$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json) Hash identifier: 6HpYrRnqljk+xWChMCeR7z0DS5Iu/G46178UFKEewR4= Subject key identifier: 5A:CC:54:04:9C:AB:D0:C9:22:36:D2:A0:13:45:6A:59:CF:74:5B:80 Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft Manifest number: 0AB7 Signing time: Tue 26 Nov 2024 19:12:31 +0000 Manifest this update: Tue 26 Nov 2024 19:12:30 +0000 Manifest next update: Tue 03 Dec 2024 19:12:30 +0000 Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: euebQCKdKLFw6Q3jbqFJRjmHY9etLobbY7QXNHuGu3E=) 2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: QMRA0FVStEOYnc4bxxbjBfYHOGHS2jiP/r1+CjS/IZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 19:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D Validity Not Before: Nov 26 19:12:30 2024 GMT Not After : Dec 3 19:12:30 2024 GMT Subject: CN=67461d9f-b5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:9b:99:36:12:e8:b1:1d:f6:d2:00:36:21: 04:bf:77:77:db:b3:2f:c0:cf:57:4e:0c:9f:01:a0: 0b:ea:be:1b:38:38:2f:22:b0:3b:05:5a:56:4e:de: fb:17:40:13:76:9c:72:60:d2:79:56:97:37:45:1e: ad:f3:e6:e7:69:01:a9:55:81:78:f8:e9:a2:08:b0: 54:0a:eb:b1:99:a2:4c:1a:3c:9d:83:0f:a6:4d:51: d2:c4:8b:a8:55:ab:04:b1:7d:f1:9d:48:4f:97:c0: 5f:15:e6:3e:87:c6:83:db:66:3b:bf:91:33:25:f5: 60:61:8c:06:b9:93:de:33:0f:43:d7:99:cb:0c:23: cb:ce:c8:24:07:8b:0f:4a:22:56:9d:3c:3f:94:ef: f2:99:6c:69:20:06:79:1a:c2:6a:5c:bc:ae:c3:cd: 12:98:b2:de:9a:00:56:c6:52:80:f3:7d:1c:3a:35: 78:30:e7:ce:a3:4c:38:f8:ec:58:66:bf:d1:5b:87: 23:90:d6:31:e5:d7:81:70:14:3f:c9:28:04:cf:fd: e4:a4:d2:3b:6d:e1:b7:fa:41:1f:fa:74:62:8f:28: e2:57:84:a2:63:9e:4c:05:d4:c4:c6:d2:88:7b:b8: b0:67:de:d7:9d:ea:32:b4:ac:42:0d:e2:52:85:dd: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CC:54:04:9C:AB:D0:C9:22:36:D2:A0:13:45:6A:59:CF:74:5B:80 X509v3 Authority Key Identifier: keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c4:56:00:4c:27:e1:a9:2d:ff:a4:ea:3a:72:4d:97:2e:70: 49:70:8d:a4:c7:8d:3e:8f:b5:2f:fe:3a:42:85:eb:0d:07:4a: e0:bc:e6:00:71:28:7a:af:c9:60:2d:25:b3:03:9a:f7:3a:28: da:97:8d:e1:ff:ca:19:37:43:7c:9d:91:ef:01:e2:7e:38:67: 3d:53:19:e9:b6:20:3c:4c:0d:02:ef:db:ee:59:08:d2:a2:d7: 84:e4:3f:9b:22:26:39:e9:bc:1a:9f:c2:bc:de:62:60:9d:3c: df:cc:d4:b3:c9:8e:fd:43:db:44:22:ef:5a:87:2d:ef:9e:39: be:36:8a:76:8c:ab:6f:03:78:ef:4c:0b:96:b1:e8:fb:1c:a0: b7:0d:b0:8b:5b:a6:5f:e7:de:2a:4d:1e:79:25:ef:38:50:ef: ac:2e:13:f3:21:69:e1:ab:6c:0a:80:6f:eb:48:05:50:5e:1b: 65:3e:f8:b0:1f:24:ce:fc:56:93:88:f8:f5:63:1c:63:0e:07: 6f:25:1c:86:b0:e2:f8:dd:03:43:62:c6:03:a2:c7:e5:3e:73: 5a:f3:ce:48:77:a9:9f:e7:e8:86:f8:6d:45:a2:c3:4c:04:2a: 39:5f:11:63:ec:0e:d2:47:f1:02:0e:56:4c:6e:ed:50:e4:1b: 09:9e:05:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5 QTdDMkFFMEQwHhcNMjQxMTI2MTkxMjMwWhcNMjQxMjAzMTkxMjMwWjAYMRYwFAYD VQQDEw02NzQ2MWQ5Zi1iNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfWbmTYS6LEd9tIANiEEv3d327MvwM9XTgyfAaAL6r4bODgvIrA7BVpWTt77 F0ATdpxyYNJ5Vpc3RR6t8+bnaQGpVYF4+OmiCLBUCuuxmaJMGjydgw+mTVHSxIuo VasEsX3xnUhPl8BfFeY+h8aD22Y7v5EzJfVgYYwGuZPeMw9D15nLDCPLzsgkB4sP SiJWnTw/lO/ymWxpIAZ5GsJqXLyuw80SmLLemgBWxlKA830cOjV4MOfOo0w4+OxY Zr/RW4cjkNYx5deBcBQ/ySgEz/3kpNI7beG3+kEf+nRijyjiV4SiY55MBdTExtKI e7iwZ97XneoytKxCDeJShd3b4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrMVASc q9DJIjbSoBNFalnPdFuAMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho MndhZHE4NWRnM0NhZkNyZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyxFYATCfhqS3/pOo6ck2XLnBJcI2kx40+j7Uv/jpChesNB0rgvOYA cSh6r8lgLSWzA5r3Oijal43h/8oZN0N8nZHvAeJ+OGc9UxnptiA8TA0C79vuWQjS oteE5D+bIiY56bwan8K83mJgnTzfzNSzyY79Q9tEIu9ahy3vnjm+Nop2jKtvA3jv TAuWsej7HKC3DbCLW6Zf594qTR55Je84UO+sLhPzIWnhq2wKgG/rSAVQXhtlPviw HyTO/FaTiPj1YxxjDgdvJRyGsOL43QNDYsYDosflPnNa885Id6mf5+iG+G1FosNM BCo5XxFj7A7SR/ECDlZMbu1Q5BsJngUq -----END CERTIFICATE-----Generated at Tue Nov 26 21:52:50 2024 by rpki-client on console-ams.rpki-client.org