$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft File: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json) Hash identifier: AV6LYs38E5q86gFSudJmnzlkYqe4NhiElFVNJjAoy5E= Subject key identifier: 6B:D6:1F:63:31:B7:A1:15:68:D7:EE:4C:E5:63:B5:78:17:DC:6E:41 Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 Certificate issuer: /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft Manifest number: 3F00 Signing time: Sun 24 Nov 2024 14:47:56 +0000 Manifest this update: Sun 24 Nov 2024 14:47:55 +0000 Manifest next update: Sun 01 Dec 2024 14:47:55 +0000 Files and hashes: 1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: 1Rqk3W5BipTmttNr/TdM3OkJLLol8izqbT3oRww2Akc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873 Validity Not Before: Nov 24 14:47:55 2024 GMT Not After : Dec 1 14:47:55 2024 GMT Subject: CN=67433c9b-c106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:0f:4b:58:ba:2a:c8:a9:b2:a3:38:52:33: ca:f1:cc:ad:63:b1:ba:b7:85:15:e2:3d:23:82:22: c4:20:ad:f5:f2:c2:74:c0:bd:f0:66:89:91:43:37: 68:c3:0e:78:bd:16:1f:0b:5a:1b:a2:4d:c3:bd:2d: c2:10:47:3d:7e:4f:51:d9:44:b2:39:61:c9:b7:5e: 20:be:a8:86:ba:e9:8c:e1:5a:e3:87:85:99:d3:2f: 32:2e:94:a6:a4:67:6e:5c:d3:36:f4:e0:1c:d4:82: e8:7b:c9:ea:36:13:c9:04:7f:68:20:22:ca:0e:f3: 4a:fa:b7:a8:40:cd:bd:21:11:93:cd:54:c1:49:fa: e6:f4:fc:6a:84:5f:88:1d:32:37:d7:a5:1e:7e:ce: 58:45:fc:b0:23:3e:99:fb:91:12:21:e8:bc:3d:c8: 1a:46:fa:34:8d:4c:3d:49:ed:b7:0a:9a:2d:3a:d2: 17:b5:aa:6a:57:17:ed:46:a4:1b:d4:b9:18:67:b9: e8:04:b9:64:02:01:3e:76:19:5c:e6:78:cf:97:a5: 5e:4c:01:eb:22:7c:a4:84:fc:e7:b1:d5:cb:77:ba: e1:f6:c4:96:e0:95:8c:53:8d:66:41:67:e0:0a:5f: b8:d8:82:69:ca:35:68:f2:f5:1c:17:da:a2:2f:eb: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:1F:63:31:B7:A1:15:68:D7:EE:4C:E5:63:B5:78:17:DC:6E:41 X509v3 Authority Key Identifier: keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1a:db:f2:5f:28:24:7e:7c:7d:19:c0:e8:58:59:45:b3:f9: 98:63:e7:fc:82:8b:af:0d:54:70:e2:b6:d2:ff:a4:78:28:68: 4b:47:18:fa:c9:44:75:17:66:21:02:2e:eb:70:f8:21:b8:81: 4a:8d:89:94:4b:7d:57:45:0e:0d:af:57:ec:b4:b2:7e:9a:b5: b0:26:31:e8:07:7e:5d:f1:5f:81:b9:f7:63:59:ef:1a:23:b8: 76:00:fa:79:11:3d:8c:5b:6d:59:68:ae:40:a8:47:3f:29:04: 2c:32:28:f1:aa:28:1a:9c:4e:4a:c3:c8:fd:67:f8:18:b0:b2: 38:c6:43:fb:36:48:4d:e9:e8:13:2c:58:e1:21:ef:23:af:2f: db:6d:19:d0:82:97:ab:86:6b:69:28:60:9a:58:f7:38:0a:ac: 71:b7:bc:ce:3f:ce:65:7d:f9:04:84:e8:7c:50:fe:a4:1c:96: 32:c7:e5:b0:fa:5e:96:22:e6:e4:32:1e:15:6e:19:40:71:6b: 32:13:8d:43:11:72:62:3f:22:8e:b4:17:49:fb:d1:cd:00:51: 55:97:52:51:82:a8:dd:46:d5:f5:e5:da:01:1c:31:53:3b:a2: e7:c9:eb:6a:bb:b6:72:2b:ca:c4:02:74:07:d7:d7:25:9e:c9: 07:65:72:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1 MEU3QjU4NzMwHhcNMjQxMTI0MTQ0NzU1WhcNMjQxMjAxMTQ0NzU1WjAYMRYwFAYD VQQDEw02NzQzM2M5Yi1jMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeYPS1i6KsipsqM4UjPK8cytY7G6t4UV4j0jgiLEIK318sJ0wL3wZomRQzdo ww54vRYfC1obok3DvS3CEEc9fk9R2USyOWHJt14gvqiGuumM4Vrjh4WZ0y8yLpSm pGduXNM29OAc1ILoe8nqNhPJBH9oICLKDvNK+reoQM29IRGTzVTBSfrm9PxqhF+I HTI316Uefs5YRfywIz6Z+5ESIei8PcgaRvo0jUw9Se23CpotOtIXtapqVxftRqQb 1LkYZ7noBLlkAgE+dhlc5njPl6VeTAHrInykhPznsdXLd7rh9sSW4JWMU41mQWfg Cl+42IJpyjVo8vUcF9qiL+vH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvWH2Mx t6EVaNfuTOVjtXgX3G5BMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv aldIWjZscFJYVmhRNTdXSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtGtvyXygkfnx9GcDoWFlFs/mYY+f8gouvDVRw4rbS/6R4KGhLRxj6 yUR1F2YhAi7rcPghuIFKjYmUS31XRQ4Nr1fstLJ+mrWwJjHoB35d8V+BufdjWe8a I7h2APp5ET2MW21ZaK5AqEc/KQQsMijxqiganE5Kw8j9Z/gYsLI4xkP7NkhN6egT LFjhIe8jry/bbRnQgperhmtpKGCaWPc4Cqxxt7zOP85lffkEhOh8UP6kHJYyx+Ww +l6WIubkMh4VbhlAcWsyE41DEXJiPyKOtBdJ+9HNAFFVl1JRgqjdRtX15doBHDFT O6Lnyetqu7ZyK8rEAnQH19clnskHZXL7 -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:50 2024 by rpki-client on console-fra.rpki-client.org