$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: hY6tWjHrnsuy7H4ia1jYvJfv6zAu6E13gH0XBr1we7k= Subject key identifier: F2:A0:8E:4D:36:84:A3:DD:AC:4B:B0:F5:C4:3C:E7:18:19:04:8B:97 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 0208 Signing time: Sat 23 Nov 2024 01:34:23 +0000 Manifest this update: Sat 23 Nov 2024 01:34:22 +0000 Manifest next update: Sat 30 Nov 2024 01:34:22 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: V0jaUAaHHCnfNlPnVTAavwVDnTVRvUowgoKpe2GKjSs=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Nov 23 01:34:22 2024 GMT Not After : Nov 30 01:34:22 2024 GMT Subject: CN=6741311f-daf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:ce:6b:bb:c1:72:6a:a4:d7:01:78:5c:91: 64:52:5d:94:4c:77:cc:f0:d5:9a:80:17:59:e9:17: bf:e0:34:66:3f:91:cf:f5:44:4c:f5:e4:d1:f2:b6: c7:9c:5b:1c:ef:72:29:19:ee:8a:ba:77:09:fc:cb: 85:36:f6:36:8b:f7:5f:f7:b9:bf:90:db:45:26:0a: 37:1d:12:35:11:1b:69:10:c3:3e:ee:77:68:70:2a: bc:67:0c:2b:8b:34:d8:03:b8:eb:d8:86:e1:3f:fe: df:fb:cf:a9:d5:ae:a5:51:e7:cf:e7:a5:7e:83:fa: c2:15:13:2f:0f:c2:ef:de:2c:2c:f2:97:28:13:82: a2:ca:59:56:01:00:a0:16:f4:3d:0f:41:32:9a:86: ae:93:90:db:2a:e8:7b:00:8c:a0:a9:35:08:9f:76: 10:32:b0:4d:c1:78:19:b3:ea:86:09:6c:9d:ad:44: d3:f6:0d:5b:58:0a:14:44:16:00:cd:79:1c:71:ce: ce:fc:c6:9d:fe:5b:b1:26:d1:98:36:1b:89:ca:42: 6b:5f:9d:c0:97:e0:b9:c2:c5:2f:49:50:34:82:7d: 7c:95:39:d5:e7:2d:7c:29:b6:b2:1f:ac:9d:36:fe: 47:fe:77:30:4e:e2:1a:eb:8f:81:a1:e6:30:34:9d: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:8E:4D:36:84:A3:DD:AC:4B:B0:F5:C4:3C:E7:18:19:04:8B:97 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c8:ef:e8:a6:d2:4d:92:c0:97:9d:ee:d5:3d:09:54:cd:5c: e1:86:d3:a2:b6:f1:fa:af:2e:c2:e4:fb:b2:fb:2c:1f:a5:47: 64:30:97:23:a8:95:95:5c:20:d2:72:87:a1:b3:78:ee:f3:50: 4a:25:6c:29:86:97:a1:d4:b7:69:5c:4d:c4:81:df:de:af:8e: a5:82:f0:92:b0:a9:3c:f1:27:9d:aa:b1:fb:56:9d:9d:9e:d5: d6:20:2b:b9:af:e8:0e:b9:e0:b0:d5:14:42:87:d6:fb:c2:b9: 49:c9:c3:16:bf:f5:5e:53:d8:9d:bd:e8:41:ea:7f:91:11:8e: 1b:0e:28:eb:85:3f:e1:f3:b6:16:4c:43:5e:af:17:3e:0f:05: 5b:b4:e8:2c:8b:a8:a5:31:27:84:8b:50:7e:ee:38:7c:15:d9: e5:a0:e4:ba:45:e5:a2:ce:1e:a6:80:91:11:bd:7f:69:7f:42: 70:1f:e5:c9:c9:38:70:0c:32:56:ad:09:2b:bd:b4:1d:57:63: 5b:af:d5:0e:58:3d:76:cc:54:b6:22:ab:77:0a:68:46:4d:58: 99:77:65:43:97:85:be:be:d0:89:09:4c:ea:a6:e2:bf:0b:c5: 47:c5:15:bb:28:9b:32:76:8e:c0:29:b1:1c:05:6b:14:86:41: d5:7f:fd:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjQxMTIzMDEzNDIyWhcNMjQxMTMwMDEzNDIyWjAYMRYwFAYD VQQDEw02NzQxMzExZi1kYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwijOa7vBcmqk1wF4XJFkUl2UTHfM8NWagBdZ6Re/4DRmP5HP9URM9eTR8rbH nFsc73IpGe6KuncJ/MuFNvY2i/df97m/kNtFJgo3HRI1ERtpEMM+7ndocCq8Zwwr izTYA7jr2IbhP/7f+8+p1a6lUefP56V+g/rCFRMvD8Lv3iws8pcoE4KiyllWAQCg FvQ9D0Eymoauk5DbKuh7AIygqTUIn3YQMrBNwXgZs+qGCWydrUTT9g1bWAoURBYA zXkccc7O/Mad/luxJtGYNhuJykJrX53Al+C5wsUvSVA0gn18lTnV5y18KbayH6yd Nv5H/ncwTuIa64+BoeYwNJ1PQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKgjk02 hKPdrEuw9cQ85xgZBIuXMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOyO/optJNksCXne7VPQlUzVzhhtOitvH6ry7C5Puy+ywfpUdkMJcj qJWVXCDScoehs3ju81BKJWwphpeh1LdpXE3Egd/er46lgvCSsKk88SedqrH7Vp2d ntXWICu5r+gOueCw1RRCh9b7wrlJycMWv/VeU9idvehB6n+REY4bDijrhT/h87YW TENerxc+DwVbtOgsi6ilMSeEi1B+7jh8FdnloOS6ReWizh6mgJERvX9pf0JwH+XJ yThwDDJWrQkrvbQdV2Nbr9UOWD12zFS2Iqt3CmhGTViZd2VDl4W+vtCJCUzqpuK/ C8VHxRW7KJsydo7AKbEcBWsUhkHVf/17 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:48 2024 by rpki-client on console-ams.rpki-client.org