$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: czgaWHp88SCDptO8pv2M9KPHJZpMeWRqPeCNHXcCqOA= Subject key identifier: D7:7A:EA:C3:E8:DF:E7:BB:93:C7:6C:48:E0:5A:43:B4:2A:12:23:D2 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0961 Signing time: Sun 24 Nov 2024 19:47:38 +0000 Manifest this update: Sun 24 Nov 2024 19:47:38 +0000 Manifest next update: Sun 01 Dec 2024 19:47:38 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: iQZ5K5vY1mubE6EAAnSL3Rqg3EN6h8wjzfsjW67tSLI=) 2: 974B4E9C18CE11EFBCD58454C4F9AE02.roa (hash: 6A+e4OgojKZoLWl83GCUzTgizNvbdXt5Vk0z/3IWhUw=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: 19peW13UIPklgma9IsoYtyIgEi8rvSKuXv+9ezxIut4=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: VqWzdPFCvuqUEShaf6/toPwLspmfOG4EJ7lP9CUoJW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Nov 24 19:47:38 2024 GMT Not After : Dec 1 19:47:38 2024 GMT Subject: CN=674382da-f175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:25:4b:22:31:b2:31:e4:4b:7e:dd:b3:e9: 68:44:07:45:1f:e4:e6:93:5c:7c:ea:0d:d5:33:bf: 22:60:ec:57:dd:72:e8:75:52:7d:fd:3a:d0:41:9b: 9a:5c:24:b5:b8:9c:6e:f2:22:4f:70:4a:bc:dc:fe: f9:50:bd:09:11:05:1e:a6:42:6b:f5:79:08:69:04: 1c:25:06:78:96:ac:57:e7:f2:7d:5d:18:82:de:3d: 46:3e:d0:31:fa:1a:8e:ca:df:b4:6c:c7:31:06:01: 1c:70:01:a6:2f:2c:9b:86:13:bd:70:6b:c1:69:4e: e9:77:24:fc:44:87:f3:4b:73:a8:c8:68:18:87:f7: 73:06:9e:f7:a2:ff:6e:b9:54:a7:6c:8a:4e:99:d4: c8:2a:7c:31:b7:32:da:c7:00:ef:55:35:5d:d3:d6: 92:76:e6:e3:a3:bd:5c:4c:77:5d:7b:dc:12:21:49: 94:ef:25:01:22:39:b1:ac:27:bb:54:7a:cf:a3:73: 66:fd:0f:7b:28:f6:8a:ff:9b:75:cf:03:02:08:7f: f2:1e:fb:2c:fb:02:03:10:28:ad:cc:b5:75:a2:00: 94:67:65:f8:f1:8f:c5:2a:83:28:41:12:5b:62:a4: 19:c9:6b:aa:3b:dc:46:02:52:f9:57:76:83:d2:11: 1a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7A:EA:C3:E8:DF:E7:BB:93:C7:6C:48:E0:5A:43:B4:2A:12:23:D2 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:72:3a:1c:aa:32:04:71:f1:27:d2:9a:6c:09:41:13:80:f4: bb:33:2d:72:90:18:82:60:85:d4:7b:8d:b9:0f:9f:84:f5:b2: e8:bc:05:9f:66:48:ca:95:f4:48:22:63:bd:81:80:1b:21:82: b9:e5:f1:65:ff:32:11:36:b9:1f:25:88:cf:6f:b2:fe:4e:6f: a9:db:67:28:71:52:23:e1:84:ab:b1:09:3c:0d:4d:06:7a:62: 19:f9:ec:65:4b:e3:6a:5e:79:19:b4:07:6f:38:fa:df:76:c4: 71:22:a9:c0:a5:71:c2:fd:c1:b6:ad:49:4c:ca:45:81:ec:9a: ca:45:21:04:6e:89:3d:ec:6a:11:98:ad:e6:e2:24:46:2b:30: 98:fe:66:be:fc:5b:a6:f6:81:c8:b9:5e:b4:64:fa:cf:61:2a: 57:d8:78:23:7e:8c:97:8b:65:e1:15:69:d8:0a:a2:98:0a:3d: a3:9b:94:74:a1:a3:28:ff:e9:56:d5:1b:26:d5:65:ab:c5:c0: d6:4b:27:a9:7c:be:bf:ec:1e:97:fa:ee:7e:71:88:78:2a:77: 83:a0:e9:d2:60:23:3e:5b:dc:64:cd:99:c5:3a:d7:a8:26:8c: 26:15:96:79:fa:ea:26:e3:21:c4:c3:9d:c4:f5:8b:0d:43:61: 9f:91:03:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjQxMTI0MTk0NzM4WhcNMjQxMjAxMTk0NzM4WjAYMRYwFAYD VQQDEw02NzQzODJkYS1mMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynYlSyIxsjHkS37ds+loRAdFH+Tmk1x86g3VM78iYOxX3XLodVJ9/TrQQZua XCS1uJxu8iJPcEq83P75UL0JEQUepkJr9XkIaQQcJQZ4lqxX5/J9XRiC3j1GPtAx +hqOyt+0bMcxBgEccAGmLyybhhO9cGvBaU7pdyT8RIfzS3OoyGgYh/dzBp73ov9u uVSnbIpOmdTIKnwxtzLaxwDvVTVd09aSdubjo71cTHdde9wSIUmU7yUBIjmxrCe7 VHrPo3Nm/Q97KPaK/5t1zwMCCH/yHvss+wIDECitzLV1ogCUZ2X48Y/FKoMoQRJb YqQZyWuqO9xGAlL5V3aD0hEaFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd66sPo 3+e7k8dsSOBaQ7QqEiPSMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTcjocqjIEcfEn0ppsCUETgPS7My1ykBiCYIXUe425D5+E9bLovAWf ZkjKlfRIImO9gYAbIYK55fFl/zIRNrkfJYjPb7L+Tm+p22cocVIj4YSrsQk8DU0G emIZ+exlS+NqXnkZtAdvOPrfdsRxIqnApXHC/cG2rUlMykWB7JrKRSEEbok97GoR mK3m4iRGKzCY/ma+/Fum9oHIuV60ZPrPYSpX2HgjfoyXi2XhFWnYCqKYCj2jm5R0 oaMo/+lW1Rsm1WWrxcDWSyepfL6/7B6X+u5+cYh4KneDoOnSYCM+W9xkzZnFOteo JowmFZZ5+uom4yHEw53E9YsNQ2GfkQNd -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:00 2024 by rpki-client on console-ams.rpki-client.org