$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft File: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json) Hash identifier: qm2pW6PlsBOQcM58WTUzLVPkLeImAZGcBGH+Ej8SYaM= Subject key identifier: 39:D1:17:4D:8E:3E:9C:E4:39:F0:59:82:E4:65:3A:BB:BF:31:D2:8C Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93 Certificate issuer: /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793 Certificate serial: 3428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft Manifest number: 3428 Signing time: Sun 24 Nov 2024 14:59:46 +0000 Manifest this update: Sun 24 Nov 2024 14:59:46 +0000 Manifest next update: Sun 01 Dec 2024 14:59:46 +0000 Files and hashes: 1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: 1PYIzyxTX7dlkJ0ZwPiSap1+Gc9BNPKToZNiBVI3ijM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13352 (0x3428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793 Validity Not Before: Nov 24 14:59:46 2024 GMT Not After : Dec 1 14:59:46 2024 GMT Subject: CN=67433f62-1be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:b0:a5:88:b5:c1:7c:83:19:2c:18:82:95: 0d:39:13:50:4a:fd:36:c6:c8:0f:f1:2f:1f:93:bd: 54:1e:27:72:f4:5f:86:9b:69:fb:9c:d2:66:00:1c: 64:a2:07:6a:a4:50:4d:6e:aa:a9:6d:d3:b7:f7:82: 32:d1:80:69:9c:6c:64:dd:22:d1:58:10:b5:5d:d9: 0e:6d:cf:df:3f:4f:b4:69:a7:89:66:91:6d:26:21: 65:fe:e8:39:46:89:c8:88:8d:bf:09:95:fa:3e:92: e4:b6:91:e0:93:51:3b:38:75:b3:8e:02:9c:0e:71: 74:8a:e9:23:d3:0b:87:00:1b:18:98:d6:07:1f:3a: 20:50:7b:f5:cb:37:90:9d:23:73:34:45:5b:a0:82: f3:f6:f7:54:e2:5d:d9:98:4d:ee:ca:0c:37:fb:25: 58:bd:3a:90:ec:4e:9c:33:d6:89:65:2b:16:66:86: e0:36:7e:8d:15:8c:4c:f8:ea:fa:f1:60:57:86:e4: b1:bb:67:32:6c:26:46:47:ee:75:e2:1a:60:8a:d3: cf:c8:25:c2:04:b3:e7:00:79:ec:48:ed:19:fc:ee: 52:4f:d8:69:ae:5a:a1:d2:eb:e4:27:1c:4a:22:b5: 08:f8:67:c1:52:85:45:8f:0f:1b:fd:f5:aa:68:da: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D1:17:4D:8E:3E:9C:E4:39:F0:59:82:E4:65:3A:BB:BF:31:D2:8C X509v3 Authority Key Identifier: keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:02:a3:91:25:d7:3e:1d:f7:a2:f3:ca:16:09:c0:7c:53:50: da:7d:dc:3e:0d:b1:26:4a:3d:d5:14:7d:c6:2d:e6:9a:4e:31: 2b:5b:de:d4:87:af:c7:a9:07:ad:26:96:92:8e:0f:48:9a:28: 3d:7f:60:b6:75:af:7a:34:23:bd:45:c5:98:65:08:44:97:7b: 22:a2:f5:e2:67:92:b9:3e:97:55:c1:73:9c:15:4d:bd:82:a3: 3b:13:c3:b3:ad:5d:16:86:0d:63:1a:6e:63:2f:2b:cb:bb:10: cb:29:15:95:aa:ef:a8:5f:eb:0a:78:6d:bf:5e:6d:50:97:f8: da:62:b5:40:2b:e7:7e:22:03:d1:53:06:fc:8f:8c:03:2f:a7: b1:28:72:4d:ce:32:10:2f:c0:e6:cb:24:4f:19:e8:81:1b:e4: d5:16:68:6f:7f:3b:94:10:a9:86:93:f7:f3:89:b2:62:bb:49: 42:79:9d:f8:58:f5:8a:22:f0:6c:8f:b9:ed:9d:f4:4a:51:98: 07:c0:df:bc:82:f7:ac:87:a4:3b:c6:ee:75:87:c6:73:7e:f7: 19:7f:c9:26:f6:e0:8b:74:d2:07:dc:af:55:32:e2:00:c2:cd: ec:a0:18:c0:a5:f5:10:72:bf:cf:77:b4:19:e4:b9:95:43:cb: bd:4c:ee:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0NzkxMTAvBgNVBAUTKERGNDA2OUYyNDZFOUZFQTk3QjBBQkUzQTVGRUM3NzhF NTM5MzE3OTMwHhcNMjQxMTI0MTQ1OTQ2WhcNMjQxMjAxMTQ1OTQ2WjAYMRYwFAYD VQQDEw02NzQzM2Y2Mi0xYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJOwpYi1wXyDGSwYgpUNORNQSv02xsgP8S8fk71UHidy9F+Gm2n7nNJmABxk ogdqpFBNbqqpbdO394Iy0YBpnGxk3SLRWBC1XdkObc/fP0+0aaeJZpFtJiFl/ug5 RonIiI2/CZX6PpLktpHgk1E7OHWzjgKcDnF0iukj0wuHABsYmNYHHzogUHv1yzeQ nSNzNEVboILz9vdU4l3ZmE3uygw3+yVYvTqQ7E6cM9aJZSsWZobgNn6NFYxM+Or6 8WBXhuSxu2cybCZGR+514hpgitPPyCXCBLPnAHnsSO0Z/O5ST9hprlqh0uvkJxxK IrUI+GfBUoVFjw8b/fWqaNqVbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnRF02O PpzkOfBZguRlOru/MdKMMB8GA1UdIwQYMBaAFN9AafJG6f6pewq+Ol/sd45TkxeT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQ3OS83QzdCQkYwODFE OUUxMUUyQTg3RTdCOEUwOEIwMkNEMi8zMEJwOGticF9xbDdDcjQ2WC14M2psT1RG NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwQnA4a2JwX3FsN0NyNDZYLXgzamxPVEY1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQ3OS83QzdCQkYwODFEOUUxMUUyQTg3RTdCOEUwOEIwMkNEMi8zMEJwOGticF9x bDdDcjQ2WC14M2psT1RGNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRAqORJdc+Hfei88oWCcB8U1Dafdw+DbEmSj3VFH3GLeaaTjErW97U h6/HqQetJpaSjg9Imig9f2C2da96NCO9RcWYZQhEl3siovXiZ5K5PpdVwXOcFU29 gqM7E8OzrV0Whg1jGm5jLyvLuxDLKRWVqu+oX+sKeG2/Xm1Ql/jaYrVAK+d+IgPR Uwb8j4wDL6exKHJNzjIQL8DmyyRPGeiBG+TVFmhvfzuUEKmGk/fzibJiu0lCeZ34 WPWKIvBsj7ntnfRKUZgHwN+8gvesh6Q7xu51h8ZzfvcZf8km9uCLdNIH3K9VMuIA ws3soBjApfUQcr/Pd7QZ5LmVQ8u9TO69 -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:56 2024 by rpki-client on console-fra.rpki-client.org