$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: 1lk471HF55GCcxiaf6Gzr0mZZbi4/DGqsyj8pe6VsFw= Subject key identifier: 63:6B:87:EC:A2:19:63:6F:0B:6A:A8:00:CB:EA:C0:0A:CA:9F:67:05 Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: 27 Signing time: Sat 23 Nov 2024 05:42:45 +0000 Manifest this update: Sat 23 Nov 2024 05:42:45 +0000 Manifest next update: Sat 30 Nov 2024 05:42:45 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: pCq//ysGTyjtLacHht5W4Fl+mj8YxXxYmnrmDYk0138=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: jV7pTLLQPAskIihyf9Dp12RJ84TcLdZjS7I4GkFqPvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Nov 23 05:42:45 2024 GMT Not After : Nov 30 05:42:45 2024 GMT Subject: CN=67416b55-9c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:d1:34:73:ee:8c:df:8d:2c:12:77:4a:55: d3:f0:27:e8:1e:95:fe:5a:f1:11:3a:bc:82:00:2e: 57:a3:a8:53:2d:b2:4d:8a:d2:26:d0:48:3f:9b:d8: 04:af:df:f0:59:94:7b:68:b7:1e:c3:0c:d6:e0:c4: cc:11:01:33:44:89:a2:c1:81:06:16:e2:f3:a4:54: ab:9e:0a:1d:0c:6a:ad:cf:10:00:cc:d7:00:df:b5: 33:bd:04:58:cd:c8:7f:76:15:c5:f4:47:01:1f:f1: 93:67:93:e3:de:f7:31:8b:26:38:17:98:11:bc:24: 1a:3e:a1:c8:cb:e1:42:7c:8e:05:c0:82:9f:83:0c: a3:28:9e:2c:9e:5c:44:30:12:38:11:18:41:42:de: a2:78:42:9a:85:af:51:eb:f2:cf:7b:25:23:98:51: 10:f6:9c:2b:7e:9f:c7:0d:cb:2b:a4:a2:f8:1e:cd: 39:b1:84:b3:4b:ca:b3:5d:84:66:e7:28:54:8a:c0: 89:4f:92:c0:35:02:66:80:75:ec:9e:a3:d0:58:f3: f4:0d:a0:09:13:50:2c:a2:ca:e9:f3:a5:1f:40:b0: 6c:e7:ae:a4:1e:74:08:32:15:34:ea:63:c8:27:f1: 7e:3f:33:0a:34:b3:96:27:6a:01:7a:c6:f6:ba:3e: 77:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6B:87:EC:A2:19:63:6F:0B:6A:A8:00:CB:EA:C0:0A:CA:9F:67:05 X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e5:41:15:cb:76:f4:41:98:48:53:24:5f:55:f5:42:c7:e8: 06:df:9a:78:60:1b:1b:5b:bd:e9:92:11:4c:48:82:c9:cf:f5: 5f:4f:89:26:11:56:8e:0d:12:97:bb:99:5e:02:7e:09:55:2e: 71:85:13:a4:5e:b4:9d:73:31:ee:7f:26:4a:6a:20:02:a7:2c: 34:0f:e7:f5:06:ab:e4:30:54:2d:15:25:cc:77:96:f4:02:bf: 79:bc:77:14:3f:47:2e:c0:79:4d:6f:32:2e:c9:03:3a:b2:71: 37:a1:27:83:66:50:be:44:9e:eb:89:af:1c:3f:91:1a:d1:b6: 5a:dc:4f:5b:fe:58:93:18:a1:8e:c0:5b:c0:e8:e4:50:ef:3f: 11:44:85:a0:b5:df:36:1f:37:39:e6:a9:ed:52:59:0b:8e:27: d9:9f:b5:37:9e:8e:a7:cc:14:a5:39:7f:fa:31:bb:07:a2:3e: aa:96:04:20:a7:f0:04:4e:af:46:5c:6c:6f:fa:07:24:6f:c9: 7a:27:27:e8:c8:ee:aa:08:1c:4f:8e:c1:42:57:ab:e3:f2:2a: de:87:27:7a:49:c7:fb:5a:b3:a4:5e:5d:7a:60:e0:f1:2f:0f: 26:93:11:e5:50:f0:f7:57:ad:e3:12:41:3b:0f:dd:f1:33:68: 2e:95:46:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Njc5OTExMC8GA1UEBRMoNzYzNTEzMkU3RDQwNUE1NDY0NUIzQjJERkIyRTBBMDNE RkY0NTZDMzAeFw0yNDExMjMwNTQyNDVaFw0yNDExMzAwNTQyNDVaMBgxFjAUBgNV BAMTDTY3NDE2YjU1LTljNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTUNE0c+6M340sEndKVdPwJ+gelf5a8RE6vIIALlejqFMtsk2K0ibQSD+b2ASv 3/BZlHtotx7DDNbgxMwRATNEiaLBgQYW4vOkVKueCh0Maq3PEADM1wDftTO9BFjN yH92FcX0RwEf8ZNnk+Pe9zGLJjgXmBG8JBo+ocjL4UJ8jgXAgp+DDKMoniyeXEQw EjgRGEFC3qJ4QpqFr1Hr8s97JSOYURD2nCt+n8cNyyukovgezTmxhLNLyrNdhGbn KFSKwIlPksA1AmaAdeyeo9BY8/QNoAkTUCyiyunzpR9AsGznrqQedAgyFTTqY8gn 8X4/Mwo0s5YnagF6xva6Pne1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY2uH7KIZ Y28LaqgAy+rACsqfZwUwHwYDVR0jBBgwFoAUdjUTLn1AWlRkWzst+y4KA9/0VsMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2Nzk5L0VEOUU2MEIyNzA5 RjExRUZBNTcwQkU0REM0RjlBRTAyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZz TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpVVExuMUFXbFJrV3pzdC15NEtBOV8wVnNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2 Nzk5L0VEOUU2MEIyNzA5RjExRUZBNTcwQkU0REM0RjlBRTAyL2RqVVRMbjFBV2xS a1d6c3QteTRLQTlfMFZzTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXlQRXLdvRBmEhTJF9V9ULH6AbfmnhgGxtbvemSEUxIgsnP9V9PiSYR Vo4NEpe7mV4CfglVLnGFE6RetJ1zMe5/JkpqIAKnLDQP5/UGq+QwVC0VJcx3lvQC v3m8dxQ/Ry7AeU1vMi7JAzqycTehJ4NmUL5EnuuJrxw/kRrRtlrcT1v+WJMYoY7A W8Do5FDvPxFEhaC13zYfNznmqe1SWQuOJ9mftTeejqfMFKU5f/oxuweiPqqWBCCn 8AROr0ZcbG/6ByRvyXonJ+jI7qoIHE+OwUJXq+PyKt6HJ3pJx/tas6ReXXpg4PEv DyaTEeVQ8PdXreMSQTsP3fEzaC6VRlI= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org