$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: 6Ubc4rGG19F8fx9O0gkiykfuseOHGmjlbAHgHcNDiZg= Subject key identifier: C3:68:0A:E5:12:A1:89:1B:63:1B:E8:44:C3:4B:86:AE:94:2A:98:68 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 04EF Signing time: Fri 22 Nov 2024 23:16:22 +0000 Manifest this update: Fri 22 Nov 2024 23:16:22 +0000 Manifest next update: Fri 29 Nov 2024 23:16:22 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: OUZe5qXqf7C9CNdkUXpmkzjvyPjnk40IxQadKWBhiU4=) 2: B52EA19A6E0B11ECA6057963C4F9AE02.roa (hash: sRAPrM6e/yJbsGZwUamXGzz2TWejjmVOjZsdsTU0i6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Nov 22 23:16:22 2024 GMT Not After : Nov 29 23:16:22 2024 GMT Subject: CN=674110c6-10b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:af:c7:cc:8c:dd:cc:62:99:3b:da:50:f1: 30:d5:c3:98:c8:25:7b:c7:c4:56:40:65:a7:c9:37: 45:83:46:a5:40:9a:b3:17:ab:ee:c5:51:5f:67:22: 17:3a:5d:11:9e:2e:0f:04:0b:7b:02:78:e0:69:5a: 17:ab:26:db:db:43:45:77:5e:6f:49:f6:0e:37:d1: 8d:fd:64:58:c4:98:b6:64:bc:ae:b0:80:c0:6e:04: fb:e2:a5:38:e4:3f:69:69:1a:12:28:ef:e4:5f:d7: c5:3e:37:6e:80:e6:1a:ee:c0:6e:1d:a1:d6:49:2c: 00:b6:f1:81:ac:9c:72:3d:42:cf:3d:91:bb:76:4e: 02:72:63:97:2a:b4:2a:35:fb:14:5d:3c:62:93:c9: 1c:b7:7e:2e:34:7a:07:3e:3a:7f:23:4b:76:68:03: 80:9c:37:a5:bd:40:fe:3b:ff:1e:22:9d:e1:52:89: dd:1f:73:b8:4c:8e:76:a9:d0:92:e5:be:90:78:b6: 6d:ab:ed:be:35:d4:ac:ef:0d:40:4c:dc:d5:4d:53: 7e:49:2d:7c:79:ab:0e:02:69:2c:53:9f:79:b4:0c: ca:1d:40:60:83:db:6f:92:94:b8:d5:d1:44:7f:18: 30:a2:e0:87:11:04:d5:d9:8e:74:fb:73:e5:f3:ee: 5d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:68:0A:E5:12:A1:89:1B:63:1B:E8:44:C3:4B:86:AE:94:2A:98:68 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:52:ff:65:34:55:a5:50:97:60:ec:79:e6:68:3e:cb:e4:fe: a0:39:6d:c6:c9:1e:bc:fa:77:4a:3b:f9:c4:40:a4:33:63:8a: b8:31:6e:ad:99:82:ce:32:90:61:f1:9b:ae:e6:fc:1c:c0:b5: 18:c4:58:f3:f2:24:bc:3e:f8:60:67:0d:72:50:49:74:a9:6f: 2b:3a:2c:ac:4b:74:11:00:ab:68:2a:3d:b6:5c:91:e4:44:40: b3:db:7d:a9:97:1d:9a:90:9b:40:f6:cd:4c:cd:58:a2:9a:d4: 7b:da:43:2a:b7:f9:25:e2:93:20:70:a2:45:70:0f:10:82:5e: f3:94:39:82:b3:c8:de:8d:bc:b9:23:eb:85:48:c6:3b:d8:e1: d2:69:ce:ca:22:a1:65:15:bd:3a:af:e7:21:1b:5c:dd:c4:c3: c5:4f:30:89:9b:0d:0e:fc:d4:13:7c:0b:c8:89:7b:fe:ac:69: e1:74:41:24:04:b0:a5:3c:fc:10:df:58:38:3f:d3:ac:35:ad: 43:de:04:9a:72:b6:ed:f0:7d:f2:6c:69:0e:db:2b:84:9c:e5: 7f:5a:5d:78:96:a8:57:39:a6:01:7e:a1:22:8f:a1:02:e5:2d: 42:af:1c:e1:bf:35:1e:b2:1c:f4:98:ab:3a:fa:5b:b2:17:69: da:0c:f2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjQxMTIyMjMxNjIyWhcNMjQxMTI5MjMxNjIyWjAYMRYwFAYD VQQDEw02NzQxMTBjNi0xMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukSvx8yM3cximTvaUPEw1cOYyCV7x8RWQGWnyTdFg0alQJqzF6vuxVFfZyIX Ol0Rni4PBAt7AnjgaVoXqybb20NFd15vSfYON9GN/WRYxJi2ZLyusIDAbgT74qU4 5D9paRoSKO/kX9fFPjdugOYa7sBuHaHWSSwAtvGBrJxyPULPPZG7dk4CcmOXKrQq NfsUXTxik8kct34uNHoHPjp/I0t2aAOAnDelvUD+O/8eIp3hUondH3O4TI52qdCS 5b6QeLZtq+2+NdSs7w1ATNzVTVN+SS18easOAmksU595tAzKHUBgg9tvkpS41dFE fxgwouCHEQTV2Y50+3Pl8+5d3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNoCuUS oYkbYxvoRMNLhq6UKphoMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkUv9lNFWlUJdg7HnmaD7L5P6gOW3GyR68+ndKO/nEQKQzY4q4MW6t mYLOMpBh8Zuu5vwcwLUYxFjz8iS8PvhgZw1yUEl0qW8rOiysS3QRAKtoKj22XJHk RECz232plx2akJtA9s1MzViimtR72kMqt/kl4pMgcKJFcA8Qgl7zlDmCs8jejby5 I+uFSMY72OHSac7KIqFlFb06r+chG1zdxMPFTzCJmw0O/NQTfAvIiXv+rGnhdEEk BLClPPwQ31g4P9OsNa1D3gSacrbt8H3ybGkO2yuEnOV/Wl14lqhXOaYBfqEij6EC 5S1CrxzhvzUeshz0mKs6+luyF2naDPLE -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org