$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft File: 3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json) Hash identifier: 9kTOc/58djBZZBUY+XEyqemvSWSF5m8hWRH5qawefGc= Subject key identifier: B9:C6:EB:89:D1:6D:6E:4B:E3:8E:87:AD:E3:06:0F:8A:BC:AA:3A:4E Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 Certificate issuer: /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Certificate serial: 1563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft Manifest number: 155C Signing time: Fri 22 Nov 2024 16:49:12 +0000 Manifest this update: Fri 22 Nov 2024 16:49:12 +0000 Manifest next update: Fri 29 Nov 2024 16:49:12 +0000 Files and hashes: 1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: q4osSkCFRNmkU3D02h1unza58Yu6IIiCgCK48lz21mE=) 2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: NJfgwr8reyKiWOTsgoS+1qUOFvWlAGnIvjQECs3DnIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5475 (0x1563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540 Validity Not Before: Nov 22 16:49:12 2024 GMT Not After : Nov 29 16:49:12 2024 GMT Subject: CN=6740b608-84ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:80:53:a2:7d:84:66:32:ac:67:94:6b:41: d8:06:41:e6:a1:2a:24:c1:35:b6:af:74:3d:06:a0: 72:ac:77:6c:38:42:e3:b1:fc:81:83:fb:19:1e:b2: 02:83:2f:b7:09:83:66:87:3f:d3:70:ed:21:4a:7a: 06:af:61:49:6b:66:ba:4c:40:e0:a9:af:27:03:cc: ac:e0:43:8d:0d:b2:0f:8f:ef:7c:db:27:10:37:62: 3f:07:0b:e0:1a:de:9b:c4:f7:8b:2d:17:6c:6c:57: ee:ec:64:83:45:15:3c:a6:07:3e:69:60:f6:58:6a: 6d:e0:98:8a:46:94:5d:11:bc:92:b3:51:ca:d5:e3: 19:1e:28:a3:a2:14:45:61:33:a4:6b:f0:8b:90:b2: 94:dd:0a:f4:55:dc:a8:0a:99:21:db:87:92:7b:d7: 0d:bf:e0:ed:12:5f:9c:67:45:4a:9d:f2:d0:a3:30: a7:aa:63:2b:41:b3:4c:6f:cc:60:ae:fb:31:57:17: a8:a7:24:22:11:05:ce:f9:c2:3c:81:99:ed:81:03: 56:6a:44:37:72:7c:56:7f:6d:d5:d4:a9:09:c3:4a: 56:79:ea:9e:76:1a:36:8b:f5:30:2a:ab:fc:ef:47: 6c:7e:c5:31:a4:2d:1b:43:31:88:9e:42:03:c3:1c: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C6:EB:89:D1:6D:6E:4B:E3:8E:87:AD:E3:06:0F:8A:BC:AA:3A:4E X509v3 Authority Key Identifier: keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:38:1c:81:cb:82:46:88:21:b2:84:cf:3d:45:d1:da:07:70: c3:18:92:0c:61:8a:b9:f0:19:22:c8:fb:c4:cd:9c:23:77:8d: b7:b2:2e:e1:5d:22:75:2b:02:bc:14:11:cc:1e:cb:31:9a:28: ca:2b:fa:76:dc:90:0c:fa:1f:f5:f9:20:30:68:53:96:03:99: 4c:93:64:cd:d5:32:35:31:d9:fa:58:e7:04:72:5f:fb:8c:f1: 7f:a2:7f:8d:15:55:fa:02:1f:46:e6:aa:80:7f:d5:c0:67:cd: 34:a8:fb:aa:bf:af:2c:8f:1a:a0:91:46:9b:fa:3e:ab:b1:13: c1:6e:55:10:3b:8e:21:b4:5a:7d:42:5a:68:f9:ca:dc:95:ec: e5:f1:b9:f0:8b:72:58:68:2e:66:7a:fe:be:fd:6c:dd:47:a5: 86:0b:84:0b:40:5a:16:d2:52:a6:17:8f:ed:19:5a:55:ea:31: 0e:08:3e:b1:67:18:22:02:3e:1f:3e:98:16:81:84:15:6b:da: 4b:67:44:ac:14:5e:87:cb:0d:b0:83:62:3f:58:ef:bb:77:c1: 4d:a8:0c:01:65:60:44:0c:74:0e:f2:0d:65:d1:be:9a:02:b6: 34:7f:72:ab:c5:d7:ec:b5:1f:ba:03:0d:f9:b9:35:f5:c7:36: dd:36:8d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFQjYxMTAvBgNVBAUTKERENTMzRDExQTlERTJBQjkxODA4NTA4M0JFODJENTE0 MzRERjQ1NDAwHhcNMjQxMTIyMTY0OTEyWhcNMjQxMTI5MTY0OTEyWjAYMRYwFAYD VQQDEw02NzQwYjYwOC04NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUqAU6J9hGYyrGeUa0HYBkHmoSokwTW2r3Q9BqByrHdsOELjsfyBg/sZHrIC gy+3CYNmhz/TcO0hSnoGr2FJa2a6TEDgqa8nA8ys4EONDbIPj+982ycQN2I/Bwvg Gt6bxPeLLRdsbFfu7GSDRRU8pgc+aWD2WGpt4JiKRpRdEbySs1HK1eMZHiijohRF YTOka/CLkLKU3Qr0VdyoCpkh24eSe9cNv+DtEl+cZ0VKnfLQozCnqmMrQbNMb8xg rvsxVxeopyQiEQXO+cI8gZntgQNWakQ3cnxWf23V1KkJw0pWeeqedho2i/UwKqv8 70dsfsUxpC0bQzGInkIDwxyBQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnG64nR bW5L446HreMGD4q8qjpOMB8GA1UdIwQYMBaAFN1TPRGp3iq5GAhQg76C1RQ030VA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVCNi8xMDhGNTNBRTI4 MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUtya1lDRkNEdm9MVkZEVGZS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNWTTlFYW5lS3JrWUNGQ0R2b0xWRkRUZlJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVCNi8xMDhGNTNBRTI4MUYxMUU4QjIwMzgyMjRDNEY5QUUwMi8zVk05RWFuZUty a1lDRkNEdm9MVkZEVGZSVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsOByBy4JGiCGyhM89RdHaB3DDGJIMYYq58BkiyPvEzZwjd423si7h XSJ1KwK8FBHMHssxmijKK/p23JAM+h/1+SAwaFOWA5lMk2TN1TI1Mdn6WOcEcl/7 jPF/on+NFVX6Ah9G5qqAf9XAZ800qPuqv68sjxqgkUab+j6rsRPBblUQO44htFp9 Qlpo+crclezl8bnwi3JYaC5mev6+/WzdR6WGC4QLQFoW0lKmF4/tGVpV6jEOCD6x ZxgiAj4fPpgWgYQVa9pLZ0SsFF6Hyw2wg2I/WO+7d8FNqAwBZWBEDHQO8g1l0b6a ArY0f3KrxdfstR+6Aw35uTX1xzbdNo1m -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org