$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: tfeCYSSjxMSFHdQUwCS9BBHSOAOV8OTHdGFot5dcOeA= Subject key identifier: E3:EE:4F:A3:17:0D:74:7D:E5:6E:97:D1:3F:D4:B0:0E:0F:42:A2:CA Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 22 Signing time: Sat 23 Nov 2024 05:46:17 +0000 Manifest this update: Sat 23 Nov 2024 05:46:17 +0000 Manifest next update: Sat 30 Nov 2024 05:46:17 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: 1KwfDS5fZEsTbpyF9JhbUVdctj2wTNHwHsPhiE15JuY=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Nov 23 05:46:17 2024 GMT Not After : Nov 30 05:46:17 2024 GMT Subject: CN=67416c29-41e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:45:8f:3b:de:15:39:8f:07:01:54:b3:79: 1f:58:59:13:8e:fe:26:9c:58:4d:8e:42:e7:49:50: 85:98:3a:0c:1a:96:d3:37:2f:e1:59:22:c8:4e:3d: 97:1b:b5:82:ce:73:54:a2:bd:ae:fb:34:7c:46:56: a3:98:d7:89:71:f8:73:5a:fd:66:a0:d0:4e:65:1f: 48:90:d1:33:9a:26:5e:fd:61:f2:db:be:5c:08:02: 43:fc:cb:88:d8:f0:02:bc:02:c9:55:63:62:0d:1b: c8:6a:9f:ae:cf:fd:15:07:b8:5c:d5:01:d8:b9:1f: 4e:7d:c1:f1:0c:64:46:f8:67:e8:62:c7:c4:b0:3b: e8:be:c6:24:26:ee:be:71:8e:35:c9:24:00:85:7f: e0:a2:14:f9:28:93:3b:1b:93:01:d3:0e:c3:a7:39: 06:3f:76:a3:3b:5b:55:51:58:20:91:a7:94:64:2f: c7:a8:48:4c:c9:9d:ca:27:9b:a3:35:a3:f7:61:4a: 5d:3f:63:39:2d:cc:08:89:90:33:45:f6:3d:84:30: c2:75:a3:dd:c7:98:65:81:4e:87:17:7b:0d:7e:b0: 9d:12:7e:34:44:c0:78:20:aa:e5:06:5a:8f:28:43: 20:15:e7:9d:f9:6d:85:cc:1c:7b:6b:c8:15:b0:66: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:4F:A3:17:0D:74:7D:E5:6E:97:D1:3F:D4:B0:0E:0F:42:A2:CA X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:52:f2:ee:a4:f9:d0:d3:8d:e3:78:46:25:3e:0d:c7:7e:76: 2b:79:a3:43:97:fd:f8:f4:c3:c3:d1:47:60:95:41:8c:03:06: 80:ca:25:c7:85:27:4d:39:cc:3f:67:81:18:b5:32:24:9d:6d: 32:e9:5d:43:ce:46:64:87:84:a5:17:b6:50:91:3c:ae:1f:fd: d5:80:dc:b1:fe:0e:9c:c3:83:34:22:f8:db:e1:ad:57:e6:68: 9a:7d:9c:5a:f8:c2:ad:2a:38:f1:ab:b3:1e:7b:c4:be:98:7f: 00:a6:d2:93:90:72:77:bc:3d:71:a3:00:97:a2:3c:9b:21:a2: 27:24:1b:f3:4a:b4:b0:2d:65:a7:a7:be:54:e7:c7:b5:4c:63: e6:86:c2:06:28:03:da:35:16:60:4d:11:28:db:53:bc:56:8c: 01:95:71:64:be:ff:04:cf:da:aa:51:01:15:10:8c:29:0a:99: 89:31:df:dc:09:45:74:ec:9c:fd:6e:d8:29:93:5c:46:08:97: be:16:64:2f:91:c1:1b:4c:26:81:7f:9a:6f:b3:75:e0:9c:a2: 7a:2c:fb:6b:00:e1:87:04:d0:1f:54:ab:19:d5:62:66:b1:e0: 7a:64:25:bf:2d:5d:91:41:0e:36:54:27:fe:3f:6d:a9:ea:f7: 22:b8:75:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDBBNTExMC8GA1UEBRMoREU4NkU2NUVFQTFFMEIzMEU0RkQ4RDkyNDU4N0VERjU3 MjNENTA3RDAeFw0yNDExMjMwNTQ2MTdaFw0yNDExMzAwNTQ2MTdaMBgxFjAUBgNV BAMTDTY3NDE2YzI5LTQxZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9DUWPO94VOY8HAVSzeR9YWROO/iacWE2OQudJUIWYOgwaltM3L+FZIshOPZcb tYLOc1Siva77NHxGVqOY14lx+HNa/Wag0E5lH0iQ0TOaJl79YfLbvlwIAkP8y4jY 8AK8AslVY2ING8hqn67P/RUHuFzVAdi5H059wfEMZEb4Z+hix8SwO+i+xiQm7r5x jjXJJACFf+CiFPkokzsbkwHTDsOnOQY/dqM7W1VRWCCRp5RkL8eoSEzJnconm6M1 o/dhSl0/YzktzAiJkDNF9j2EMMJ1o93HmGWBTocXew1+sJ0SfjREwHggquUGWo8o QyAV5535bYXMHHtryBWwZu0tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+5PoxcN dH3lbpfRP9SwDg9CosowHwYDVR0jBBgwFoAU3obmXuoeCzDk/Y2SRYft9XI9UH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMEE1L0E2NDgzQTNDN0FC QjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29ibVh1b2VDekRrX1kyU1JZZnQ5WEk5VUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pE a19ZMlNSWWZ0OVhJOVVIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMZS8u6k+dDTjeN4RiU+Dcd+dit5o0OX/fj0w8PRR2CVQYwDBoDKJceF J005zD9ngRi1MiSdbTLpXUPORmSHhKUXtlCRPK4f/dWA3LH+DpzDgzQi+NvhrVfm aJp9nFr4wq0qOPGrsx57xL6YfwCm0pOQcne8PXGjAJeiPJshoickG/NKtLAtZaen vlTnx7VMY+aGwgYoA9o1FmBNESjbU7xWjAGVcWS+/wTP2qpRARUQjCkKmYkx39wJ RXTsnP1u2CmTXEYIl74WZC+RwRtMJoF/mm+zdeCconos+2sA4YcE0B9UqxnVYmax 4HpkJb8tXZFBDjZUJ/4/banq9yK4dZA= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org