$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: W6036zUFNeoOwNuKiqrf3ZsoKmDJTpXfp+SEEOWiIUw= Subject key identifier: D2:F6:62:AA:28:C8:17:23:C7:E6:ED:B3:CD:95:15:4F:6C:FB:34:B3 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 03F9 Signing time: Sat 23 Nov 2024 00:07:47 +0000 Manifest this update: Sat 23 Nov 2024 00:07:46 +0000 Manifest next update: Sat 30 Nov 2024 00:07:46 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: u5pMv8KG9+Gy+vezego/YjsJY6tWzJFL4OSg34oh11Q=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: roXdyWanhEz1VmVRl+7k+hRwHYExNJ739SbYutF/VAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Nov 23 00:07:46 2024 GMT Not After : Nov 30 00:07:46 2024 GMT Subject: CN=67411cd3-e8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:0b:46:66:85:77:73:46:47:f8:b4:31:f9: 69:16:71:39:a4:be:87:17:97:ce:22:8f:44:73:d8: 90:41:31:fb:77:e0:cf:46:03:dd:d0:96:80:ee:fb: 78:60:43:dc:e0:aa:19:b1:97:eb:ba:e9:a1:9f:6a: 64:c9:5b:95:72:93:1c:5d:8b:13:4e:48:5d:89:82: 84:5e:f4:1e:8e:5f:1f:de:be:d6:4b:97:4a:80:05: 6f:10:f1:8a:83:3b:a6:2d:cc:e4:b4:8a:23:c0:c0: 80:34:a6:f2:60:b9:45:fc:84:83:da:c0:7a:fa:3d: 1f:af:f3:cc:f2:24:93:d0:95:72:26:c2:31:d1:bd: f7:f5:c8:15:8e:d6:24:08:93:3a:56:bc:4d:ca:48: 62:74:c1:5b:8c:76:04:66:d8:2f:25:ba:34:13:bb: e5:8b:58:22:41:94:f1:f7:99:2e:3c:a6:17:70:fb: 51:bf:7b:06:ef:4c:66:7f:ba:09:44:18:60:2b:de: 9c:31:42:9a:c4:8d:ea:26:f1:72:40:e5:03:db:ae: 5b:98:cd:13:31:4f:34:a4:f9:c8:1e:b0:d3:18:52: 8a:27:52:d1:3f:71:98:30:63:5d:67:7a:ca:67:50: 7c:4e:0c:5c:19:ae:63:5a:31:3e:e5:93:53:fa:be: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:62:AA:28:C8:17:23:C7:E6:ED:B3:CD:95:15:4F:6C:FB:34:B3 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:de:56:ee:c1:c3:29:0c:07:77:11:b0:ff:7e:fb:2e:19:92: 94:e0:15:cc:9a:dc:89:09:99:b7:58:33:aa:47:f7:05:4c:95: 3f:76:29:af:10:7c:6b:21:34:a3:9a:6b:35:5b:4c:69:61:a8: 53:bd:6b:43:dd:94:ac:f0:db:8b:91:eb:ba:0b:b4:49:d1:f7: 84:69:b5:bb:5e:98:69:39:87:f9:06:6c:d3:0a:55:7f:9e:55: 8d:c2:7a:34:18:4d:7e:f7:77:eb:99:a3:bd:c4:f1:43:ba:2b: ac:2b:6f:e6:ec:b1:47:e3:40:1b:13:a5:dd:fe:46:79:cf:12: 72:16:e9:e1:40:bf:e5:14:5d:68:a2:ac:80:17:48:65:93:c3: dc:1e:83:d7:b6:94:27:12:bb:f3:3e:bc:0e:2c:17:26:bb:04: 25:ef:8d:1d:6c:81:30:ab:e1:ef:a1:33:97:77:2c:5a:be:e5: 62:3b:12:0f:38:2f:33:40:38:f7:a7:f5:48:fc:2f:26:a5:d2: c1:69:9e:04:f3:e8:d1:17:77:b3:d4:c0:b8:e1:52:a3:0e:ed: 2e:73:8e:27:ec:cb:13:7e:dd:eb:73:ae:af:65:22:ee:df:d8: a5:dc:63:b5:14:f7:f2:27:e8:f6:04:23:39:a1:a1:97:49:cb: be:ed:70:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjQxMTIzMDAwNzQ2WhcNMjQxMTMwMDAwNzQ2WjAYMRYwFAYD VQQDEw02NzQxMWNkMy1lOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSULRmaFd3NGR/i0MflpFnE5pL6HF5fOIo9Ec9iQQTH7d+DPRgPd0JaA7vt4 YEPc4KoZsZfruumhn2pkyVuVcpMcXYsTTkhdiYKEXvQejl8f3r7WS5dKgAVvEPGK gzumLczktIojwMCANKbyYLlF/ISD2sB6+j0fr/PM8iST0JVyJsIx0b339cgVjtYk CJM6VrxNykhidMFbjHYEZtgvJbo0E7vli1giQZTx95kuPKYXcPtRv3sG70xmf7oJ RBhgK96cMUKaxI3qJvFyQOUD265bmM0TMU80pPnIHrDTGFKKJ1LRP3GYMGNdZ3rK Z1B8TgxcGa5jWjE+5ZNT+r7eKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL2Yqoo yBcjx+bts82VFU9s+zSzMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn3lbuwcMpDAd3EbD/fvsuGZKU4BXMmtyJCZm3WDOqR/cFTJU/dimv EHxrITSjmms1W0xpYahTvWtD3ZSs8NuLkeu6C7RJ0feEabW7XphpOYf5BmzTClV/ nlWNwno0GE1+93frmaO9xPFDuiusK2/m7LFH40AbE6Xd/kZ5zxJyFunhQL/lFF1o oqyAF0hlk8PcHoPXtpQnErvzPrwOLBcmuwQl740dbIEwq+HvoTOXdyxavuViOxIP OC8zQDj3p/VI/C8mpdLBaZ4E8+jRF3ez1MC44VKjDu0uc44n7MsTft3rc66vZSLu 39il3GO1FPfyJ+j2BCM5oaGXScu+7XAL -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org