$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: RwZlpY/Fz7LFn7yhmbVLYPKdGDB8pipwP2RVD+DyFRY= Subject key identifier: A1:4C:60:56:40:08:7D:F0:A8:38:28:E3:E2:CB:00:9B:34:9D:B8:C6 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 03F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 03F4 Signing time: Sat 23 Nov 2024 00:04:02 +0000 Manifest this update: Sat 23 Nov 2024 00:04:02 +0000 Manifest next update: Sat 30 Nov 2024 00:04:02 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: fR12pVmaknPfQ2Up1UykNF9AKO8dh7hz3kIC+uyUykU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1012 (0x3f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Nov 23 00:04:02 2024 GMT Not After : Nov 30 00:04:02 2024 GMT Subject: CN=67411bf2-51e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:e0:ff:1d:05:cf:8f:dc:90:1e:6d:01:24: 74:70:3a:9d:10:c6:9a:14:2b:e4:6b:2a:11:83:1a: c9:e0:82:4d:63:fb:64:b5:55:4b:98:f3:8e:94:b2: 0f:29:63:29:63:38:10:ec:4d:ec:8b:7e:ac:83:5e: c8:fd:75:2b:25:bc:fd:ac:f6:92:64:be:d0:ec:12: ac:74:34:22:2f:6a:09:c2:fd:70:2a:e5:4a:fa:08: 32:b5:f2:0c:0e:11:79:7a:1f:a0:ef:44:85:29:b2: 3c:11:b1:7e:94:85:cb:5f:6a:a0:28:38:6d:a7:a6: 90:5c:d6:1a:12:a0:d7:73:e5:f5:e4:50:82:17:3c: 9c:02:89:73:91:03:f5:a7:a8:2b:b3:9b:c9:07:bb: e6:d7:bb:8f:01:ff:0b:d8:6c:13:fe:8c:e8:67:29: 7c:4e:e6:82:79:5b:b6:34:54:c9:6b:c2:c2:44:71: 96:6e:55:0c:5f:cf:9e:a4:56:65:70:9f:f4:6e:f9: dc:69:fb:69:a7:65:11:36:d9:d8:78:a0:f5:6d:43: f1:b9:82:d7:ac:41:e2:53:58:10:b7:4c:e4:f9:97: e3:7c:52:58:46:25:2b:ba:ec:ba:69:ed:d4:5f:f4: ac:d2:31:71:fb:3f:04:6e:73:b2:77:ca:04:3e:0f: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4C:60:56:40:08:7D:F0:A8:38:28:E3:E2:CB:00:9B:34:9D:B8:C6 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:43:16:ff:dc:9a:56:cd:b9:a2:d7:b5:ea:31:dc:f3:cd:f2: 14:d8:64:98:92:c6:84:ab:5a:43:d1:d3:a4:fd:fd:39:45:b9: 43:14:c2:d6:3e:5a:7a:f6:23:da:18:ed:5a:7d:68:dd:2b:ef: a9:b4:08:2c:ed:8f:f4:19:66:2a:cf:3b:1d:dc:2a:2b:d6:48: 22:d6:96:2a:76:49:74:99:21:d3:99:b3:e0:a9:e5:c2:dd:7c: 8a:32:99:c5:9c:88:f6:f4:c3:5d:1b:a9:64:ee:47:3b:c6:01: c7:f1:6e:77:6e:a4:c8:bc:13:15:c9:15:20:0d:32:53:56:98: ce:d6:cd:cc:ec:6b:97:a7:1d:c8:eb:ec:bc:d2:73:22:6c:b3: 2b:68:30:ce:52:dc:26:e7:89:39:b1:a4:d4:e6:3f:4a:e8:aa: a3:ed:a1:cc:3c:7c:62:d2:d0:c0:a7:e1:50:ba:ca:20:9b:13: 64:0d:b2:a6:a3:f0:38:6d:b1:56:d3:19:4d:3a:ab:7c:a2:36: 0a:c2:e5:49:82:94:f3:86:19:80:24:b6:ca:43:12:c8:f6:c4: eb:a5:25:f0:8a:29:27:47:2b:06:92:c1:25:2f:48:34:05:1e: 0f:5f:a4:7a:95:99:1d:20:a9:5b:31:b3:65:ca:e3:ae:fc:dd: ed:19:f4:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjQxMTIzMDAwNDAyWhcNMjQxMTMwMDAwNDAyWjAYMRYwFAYD VQQDEw02NzQxMWJmMi01MWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkDg/x0Fz4/ckB5tASR0cDqdEMaaFCvkayoRgxrJ4IJNY/tktVVLmPOOlLIP KWMpYzgQ7E3si36sg17I/XUrJbz9rPaSZL7Q7BKsdDQiL2oJwv1wKuVK+ggytfIM DhF5eh+g70SFKbI8EbF+lIXLX2qgKDhtp6aQXNYaEqDXc+X15FCCFzycAolzkQP1 p6grs5vJB7vm17uPAf8L2GwT/ozoZyl8TuaCeVu2NFTJa8LCRHGWblUMX8+epFZl cJ/0bvncaftpp2URNtnYeKD1bUPxuYLXrEHiU1gQt0zk+ZfjfFJYRiUruuy6ae3U X/Ss0jFx+z8EbnOyd8oEPg/aHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFMYFZA CH3wqDgo4+LLAJs0nbjGMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Qxb/3JpWzbmi17XqMdzzzfIU2GSYksaEq1pD0dOk/f05RblDFMLW Plp69iPaGO1afWjdK++ptAgs7Y/0GWYqzzsd3Cor1kgi1pYqdkl0mSHTmbPgqeXC 3XyKMpnFnIj29MNdG6lk7kc7xgHH8W53bqTIvBMVyRUgDTJTVpjO1s3M7GuXpx3I 6+y80nMibLMraDDOUtwm54k5saTU5j9K6Kqj7aHMPHxi0tDAp+FQusogmxNkDbKm o/A4bbFW0xlNOqt8ojYKwuVJgpTzhhmAJLbKQxLI9sTrpSXwiiknRysGksElL0g0 BR4PX6R6lZkdIKlbMbNlyuOu/N3tGfQA -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org