$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json) Hash identifier: qwCCw1NvetyDPSXvzlYpqyWiJE2Ldad0yy4KUZeeA50= Subject key identifier: EA:CA:B9:06:94:47:62:7B:DF:61:1D:03:96:C4:69:56:44:A8:B4:0A Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft Manifest number: 0604 Signing time: Fri 22 Nov 2024 22:17:59 +0000 Manifest this update: Fri 22 Nov 2024 22:17:58 +0000 Manifest next update: Fri 29 Nov 2024 22:17:58 +0000 Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: vWyrGLViS6/BgdvoNm4zxSugIowz65064RARyhn+WIs=) 2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: ut9kkhaYpPkueMT9PUXekkExmboRUtj4jv3lyVcffmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Validity Not Before: Nov 22 22:17:58 2024 GMT Not After : Nov 29 22:17:58 2024 GMT Subject: CN=67410316-8061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:ec:31:93:54:25:48:65:e9:a6:9b:a0:3e: f2:e8:d8:f9:a4:ef:72:dd:2a:48:46:5e:28:34:7d: 47:8d:0e:30:92:f1:22:6c:72:85:bc:cc:2e:7e:9e: 75:d4:0c:bf:dc:95:de:e8:64:d1:08:17:ba:c7:11: b2:6e:0c:c9:e0:c7:2c:ef:a4:66:25:df:31:fb:1f: a7:c8:96:83:c7:cd:f4:bc:ca:14:2e:49:bb:c5:5c: 33:54:87:42:29:d5:2d:31:4d:fa:3a:eb:c0:02:ff: f5:e6:1b:f4:fc:85:31:4d:26:90:2f:70:65:44:dc: 6f:66:07:cc:35:c2:0e:3b:de:15:a3:1d:0d:80:87: b1:6c:3c:14:05:9a:2f:2e:7c:d8:5d:76:ff:de:5a: 7c:97:be:f1:85:11:49:28:f9:65:46:2e:4f:11:00: 0f:2c:7a:87:41:c5:fb:a9:3f:48:23:80:eb:02:6b: 12:45:73:a9:9a:90:bb:65:4c:dd:8e:23:05:ee:5e: 62:71:99:30:91:f9:ac:2e:89:50:e4:2d:1d:64:6b: eb:7e:14:db:bd:fe:53:39:20:9e:fe:57:67:db:a5: 44:88:4d:41:85:9a:d0:e7:2e:fc:14:d8:0d:c1:50: 9a:b7:e9:dd:fa:63:d8:92:9e:a7:f7:9a:62:fe:fe: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CA:B9:06:94:47:62:7B:DF:61:1D:03:96:C4:69:56:44:A8:B4:0A X509v3 Authority Key Identifier: keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:07:c9:52:63:94:2c:39:0f:7f:41:12:27:c8:7c:0f:a5:d5: b0:15:93:b4:80:2f:14:10:27:f2:40:d1:f8:ab:5e:27:79:53: 4e:a9:4d:89:a2:8a:de:79:42:89:99:64:d5:d8:a6:ad:b7:8e: 8c:37:c6:59:b6:c5:ba:b1:59:86:8f:da:ac:e9:b1:2b:0b:0b: 34:5a:0c:31:d2:13:58:e1:81:1d:35:c0:6d:c5:62:78:bb:e2: a3:6f:b9:19:3c:01:11:84:fe:ab:6b:fe:b1:c0:2a:e1:a1:7e: 25:15:a1:51:50:85:9e:42:53:75:c3:d8:3f:37:ec:da:91:f4: c2:c0:58:14:b1:94:10:86:a4:e9:40:eb:35:4a:41:71:2d:10: fd:4b:18:60:b5:ba:a0:aa:2a:ee:7b:78:92:5b:16:87:c2:9e: 01:9f:3f:15:d6:84:40:db:ae:24:5f:a7:e2:27:14:73:45:8c: 69:ba:86:4e:4a:a4:33:8e:da:11:6b:e2:1f:96:6f:1c:e6:11: ca:34:3a:86:80:70:ac:f5:1b:60:82:a8:bc:2a:2f:80:d7:54: d3:ff:7f:c6:97:bc:a1:cf:53:08:38:f1:d3:1d:64:6c:90:48: da:d7:80:69:78:ab:e7:89:4f:f1:a5:59:6f:b6:c7:ce:bf:42: 00:82:2e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3 NEVERUJCQkYwHhcNMjQxMTIyMjIxNzU4WhcNMjQxMTI5MjIxNzU4WjAYMRYwFAYD VQQDEw02NzQxMDMxNi04MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG3sMZNUJUhl6aaboD7y6Nj5pO9y3SpIRl4oNH1HjQ4wkvEibHKFvMwufp51 1Ay/3JXe6GTRCBe6xxGybgzJ4Mcs76RmJd8x+x+nyJaDx830vMoULkm7xVwzVIdC KdUtMU36OuvAAv/15hv0/IUxTSaQL3BlRNxvZgfMNcIOO94Vox0NgIexbDwUBZov LnzYXXb/3lp8l77xhRFJKPllRi5PEQAPLHqHQcX7qT9II4DrAmsSRXOpmpC7ZUzd jiMF7l5icZkwkfmsLolQ5C0dZGvrfhTbvf5TOSCe/ldn26VEiE1BhZrQ5y78FNgN wVCat+nd+mPYkp6n95pi/v7MnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrKuQaU R2J732EdA5bEaVZEqLQKMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1 NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASB8lSY5QsOQ9/QRInyHwPpdWwFZO0gC8UECfyQNH4q14neVNOqU2J ooreeUKJmWTV2Katt46MN8ZZtsW6sVmGj9qs6bErCws0Wgwx0hNY4YEdNcBtxWJ4 u+Kjb7kZPAERhP6ra/6xwCrhoX4lFaFRUIWeQlN1w9g/N+zakfTCwFgUsZQQhqTp QOs1SkFxLRD9Sxhgtbqgqirue3iSWxaHwp4Bnz8V1oRA264kX6fiJxRzRYxpuoZO SqQzjtoRa+Iflm8c5hHKNDqGgHCs9Rtggqi8Ki+A11TT/3/Gl7yhz1MIOPHTHWRs kEja14BpeKvniU/xpVlvtsfOv0IAgi6h -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org