$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: kjEPMIkHARelohOmvwkpJYrOccisP9deMgSiBsV6ZwY= Subject key identifier: E1:E7:63:C2:48:21:B8:6C:E2:D8:B7:20:37:37:94:C1:97:F3:A3:71 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: 34 Signing time: Sat 23 Nov 2024 05:33:14 +0000 Manifest this update: Sat 23 Nov 2024 05:33:13 +0000 Manifest next update: Sat 30 Nov 2024 05:33:13 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: Xa04bOqhAjUrKk4i2mij44KoQnMGCGftmGRh9ovwyU4=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Nov 23 05:33:13 2024 GMT Not After : Nov 30 05:33:13 2024 GMT Subject: CN=6741691a-96f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d2:63:5d:42:df:1f:da:64:df:16:ef:55:b1: db:eb:9b:65:d0:5c:49:6d:97:21:cc:ea:9c:a4:19: 9e:94:e1:4c:18:af:6b:a6:91:30:03:ea:b1:7d:f0: fa:9c:2a:07:77:19:35:9f:59:7f:66:eb:88:dd:80: 55:31:63:95:7b:d0:6b:df:f0:8d:b2:ff:7b:40:fc: b0:32:84:e8:79:6b:b2:f5:f8:cf:00:e7:fc:1c:f9: ee:41:3f:3b:d3:2a:b6:94:f8:95:9e:cc:0c:f8:75: 25:d9:f0:c9:5e:30:08:57:b3:70:a8:15:f8:c9:c2: 2f:47:af:4e:c8:8e:4a:38:0c:6b:85:b3:ff:93:e7: b2:97:15:d6:6e:36:14:52:b3:47:3a:80:e1:64:f8: b0:05:a4:e4:5f:85:a2:4e:1e:95:23:9d:6b:7d:c2: 00:8f:07:99:75:38:89:9a:21:34:9e:be:3b:dc:9a: dd:f2:c6:6e:28:12:47:d8:de:7d:78:74:1e:29:13: 80:1f:b6:99:ab:22:8a:98:6e:28:f6:38:c7:70:59: ee:dc:f0:b5:63:8e:bb:5d:7f:0d:13:6c:08:4b:3a: 82:45:da:7b:bb:57:5a:da:42:de:3f:dc:e6:a4:c9: b3:9e:2b:0d:7a:ee:6b:7a:9f:32:ed:14:b0:9c:3c: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E7:63:C2:48:21:B8:6C:E2:D8:B7:20:37:37:94:C1:97:F3:A3:71 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:40:a9:a4:bd:e0:31:b3:31:f5:60:dd:0a:fe:f7:04:77:e8: 32:9f:74:94:ef:02:a5:00:60:60:e1:b5:82:93:d3:e6:04:f7: fe:f7:c8:73:22:00:b9:0b:57:11:26:00:7b:5f:71:00:df:c7: 9e:33:56:2a:26:d4:70:e1:92:43:d3:57:5d:cb:86:ba:b7:e4: c9:c5:d3:bf:23:bc:89:5c:cc:fc:5b:75:79:98:d8:5d:77:57: 70:ea:e4:38:39:96:d4:61:13:f1:05:79:7f:05:ae:b1:c0:69: 16:60:39:ec:f2:08:6c:b4:de:15:aa:9a:d1:9f:17:1e:f1:70: b5:91:0a:28:dc:d5:52:72:d3:fd:53:98:dd:15:72:6f:b9:74: b6:0e:ab:79:7b:9a:0d:18:53:e0:72:5e:22:61:78:6f:a4:53: bb:b4:18:80:1a:0b:11:37:b0:1b:3f:aa:65:d4:19:b3:7f:1e: d9:83:3d:66:8a:75:8e:6f:47:ff:f6:a0:12:85:90:c2:dd:ae: ef:3e:76:73:66:3e:a0:47:ab:6c:bc:7a:82:ec:ad:a2:2d:9c: 63:ac:2f:a4:39:97:f7:d9:78:ab:58:03:cd:9c:69:8b:da:fc: c9:31:52:f8:01:ef:40:0a:b8:c0:0a:aa:7c:49:d4:b8:10:87: f9:bf:ec:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjczQjExMC8GA1UEBRMoRkM5RENDNkJBQzRGM0Q5QkVDOUVEMUU5MDY0RDlCQ0FE Q0Y5QTNBOTAeFw0yNDExMjMwNTMzMTNaFw0yNDExMzAwNTMzMTNaMBgxFjAUBgNV BAMTDTY3NDE2OTFhLTk2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz0mNdQt8f2mTfFu9Vsdvrm2XQXEltlyHM6pykGZ6U4UwYr2umkTAD6rF98Pqc Kgd3GTWfWX9m64jdgFUxY5V70Gvf8I2y/3tA/LAyhOh5a7L1+M8A5/wc+e5BPzvT KraU+JWezAz4dSXZ8MleMAhXs3CoFfjJwi9Hr07Ijko4DGuFs/+T57KXFdZuNhRS s0c6gOFk+LAFpORfhaJOHpUjnWt9wgCPB5l1OImaITSevjvcmt3yxm4oEkfY3n14 dB4pE4AftpmrIoqYbij2OMdwWe7c8LVjjrtdfw0TbAhLOoJF2nu7V1raQt4/3Oak ybOeKw167mt6nzLtFLCcPKQjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4edjwkgh uGzi2LcgNzeUwZfzo3EwHwYDVR0jBBgwFoAU/J3Ma6xPPZvsntHpBk2bytz5o6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NzNCLzc5NDYzMENDNURG RTExRUY4QzdFODE3QkM0RjlBRTAyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0ozTWE2eFBQWnZzbnRIcEJrMmJ5dHo1bzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NzNCLzc5NDYzMENDNURGRTExRUY4QzdFODE3QkM0RjlBRTAyL19KM01hNnhQUFp2 c250SHBCazJieXR6NW82ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtAqaS94DGzMfVg3Qr+9wR36DKfdJTvAqUAYGDhtYKT0+YE9/73yHMi ALkLVxEmAHtfcQDfx54zViom1HDhkkPTV13Lhrq35MnF078jvIlczPxbdXmY2F13 V3Dq5Dg5ltRhE/EFeX8FrrHAaRZgOezyCGy03hWqmtGfFx7xcLWRCijc1VJy0/1T mN0Vcm+5dLYOq3l7mg0YU+ByXiJheG+kU7u0GIAaCxE3sBs/qmXUGbN/HtmDPWaK dY5vR//2oBKFkMLdru8+dnNmPqBHq2y8eoLsraItnGOsL6Q5l/fZeKtYA82caYva /MkxUvgB70AKuMAKqnxJ1LgQh/m/7M0= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org