$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: 3jxOiLz1S+dqUoZa5QbA5KiGs+FbQ8IXDbM8294fbdA= Subject key identifier: A3:BC:10:AB:1B:5D:65:1A:19:C2:83:33:D6:D8:CA:00:EE:AD:D2:83 Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 342E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 3429 Signing time: Sun 24 Nov 2024 14:42:37 +0000 Manifest this update: Sun 24 Nov 2024 14:42:36 +0000 Manifest next update: Sun 01 Dec 2024 14:42:36 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: ERJeO3WU4TyCEiOSSMS0W0zUm0ZQ+H1EeFhFzJW4Yc4=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: MAmo9EtxRMTsDG6CZhTswgPlPQKn60eyJp9uuW8la+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13358 (0x342e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: Nov 24 14:42:36 2024 GMT Not After : Dec 1 14:42:36 2024 GMT Subject: CN=67433b5d-60b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:3c:38:d9:8e:de:f3:e5:1f:37:5d:33:e0: 9e:e0:cb:82:df:cb:f6:e3:4c:58:89:97:c2:0a:96: 2a:66:bc:70:55:fc:76:9d:38:55:aa:4c:f8:df:58: 79:e8:f6:72:70:10:86:04:2b:50:a0:40:65:8b:73: 20:8f:5f:13:82:de:5a:88:2f:31:63:81:68:ca:09: c2:e5:fa:7d:af:e2:fe:2e:91:f3:dd:c0:23:bd:93: ed:b7:0c:8a:38:62:15:9a:46:bd:d0:3f:9c:5d:e2: ab:ff:6f:9e:09:3a:ff:20:3f:b4:57:e4:7c:a2:7e: ce:64:e2:4b:6c:90:5a:fb:81:5c:9e:f3:95:74:e0: 79:6a:57:2c:2e:d0:69:82:6f:b8:d1:35:f7:cf:f4: ab:5d:24:57:da:4f:7f:76:10:7d:60:ff:fc:6b:ae: e2:4a:78:f9:af:aa:74:51:28:64:4d:ca:92:57:9e: 4e:a5:c6:d0:17:e9:e5:4f:09:41:cd:62:35:a4:78: 4b:b4:52:71:a2:b5:fe:bb:9f:96:4b:64:46:5e:3f: ef:ba:e6:70:c6:20:4a:11:1e:4d:ca:a4:d2:85:6f: b3:16:e9:6c:da:3d:14:d0:5a:f5:e4:bb:d9:88:fa: 3e:01:d7:d4:65:d0:ff:11:a5:5d:5c:35:c0:bb:a0: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BC:10:AB:1B:5D:65:1A:19:C2:83:33:D6:D8:CA:00:EE:AD:D2:83 X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:37:a8:28:66:35:d9:f5:e3:ef:df:9b:19:ff:18:76:b9:2c: fc:94:89:f2:d2:15:66:ee:ce:9d:f1:b3:3f:4c:3e:da:87:38: b4:08:43:36:78:99:0e:2c:9b:5a:3a:8b:fe:4c:b0:04:1a:3f: 10:e3:0d:4a:b6:c1:52:b6:a7:b5:e6:4b:67:2b:ec:94:c4:65: 61:97:a2:95:ab:e5:81:a1:e0:a4:b4:c4:26:60:a3:c7:33:eb: 04:29:e2:91:38:28:c6:13:b0:60:1d:2c:fc:a3:67:10:05:92: c2:e7:c7:96:7c:f5:41:f9:67:7b:80:31:90:61:0b:4d:e0:99: 40:d1:f3:ae:b9:16:86:84:17:78:74:1d:61:a3:cb:43:49:fd: 78:5f:8d:98:5c:c4:d7:c1:a4:6f:62:f1:53:13:39:ad:66:35: 71:67:86:26:58:09:f3:d4:a8:4c:15:73:08:61:83:96:8b:f7: 54:23:09:e1:9d:7b:50:e1:59:58:94:70:b0:a6:73:16:15:18: 8a:fc:0b:f6:b8:41:e2:2f:df:40:ac:45:3e:d4:6d:d2:19:40: 65:11:e1:0c:26:84:4d:d4:57:dd:62:cd:c0:d5:2f:db:6e:2b: 56:36:fc:a5:d9:58:f6:0b:fb:6b:fd:0f:47:5d:16:25:25:35: 37:4a:86:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjQxMTI0MTQ0MjM2WhcNMjQxMjAxMTQ0MjM2WjAYMRYwFAYD VQQDEw02NzQzM2I1ZC02MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGQ8ONmO3vPlHzddM+Ce4MuC38v240xYiZfCCpYqZrxwVfx2nThVqkz431h5 6PZycBCGBCtQoEBli3Mgj18Tgt5aiC8xY4FoygnC5fp9r+L+LpHz3cAjvZPttwyK OGIVmka90D+cXeKr/2+eCTr/ID+0V+R8on7OZOJLbJBa+4FcnvOVdOB5alcsLtBp gm+40TX3z/SrXSRX2k9/dhB9YP/8a67iSnj5r6p0UShkTcqSV55OpcbQF+nlTwlB zWI1pHhLtFJxorX+u5+WS2RGXj/vuuZwxiBKER5NyqTShW+zFuls2j0U0Fr15LvZ iPo+AdfUZdD/EaVdXDXAu6CY1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO8EKsb XWUaGcKDM9bYygDurdKDMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8N6goZjXZ9ePv35sZ/xh2uSz8lIny0hVm7s6d8bM/TD7ahzi0CEM2 eJkOLJtaOov+TLAEGj8Q4w1KtsFStqe15ktnK+yUxGVhl6KVq+WBoeCktMQmYKPH M+sEKeKROCjGE7BgHSz8o2cQBZLC58eWfPVB+Wd7gDGQYQtN4JlA0fOuuRaGhBd4 dB1ho8tDSf14X42YXMTXwaRvYvFTEzmtZjVxZ4YmWAnz1KhMFXMIYYOWi/dUIwnh nXtQ4VlYlHCwpnMWFRiK/Av2uEHiL99ArEU+1G3SGUBlEeEMJoRN1FfdYs3A1S/b bitWNvyl2Vj2C/tr/Q9HXRYlJTU3SobG -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:58 2024 by rpki-client on console-fra.rpki-client.org