$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft File: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json) Hash identifier: KMnGVMoh+gjs7gRVRDKQ3/dIUey2+4JXXmnlq2VqpIw= Subject key identifier: 57:7D:83:D0:D9:E6:D0:3A:24:3C:F3:9F:44:5B:7C:2C:C4:6B:F8:3D Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF Certificate issuer: /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft Manifest number: 3A Signing time: Sat 23 Nov 2024 05:26:07 +0000 Manifest this update: Sat 23 Nov 2024 05:26:07 +0000 Manifest next update: Sat 30 Nov 2024 05:26:07 +0000 Files and hashes: 1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: P4OfzQde+lWkMyJrjXplVjc5EvtZQ7bkyyr02JoU3f4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Validity Not Before: Nov 23 05:26:07 2024 GMT Not After : Nov 30 05:26:07 2024 GMT Subject: CN=6741676f-2cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:ca:ef:9f:e8:00:9a:73:b4:e1:64:a2:f2: cd:f7:9b:4f:ac:6f:79:51:5c:b7:da:de:58:4b:3c: 8c:8b:32:f0:3e:fe:0b:4e:b4:cf:6c:73:a1:4e:c1: 24:14:f4:9a:e8:dc:c7:f8:62:90:90:e3:88:a5:8a: 82:19:2c:b6:91:5c:e1:2d:8e:0d:5d:ec:fa:7d:f1: 5b:b4:e4:6d:2a:16:21:6f:19:fa:b6:91:22:f9:53: 38:14:57:8f:02:8b:53:4c:04:65:be:ec:6d:28:6e: c0:f1:6a:e8:e0:b2:4d:ca:81:83:96:1d:fb:c1:72: 0d:68:67:87:22:ea:e5:77:88:1c:d6:b6:e0:d5:a7: 53:72:c7:cf:47:3b:f2:b9:15:12:b9:ca:77:93:65: f2:23:ef:ea:4c:d1:0a:65:e6:88:04:9e:96:75:21: b1:5a:a9:1f:ba:43:e2:fa:f0:0b:e0:84:2b:e2:77: 3a:5c:a8:29:19:a6:c6:cc:93:ed:99:49:a3:01:d5: a9:89:3d:7e:e1:db:bd:04:f4:e0:a7:fd:8d:94:2d: bc:18:26:87:95:7b:b2:43:d8:0c:99:40:70:50:1b: 54:2e:12:94:af:49:dd:cf:71:b5:05:6a:6c:57:57: dd:b4:54:71:85:05:15:21:99:8b:de:9e:b6:e4:18: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:83:D0:D9:E6:D0:3A:24:3C:F3:9F:44:5B:7C:2C:C4:6B:F8:3D X509v3 Authority Key Identifier: keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f8:cc:8d:11:a6:02:d2:89:19:e7:03:35:dc:d9:83:0f:72: 24:20:f6:b0:e4:28:97:c2:ff:7b:96:d7:09:f1:a9:66:03:3e: e6:16:5d:f4:17:68:5a:69:1e:e9:13:04:3e:43:2b:7e:7e:14: 66:db:b9:85:66:30:9b:01:aa:9f:4d:77:99:dd:8b:ad:96:72: 5a:b8:d8:a1:f7:71:d1:3b:3c:ec:c1:34:e6:41:72:c4:45:1c: 64:57:f0:3c:d3:2e:47:61:f5:28:64:ee:38:10:5f:d1:4b:eb: cf:01:86:2f:8a:d3:99:3a:a4:2e:ca:7a:de:8c:fd:8e:23:3e: 09:d6:58:5e:64:57:8a:62:c7:e6:77:2c:e3:f5:d9:e1:a5:be: e2:b1:d1:e1:57:72:8c:14:c0:6e:1e:c7:85:7f:1f:5f:b1:f3: c2:72:f6:48:86:71:3b:e9:d2:f6:3b:2e:38:64:bc:c0:78:35: 78:6d:01:52:a5:4b:23:ee:f8:17:18:bb:d0:8d:ec:c0:dd:3b: 4c:bf:03:bb:ea:75:f8:12:a0:2d:20:2a:0b:95:3d:90:5c:66: 5b:dc:65:1d:e7:97:eb:1e:d5:a4:55:64:82:5a:c5:dc:b8:f0: 7b:3f:4b:9a:7b:3d:f8:41:df:d6:96:bf:9a:ff:30:8c:0e:ca: e5:c0:78:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEU2NTExMC8GA1UEBRMoRTFEMzMwMzE2QzNBMjY4NDI0RDcxOTdBQkYzNDEyRjcy MzExNDFERjAeFw0yNDExMjMwNTI2MDdaFw0yNDExMzAwNTI2MDdaMBgxFjAUBgNV BAMTDTY3NDE2NzZmLTJjZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl/srvn+gAmnO04WSi8s33m0+sb3lRXLfa3lhLPIyLMvA+/gtOtM9sc6FOwSQU 9Jro3Mf4YpCQ44ilioIZLLaRXOEtjg1d7Pp98Vu05G0qFiFvGfq2kSL5UzgUV48C i1NMBGW+7G0obsDxaujgsk3KgYOWHfvBcg1oZ4ci6uV3iBzWtuDVp1Nyx89HO/K5 FRK5yneTZfIj7+pM0Qpl5ogEnpZ1IbFaqR+6Q+L68AvghCvidzpcqCkZpsbMk+2Z SaMB1amJPX7h270E9OCn/Y2ULbwYJoeVe7JD2AyZQHBQG1QuEpSvSd3PcbUFamxX V920VHGFBRUhmYvenrbkGAWlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV32D0Nnm 0DokPPOfRFt8LMRr+D0wHwYDVR0jBBgwFoAU4dMwMWw6JoQk1xl6vzQS9yMRQd8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwRTY1L0NFMjE2Rjg2NTM4 MDExRUZBRDY3RTg3OEM0RjlBRTAyLzRkTXdNV3c2Sm9RazF4bDZ2elFTOXlNUlFk OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGRNd01XdzZKb1FrMXhsNnZ6UVM5eU1SUWQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw RTY1L0NFMjE2Rjg2NTM4MDExRUZBRDY3RTg3OEM0RjlBRTAyLzRkTXdNV3c2Sm9R azF4bDZ2elFTOXlNUlFkOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADr4zI0RpgLSiRnnAzXc2YMPciQg9rDkKJfC/3uW1wnxqWYDPuYWXfQX aFppHukTBD5DK35+FGbbuYVmMJsBqp9Nd5ndi62Wclq42KH3cdE7POzBNOZBcsRF HGRX8DzTLkdh9Shk7jgQX9FL688Bhi+K05k6pC7Ket6M/Y4jPgnWWF5kV4pix+Z3 LOP12eGlvuKx0eFXcowUwG4ex4V/H1+x88Jy9kiGcTvp0vY7LjhkvMB4NXhtAVKl SyPu+BcYu9CN7MDdO0y/A7vqdfgSoC0gKguVPZBcZlvcZR3nl+se1aRVZIJaxdy4 8Hs/S5p7PfhB39aWv5r/MIwOyuXAeBI= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org