$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft File: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json) Hash identifier: WaqvzvK+wtaj9OGCNI3VFKcWIbkdTYqNcW4i9AZQTY0= Subject key identifier: 3E:CE:E0:9A:6B:E6:4B:0A:EE:A7:33:F5:7C:6E:29:EC:10:8C:13:48 Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB Certificate issuer: /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft Manifest number: 08A7 Signing time: Fri 22 Nov 2024 20:15:26 +0000 Manifest this update: Fri 22 Nov 2024 20:15:26 +0000 Manifest next update: Fri 29 Nov 2024 20:15:26 +0000 Files and hashes: 1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: huaFJSazR3008pv9JgReUm4vbMh3+4zl6zCz1KH6JRo=) 2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: UoGq+ZpO/6nx5x+XTY9D8Dy7/iyHFGpVYfq1cLpAn/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB Validity Not Before: Nov 22 20:15:26 2024 GMT Not After : Nov 29 20:15:26 2024 GMT Subject: CN=6740e65e-ef97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:7f:a6:7b:06:ff:ed:4b:57:33:58:ba:67: 2e:da:fb:8c:c5:29:00:87:40:a4:fd:e1:7a:8c:4c: 7b:d0:0a:fd:d9:e8:2e:51:f2:b6:72:eb:ac:c1:db: ab:42:f5:07:e3:c5:05:5f:0d:21:e7:d1:eb:c3:45: c0:db:61:b8:3a:62:ca:a1:de:87:92:8a:08:34:ca: 78:ab:03:e9:bd:7a:a4:71:e7:57:38:ee:0e:35:e1: 83:e1:57:1d:24:79:ac:aa:0a:75:26:f3:d9:38:3c: 90:86:92:e8:3d:ce:c1:16:e8:34:23:09:35:0a:95: 02:b7:1c:7a:a7:d5:fd:72:66:45:73:3b:21:8f:0d: fc:b4:4c:23:02:48:48:f9:1d:21:a1:6d:5d:bd:f6: 02:d2:1a:7e:1e:d6:cf:ad:39:23:cc:84:38:e9:f9: c0:b8:06:ad:6a:e4:f9:0c:bb:13:31:68:cb:00:bd: 66:0d:83:90:7a:e8:47:8d:70:bf:0f:66:17:fe:70: 72:fe:ef:77:e7:8a:1a:36:a8:e0:aa:09:96:0b:f1: 67:4f:6c:a8:a1:e8:53:37:69:f5:49:c0:6f:55:e1: 03:1c:0f:b6:05:da:43:9b:1a:25:bc:c0:b4:b9:96: dd:ed:dd:85:05:b3:b0:8a:f8:ef:4c:e0:78:87:a2: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:E0:9A:6B:E6:4B:0A:EE:A7:33:F5:7C:6E:29:EC:10:8C:13:48 X509v3 Authority Key Identifier: keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f0:14:60:cf:2c:9e:9c:36:d8:7c:dd:a7:eb:96:a0:c5:79: 5e:16:51:8d:f6:a9:61:12:14:99:df:0e:ca:9b:75:b8:87:43: f2:69:11:93:35:87:6b:b8:90:4a:18:77:85:1d:95:43:af:30: 38:c9:ce:38:72:e3:6b:3f:fd:3f:7f:4b:83:f2:ee:38:2e:89: 18:35:7d:9b:5a:55:9d:69:1f:4e:3a:0d:e1:32:c4:52:ca:28: 76:1b:6d:63:84:ad:41:da:17:72:b5:9c:d9:bd:3b:45:72:43: a1:a8:25:0f:62:ad:89:73:54:2a:c8:d9:52:67:cc:ca:53:7d: c1:b5:cd:94:b1:fd:f6:23:7d:5c:ee:8c:73:02:62:7b:24:16: 5e:20:12:5f:59:eb:2b:f3:52:94:8c:39:9d:99:d0:cb:62:82: 28:77:41:cc:76:c3:16:52:40:3c:51:44:fe:bd:a0:fb:f1:18: 76:ff:1c:58:09:49:9d:13:48:92:25:48:37:ac:e2:63:6f:9b: 70:d9:f3:ec:a9:6f:9f:57:43:21:cb:8e:a2:18:e5:61:cd:b9: 22:bc:85:8c:34:b2:cb:bc:c2:96:82:d5:05:44:71:f1:d2:9a: fb:dd:5e:63:a1:f2:42:e6:3b:6d:de:b3:70:67:51:d8:84:31: c6:45:1f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1REExMTAvBgNVBAUTKDBFQkREMkJGNDQ5RUYzMzQ0MDYzNTE1NTNGMEVENjgz MkU0NkU0Q0IwHhcNMjQxMTIyMjAxNTI2WhcNMjQxMTI5MjAxNTI2WjAYMRYwFAYD VQQDEw02NzQwZTY1ZS1lZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lh/pnsG/+1LVzNYumcu2vuMxSkAh0Ck/eF6jEx70Ar92eguUfK2cuuswdur QvUH48UFXw0h59Hrw0XA22G4OmLKod6HkooINMp4qwPpvXqkcedXOO4ONeGD4Vcd JHmsqgp1JvPZODyQhpLoPc7BFug0Iwk1CpUCtxx6p9X9cmZFczshjw38tEwjAkhI +R0hoW1dvfYC0hp+HtbPrTkjzIQ46fnAuAatauT5DLsTMWjLAL1mDYOQeuhHjXC/ D2YX/nBy/u9354oaNqjgqgmWC/FnT2yooehTN2n1ScBvVeEDHA+2BdpDmxolvMC0 uZbd7d2FBbOwivjvTOB4h6JXxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7O4Jpr 5ksK7qcz9XxuKewQjBNIMB8GA1UdIwQYMBaAFA690r9EnvM0QGNRVT8O1oMuRuTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVEQS9CODQ4REY2OEE2 MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6UkFZMUZWUHc3V2d5NUc1 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RyM1N2MFNlOHpSQVkxRlZQdzdXZ3k1RzVNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVEQS9CODQ4REY2OEE2MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6 UkFZMUZWUHc3V2d5NUc1TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB48BRgzyyenDbYfN2n65agxXleFlGN9qlhEhSZ3w7Km3W4h0PyaRGT NYdruJBKGHeFHZVDrzA4yc44cuNrP/0/f0uD8u44LokYNX2bWlWdaR9OOg3hMsRS yih2G21jhK1B2hdytZzZvTtFckOhqCUPYq2Jc1QqyNlSZ8zKU33Btc2Usf32I31c 7oxzAmJ7JBZeIBJfWesr81KUjDmdmdDLYoIod0HMdsMWUkA8UUT+vaD78Rh2/xxY CUmdE0iSJUg3rOJjb5tw2fPsqW+fV0Mhy46iGOVhzbkivIWMNLLLvMKWgtUFRHHx 0pr73V5jofJC5jtt3rNwZ1HYhDHGRR99 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org