$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: g4Pto1s/WWkKVOJU5vFiI8EIJfnZL+LHBv7UfbA5vBI= Subject key identifier: FA:D7:57:C0:E1:7B:60:94:C3:19:DD:1C:94:39:73:5F:77:1A:7F:BD Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 0100 Signing time: Sat 23 Nov 2024 03:16:24 +0000 Manifest this update: Sat 23 Nov 2024 03:16:23 +0000 Manifest next update: Sat 30 Nov 2024 03:16:23 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: iLsvgP3q44+HmzXh01q/2YOvlA7LE/v/uHeFM9xMZ9s=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: tEbg35ruInXFvBobh8FVluJNLAlP7tv3JLnCppA5H5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Nov 23 03:16:23 2024 GMT Not After : Nov 30 03:16:23 2024 GMT Subject: CN=67414907-f111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:6e:09:0c:4c:e6:31:5d:85:97:1f:d9:53: ec:20:ac:c2:17:28:fe:73:ef:16:de:24:6a:bc:fd: b2:f7:35:2a:3e:ec:46:99:1a:95:3c:88:10:64:70: d8:0c:73:7e:45:fc:62:10:10:c3:ea:11:a4:35:c9: 86:f5:aa:7d:8a:70:88:d5:d2:f3:77:cb:93:8f:c3: 84:ca:1c:93:f4:37:ef:af:d3:c1:1c:e2:11:d2:bc: 7c:43:b1:8d:fd:13:b2:1a:b8:e6:c2:7a:f7:22:94: ee:b9:0e:15:c4:49:69:17:ec:ca:47:97:5f:31:fc: 21:f3:8c:23:db:1d:d0:70:a2:63:ac:c0:df:80:56: 49:82:c9:58:20:7d:7a:2f:85:9a:31:b8:b6:de:39: fb:84:4b:af:2d:29:4e:2d:e2:00:df:f2:ef:c6:8f: 1d:aa:92:26:a3:19:53:9a:f2:2b:b7:ea:41:cc:b6: 84:b9:12:c4:65:db:b8:d3:e7:d2:dc:54:67:53:31: 00:8d:5e:4a:0c:1a:6e:bd:fb:54:c2:a8:b5:01:73: 02:e7:67:66:32:8e:6c:41:d4:78:d2:19:37:4e:a7: e2:33:7e:87:36:9f:80:e7:fa:4e:fe:9e:07:bb:13: 45:de:8d:34:22:8e:d3:6a:5c:2b:3b:bb:06:9a:57: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D7:57:C0:E1:7B:60:94:C3:19:DD:1C:94:39:73:5F:77:1A:7F:BD X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:64:4d:f8:86:1c:fe:fe:d7:92:46:06:b3:c3:fe:59:4f:7f: 1f:64:e3:95:48:26:51:f9:30:00:7f:af:91:9b:e6:1f:54:e2: ed:80:c0:d9:4d:f8:5a:2a:8c:e9:c4:14:86:3b:52:89:15:f1: 79:82:65:c2:35:a8:c1:da:92:31:1c:0c:de:1c:ef:c2:1f:3c: 83:75:59:1a:44:ef:57:76:85:24:67:59:81:82:0d:92:1f:d4: 9a:59:c2:ad:5e:46:2b:b6:b5:ca:89:db:a2:c9:d5:93:9a:4f: 70:62:01:bf:36:66:fc:f2:30:75:07:6e:26:c3:5c:e3:ea:3d: 4d:1e:ac:5d:3f:33:de:5e:c0:ce:f7:ad:8e:4c:b4:ac:88:5f: 23:2c:a4:5f:39:0f:45:42:b2:04:39:16:c0:04:63:60:af:e2: 99:34:f7:6c:e6:1b:49:ad:99:d4:cb:4a:ef:1e:aa:51:55:4b: cc:74:05:af:6c:58:34:54:a6:57:08:9b:20:0d:c6:98:a3:08: 96:fb:2a:92:83:4b:40:11:eb:f9:e1:f2:d2:c1:f4:8d:84:17: cf:08:c6:bf:99:87:63:5e:86:4b:29:04:d1:95:53:50:f2:d1: 28:a0:0c:21:68:20:e1:b6:a0:b7:51:95:29:8a:ea:07:a7:85: a1:9f:5b:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjQxMTIzMDMxNjIzWhcNMjQxMTMwMDMxNjIzWjAYMRYwFAYD VQQDEw02NzQxNDkwNy1mMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7NuCQxM5jFdhZcf2VPsIKzCFyj+c+8W3iRqvP2y9zUqPuxGmRqVPIgQZHDY DHN+RfxiEBDD6hGkNcmG9ap9inCI1dLzd8uTj8OEyhyT9Dfvr9PBHOIR0rx8Q7GN /ROyGrjmwnr3IpTuuQ4VxElpF+zKR5dfMfwh84wj2x3QcKJjrMDfgFZJgslYIH16 L4WaMbi23jn7hEuvLSlOLeIA3/Lvxo8dqpImoxlTmvIrt+pBzLaEuRLEZdu40+fS 3FRnUzEAjV5KDBpuvftUwqi1AXMC52dmMo5sQdR40hk3TqfiM36HNp+A5/pO/p4H uxNF3o00Io7TalwrO7sGmleUIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrXV8Dh e2CUwxndHJQ5c193Gn+9MB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgZE34hhz+/teSRgazw/5ZT38fZOOVSCZR+TAAf6+Rm+YfVOLtgMDZ TfhaKozpxBSGO1KJFfF5gmXCNajB2pIxHAzeHO/CHzyDdVkaRO9XdoUkZ1mBgg2S H9SaWcKtXkYrtrXKiduiydWTmk9wYgG/Nmb88jB1B24mw1zj6j1NHqxdPzPeXsDO 962OTLSsiF8jLKRfOQ9FQrIEORbABGNgr+KZNPds5htJrZnUy0rvHqpRVUvMdAWv bFg0VKZXCJsgDcaYowiW+yqSg0tAEev54fLSwfSNhBfPCMa/mYdjXoZLKQTRlVNQ 8tEooAwhaCDhtqC3UZUpiuoHp4Whn1uv -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org