$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: 7qJsJ105vZEV5gRF/gEvD7TTPCalR9GrD3lNM1cPu3Q= Subject key identifier: FB:E1:61:E6:BF:64:2B:12:F0:69:38:65:6B:89:06:C7:26:70:4C:3D Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1CC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1CAC Signing time: Sun 24 Nov 2024 16:04:42 +0000 Manifest this update: Sun 24 Nov 2024 16:04:42 +0000 Manifest next update: Sun 01 Dec 2024 16:04:42 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: Z+FqcSqI+h+TS0232SdLpUvgq5FohAEpaG10YhGHwgk=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: kc6Qio1nm2R7Nmekjn2RQdz6FiLOSkIgyD8v0SWSLok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7360 (0x1cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Nov 24 16:04:42 2024 GMT Not After : Dec 1 16:04:42 2024 GMT Subject: CN=67434e9a-0f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c4:34:44:19:d4:6e:02:c5:34:22:38:42:46: ad:f2:31:99:1c:9f:b1:98:73:4b:37:9b:62:86:d0: 7b:06:86:93:e1:7a:d8:22:bf:7d:9d:d1:56:13:6a: 8a:35:5d:47:1b:8a:c9:a5:46:3b:84:08:64:9d:c3: b6:cc:fa:35:18:db:9c:26:ae:8b:cc:57:ca:c9:a2: 5f:2d:57:a0:47:9f:dd:9b:87:1a:81:66:0d:03:6c: c3:f4:af:5f:c6:5e:af:37:a7:dc:b5:01:c0:cd:57: 05:29:c6:03:63:01:b7:f6:6c:9c:b9:71:3a:be:cc: c9:fc:0f:3b:b7:d4:41:c8:fe:41:40:e0:52:92:46: 1f:8f:d3:0a:87:17:62:5b:87:52:a3:d2:8f:3f:13: 35:72:2d:7a:57:50:1b:53:8e:76:98:6b:d2:86:3e: 7b:79:fb:4e:1f:03:90:ac:12:5c:af:c0:5a:44:b4: 1b:3d:cc:e8:1b:e6:2a:26:7d:60:07:d8:de:19:f4: a8:db:59:29:18:25:96:40:38:d3:f2:f1:40:7b:0b: 09:40:f2:45:b2:15:bb:c7:ef:fc:04:7f:50:a6:84: 38:b7:c2:50:a8:37:1e:50:66:4d:aa:91:3c:92:2b: 05:01:29:17:16:1c:de:a7:61:a3:15:a9:25:a0:7c: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E1:61:E6:BF:64:2B:12:F0:69:38:65:6B:89:06:C7:26:70:4C:3D X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ca:93:38:c7:d3:d5:28:0f:5f:c6:df:51:a2:05:c0:ed:eb: 56:4e:4c:b7:3c:44:bd:97:32:ca:d8:a0:80:da:a7:ad:94:e6: 88:99:42:6c:92:9e:ba:6d:08:69:1d:3a:c2:b4:e9:6e:d0:b4: da:99:0a:1f:ef:66:6d:e8:28:8c:34:ee:47:7b:70:67:4c:f9: 9f:bc:e5:2d:88:d7:95:54:53:3b:4a:e5:a8:ad:76:f7:8d:7b: 94:22:03:a4:ab:2c:4d:54:5f:17:6a:f8:75:e0:e9:e2:82:d4: 12:34:4b:2a:eb:9d:f0:12:e0:3d:90:74:a2:c7:1d:2d:8e:45: a9:d0:83:15:1b:7c:71:59:e5:14:0d:78:bf:52:36:70:4b:e8: 90:1f:aa:3f:98:3f:9d:bf:43:c1:8b:76:cf:87:ff:b0:fc:3e: 3d:9e:04:43:2c:bf:01:98:f8:54:e4:f8:d4:52:47:71:18:5b: c0:44:f0:04:fc:6f:77:8a:a0:23:7f:45:d6:eb:68:6a:37:20: 72:29:60:4c:ff:ae:9d:97:2c:8c:14:89:65:3c:5a:1d:5c:6e: 4d:56:cc:86:51:13:fe:df:1c:0a:98:c5:9d:e4:6f:3f:2e:fa: ef:f5:55:ed:af:bd:c9:5c:56:b9:af:8e:45:7d:e7:68:60:9e: a3:8b:f3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjQxMTI0MTYwNDQyWhcNMjQxMjAxMTYwNDQyWjAYMRYwFAYD VQQDEw02NzQzNGU5YS0wZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sQ0RBnUbgLFNCI4Qkat8jGZHJ+xmHNLN5tihtB7BoaT4XrYIr99ndFWE2qK NV1HG4rJpUY7hAhkncO2zPo1GNucJq6LzFfKyaJfLVegR5/dm4cagWYNA2zD9K9f xl6vN6fctQHAzVcFKcYDYwG39mycuXE6vszJ/A87t9RByP5BQOBSkkYfj9MKhxdi W4dSo9KPPxM1ci16V1AbU452mGvShj57eftOHwOQrBJcr8BaRLQbPczoG+YqJn1g B9jeGfSo21kpGCWWQDjT8vFAewsJQPJFshW7x+/8BH9QpoQ4t8JQqDceUGZNqpE8 kisFASkXFhzep2GjFakloHxg8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvhYea/ ZCsS8Gk4ZWuJBscmcEw9MB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASypM4x9PVKA9fxt9RogXA7etWTky3PES9lzLK2KCA2qetlOaImUJs kp66bQhpHTrCtOlu0LTamQof72Zt6CiMNO5He3BnTPmfvOUtiNeVVFM7SuWorXb3 jXuUIgOkqyxNVF8Xavh14OnigtQSNEsq653wEuA9kHSixx0tjkWp0IMVG3xxWeUU DXi/UjZwS+iQH6o/mD+dv0PBi3bPh/+w/D49ngRDLL8BmPhU5PjUUkdxGFvARPAE /G93iqAjf0XW62hqNyByKWBM/66dlyyMFIllPFodXG5NVsyGURP+3xwKmMWd5G8/ Lvrv9VXtr73JXFa5r45FfedoYJ6ji/Og -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:47 2024 by rpki-client on console-fra.rpki-client.org