$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: k7BjJ2qmtxWmCNewia+5qZAyS+PsQ4pyB7wNkaq/GGc= Subject key identifier: 5B:0D:D0:C0:89:95:0D:C6:09:8C:A4:0B:77:A8:76:13:13:A3:8D:04 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1C94 Signing time: Fri 22 Nov 2024 16:11:27 +0000 Manifest this update: Fri 22 Nov 2024 16:11:26 +0000 Manifest next update: Fri 29 Nov 2024 16:11:26 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: vYwykv0dph5mQXAvdC/1W6opd8+Z6ZgHVraFmcKDGLM=) 2: 3C1382D0BEA211E68902BC3DC4F9AE02.roa (hash: fz4f6MmX7R6kRL2gcaEtaQrQoy9cdumfsJWJxUL1YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7326 (0x1c9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Nov 22 16:11:26 2024 GMT Not After : Nov 29 16:11:26 2024 GMT Subject: CN=6740ad2f-1f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:cf:50:d7:69:bf:bf:80:29:6c:89:6f:d0: d3:ad:73:d2:2c:d1:af:f1:c1:02:19:6e:57:5b:ff: 9e:f3:81:bc:bf:4d:e1:89:9e:c2:3b:b3:40:01:6a: 3b:d2:3e:e3:1c:c3:d0:73:e5:8b:04:7c:df:a9:66: f0:96:42:04:e3:fd:1a:83:62:d6:09:a6:6f:eb:02: bc:4d:80:51:1b:97:f8:ae:0f:f2:7d:39:9e:7f:9f: cd:16:5f:97:56:d3:f1:44:b7:d9:f0:08:84:a9:52: 37:b5:94:cb:ea:dc:41:a9:8b:ec:a1:6e:ac:1e:98: 3a:0a:f1:2f:8f:4b:df:96:7e:4e:18:e3:ae:75:ac: 7d:e4:9a:95:f0:1b:df:c5:51:23:06:38:f0:39:8d: f1:f6:87:2c:44:8c:a5:4f:15:87:2e:d5:3c:bb:76: ed:b3:10:f3:d7:c8:39:47:f3:01:dd:da:00:9a:e3: db:36:61:ad:62:89:c5:e1:9d:fe:ed:ee:8e:82:e8: c0:68:9c:82:0f:dd:23:10:c4:36:26:3f:85:4d:01: a0:33:5d:e9:49:92:26:8d:cc:ff:9e:9f:4d:dc:fb: 17:c5:39:46:4a:6f:52:12:5f:6f:34:94:fa:d0:f3: 56:e5:d3:f3:ac:07:0b:3d:e1:60:4a:58:64:19:0e: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:D0:C0:89:95:0D:C6:09:8C:A4:0B:77:A8:76:13:13:A3:8D:04 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f3:1a:55:b8:5d:70:d3:18:13:1f:3e:6a:92:0c:ff:34:bc: 0f:ae:0a:ba:66:59:83:06:ae:2c:c9:94:c0:d9:11:94:d1:5a: fb:3b:81:43:68:fa:0f:49:fc:33:71:4a:41:e6:54:32:56:ed: 1e:9b:7b:ef:8d:99:53:eb:30:66:5f:f9:c4:1b:af:18:46:9e: 2b:c3:55:0f:6a:ef:02:71:5f:10:24:59:df:b6:fd:c9:e8:ca: a7:f5:4e:10:08:46:42:a4:c0:a3:f0:8b:03:48:b5:5f:a3:48: c1:d0:3a:26:3f:33:41:13:be:bf:f3:8e:49:9e:08:11:04:ef: 37:cd:f2:38:75:19:a3:65:d0:b5:fd:93:c2:24:21:a3:82:f4: 33:cb:79:89:d6:a8:21:7d:b9:45:9f:94:e6:13:fe:a1:dc:00: 68:44:56:20:1a:a6:b1:7b:17:a5:37:2c:8a:2c:f8:55:d4:96: 4d:c3:44:c7:1a:9f:9c:35:c5:12:62:95:0a:8e:9c:24:71:8b: 57:aa:e0:ab:4c:13:1a:f2:41:ea:26:57:48:7e:8d:c1:3e:81: 06:d1:30:c1:b9:b2:8c:2a:a9:0c:7b:b3:c3:05:65:45:91:c6: 38:af:86:b6:91:86:0d:67:46:18:3c:6d:e5:ab:39:ba:1b:c0: ef:95:c0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjQxMTIyMTYxMTI2WhcNMjQxMTI5MTYxMTI2WjAYMRYwFAYD VQQDEw02NzQwYWQyZi0xZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYvPUNdpv7+AKWyJb9DTrXPSLNGv8cECGW5XW/+e84G8v03hiZ7CO7NAAWo7 0j7jHMPQc+WLBHzfqWbwlkIE4/0ag2LWCaZv6wK8TYBRG5f4rg/yfTmef5/NFl+X VtPxRLfZ8AiEqVI3tZTL6txBqYvsoW6sHpg6CvEvj0vfln5OGOOudax95JqV8Bvf xVEjBjjwOY3x9ocsRIylTxWHLtU8u3btsxDz18g5R/MB3doAmuPbNmGtYonF4Z3+ 7e6OgujAaJyCD90jEMQ2Jj+FTQGgM13pSZImjcz/np9N3PsXxTlGSm9SEl9vNJT6 0PNW5dPzrAcLPeFgSlhkGQ71EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsN0MCJ lQ3GCYykC3eodhMTo40EMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj8xpVuF1w0xgTHz5qkgz/NLwPrgq6ZlmDBq4syZTA2RGU0Vr7O4FD aPoPSfwzcUpB5lQyVu0em3vvjZlT6zBmX/nEG68YRp4rw1UPau8CcV8QJFnftv3J 6Mqn9U4QCEZCpMCj8IsDSLVfo0jB0DomPzNBE76/845JnggRBO83zfI4dRmjZdC1 /ZPCJCGjgvQzy3mJ1qghfblFn5TmE/6h3ABoRFYgGqaxexelNyyKLPhV1JZNw0TH Gp+cNcUSYpUKjpwkcYtXquCrTBMa8kHqJldIfo3BPoEG0TDBubKMKqkMe7PDBWVF kcY4r4a2kYYNZ0YYPG3lqzm6G8DvlcCz -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org