$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft File: DKQH8N1TBy-ooGCBaRkpbmV31oI.mft (raw, json) Hash identifier: JwT6oHI1FotLjI7SD33mY7adCl185eQnlVUZU4LNKOU= Subject key identifier: FE:BC:92:0B:D8:86:D7:FA:8F:B1:B3:4B:E9:3B:99:15:3D:45:44:92 Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft Manifest number: 0BDC Signing time: Fri 22 Nov 2024 18:31:13 +0000 Manifest this update: Fri 22 Nov 2024 18:31:13 +0000 Manifest next update: Fri 29 Nov 2024 18:31:13 +0000 Files and hashes: 1: DKQH8N1TBy-ooGCBaRkpbmV31oI.crl (hash: ONGBIl6KSIH0xFlJ6cX4/MqTGRWZHwW14np0NNkrrwQ=) 2: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (hash: YiyWCIvNLdPDV222FaDBu9f6FoqEAO4drbd6AsmezW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Nov 22 18:31:13 2024 GMT Not After : Nov 29 18:31:13 2024 GMT Subject: CN=6740cdf1-f31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:aa:35:0c:83:d2:fb:84:69:fe:1d:db:57:94: e2:d9:2a:6e:b8:00:f8:37:7f:31:1a:a4:95:eb:43: f1:c8:a8:97:64:69:0b:11:09:ec:df:9f:4e:10:47: 17:30:ea:4a:1d:6e:c2:9a:6c:c8:22:2c:68:e8:f7: 8d:c7:d4:7c:12:59:a4:56:bd:a1:a2:73:0e:1a:ae: 5b:0c:ca:fe:0f:50:7a:4f:49:da:b4:09:38:5d:2e: cf:cd:08:d8:55:49:08:3a:17:67:2d:de:87:49:20: 8b:ee:1e:e0:5c:0d:88:80:3d:a1:66:8b:59:e6:b8: a6:d1:82:63:92:7b:70:54:79:26:71:d2:80:d2:ea: ee:58:3a:10:d1:e5:78:16:2e:a9:48:8f:e4:89:38: 32:21:a8:f8:00:12:4e:ae:1b:64:61:46:cd:d7:41: 38:2b:a3:ab:cd:b8:02:7b:6f:7e:0b:6b:af:cc:6e: 37:3c:6e:2b:0b:7d:70:37:1a:79:69:2e:04:86:c5: f2:5a:a0:f9:a8:03:22:b2:2d:d1:ec:30:b2:3a:b8: 2b:2c:ef:85:89:b8:1d:8d:7d:de:ab:96:eb:d6:ff: 98:ce:0d:0c:8a:f3:cd:3e:08:4c:09:2f:e3:e9:fd: e7:d1:0f:dc:51:1d:bf:27:a9:34:03:08:ae:e8:92: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BC:92:0B:D8:86:D7:FA:8F:B1:B3:4B:E9:3B:99:15:3D:45:44:92 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c1:bc:e9:ac:fb:ff:0a:6f:bb:2b:8b:87:62:af:78:2d:9b: bd:a1:63:a9:6d:85:18:5f:7d:dd:62:75:2f:df:73:65:3f:0a: 8f:a2:eb:65:35:d0:76:53:a6:1e:0e:bb:d1:fc:4f:c4:e1:8c: 9b:42:9d:28:4b:01:a6:1c:c1:2c:91:db:e6:db:40:62:5a:75: fb:d2:a0:52:40:f9:e2:b0:24:37:9f:c3:15:cb:47:fa:35:46: b1:5b:e2:60:e3:8e:0b:86:2b:f1:85:10:a4:20:ed:fb:27:3b: 4a:93:68:0a:31:59:6d:52:46:96:fa:3a:d1:1a:6e:d4:0a:d1: 69:52:14:9a:d8:61:47:2a:31:95:38:dd:0d:4e:09:83:14:1a: 3f:45:85:9d:e2:7b:c8:86:22:3b:fc:bd:4b:c5:3c:b5:3a:1d: b7:53:02:53:2f:cb:85:12:2c:d5:d1:37:ee:a2:b9:5d:2e:fa: e3:01:40:c4:8f:bd:25:21:23:cc:c7:50:46:43:a2:c2:ae:98: 8c:10:0b:37:51:4a:a0:84:fe:9c:11:fe:51:ee:27:6c:62:3b: 9c:5e:52:43:e2:04:96:ef:76:72:2e:86:15:cf:b7:de:bd:f3: ea:74:bf:0e:7a:1f:a0:e8:f5:b8:57:cb:8b:1a:cb:d4:e8:14: 56:55:a5:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjQxMTIyMTgzMTEzWhcNMjQxMTI5MTgzMTEzWjAYMRYwFAYD VQQDEw02NzQwY2RmMS1mMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Ko1DIPS+4Rp/h3bV5Ti2SpuuAD4N38xGqSV60PxyKiXZGkLEQns359OEEcX MOpKHW7CmmzIIixo6PeNx9R8ElmkVr2honMOGq5bDMr+D1B6T0natAk4XS7PzQjY VUkIOhdnLd6HSSCL7h7gXA2IgD2hZotZ5rim0YJjkntwVHkmcdKA0uruWDoQ0eV4 Fi6pSI/kiTgyIaj4ABJOrhtkYUbN10E4K6OrzbgCe29+C2uvzG43PG4rC31wNxp5 aS4EhsXyWqD5qAMisi3R7DCyOrgrLO+FibgdjX3eq5br1v+Yzg0MivPNPghMCS/j 6f3n0Q/cUR2/J6k0Awiu6JK5lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP68kgvY htf6j7GzS+k7mRU9RUSSMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS81MEE5MEUzNjA4MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5 LW9vR0NCYVJrcGJtVjMxb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVwbzprPv/Cm+7K4uHYq94LZu9oWOpbYUYX33dYnUv33NlPwqPoutl NdB2U6YeDrvR/E/E4YybQp0oSwGmHMEskdvm20BiWnX70qBSQPnisCQ3n8MVy0f6 NUaxW+Jg444LhivxhRCkIO37JztKk2gKMVltUkaW+jrRGm7UCtFpUhSa2GFHKjGV ON0NTgmDFBo/RYWd4nvIhiI7/L1LxTy1Oh23UwJTL8uFEizV0TfuorldLvrjAUDE j70lISPMx1BGQ6LCrpiMEAs3UUqghP6cEf5R7idsYjucXlJD4gSW73ZyLoYVz7fe vfPqdL8Oeh+g6PW4V8uLGsvU6BRWVaXG -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org