$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft File: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json) Hash identifier: d8BaEj73wJvBayttDBO1dKboQ1HfwfUTOcghvKhiMWE= Subject key identifier: AF:B7:28:BF:C1:C1:7E:7C:F8:59:84:68:B1:94:02:35:AC:E9:FC:12 Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 Certificate issuer: /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft Manifest number: 230F Signing time: Fri 22 Nov 2024 16:22:21 +0000 Manifest this update: Fri 22 Nov 2024 16:22:20 +0000 Manifest next update: Fri 29 Nov 2024 16:22:20 +0000 Files and hashes: 1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: XtaaCL7HbsXUcnGHlRBuu4es92/kTxQC7LEVMpFUdZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720 Validity Not Before: Nov 22 16:22:20 2024 GMT Not After : Nov 29 16:22:20 2024 GMT Subject: CN=6740afbc-ba67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c1:ba:c2:1e:f3:ad:99:49:9d:71:4b:71:a1: 44:5b:07:43:f1:5a:d5:61:6c:8f:02:c8:5d:21:9d: 78:bc:94:fd:3c:20:31:a3:fa:7e:b9:2e:9b:38:7d: 86:61:2c:4a:fc:aa:8e:4e:a7:06:6d:0f:43:10:83: a3:39:dd:82:2f:72:1c:ad:41:44:73:31:7e:b1:3e: b3:f4:d7:ba:96:e9:dd:09:46:c5:65:39:1c:13:12: f0:6e:0b:a1:56:4a:e3:a2:a7:09:32:aa:70:0b:6f: 19:d3:6e:b2:8d:ea:ec:73:3c:ba:e5:28:dc:52:5a: 71:c1:fc:1d:df:2a:cc:52:9f:af:96:9d:0a:e6:d6: a1:9c:cb:aa:66:f6:99:fc:86:ce:b9:1b:55:26:c3: 14:49:25:6b:44:42:55:82:25:61:8c:80:01:3c:6d: ab:0f:28:2c:e0:01:6c:03:bb:43:3b:9f:72:10:d0: 16:bf:26:66:1b:a8:f6:f7:8f:19:aa:17:9a:4d:6e: 7d:59:22:73:0a:23:c9:d8:42:c8:a7:7e:f7:94:bc: 09:a1:10:ec:a7:e0:7e:e7:cb:9d:cb:0d:82:8e:57: 80:19:84:cd:c0:ee:ed:56:38:34:73:84:69:fc:d3: 87:e1:b1:33:c6:8a:e7:58:89:30:4e:24:f4:3a:05: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B7:28:BF:C1:C1:7E:7C:F8:59:84:68:B1:94:02:35:AC:E9:FC:12 X509v3 Authority Key Identifier: keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:08:92:2b:a1:21:c9:bf:32:50:62:8c:62:62:9e:38:d5: c2:2e:86:bd:78:cd:ea:a3:a3:4c:1e:87:bb:67:d7:ca:34:10: e9:47:3a:c5:34:31:72:0a:8d:33:21:b3:e9:2d:57:3f:56:fc: ef:89:f2:cc:54:82:e9:7a:16:55:e9:68:40:e2:c1:3d:dd:d6: 3b:54:c2:31:f6:f4:d5:04:23:36:00:7e:d7:f5:5f:2a:0d:ca: ac:50:91:9c:f7:da:bb:2f:1d:6e:d2:ba:3d:d4:c5:d9:b7:dc: 0d:01:7f:13:e4:78:95:e7:18:bf:63:7f:7d:54:d2:23:c3:94: f8:49:6b:3e:7a:d9:a2:c0:ac:36:76:4b:c2:22:1c:ee:16:eb: d6:1e:ba:9d:db:1c:f5:ec:e9:1a:94:b0:f9:e0:0d:ba:69:ea: 7b:00:45:fd:8c:da:5a:20:c7:28:ee:e7:74:48:63:0b:fd:b7: a3:2d:ab:84:ac:7f:e2:9c:68:fa:5f:77:15:47:83:bb:74:e4: 1f:b1:f1:65:5e:b8:75:dc:24:2a:85:83:0f:f0:23:84:b7:11: 38:0a:b4:96:19:62:9a:e8:3b:a6:4e:38:d0:ce:9f:6b:07:13: 02:df:5b:f0:1d:a6:70:e1:e0:5b:3b:21:93:b4:be:c5:3a:07: 0b:2f:c4:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG RkFCNjc3MjAwHhcNMjQxMTIyMTYyMjIwWhcNMjQxMTI5MTYyMjIwWjAYMRYwFAYD VQQDEw02NzQwYWZiYy1iYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cG6wh7zrZlJnXFLcaFEWwdD8VrVYWyPAshdIZ14vJT9PCAxo/p+uS6bOH2G YSxK/KqOTqcGbQ9DEIOjOd2CL3IcrUFEczF+sT6z9Ne6lundCUbFZTkcExLwbguh VkrjoqcJMqpwC28Z026yjersczy65SjcUlpxwfwd3yrMUp+vlp0K5tahnMuqZvaZ /IbOuRtVJsMUSSVrREJVgiVhjIABPG2rDygs4AFsA7tDO59yENAWvyZmG6j2948Z qheaTW59WSJzCiPJ2ELIp373lLwJoRDsp+B+58udyw2CjleAGYTNwO7tVjg0c4Rp /NOH4bEzxornWIkwTiT0OgUqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+3KL/B wX58+FmEaLGUAjWs6fwSMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB WjBrTC05TXVSLWZfcTJkeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUnwiSK6Ehyb8yUGKMYmKeONXCLoa9eM3qo6NMHoe7Z9fKNBDpRzrF NDFyCo0zIbPpLVc/VvzvifLMVILpehZV6WhA4sE93dY7VMIx9vTVBCM2AH7X9V8q DcqsUJGc99q7Lx1u0ro91MXZt9wNAX8T5HiV5xi/Y399VNIjw5T4SWs+etmiwKw2 dkvCIhzuFuvWHrqd2xz17OkalLD54A26aep7AEX9jNpaIMco7ud0SGML/bejLauE rH/inGj6X3cVR4O7dOQfsfFlXrh13CQqhYMP8COEtxE4CrSWGWKa6DumTjjQzp9r BxMC31vwHaZw4eBbOyGTtL7FOgcLL8T9 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org