJ3rRyPoE6zmLIW hJAGO5hnSB9lEiW9J1M6zXV1TjJVB318 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:20 2024 by rpki-client on console-ams.rpki-client.org