$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: 0wRaUFduXOab9EzPUdx6TPfOT/O+58HZZ1LmzKu7ISA= Subject key identifier: 20:07:7A:1B:64:65:C7:52:E7:66:C9:E9:CE:DB:05:5E:4F:05:A9:00 Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0DA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0D9B Signing time: Fri 22 Nov 2024 17:52:23 +0000 Manifest this update: Fri 22 Nov 2024 17:52:22 +0000 Manifest next update: Fri 29 Nov 2024 17:52:22 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: slB2jZraVt7PE87z7You9Didg2a/Juum6Jp5EzRJNA0=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: leeMqNjzFzLxyR/PuwyeZTmIKl73aTot0VdgEtIi1fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3492 (0xda4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Nov 22 17:52:22 2024 GMT Not After : Nov 29 17:52:22 2024 GMT Subject: CN=6740c4d6-e1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:55:a2:eb:8f:00:2d:ed:65:b5:bf:2d:f5: 9f:1f:5f:63:f3:da:2d:a5:26:db:51:61:34:96:34: 3a:d1:f1:f7:86:07:84:8e:c5:5e:93:ee:45:00:da: a2:00:87:5d:0f:ee:6e:1c:d8:be:3e:bc:73:c6:03: 0f:97:42:41:ac:17:1f:ea:49:87:ec:52:1e:7e:e9: d8:e7:d1:67:a3:73:b1:29:b0:51:5b:e6:e9:25:51: 19:b7:db:6c:87:13:8b:7b:57:b0:ff:49:02:33:fb: 3b:3d:ee:90:02:e2:f1:de:71:ae:6f:cc:b8:06:9c: b6:7c:5d:2d:d6:ef:5a:bb:99:61:42:bf:80:b3:e4: 01:9f:bc:d6:9a:e9:98:c7:f3:63:06:69:d0:10:9d: 6e:eb:70:a5:ed:da:02:df:1f:5f:8b:17:62:5a:f7: 1d:86:53:bf:2d:d2:a1:ec:db:7d:e2:ce:4c:31:b3: 80:8b:04:d2:16:21:9b:0a:68:1a:85:db:be:91:22: a0:36:67:b8:0f:bb:e4:42:1e:9e:21:bf:d5:64:ae: 24:a2:2d:46:61:87:4c:ab:0a:09:57:b1:7b:8c:ab: de:be:89:4b:dc:be:5b:a2:2e:a2:9b:cb:da:3b:f6: 57:01:7f:d5:ae:44:4f:54:dd:2e:26:cc:88:3f:7b: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:7A:1B:64:65:C7:52:E7:66:C9:E9:CE:DB:05:5E:4F:05:A9:00 X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:49:3c:18:97:e1:c3:20:d7:84:6b:db:a5:da:1a:2c:d1: 2a:81:a1:64:50:76:4e:a3:e7:42:0d:a5:fc:9f:81:14:38:83: 83:11:eb:57:15:7c:8e:41:a7:12:15:92:a2:62:17:34:4c:f3: 61:10:21:db:62:da:29:1d:78:09:1f:ef:6e:14:62:c8:66:b9: 5e:e8:99:fe:55:a8:56:df:c0:58:c1:0c:b9:56:fb:5b:82:ea: bf:84:78:98:dc:72:8a:cd:e2:ed:a0:f4:09:6a:c1:d8:9f:4c: 4f:5e:56:0b:cd:57:2e:d3:3a:0d:2f:5e:06:6d:cd:fb:be:49: a5:95:83:31:4e:8f:1d:4c:b1:d3:21:bf:7d:96:68:13:ce:05: 24:66:10:85:32:de:bc:e2:d5:80:b5:9c:a7:fd:bb:27:06:c2: b6:70:86:8e:34:0d:33:a1:77:50:4b:58:cf:97:4b:91:57:6d: a8:1d:28:71:30:f8:7e:e8:11:0f:c5:30:d6:9d:e4:91:36:da: 4e:e9:d8:cf:ab:10:46:64:70:fa:90:9a:d6:87:d1:7b:6b:47: 78:d5:6e:69:f5:dd:ab:75:a5:74:b6:33:a6:c0:22:88:13:f5: 96:2e:81:78:c7:18:3a:09:7a:6f:b3:8c:d4:25:71:9e:5e:e4: 40:87:b2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjQxMTIyMTc1MjIyWhcNMjQxMTI5MTc1MjIyWjAYMRYwFAYD VQQDEw02NzQwYzRkNi1lMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosNVouuPAC3tZbW/LfWfH19j89otpSbbUWE0ljQ60fH3hgeEjsVek+5FANqi AIddD+5uHNi+PrxzxgMPl0JBrBcf6kmH7FIefunY59Fno3OxKbBRW+bpJVEZt9ts hxOLe1ew/0kCM/s7Pe6QAuLx3nGub8y4Bpy2fF0t1u9au5lhQr+As+QBn7zWmumY x/NjBmnQEJ1u63Cl7doC3x9fixdiWvcdhlO/LdKh7Nt94s5MMbOAiwTSFiGbCmga hdu+kSKgNme4D7vkQh6eIb/VZK4koi1GYYdMqwoJV7F7jKvevolL3L5boi6im8va O/ZXAX/VrkRPVN0uJsyIP3sxnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAHehtk ZcdS52bJ6c7bBV5PBakAMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEUk8GJfhwyDXhGvbpdoaLNEqgaFkUHZOo+dCDaX8n4EUOIODEetX FXyOQacSFZKiYhc0TPNhECHbYtopHXgJH+9uFGLIZrle6Jn+VahW38BYwQy5Vvtb guq/hHiY3HKKzeLtoPQJasHYn0xPXlYLzVcu0zoNL14Gbc37vkmllYMxTo8dTLHT Ib99lmgTzgUkZhCFMt684tWAtZyn/bsnBsK2cIaONA0zoXdQS1jPl0uRV22oHShx MPh+6BEPxTDWneSRNtpO6djPqxBGZHD6kJrWh9F7a0d41W5p9d2rdaV0tjOmwCKI E/WWLoF4xxg6CXpvs4zUJXGeXuRAh7Je -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org