$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: RI56vYcTbm3CSij954TGKtmlOmWpm1KJqkKh2/l34PU= Subject key identifier: FE:F8:83:DC:89:41:E5:DD:72:ED:68:4C:14:3B:2B:9C:A8:DD:F8:09 Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 0385 Signing time: Sat 23 Nov 2024 00:23:12 +0000 Manifest this update: Sat 23 Nov 2024 00:23:12 +0000 Manifest next update: Sat 30 Nov 2024 00:23:12 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: w6WlMAQ7XkY600N5YLOAnaoeWrAk3/9JwnGRA2k1HgQ=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: 8BQNN/QNIWAJlkiQOUN0UFHd3tX4uQeluOnMm/rMf64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: Nov 23 00:23:12 2024 GMT Not After : Nov 30 00:23:12 2024 GMT Subject: CN=67412070-8dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:ea:2d:76:f5:1c:83:ca:97:3d:06:70:3b: 90:43:13:19:99:5e:63:5a:0a:12:89:79:29:3b:32: f0:b4:0d:b7:a0:54:28:17:5e:0d:f4:a7:46:12:6a: 58:9e:5a:df:ab:06:ac:2a:1e:36:a0:24:39:2d:53: a2:c6:1b:04:5e:65:73:06:d7:56:f3:1a:cb:c7:ae: 70:60:f6:39:f4:1f:e1:9f:ad:76:e9:41:98:2f:2c: 4a:00:64:ac:cb:24:a0:a2:99:97:cc:cd:e1:f9:db: 38:1b:35:86:e6:41:74:91:ef:d3:ad:ba:fe:65:6b: b6:c8:35:03:2a:2e:2e:2e:2c:db:d0:4e:28:ee:b7: cb:b3:3f:4e:e8:61:24:82:f0:bb:8e:89:ee:d0:9a: 39:b0:23:df:f1:75:d2:83:e7:f7:7b:19:ef:e0:88: 4a:3a:8f:2d:c3:33:7b:a3:a3:26:8b:8c:1f:43:a4: aa:ce:2a:e0:21:5c:4d:24:8c:7b:6b:8c:d7:fb:7e: 7f:15:1a:ee:90:e0:3e:1e:53:28:e6:6d:89:9b:81: bd:eb:73:b9:e5:6d:84:04:60:45:87:ca:f9:8c:30: 21:27:f4:b9:5a:e2:ce:63:7c:09:d7:80:8d:ba:11: fa:31:61:98:f9:92:74:c7:2c:cf:be:48:04:30:1e: b4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:83:DC:89:41:E5:DD:72:ED:68:4C:14:3B:2B:9C:A8:DD:F8:09 X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:46:68:eb:6f:87:f9:05:cf:10:24:e8:7a:8e:e9:e4:34:15: d7:6b:16:bf:05:40:29:9e:2c:ed:2e:ff:0b:a9:6c:e9:ea:aa: 97:65:d1:79:5c:75:20:4e:b7:fd:95:75:9e:74:f8:e3:ea:57: 1f:26:13:c9:04:e3:a3:47:ed:f4:fc:d1:2c:93:7c:96:4c:79: b9:e9:1a:a8:6c:2a:c4:9f:f6:f2:d9:59:c9:f6:95:cc:40:5e: 3c:0f:af:3c:d7:1f:b9:ff:e6:41:23:5f:37:80:3d:bc:f3:00: 56:08:e1:4e:0e:57:d6:70:18:16:1b:fb:6c:67:43:51:51:2d: ed:ee:a3:e1:11:5a:c3:58:b0:5c:b4:94:69:53:46:59:73:d2: 71:30:40:35:e1:b5:71:29:6a:cf:43:98:0c:4f:1b:33:03:44: e6:34:54:b9:52:44:c4:d5:b1:78:e1:09:18:4a:89:87:db:08: 67:1b:82:dc:1f:f1:cc:b3:73:76:cd:43:43:27:a3:4e:85:e2: b2:4e:1d:ef:30:44:ae:73:f8:48:ad:37:82:32:ab:29:40:ea: dd:61:00:23:4c:63:f0:3a:ea:a5:28:8e:0d:ee:d8:e0:b4:80: 56:66:e1:ba:ec:f1:9c:b3:d2:ae:e0:fe:fa:8f:c7:3f:d2:55: 57:65:dc:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjQxMTIzMDAyMzEyWhcNMjQxMTMwMDAyMzEyWjAYMRYwFAYD VQQDEw02NzQxMjA3MC04ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm3qLXb1HIPKlz0GcDuQQxMZmV5jWgoSiXkpOzLwtA23oFQoF14N9KdGEmpY nlrfqwasKh42oCQ5LVOixhsEXmVzBtdW8xrLx65wYPY59B/hn6126UGYLyxKAGSs yySgopmXzM3h+ds4GzWG5kF0ke/Trbr+ZWu2yDUDKi4uLizb0E4o7rfLsz9O6GEk gvC7jonu0Jo5sCPf8XXSg+f3exnv4IhKOo8twzN7o6Mmi4wfQ6SqzirgIVxNJIx7 a4zX+35/FRrukOA+HlMo5m2Jm4G963O55W2EBGBFh8r5jDAhJ/S5WuLOY3wJ14CN uhH6MWGY+ZJ0xyzPvkgEMB60pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP74g9yJ QeXdcu1oTBQ7K5yo3fgJMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbRmjrb4f5Bc8QJOh6junkNBXXaxa/BUApniztLv8LqWzp6qqXZdF5 XHUgTrf9lXWedPjj6lcfJhPJBOOjR+30/NEsk3yWTHm56RqobCrEn/by2VnJ9pXM QF48D6881x+5/+ZBI183gD288wBWCOFODlfWcBgWG/tsZ0NRUS3t7qPhEVrDWLBc tJRpU0ZZc9JxMEA14bVxKWrPQ5gMTxszA0TmNFS5UkTE1bF44QkYSomH2whnG4Lc H/HMs3N2zUNDJ6NOheKyTh3vMESuc/hIrTeCMqspQOrdYQAjTGPwOuqlKI4N7tjg tIBWZuG67PGcs9Ku4P76j8c/0lVXZdwc -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org