$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: aebo62+gAKgjHzBiCrE0DCq4E8Vo6i4sw3XZuEge4fo= Subject key identifier: 6B:54:05:30:53:42:63:F2:0D:3C:9A:42:EA:C8:A9:C1:D2:1A:90:A3 Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 0451 Signing time: Fri 22 Nov 2024 23:45:47 +0000 Manifest this update: Fri 22 Nov 2024 23:45:47 +0000 Manifest next update: Fri 29 Nov 2024 23:45:47 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: /hm5CPj7rFNaF6WOEXpxlzo4JEtgZJAGEy7+XiK2u98=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: ES0KtplnGhM27Vh/hroAKpFu+jIJhHlyayZgnN5P/Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Nov 22 23:45:47 2024 GMT Not After : Nov 29 23:45:47 2024 GMT Subject: CN=674117ab-02cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:19:65:ea:1e:f2:74:73:75:46:be:3d:f5: 5c:8d:1a:fb:61:57:46:94:dd:b8:61:52:05:b6:0d: 74:60:ef:c1:ba:d1:a0:8f:a7:93:ec:19:ea:22:ed: 5c:e9:19:7d:e3:9f:37:eb:ae:75:f6:b0:d8:12:67: 00:93:f0:da:68:38:ec:e3:76:23:68:d1:63:fc:5c: f8:84:fb:00:16:8f:70:17:9b:ec:d5:93:8c:a3:47: e7:ef:3f:c7:b0:a3:a4:9a:2f:ba:d5:62:af:15:e3: 38:22:81:18:e3:26:b9:2a:cb:85:52:bb:46:8e:c9: 0d:be:f0:c8:60:e4:3b:26:a6:cd:00:73:1f:e4:29: ed:a9:9e:04:0f:62:f4:8c:f2:14:19:19:25:bd:1e: 39:b7:06:70:96:ef:72:3a:05:f0:62:c6:72:8c:95: db:e0:ce:31:49:d4:a2:ea:ce:8d:cf:c9:0e:52:7b: a6:d2:79:1f:d3:70:a0:f8:64:2d:a3:c8:25:4d:d9: b7:ef:12:5a:6f:ab:70:f4:9f:2c:d7:dd:e5:94:ff: 82:7e:01:eb:e5:8a:be:c5:cc:c9:db:b6:ad:0f:95: 47:3d:4c:d4:b3:38:4d:87:58:26:76:3a:89:c1:6c: 0d:09:d5:8c:d5:87:43:a5:58:da:4d:3f:47:07:bf: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:05:30:53:42:63:F2:0D:3C:9A:42:EA:C8:A9:C1:D2:1A:90:A3 X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5d:6e:8c:80:06:5d:17:19:5b:0b:50:2a:18:e2:84:13:5f: 09:69:b4:c7:04:7b:b0:f3:67:05:7f:76:1f:c6:6e:2c:21:97: 63:16:87:a5:6f:c5:4f:99:d1:de:53:b5:a6:11:52:1d:58:38: ad:64:8b:08:74:69:a3:c8:35:06:01:a4:b8:8d:fc:86:8e:9b: f3:b3:3d:af:10:fb:85:36:89:c7:2b:7e:e0:60:f7:2c:5d:46: 69:2f:73:c4:d7:d3:93:6e:47:7e:7e:af:d8:9f:db:ff:7c:82: 0a:02:7e:91:41:aa:05:25:0e:74:68:ca:5f:97:d2:34:23:6b: 18:6f:44:59:6f:2f:9e:97:02:12:36:c0:40:7d:e5:fa:bc:64: 79:10:fd:6d:e5:8a:23:ab:0d:9f:1b:49:91:bb:24:b8:df:72: c9:3f:27:9e:cd:db:63:6e:bb:0f:1d:72:a9:80:57:b1:aa:53: f9:0c:86:c2:ac:6d:cd:66:67:f9:cb:30:20:fb:41:d9:eb:3c: af:09:63:84:1a:08:0f:1d:e4:25:ce:5b:cf:b9:06:20:95:48: fa:e8:28:7a:20:33:63:c0:bc:16:00:de:6c:1f:ce:e0:92:0a: a6:ab:c9:89:a2:4d:03:1e:3b:2b:93:e8:1a:52:f5:4c:61:22: 09:ce:6e:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjQxMTIyMjM0NTQ3WhcNMjQxMTI5MjM0NTQ3WjAYMRYwFAYD VQQDEw02NzQxMTdhYi0wMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3k0ZZeoe8nRzdUa+PfVcjRr7YVdGlN24YVIFtg10YO/ButGgj6eT7BnqIu1c 6Rl9458366519rDYEmcAk/DaaDjs43YjaNFj/Fz4hPsAFo9wF5vs1ZOMo0fn7z/H sKOkmi+61WKvFeM4IoEY4ya5KsuFUrtGjskNvvDIYOQ7JqbNAHMf5CntqZ4ED2L0 jPIUGRklvR45twZwlu9yOgXwYsZyjJXb4M4xSdSi6s6Nz8kOUnum0nkf03Cg+GQt o8glTdm37xJab6tw9J8s193llP+CfgHr5Yq+xczJ27atD5VHPUzUszhNh1gmdjqJ wWwNCdWM1YdDpVjaTT9HB7/hDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtUBTBT QmPyDTyaQurIqcHSGpCjMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzXW6MgAZdFxlbC1AqGOKEE18JabTHBHuw82cFf3Yfxm4sIZdjFoel b8VPmdHeU7WmEVIdWDitZIsIdGmjyDUGAaS4jfyGjpvzsz2vEPuFNonHK37gYPcs XUZpL3PE19OTbkd+fq/Yn9v/fIIKAn6RQaoFJQ50aMpfl9I0I2sYb0RZby+elwIS NsBAfeX6vGR5EP1t5Yojqw2fG0mRuyS433LJPyeezdtjbrsPHXKpgFexqlP5DIbC rG3NZmf5yzAg+0HZ6zyvCWOEGggPHeQlzlvPuQYglUj66Ch6IDNjwLwWAN5sH87g kgqmq8mJok0DHjsrk+gaUvVMYSIJzm75 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org