$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: DbJRzkAzDeWSsYphrSoaU704apL2M5/gD1cvEeiQih4= Subject key identifier: 83:66:AA:FD:01:D7:7D:96:7D:9A:F0:2E:6B:71:00:27:05:54:DA:39 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 9A Signing time: Sat 23 Nov 2024 04:23:44 +0000 Manifest this update: Sat 23 Nov 2024 04:23:43 +0000 Manifest next update: Sat 30 Nov 2024 04:23:43 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: t8KybFTeiCtJfbYJBMUFUYHaPEtqMir8Vixw+Cts+as=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: 8WbiXS8+ZFODz9G5sLTWbcDZvIsuRKDlPl9hBYHN3xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Nov 23 04:23:43 2024 GMT Not After : Nov 30 04:23:43 2024 GMT Subject: CN=674158cf-b1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:99:e5:3e:3e:f5:e0:0a:58:9d:cb:10:dc: 98:ce:36:cc:26:38:ef:fb:c9:af:b5:7f:a2:67:15: c9:e9:68:1a:15:1a:3a:6e:9a:3a:8f:c1:d6:6e:b6: 40:ff:53:41:b5:80:da:0f:71:9e:e7:d4:a2:a0:e9: 79:fc:aa:58:74:b7:17:89:91:4a:1f:42:9b:91:fe: 49:3f:02:cc:37:c2:0e:11:45:2a:98:66:e4:5d:57: 88:a1:be:57:2c:8c:72:0a:57:80:13:c2:f4:93:ae: 18:1e:4c:18:1e:85:87:37:dd:b4:8e:32:15:57:de: 38:3b:76:07:71:44:86:95:93:07:c1:36:5d:23:66: 71:13:39:8a:8c:59:53:9c:1e:3f:77:98:e1:c8:9b: 10:3c:a2:cc:6c:80:86:29:1f:7a:0b:d4:a8:a8:3e: 97:68:a2:f8:e5:78:41:1f:66:a0:e6:4c:dd:28:e6: 54:05:44:94:6f:0a:23:52:0a:bc:aa:a4:01:c0:e1: 2b:7c:74:e0:c0:75:e1:cd:85:a9:e3:57:55:61:14: bc:94:a5:ff:4b:7b:0a:a3:18:ef:55:cb:bd:32:59: 0c:1f:b6:26:f3:93:32:fe:08:1a:04:11:ce:df:9d: 7c:85:9a:03:2a:cd:d3:27:bc:05:bc:25:66:6b:82: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:AA:FD:01:D7:7D:96:7D:9A:F0:2E:6B:71:00:27:05:54:DA:39 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:23:5e:84:48:c0:06:f2:53:65:83:02:ac:90:7b:f6:f2:33: 57:67:c9:e8:fb:88:67:c3:5b:ea:c3:d7:25:1c:ec:06:40:d1: 0c:d5:53:41:a1:0b:c5:f3:22:e0:fb:18:72:35:d0:34:b7:d3: 9d:a0:99:cc:50:2b:18:11:57:47:32:ad:62:e6:ca:1c:2b:5b: de:ae:e5:f4:a7:69:96:9c:31:bc:dc:68:2d:80:ea:40:09:39: 86:29:e6:e8:66:37:ed:7e:72:80:24:3b:28:93:64:88:63:e4: aa:2b:89:4d:8f:90:72:1b:6a:a7:f3:6f:c1:85:2e:b7:8a:f9: ff:3d:be:42:02:43:68:71:b1:ff:d6:76:ea:ce:94:00:4a:2f: 4c:6f:eb:24:9f:eb:49:d8:0d:07:56:71:36:fa:d7:99:67:1a: e3:0e:66:ee:72:9b:d4:60:d9:02:2b:d3:ec:29:62:9b:32:f0: cb:90:4e:16:65:ad:97:85:fc:7c:35:0b:2f:b9:f9:f1:ff:fb: 08:74:9f:8d:bb:62:f9:b0:d3:a2:ae:82:49:af:0a:31:05:20: a7:48:44:dd:c2:ab:44:94:f2:5e:4f:0a:09:41:0a:56:70:0e: 76:59:e0:1a:23:79:0f:92:2c:0d:55:cf:7f:29:c6:bc:4c:66: 2e:46:e5:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjQxMTIzMDQyMzQzWhcNMjQxMTMwMDQyMzQzWjAYMRYwFAYD VQQDEw02NzQxNThjZi1iMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvuZ5T4+9eAKWJ3LENyYzjbMJjjv+8mvtX+iZxXJ6WgaFRo6bpo6j8HWbrZA /1NBtYDaD3Ge59SioOl5/KpYdLcXiZFKH0Kbkf5JPwLMN8IOEUUqmGbkXVeIob5X LIxyCleAE8L0k64YHkwYHoWHN920jjIVV944O3YHcUSGlZMHwTZdI2ZxEzmKjFlT nB4/d5jhyJsQPKLMbICGKR96C9SoqD6XaKL45XhBH2ag5kzdKOZUBUSUbwojUgq8 qqQBwOErfHTgwHXhzYWp41dVYRS8lKX/S3sKoxjvVcu9MlkMH7Ym85My/ggaBBHO 3518hZoDKs3TJ7wFvCVma4Jd/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINmqv0B 132WfZrwLmtxACcFVNo5MB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJI16ESMAG8lNlgwKskHv28jNXZ8no+4hnw1vqw9clHOwGQNEM1VNB oQvF8yLg+xhyNdA0t9OdoJnMUCsYEVdHMq1i5socK1veruX0p2mWnDG83GgtgOpA CTmGKeboZjftfnKAJDsok2SIY+SqK4lNj5ByG2qn82/BhS63ivn/Pb5CAkNocbH/ 1nbqzpQASi9Mb+skn+tJ2A0HVnE2+teZZxrjDmbucpvUYNkCK9PsKWKbMvDLkE4W Za2Xhfx8NQsvufnx//sIdJ+Nu2L5sNOiroJJrwoxBSCnSETdwqtElPJeTwoJQQpW cA52WeAaI3kPkiwNVc9/Kca8TGYuRuXc -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org