$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: GWZmoaOrkiGHxNcQfF9Xpj9Tr/Rmf9pwwtxSa6f9UjM= Subject key identifier: FC:81:F7:3D:AC:A2:16:FB:93:66:B1:F8:B8:E3:2F:6D:C5:0A:78:CC Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0B89 Signing time: Fri 22 Nov 2024 18:46:08 +0000 Manifest this update: Fri 22 Nov 2024 18:46:08 +0000 Manifest next update: Fri 29 Nov 2024 18:46:08 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: w0hnXZ+s/qBAZHu77baseKvb0j9jIYJW1R8ULsfZyro=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: Ex3hSamTcjmrOnWDUYBQcPhfMUnIX35c7QATztNXC6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: Nov 22 18:46:08 2024 GMT Not After : Nov 29 18:46:08 2024 GMT Subject: CN=6740d170-5abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:2f:69:25:45:90:b5:fe:bd:74:48:bd:6f: 2b:94:41:74:70:06:62:3a:74:91:8c:93:71:64:dd: 03:85:3a:be:0f:95:98:70:61:ce:0a:ac:5f:45:5f: 34:6a:c3:73:20:7f:9b:48:77:86:78:3d:1e:5c:27: 8e:1f:77:68:0e:8b:24:66:0e:56:47:bb:13:02:71: 20:d9:1d:a2:54:6a:eb:b3:13:f9:c8:29:01:e2:30: f5:00:19:77:93:cf:8d:10:df:80:46:76:07:f6:86: 09:03:c4:89:f5:91:82:ee:21:d2:55:c1:23:7a:47: d3:33:2d:c1:6c:55:4e:c5:51:f6:80:b1:ff:96:8c: a3:f6:7f:59:70:5a:a4:8e:79:e4:71:62:4d:73:3f: 45:d3:81:b0:c7:e5:2e:b0:b2:43:39:90:ef:1a:8f: 67:78:6c:49:39:62:38:68:72:e7:11:e7:5c:26:72: ae:f2:9c:a8:df:57:c3:2b:5b:f0:a3:fb:04:d5:5d: b8:55:a2:0a:90:ac:26:15:3e:f4:52:4d:d2:df:9b: 24:93:82:76:e1:96:c5:32:24:b8:43:f9:87:3b:ee: fe:51:32:6c:a4:51:47:0e:38:8c:a8:a6:a3:a0:7c: ea:bb:83:db:96:22:62:3d:eb:57:b1:23:8a:d8:c6: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:F7:3D:AC:A2:16:FB:93:66:B1:F8:B8:E3:2F:6D:C5:0A:78:CC X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:07:0d:2a:d5:3b:e9:58:31:58:84:ed:07:ab:be:15:58:f4: 4c:3f:0b:97:fb:66:67:9a:33:fc:ad:1f:c9:01:5a:53:c0:45: b5:ee:b2:15:fb:82:25:dc:19:37:de:18:37:5f:66:30:10:26: aa:8b:ac:a3:29:28:83:db:8a:e3:34:f1:0d:a4:a4:ba:e7:8a: c1:b4:e7:57:30:c1:5f:c7:ec:ac:1a:39:77:cc:6e:c6:bc:a5: da:77:31:dd:d9:ac:3d:5c:6f:8b:ba:09:94:74:eb:78:06:2a: 51:c7:f1:e1:34:15:85:7a:87:b1:d0:45:49:e8:e3:d6:9c:9b: f4:8f:59:d6:03:30:b2:fc:78:ef:d0:03:fe:13:2e:70:9f:47: 8d:35:cb:01:c5:59:68:6b:9e:fc:9d:9f:5f:8e:ff:c9:27:14: eb:ee:ee:09:7f:36:47:fa:29:35:a9:b3:1d:9f:b2:f7:bb:f0: 02:0c:a1:14:ec:f3:6e:21:e7:a9:d3:05:3c:75:22:d7:1a:1a: 87:8e:5e:81:e9:6e:d8:b2:10:48:1b:8e:97:26:5d:8a:60:58: d1:19:8b:39:2a:fd:21:b9:ea:79:2f:20:9a:a1:65:b5:ba:cf: b0:f3:c2:97:2f:bc:2d:cd:ef:44:ec:d1:18:30:47:66:f7:aa: 55:26:02:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjQxMTIyMTg0NjA4WhcNMjQxMTI5MTg0NjA4WjAYMRYwFAYD VQQDEw02NzQwZDE3MC01YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqUvaSVFkLX+vXRIvW8rlEF0cAZiOnSRjJNxZN0DhTq+D5WYcGHOCqxfRV80 asNzIH+bSHeGeD0eXCeOH3doDoskZg5WR7sTAnEg2R2iVGrrsxP5yCkB4jD1ABl3 k8+NEN+ARnYH9oYJA8SJ9ZGC7iHSVcEjekfTMy3BbFVOxVH2gLH/loyj9n9ZcFqk jnnkcWJNcz9F04Gwx+UusLJDOZDvGo9neGxJOWI4aHLnEedcJnKu8pyo31fDK1vw o/sE1V24VaIKkKwmFT70Uk3S35skk4J24ZbFMiS4Q/mHO+7+UTJspFFHDjiMqKaj oHzqu4PbliJiPetXsSOK2MaKAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyB9z2s ohb7k2ax+LjjL23FCnjMMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBw0q1TvpWDFYhO0Hq74VWPRMPwuX+2ZnmjP8rR/JAVpTwEW17rIV +4Il3Bk33hg3X2YwECaqi6yjKSiD24rjNPENpKS654rBtOdXMMFfx+ysGjl3zG7G vKXadzHd2aw9XG+LugmUdOt4BipRx/HhNBWFeoex0EVJ6OPWnJv0j1nWAzCy/Hjv 0AP+Ey5wn0eNNcsBxVloa578nZ9fjv/JJxTr7u4JfzZH+ik1qbMdn7L3u/ACDKEU 7PNuIeep0wU8dSLXGhqHjl6B6W7YshBIG46XJl2KYFjRGYs5Kv0huep5LyCaoWW1 us+w88KXL7wtze9E7NEYMEdm96pVJgJG -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org