$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: 1vAgW/YeaOCRQVf415T6ZUbrUlEv262QGMsULYtGEx8= Subject key identifier: 1D:AC:A4:84:0B:6A:49:6D:16:AD:FA:DF:FE:2A:84:A0:F9:F8:59:5B Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1E3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1E2B Signing time: Sun 24 Nov 2024 15:58:41 +0000 Manifest this update: Sun 24 Nov 2024 15:58:40 +0000 Manifest next update: Sun 01 Dec 2024 15:58:40 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: V3ox2f8BWFimAIj4oCKZ1mWC5czh3nLlmbABpm9Lja8=) 2: 5D5A631E93D211EBAABA8D6AC4F9AE02.roa (hash: NdtTSEnj2R92n5sFgVINSflAuh16AqM9tMAdy5Ki084=) 3: 5E7E296A93D211EBAABA8D6AC4F9AE02.roa (hash: lJkROrcXoycDxKm+uQRdcrVpjD6GFAa8gixXd9pc32E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7742 (0x1e3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Nov 24 15:58:40 2024 GMT Not After : Dec 1 15:58:40 2024 GMT Subject: CN=67434d30-e8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:ab:87:d1:8c:f1:cd:6e:c9:c5:2f:eb:a7: 3a:d5:58:3b:3d:cf:34:23:8f:02:d3:8a:e1:7c:af: cf:7b:52:22:fb:16:f5:01:18:fb:fc:0a:99:e3:db: e7:97:12:b0:c9:4d:c1:da:71:72:c5:2f:66:c2:95: 49:40:80:e7:74:ac:94:09:e7:b3:26:54:d4:0f:76: 3b:08:c5:fb:9b:8f:71:3e:32:35:e8:8d:a8:de:fa: c8:44:35:69:fe:4d:92:49:72:c7:48:1d:78:08:70: 95:a5:91:c1:6f:2c:b5:0c:b9:71:d8:bc:f8:23:41: 00:59:38:69:1a:54:dd:f9:53:88:01:84:e1:7a:95: 92:d0:02:db:e9:88:61:fd:ef:8d:b6:76:2f:8a:c0: 4d:f2:2a:48:73:7b:98:51:6c:2b:3f:d1:a6:87:f3: d8:cf:3b:a4:63:56:a7:87:79:16:e0:66:4d:0f:65: 2e:9e:28:a5:d5:32:76:d8:9a:c9:c1:9b:1a:08:e8: 36:09:4b:ea:e5:4d:f0:ad:c2:ac:34:30:d3:16:e3: 07:66:92:b6:5c:e3:52:0d:ea:8a:17:ad:db:5a:6f: 47:c7:4b:30:26:0c:81:2e:9b:b6:f2:07:0f:49:c3: 67:22:14:15:1a:d3:96:ef:87:31:8b:3b:18:25:4e: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:A4:84:0B:6A:49:6D:16:AD:FA:DF:FE:2A:84:A0:F9:F8:59:5B X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:85:d8:5a:cb:7d:cc:3b:38:d2:b6:be:24:f4:ae:85:94:c5: f8:92:39:a9:52:b2:c9:7a:c4:59:cb:e5:7f:47:7c:99:fa:1e: 21:05:a4:89:ef:c8:0d:56:f5:78:0e:6a:14:16:cc:7a:fc:1a: 25:71:0f:1a:0c:98:f9:05:47:5e:44:0c:47:bb:10:28:6e:ae: 74:87:51:74:0f:97:13:61:c7:ae:cf:03:31:fb:9f:55:33:da: 09:8e:bb:6b:c3:f9:85:3b:c3:0a:94:dd:d4:4e:f5:ad:78:9a: c7:b4:2e:78:7b:e4:3c:08:11:13:bd:9f:f4:e5:a8:90:5f:4e: 57:ed:d8:fc:4b:d8:78:9b:56:ad:99:d6:11:3d:f9:6e:3a:72: b9:52:b9:17:f7:67:09:ae:c5:13:ca:30:77:21:8a:de:37:a9: 2b:37:33:34:99:6a:63:d6:81:7e:91:6a:61:cb:25:ec:50:af: 83:99:95:d5:ee:5d:de:97:e6:19:ff:be:ca:8f:58:9e:ea:f8: e4:f8:bd:f3:5f:a8:8c:09:ab:69:54:b4:65:e6:e0:9a:19:9f: fa:c9:6a:b0:9e:93:28:02:30:cc:00:c0:d6:52:d7:f0:ff:cf: 4d:2f:77:e9:5a:5d:ce:34:1d:c0:8f:ae:af:dd:57:f5:b2:e2: 58:9b:04:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjQxMTI0MTU1ODQwWhcNMjQxMjAxMTU1ODQwWjAYMRYwFAYD VQQDEw02NzQzNGQzMC1lOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIqrh9GM8c1uycUv66c61Vg7Pc80I48C04rhfK/Pe1Ii+xb1ARj7/AqZ49vn lxKwyU3B2nFyxS9mwpVJQIDndKyUCeezJlTUD3Y7CMX7m49xPjI16I2o3vrIRDVp /k2SSXLHSB14CHCVpZHBbyy1DLlx2Lz4I0EAWThpGlTd+VOIAYThepWS0ALb6Yhh /e+NtnYvisBN8ipIc3uYUWwrP9Gmh/PYzzukY1anh3kW4GZND2Uuniil1TJ22JrJ wZsaCOg2CUvq5U3wrcKsNDDTFuMHZpK2XONSDeqKF63bWm9Hx0swJgyBLpu28gcP ScNnIhQVGtOW74cxizsYJU5iHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2spIQL akltFq363/4qhKD5+FlbMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKhdhay33MOzjStr4k9K6FlMX4kjmpUrLJesRZy+V/R3yZ+h4hBaSJ 78gNVvV4DmoUFsx6/BolcQ8aDJj5BUdeRAxHuxAobq50h1F0D5cTYceuzwMx+59V M9oJjrtrw/mFO8MKlN3UTvWteJrHtC54e+Q8CBETvZ/05aiQX05X7dj8S9h4m1at mdYRPfluOnK5UrkX92cJrsUTyjB3IYreN6krNzM0mWpj1oF+kWphyyXsUK+DmZXV 7l3el+YZ/77Kj1ie6vjk+L3zX6iMCatpVLRl5uCaGZ/6yWqwnpMoAjDMAMDWUtfw /89NL3fpWl3ONB3Aj66v3Vf1suJYmwRq -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:17 2024 by rpki-client on console-ams.rpki-client.org