$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: Xi0Ed/S913Jml05pDTab0Vi+67zZY1q3PWRPaMNEuvQ= Subject key identifier: 20:66:A5:48:59:3B:F9:11:96:A4:9D:87:A7:46:DE:F2:77:1A:F3:D6 Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 6F Signing time: Thu 21 Nov 2024 05:05:34 +0000 Manifest this update: Thu 21 Nov 2024 05:05:34 +0000 Manifest next update: Thu 28 Nov 2024 05:05:34 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: QNmGsN5gXgOpb2a2Rbz420tiXtX5j8qWXZ+YPsc3ejs=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: KtwKCiu1tgQ6R6+i3JU5soTLFnUBFXS8yd45yO6BoNc=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: s7o1AVwqwtRLydyEtYjNo04BCkqu6ThzcBNfODjnDVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Nov 21 05:05:34 2024 GMT Not After : Nov 28 05:05:34 2024 GMT Subject: CN=673ebf9e-548d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:11:d4:37:8e:c7:df:74:44:75:2e:31:d5: 3c:98:9e:c3:95:e0:2e:9c:93:c6:35:1d:c7:e0:03: 9d:77:9a:35:0f:1d:c9:f1:64:82:a5:6f:d6:69:48: b4:b5:02:72:c8:2f:a0:72:17:a2:83:b9:6f:99:be: 7b:ab:94:7a:6e:34:3a:c6:38:09:e7:11:99:6e:7f: e6:2f:37:80:56:9b:a3:33:7b:5b:63:81:1f:e2:48: d1:ad:9e:f0:d7:8c:ba:50:d4:1e:64:88:d5:b1:be: 2b:a0:35:b7:0e:71:b8:9e:5e:6f:93:cc:d2:41:39: 3d:ef:f6:b8:e8:9f:1e:69:21:01:49:de:ed:c0:72: 20:f1:f9:06:03:df:be:46:d5:76:d9:c4:60:1f:23: 20:94:0b:07:53:93:fe:1a:5e:fd:6d:16:02:a6:85: 73:3c:9f:91:92:1c:2f:0d:57:e2:a8:4c:38:c0:81: 74:6a:0f:98:37:93:f2:fb:93:5f:1b:89:6e:0b:48: 79:93:ca:85:f0:19:93:c7:f2:1e:b8:49:70:9f:f6: ae:dc:27:06:33:47:0b:6b:5d:b7:ef:74:94:06:5c: 28:76:98:5f:90:cc:08:62:c3:22:2d:7b:d7:ce:21: 39:ea:6b:67:a6:0c:66:24:cf:94:60:dd:3f:86:d6: 2e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:66:A5:48:59:3B:F9:11:96:A4:9D:87:A7:46:DE:F2:77:1A:F3:D6 X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7b:79:74:9f:7f:5f:ab:81:5c:8d:49:27:f9:71:c8:bb:e1: 31:a1:fe:64:ee:75:92:07:8b:74:f7:38:9e:b8:81:7f:ac:63: 6f:77:17:1f:25:c6:f7:7f:ab:86:aa:58:8c:89:d4:7b:60:7a: e0:19:77:25:12:11:cb:24:d5:b6:f2:77:ad:da:e4:b9:a8:a3: 72:7f:c7:15:b7:b5:5c:b3:7d:94:0c:97:eb:c1:36:d3:84:9b: c3:6f:4c:f2:09:37:3d:47:e6:7a:77:32:af:8c:8c:66:03:cf: 7c:6d:28:4e:b4:c0:27:5d:95:56:d1:f3:56:f6:ac:68:11:93: f6:ec:93:86:99:7a:2e:75:e4:fc:2a:03:09:8a:37:ac:b1:b5: 53:6e:bb:f5:24:c7:84:a3:6a:17:89:22:39:84:3b:5e:68:2a: 7d:39:d1:d6:dd:17:3b:8a:46:3a:0a:ed:36:e3:c5:02:94:b6: c1:87:c5:e4:a8:48:9d:98:ea:7c:dd:c9:41:29:b0:97:7f:d5: 91:d1:af:6f:d6:6d:cc:ac:33:34:54:62:7d:fe:6d:6b:f0:6b: 0a:69:6c:19:42:a8:48:7f:43:fc:0c:6b:39:d9:fa:29:09:9c: c1:8a:21:14:bd:77:8e:78:04:d1:83:bd:b5:68:f5:5f:56:31: 43:e5:3e:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE N0Q4NzExMC8GA1UEBRMoQTQzMTgzRUNDNjUwQjg1NzBENjhGN0Q0MTJBNEYwMDE0 REE4QjlDNDAeFw0yNDExMjEwNTA1MzRaFw0yNDExMjgwNTA1MzRaMBgxFjAUBgNV BAMTDTY3M2ViZjllLTU0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH3BHUN47H33REdS4x1TyYnsOV4C6ck8Y1HcfgA513mjUPHcnxZIKlb9ZpSLS1 AnLIL6ByF6KDuW+ZvnurlHpuNDrGOAnnEZluf+YvN4BWm6Mze1tjgR/iSNGtnvDX jLpQ1B5kiNWxviugNbcOcbieXm+TzNJBOT3v9rjonx5pIQFJ3u3AciDx+QYD375G 1XbZxGAfIyCUCwdTk/4aXv1tFgKmhXM8n5GSHC8NV+KoTDjAgXRqD5g3k/L7k18b iW4LSHmTyoXwGZPH8h64SXCf9q7cJwYzRwtrXbfvdJQGXCh2mF+QzAhiwyIte9fO ITnqa2emDGYkz5Rg3T+G1i6TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIGalSFk7 +RGWpJ2Hp0be8nca89YwHwYDVR0jBBgwFoAUpDGD7MZQuFcNaPfUEqTwAU2oucQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3RDg3LzE4RjYzNzMwMTJE NjExRUY4NEUzNjQxRUM0RjlBRTAyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3Vj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcERHRDdNWlF1RmNOYVBmVUVxVHdBVTJvdWNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 RDg3LzE4RjYzNzMwMTJENjExRUY4NEUzNjQxRUM0RjlBRTAyL3BER0Q3TVpRdUZj TmFQZlVFcVR3QVUyb3VjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJ7eXSff1+rgVyNSSf5cci74TGh/mTudZIHi3T3OJ64gX+sY293Fx8l xvd/q4aqWIyJ1HtgeuAZdyUSEcsk1bbyd63a5Lmoo3J/xxW3tVyzfZQMl+vBNtOE m8NvTPIJNz1H5np3Mq+MjGYDz3xtKE60wCddlVbR81b2rGgRk/bsk4aZei515Pwq AwmKN6yxtVNuu/Ukx4SjaheJIjmEO15oKn050dbdFzuKRjoK7TbjxQKUtsGHxeSo SJ2Y6nzdyUEpsJd/1ZHRr2/WbcysMzRUYn3+bWvwawppbBlCqEh/Q/wMaznZ+ikJ nMGKIRS9d454BNGDvbVo9V9WMUPlPkc= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org