$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: TZOo9TtDgS2aLZA0LDQ1YME1y/XBHgSdMqoahKGRj8g= Subject key identifier: E3:97:6E:7E:25:A5:51:00:75:DC:5A:6A:01:13:96:C5:60:15:6E:D5 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 3453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 3437 Signing time: Fri 22 Nov 2024 14:46:25 +0000 Manifest this update: Fri 22 Nov 2024 14:46:24 +0000 Manifest next update: Fri 29 Nov 2024 14:46:24 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: AfuHiAqwWso1EeJa1RU1NV2J2nwDkDuT+pPdHBzYHh0=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13395 (0x3453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Nov 22 14:46:24 2024 GMT Not After : Nov 29 14:46:24 2024 GMT Subject: CN=67409941-eb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1d:de:34:90:e4:ce:65:50:af:ca:59:5b:c0: ce:7e:b3:24:e7:90:75:3b:05:d8:c2:8e:b6:c6:bd: 9c:a0:91:22:91:bf:76:ec:d6:68:5d:33:bb:a4:68: f2:b4:02:64:f7:26:7f:09:37:b9:59:a6:45:c7:f8: db:00:7b:4f:f3:3b:16:97:0b:7f:6c:64:0f:a0:31: 9c:32:60:22:b9:1b:33:e8:78:64:c1:6c:26:16:f8: 5d:9f:c5:8e:11:ab:b2:73:bc:94:a8:cd:22:32:ad: 5d:3b:52:90:d3:38:20:ca:57:d6:11:4c:19:e7:c1: 31:8b:bc:1a:f4:be:b7:26:d6:43:68:bc:87:21:c6: ba:34:71:82:11:1b:b7:aa:d0:6f:30:c4:1b:c4:ad: f7:27:cc:fc:42:d4:8e:a1:00:80:89:53:e6:2a:d9: f9:55:01:13:fb:50:36:37:a4:8a:8c:fd:ba:f5:e4: 0d:78:0a:17:9a:19:81:9d:23:0b:7a:20:c9:82:c6: 3f:4b:50:e1:c4:25:74:04:f3:b2:0d:50:28:e8:fa: a0:8a:3a:9d:1f:52:b4:af:50:c2:4d:44:34:9e:c8: 88:69:e2:14:3e:54:8b:ab:1c:9a:47:4f:4b:27:6d: 7d:d3:ca:7b:f3:a6:58:1d:1d:be:00:be:a4:85:21: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:97:6E:7E:25:A5:51:00:75:DC:5A:6A:01:13:96:C5:60:15:6E:D5 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a2:cb:4c:4f:e3:e9:b7:3a:83:d6:68:0d:48:41:c3:f1:1c: 72:58:ae:00:eb:bb:40:02:0a:cb:f2:d4:19:59:c5:04:c6:7a: de:e3:e1:46:46:56:ee:5d:1f:e4:4c:c6:38:08:e1:02:44:49: d8:42:1d:2d:13:f9:da:48:58:25:46:4b:f1:67:90:78:c1:e8: 3e:e6:67:34:a6:cc:9e:d7:47:af:e0:eb:bf:43:64:ce:08:bc: 63:b0:1c:eb:c3:08:11:d3:a9:7e:a5:b8:6b:ae:99:2b:97:b2: 38:2a:55:27:b8:9f:5a:13:5c:91:8b:ff:24:48:a8:37:e9:12: 68:0a:c8:33:9d:a8:e6:10:4d:5d:93:61:3c:c4:09:27:11:64: 14:d5:d1:90:fd:fa:be:13:3d:ae:6a:c5:8e:f9:fd:cd:6c:cf: 69:7d:c1:d6:37:51:e1:fc:73:1c:d3:95:44:5c:77:f5:d0:ac: 41:6f:25:44:c4:9e:a5:d7:bf:c1:5f:d0:70:8e:e5:79:9b:61: 17:50:be:a7:2a:7d:c4:df:43:14:ee:a4:55:c4:f9:58:a1:80: ec:79:8f:25:d0:01:26:f2:75:a6:03:e0:d0:f5:78:6f:42:c3: 96:a2:15:fe:a7:6f:bf:fe:dd:d3:f0:9f:17:10:4b:d4:37:8a: de:7f:06:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjQxMTIyMTQ0NjI0WhcNMjQxMTI5MTQ0NjI0WjAYMRYwFAYD VQQDEw02NzQwOTk0MS1lYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9R3eNJDkzmVQr8pZW8DOfrMk55B1OwXYwo62xr2coJEikb927NZoXTO7pGjy tAJk9yZ/CTe5WaZFx/jbAHtP8zsWlwt/bGQPoDGcMmAiuRsz6HhkwWwmFvhdn8WO Eauyc7yUqM0iMq1dO1KQ0zggylfWEUwZ58Exi7wa9L63JtZDaLyHIca6NHGCERu3 qtBvMMQbxK33J8z8QtSOoQCAiVPmKtn5VQET+1A2N6SKjP269eQNeAoXmhmBnSML eiDJgsY/S1DhxCV0BPOyDVAo6PqgijqdH1K0r1DCTUQ0nsiIaeIUPlSLqxyaR09L J21908p786ZYHR2+AL6khSEVTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOXbn4l pVEAddxaagETlsVgFW7VMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQostMT+PptzqD1mgNSEHD8RxyWK4A67tAAgrL8tQZWcUExnre4+FG RlbuXR/kTMY4COECREnYQh0tE/naSFglRkvxZ5B4weg+5mc0psye10ev4Ou/Q2TO CLxjsBzrwwgR06l+pbhrrpkrl7I4KlUnuJ9aE1yRi/8kSKg36RJoCsgznajmEE1d k2E8xAknEWQU1dGQ/fq+Ez2uasWO+f3NbM9pfcHWN1Hh/HMc05VEXHf10KxBbyVE xJ6l17/BX9BwjuV5m2EXUL6nKn3E30MU7qRVxPlYoYDseY8l0AEm8nWmA+DQ9Xhv QsOWohX+p2+//t3T8J8XEEvUN4refwYj -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org