$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json) Hash identifier: pgKfjuhWTqsM6jtAMiQWA23fmCaThBaP8Pzko1ujnSo= Subject key identifier: 65:1B:ED:06:67:B7:A0:B5:36:94:4B:41:3C:75:CD:36:E3:FE:0D:59 Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft Manifest number: E2 Signing time: Sat 23 Nov 2024 03:40:33 +0000 Manifest this update: Sat 23 Nov 2024 03:40:33 +0000 Manifest next update: Sat 30 Nov 2024 03:40:33 +0000 Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: t2t9rojxs9fVHJKMJ9YMBX2dUVyOqUmDGKf9thvFMdA=) 2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: v7Dt+vDpE5l+seUqJNghMo9p/KJYaK9+kV/JnepJsag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Validity Not Before: Nov 23 03:40:33 2024 GMT Not After : Nov 30 03:40:33 2024 GMT Subject: CN=67414eb1-9f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:ec:18:94:14:64:54:9a:9e:ba:aa:d1:96: 60:33:cb:9a:28:45:09:67:5b:72:0b:3a:b1:c6:fe: 1d:55:6c:d9:76:76:2d:15:90:6b:c6:fa:1d:2f:a5: 79:4a:37:4b:1f:fd:87:b4:88:b9:ae:21:a3:d3:a4: 94:72:e9:ae:ec:70:fd:b9:02:68:fc:5f:fc:5a:cd: 2c:dc:6c:dd:67:47:bd:db:a9:8e:47:76:3a:a6:5c: 5a:d8:a3:ef:ee:80:a3:6f:62:89:ac:d2:64:27:47: e5:38:94:9a:52:dd:83:08:f9:3a:0b:ba:92:44:e5: 86:ea:f0:8f:68:74:34:fe:b9:65:a9:56:92:7e:11: a7:db:f1:f6:d8:7a:91:d2:6e:f3:4a:d6:78:ad:9b: 7d:87:81:8e:74:d1:c4:a0:5b:ea:d3:9d:3d:a3:98: e6:81:d3:32:55:08:75:50:ae:9b:a8:cd:99:1a:e0: 99:45:b1:7e:e7:36:09:c7:bb:6e:91:ba:b4:03:6a: 3a:3d:75:a4:df:ad:16:c2:04:0d:94:42:a3:d6:dc: 68:ec:20:b0:e4:9e:9f:94:4c:70:4a:54:da:2f:46: b5:89:fd:49:05:65:c6:1e:a1:b8:d5:23:27:92:00: 93:86:52:30:a8:b4:4a:2d:e2:1e:05:80:5e:58:5a: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:ED:06:67:B7:A0:B5:36:94:4B:41:3C:75:CD:36:E3:FE:0D:59 X509v3 Authority Key Identifier: keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:02:e4:42:ce:ae:29:9d:b7:1e:82:f1:49:05:ee:64:af:2b: 62:6a:a6:df:95:4f:0a:5a:29:d4:1a:f5:8b:0e:0c:be:77:11: 00:52:02:54:b8:81:d0:26:c3:0f:d3:1b:c0:7e:4f:2f:b2:9d: b7:f2:8a:fe:02:0b:22:d0:95:93:f7:2c:e1:0f:df:96:6e:bf: 72:b8:82:d8:00:a4:35:52:ed:9c:a5:f7:00:43:28:f5:90:3a: 21:a7:2d:a5:f3:45:43:4f:9c:30:76:6b:76:8e:5e:eb:b1:c2: 0d:de:12:85:14:98:ab:cc:83:7f:24:6a:53:0c:15:54:eb:f1: cb:a1:0d:d6:99:fe:b7:20:63:c7:c4:2e:64:a4:67:bd:ae:dd: ca:cc:fb:a1:0f:69:60:69:5e:a4:3a:61:85:e4:86:30:c6:fa: 30:f1:a6:56:27:8b:f5:05:70:04:04:3f:89:46:38:6a:bd:e0: 74:aa:12:e0:e6:31:b4:0a:30:c2:75:fb:e3:21:33:2c:10:68: 72:dd:ab:08:35:6b:d4:45:bf:f0:dc:71:e2:dd:94:7a:8e:35: e5:ec:06:e7:da:75:05:f8:4d:fc:7d:97:fc:7d:2e:5b:20:97: 20:71:11:8d:b2:79:9f:37:be:39:47:d5:2a:fc:9f:df:7b:3c: 98:2a:ec:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzOTkxMTAvBgNVBAUTKDNEQkREN0VENDEyNDgwRTkzNTVDMjdGM0MxMTNCNTY0 MEQzMTg2QjMwHhcNMjQxMTIzMDM0MDMzWhcNMjQxMTMwMDM0MDMzWjAYMRYwFAYD VQQDEw02NzQxNGViMS05ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN7sGJQUZFSanrqq0ZZgM8uaKEUJZ1tyCzqxxv4dVWzZdnYtFZBrxvodL6V5 SjdLH/2HtIi5riGj06SUcumu7HD9uQJo/F/8Ws0s3GzdZ0e926mOR3Y6plxa2KPv 7oCjb2KJrNJkJ0flOJSaUt2DCPk6C7qSROWG6vCPaHQ0/rllqVaSfhGn2/H22HqR 0m7zStZ4rZt9h4GOdNHEoFvq0509o5jmgdMyVQh1UK6bqM2ZGuCZRbF+5zYJx7tu kbq0A2o6PXWk360WwgQNlEKj1txo7CCw5J6flExwSlTaL0a1if1JBWXGHqG41SMn kgCThlIwqLRKLeIeBYBeWFqvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUb7QZn t6C1NpRLQTx1zTbj/g1ZMB8GA1UdIwQYMBaAFD291+1BJIDpNVwn88ETtWQNMYaz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzM5OS9CQTY4QzMyODVD QjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dPazFYQ2Z6d1JPMVpBMHho ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BiM1g3VUVrZ09rMVhDZnp3Uk8xWkEweGhyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzM5OS9CQTY4QzMyODVDQjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dP azFYQ2Z6d1JPMVpBMHhock0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/AuRCzq4pnbcegvFJBe5krytiaqbflU8KWinUGvWLDgy+dxEAUgJU uIHQJsMP0xvAfk8vsp238or+Agsi0JWT9yzhD9+Wbr9yuILYAKQ1Uu2cpfcAQyj1 kDohpy2l80VDT5wwdmt2jl7rscIN3hKFFJirzIN/JGpTDBVU6/HLoQ3Wmf63IGPH xC5kpGe9rt3KzPuhD2lgaV6kOmGF5IYwxvow8aZWJ4v1BXAEBD+JRjhqveB0qhLg 5jG0CjDCdfvjITMsEGhy3asINWvURb/w3HHi3ZR6jjXl7Abn2nUF+E38fZf8fS5b IJcgcRGNsnmfN745R9Uq/J/fezyYKuxo -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org