$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: xgyr2IW0Omk59rNNXQZYcyO/9oUyhWoa37DcmE0ECZo= Subject key identifier: 53:46:FD:3B:98:91:80:D0:E9:EC:A9:F6:88:D6:07:3D:4F:22:F9:28 Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0BE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0BBC Signing time: Fri 22 Nov 2024 18:43:36 +0000 Manifest this update: Fri 22 Nov 2024 18:43:36 +0000 Manifest next update: Fri 29 Nov 2024 18:43:36 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: +oeSw8zuPT5QFjLeXlKHePhZG9zcsMq5NlZgOEjxSQo=) 2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: O29diGY7x4eXWAym++dxviC9GPqPH5Yep4DO4YaBc5k=) 3: AF625B0680FA11EC96280855C4F9AE02.roa (hash: E3B3g4VAEyLf5g5lxP3OkUQYcv0XXwClQf1bCMVwZF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Nov 22 18:43:36 2024 GMT Not After : Nov 29 18:43:36 2024 GMT Subject: CN=6740d0d8-d4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:8f:d3:cc:71:62:95:ff:22:f8:b1:88:0f: fb:ca:5d:99:df:48:3b:ac:48:b1:a1:d0:3d:b7:99: a1:87:39:67:29:b6:ac:c1:2e:13:62:a7:85:59:d3: 77:7d:cc:c6:8d:c9:b4:ee:fa:0b:19:51:57:40:84: 24:36:c6:8f:3b:62:01:e9:23:87:c8:78:48:48:31: 78:5e:99:e5:ad:ce:40:61:9d:85:56:69:f3:2b:01: 52:73:56:71:4f:5f:b7:bf:48:b9:9f:3a:de:71:80: 61:2a:fc:15:11:c9:3d:49:c0:f4:8e:8d:a9:fe:6e: bf:ef:6a:7d:e5:7d:84:e2:8c:97:b7:af:be:30:89: 10:7d:74:ce:01:29:97:e6:48:9e:66:70:67:0c:ad: 29:ec:e7:c3:4b:87:f1:a6:50:f7:ac:02:97:8c:56: 2d:f5:b9:18:74:9c:06:a0:8c:de:8e:0d:3c:e8:b1: 5e:af:81:23:59:d6:26:cf:48:64:c0:ef:75:7d:2e: 17:bc:a2:a4:3b:16:83:0b:48:ca:02:be:e0:02:0a: ef:0c:81:62:76:16:1d:00:6e:7d:f3:42:48:36:7d: b6:64:d1:c4:71:cf:65:d1:c5:3c:97:5f:d0:af:5a: 61:26:d5:31:f5:68:86:26:2c:61:3f:84:63:f7:5e: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:46:FD:3B:98:91:80:D0:E9:EC:A9:F6:88:D6:07:3D:4F:22:F9:28 X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:0b:28:0a:9a:a1:55:36:d6:0c:fa:5c:a9:39:df:b3:33:0b: 3b:37:97:a3:77:1e:84:21:9d:99:e6:1f:12:9c:a3:7f:29:b0: d8:a5:77:3c:93:85:49:92:60:3f:66:bd:df:9e:7b:8b:2a:3d: 3c:42:f5:a0:fe:d3:89:ab:3c:f5:51:55:47:d8:01:ef:15:c5: 89:6b:3a:95:f7:48:88:0d:3d:bd:61:d7:5e:46:73:51:b4:fa: ab:43:3b:f1:51:f2:44:48:44:a4:de:da:da:ed:05:f9:32:42: 53:ac:76:da:30:31:e9:c1:a3:33:ee:1e:73:7e:85:bd:88:d1: 56:ca:f6:a5:16:19:d6:6d:de:0b:32:07:46:6b:a6:ee:03:d0: fa:c0:a1:6c:60:71:74:fa:de:4e:c4:be:23:8d:bf:62:df:9b: 47:7c:a4:92:f5:77:2c:ee:a2:11:52:47:1b:ba:d5:a9:d6:30: d1:90:3f:60:ca:40:aa:29:c0:b1:5a:18:ac:c6:e6:67:09:e0: c6:9d:74:75:27:87:74:3b:69:53:c5:72:96:ff:e2:87:0e:84: 1e:f4:f5:ca:90:5e:aa:14:6e:e8:f8:48:20:2b:6f:09:3e:c2: 2e:e2:7f:73:53:a1:6e:d6:21:8c:2a:36:fe:79:02:04:60:23: 32:f0:bd:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjQxMTIyMTg0MzM2WhcNMjQxMTI5MTg0MzM2WjAYMRYwFAYD VQQDEw02NzQwZDBkOC1kNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o6P08xxYpX/IvixiA/7yl2Z30g7rEixodA9t5mhhzlnKbaswS4TYqeFWdN3 fczGjcm07voLGVFXQIQkNsaPO2IB6SOHyHhISDF4Xpnlrc5AYZ2FVmnzKwFSc1Zx T1+3v0i5nzrecYBhKvwVEck9ScD0jo2p/m6/72p95X2E4oyXt6++MIkQfXTOASmX 5kieZnBnDK0p7OfDS4fxplD3rAKXjFYt9bkYdJwGoIzejg086LFer4EjWdYmz0hk wO91fS4XvKKkOxaDC0jKAr7gAgrvDIFidhYdAG5980JINn22ZNHEcc9l0cU8l1/Q r1phJtUx9WiGJixhP4Rj917nJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNG/TuY kYDQ6eyp9ojWBz1PIvkoMB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjCygKmqFVNtYM+lypOd+zMws7N5ejdx6EIZ2Z5h8SnKN/KbDYpXc8 k4VJkmA/Zr3fnnuLKj08QvWg/tOJqzz1UVVH2AHvFcWJazqV90iIDT29YddeRnNR tPqrQzvxUfJESESk3tra7QX5MkJTrHbaMDHpwaMz7h5zfoW9iNFWyvalFhnWbd4L MgdGa6buA9D6wKFsYHF0+t5OxL4jjb9i35tHfKSS9Xcs7qIRUkcbutWp1jDRkD9g ykCqKcCxWhisxuZnCeDGnXR1J4d0O2lTxXKW/+KHDoQe9PXKkF6qFG7o+EggK28J PsIu4n9zU6Fu1iGMKjb+eQIEYCMy8L2j -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org