$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: E/c7SgAISR7q2klpzS31UCq/Dvl7DT/QM/QYeSF4uDQ= Subject key identifier: E6:59:5A:2D:CE:63:C9:29:DB:04:99:7A:94:CF:DF:A8:BA:8E:37:6A Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 29B4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 29B4 Signing time: Sun 24 Nov 2024 15:31:33 +0000 Manifest this update: Sun 24 Nov 2024 15:31:32 +0000 Manifest next update: Sun 01 Dec 2024 15:31:32 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: DwUZ5w450Vz/B/QacfWkBDTAWuDP9bj10+S7myF8MMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10676 (0x29b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Nov 24 15:31:32 2024 GMT Not After : Dec 1 15:31:32 2024 GMT Subject: CN=674346d5-316a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:55:ad:fe:07:8b:a8:a9:bb:66:4a:4c:2a: 3c:49:93:87:1d:03:c6:1a:36:d3:a6:1b:c7:20:44: 59:b1:64:b6:07:d3:44:0a:76:5f:03:78:72:f0:d9: 1e:c7:f7:de:7e:46:4f:47:01:30:df:71:4e:a0:03: b6:32:41:62:f5:e7:e6:0b:8f:5c:24:a0:eb:19:88: 06:ef:fb:0f:a3:5c:27:61:5a:aa:73:a8:42:d8:a9: ec:f5:93:1b:64:17:cd:92:1e:34:51:4c:9a:c4:79: 16:0b:c5:97:f6:87:1b:23:30:fa:5a:02:67:44:e9: 53:0a:27:3b:1c:f4:93:b2:62:8a:7c:40:14:c4:e3: 9b:2f:53:50:65:19:85:ce:74:2a:01:6c:7c:cf:4d: c7:99:76:aa:e7:3e:89:c9:fc:21:e5:cb:dc:fd:49: b8:aa:2f:fc:fa:5d:0d:5f:73:2a:a0:4e:fa:50:d6: 29:5f:39:d6:81:80:b2:79:c3:9a:b6:08:9f:7f:f4: 36:ca:50:15:c1:39:ce:ea:ed:82:3d:83:9f:25:82: c5:fb:6d:9c:cc:6f:9d:c1:30:a2:dd:39:98:4e:04: 23:f1:17:ff:6b:9b:01:87:a8:ff:28:7d:01:3e:f6: a3:02:47:03:89:db:9d:c1:67:56:c1:59:03:f0:c3: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:59:5A:2D:CE:63:C9:29:DB:04:99:7A:94:CF:DF:A8:BA:8E:37:6A X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fd:4e:b7:c4:9f:fd:dc:45:62:54:2c:56:6a:b8:cf:96:49: c5:75:02:2d:22:eb:eb:bf:66:fb:b2:aa:d0:3b:4b:ef:c1:17: 01:2f:59:81:bb:83:ba:2e:4a:eb:0f:9c:e5:e3:b4:dc:dd:fa: e2:2e:56:14:5d:56:0d:67:2e:56:1a:7c:60:1b:2b:69:47:92: 6f:1e:5b:96:69:06:f7:81:ab:23:50:ec:95:5d:75:62:f4:88: 6a:00:23:d8:7d:16:bb:51:e0:05:f4:42:ec:ec:70:c1:09:03: 6a:de:62:59:f7:53:f2:f8:97:05:e3:43:fd:57:84:48:a0:54: be:2f:3c:32:90:aa:cb:c6:68:bd:7e:47:24:fb:79:07:ce:69: 1a:78:da:c8:24:6c:04:38:21:d8:7a:a6:4d:a4:58:dd:71:59: c3:d2:f0:c3:33:a2:ee:16:91:69:b9:88:cb:87:55:76:3c:29: a5:fc:98:58:f9:a2:aa:f8:42:b6:f7:a5:47:88:cb:1e:8e:9b: 15:b9:07:31:c2:90:6b:17:c1:57:e9:fc:d2:24:3e:3a:6a:63: 26:45:de:26:e3:b9:c6:e9:cc:ea:d7:cb:19:d0:b7:0c:53:07: c1:78:c7:2f:5b:f7:fd:80:cb:d8:56:75:15:43:bb:62:70:38: 20:f4:19:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjQxMTI0MTUzMTMyWhcNMjQxMjAxMTUzMTMyWjAYMRYwFAYD VQQDEw02NzQzNDZkNS0zMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqlVrf4Hi6ipu2ZKTCo8SZOHHQPGGjbTphvHIERZsWS2B9NECnZfA3hy8Nke x/fefkZPRwEw33FOoAO2MkFi9efmC49cJKDrGYgG7/sPo1wnYVqqc6hC2Kns9ZMb ZBfNkh40UUyaxHkWC8WX9ocbIzD6WgJnROlTCic7HPSTsmKKfEAUxOObL1NQZRmF znQqAWx8z03HmXaq5z6Jyfwh5cvc/Um4qi/8+l0NX3MqoE76UNYpXznWgYCyecOa tgiff/Q2ylAVwTnO6u2CPYOfJYLF+22czG+dwTCi3TmYTgQj8Rf/a5sBh6j/KH0B PvajAkcDidudwWdWwVkD8MMxfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZZWi3O Y8kp2wSZepTP36i6jjdqMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS/U63xJ/93EViVCxWarjPlknFdQItIuvrv2b7sqrQO0vvwRcBL1mB u4O6LkrrD5zl47Tc3friLlYUXVYNZy5WGnxgGytpR5JvHluWaQb3gasjUOyVXXVi 9IhqACPYfRa7UeAF9ELs7HDBCQNq3mJZ91Py+JcF40P9V4RIoFS+LzwykKrLxmi9 fkck+3kHzmkaeNrIJGwEOCHYeqZNpFjdcVnD0vDDM6LuFpFpuYjLh1V2PCml/JhY +aKq+EK296VHiMsejpsVuQcxwpBrF8FX6fzSJD46amMmRd4m47nG6czq18sZ0LcM UwfBeMcvW/f9gMvYVnUVQ7ticDgg9Bmj -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:09 2024 by rpki-client on console-fra.rpki-client.org