$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: PatgOslMDDk7qN5ipLWCTV2eSyy5b7Sujy0T2jcl6Nw= Subject key identifier: B9:4A:14:33:B4:47:CC:EA:B2:50:EC:DA:97:45:1E:4A:87:A0:77:74 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 79 Signing time: Sat 23 Nov 2024 04:46:04 +0000 Manifest this update: Sat 23 Nov 2024 04:46:04 +0000 Manifest next update: Sat 30 Nov 2024 04:46:04 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: LILfM2g9t2t/k0Pf4z2p4ej6SCTbhFm+8+FBnUtECoQ=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: oRCouiUpGQ/m6gpchET77aGzx6bi1ujY4xCm3A9vvYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Nov 23 04:46:04 2024 GMT Not After : Nov 30 04:46:04 2024 GMT Subject: CN=67415e0c-04cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:dd:d5:23:15:e6:ad:62:63:90:4a:c8:ff: 9a:1f:a9:a1:0c:f2:95:a8:69:56:3d:5b:21:4a:dd: 88:7b:2e:49:e1:93:52:b1:03:51:a1:3e:e3:45:9a: 5a:26:eb:c2:f5:3f:13:14:86:d0:3d:cd:c5:6b:3f: e3:f6:33:1f:69:34:e5:f1:9a:5e:e9:da:e5:53:79: 72:62:d1:83:26:bb:97:ab:7c:c0:cf:f9:fe:74:2e: 45:6e:f2:6c:ef:e2:b8:75:86:7d:2d:c2:07:69:c6: 9b:ab:49:18:de:9c:7d:13:a9:82:a4:f7:e6:5b:bb: 38:a5:bf:09:a5:51:15:71:9e:23:ce:9f:c1:62:1e: 56:54:43:76:16:97:f6:48:a4:9c:6e:79:2e:7f:00: 55:db:d6:b8:16:8c:e4:91:c2:ca:d9:59:c9:b7:19: 86:91:89:3c:08:f0:14:ba:08:73:5f:de:81:e0:30: fa:14:13:d9:84:7d:44:f9:da:2a:6f:7b:79:b4:9c: 64:9c:c4:e7:79:b8:91:34:09:e7:ea:23:9b:59:10: c4:93:a4:c7:8c:85:08:b9:c2:be:8c:30:18:a9:55: 2d:38:95:c3:61:13:be:84:bd:c5:ad:e1:6f:f9:46: f3:50:e8:74:94:94:53:f7:a6:fe:63:49:da:8b:84: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:14:33:B4:47:CC:EA:B2:50:EC:DA:97:45:1E:4A:87:A0:77:74 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:cf:82:74:8b:ef:19:34:58:e3:3c:0b:12:6d:92:e4:08:18: cb:7b:05:2e:ab:a8:29:96:af:f0:a8:33:e0:7a:6a:b8:fd:0d: 0e:7e:38:19:7f:a2:6a:2d:b2:72:ee:97:77:f0:5c:64:b2:55: 03:ff:67:a7:31:bd:3e:36:c9:c8:75:26:97:e0:44:8a:2a:22: 5e:c2:59:f7:53:76:00:ab:83:84:c0:66:2c:51:68:b0:5c:a6: 62:9c:85:8c:2b:35:57:15:10:8a:28:a4:bc:9b:7c:d4:9a:ca: 9d:62:74:75:16:9d:62:8f:37:ea:9d:72:50:c3:b7:d7:f6:32: ac:4d:e4:b0:7d:82:e4:54:36:9d:19:1f:19:91:5c:2c:28:66: 4c:b3:e7:52:52:41:eb:41:37:33:0d:a3:b8:cc:07:14:d4:47: f3:45:1c:37:93:37:9f:c4:0e:61:33:e8:14:ad:5f:4f:0e:90: 23:7c:ad:8f:3f:5c:70:68:82:b9:52:d4:96:19:e2:bf:98:2a: c4:c6:6c:9c:c0:74:b8:16:7b:f6:ca:6c:e8:62:d8:01:69:2f: 6a:3d:48:be:92:ae:c2:92:31:03:8b:e4:50:24:87:a9:36:7f: 6e:f3:18:81:72:a3:c2:a1:a8:9e:58:92:c4:6e:54:76:f6:c2: 9a:09:4c:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUUyRTExMC8GA1UEBRMoREQyNDMyRDhBRDZCQjNFOUU5OTY1NTgwQkJDNkQyMjIx OTA3QjNGNzAeFw0yNDExMjMwNDQ2MDRaFw0yNDExMzAwNDQ2MDRaMBgxFjAUBgNV BAMTDTY3NDE1ZTBjLTA0Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCudt3VIxXmrWJjkErI/5ofqaEM8pWoaVY9WyFK3Yh7Lknhk1KxA1GhPuNFmlom 68L1PxMUhtA9zcVrP+P2Mx9pNOXxml7p2uVTeXJi0YMmu5erfMDP+f50LkVu8mzv 4rh1hn0twgdpxpurSRjenH0TqYKk9+ZbuzilvwmlURVxniPOn8FiHlZUQ3YWl/ZI pJxueS5/AFXb1rgWjOSRwsrZWcm3GYaRiTwI8BS6CHNf3oHgMPoUE9mEfUT52ipv e3m0nGScxOd5uJE0CefqI5tZEMSTpMeMhQi5wr6MMBipVS04lcNhE76EvcWt4W/5 RvNQ6HSUlFP3pv5jSdqLhNZtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuUoUM7RH zOqyUOzal0UeSoegd3QwHwYDVR0jBBgwFoAU3SQy2K1rs+npllWAu8bSIhkHs/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRTJFL0U3MUEwQkJDRjIx NzExRUVCQ0NDMzEyMEM0RjlBRTAyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1NReTJLMXJzLW5wbGxXQXU4YlNJaGtIc19jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB RTJFL0U3MUEwQkJDRjIxNzExRUVCQ0NDMzEyMEM0RjlBRTAyLzNTUXkySzFycy1u cGxsV0F1OGJTSWhrSHNfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADLPgnSL7xk0WOM8CxJtkuQIGMt7BS6rqCmWr/CoM+B6arj9DQ5+OBl/ omotsnLul3fwXGSyVQP/Z6cxvT42ych1JpfgRIoqIl7CWfdTdgCrg4TAZixRaLBc pmKchYwrNVcVEIoopLybfNSayp1idHUWnWKPN+qdclDDt9f2MqxN5LB9guRUNp0Z HxmRXCwoZkyz51JSQetBNzMNo7jMBxTUR/NFHDeTN5/EDmEz6BStX08OkCN8rY8/ XHBogrlS1JYZ4r+YKsTGbJzAdLgWe/bKbOhi2AFpL2o9SL6SrsKSMQOL5FAkh6k2 f27zGIFyo8KhqJ5YksRuVHb2wpoJTIM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org