$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft File: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft (raw, json) Hash identifier: kzby6FFpDmGIE3LqgBZh7rb3AQLCUH5VMzph9XB969Y= Subject key identifier: B9:83:08:F8:40:F1:2B:37:9E:59:69:9C:C0:A3:3E:73:6A:EB:5E:47 Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft Manifest number: 0788 Signing time: Fri 22 Nov 2024 20:54:46 +0000 Manifest this update: Fri 22 Nov 2024 20:54:45 +0000 Manifest next update: Fri 29 Nov 2024 20:54:45 +0000 Files and hashes: 1: 3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl (hash: GmhjQyAAIcJwPbPGDy2imm14WoXSorACkjxSvzwl6o8=) 2: 187415DE3E6F11EEA236AD17C4F9AE02.roa (hash: oCp4PWI4KP913wPG7fBsv0AeBkh1JffMER8sLvsvQsc=) 3: 39DE80CE3E6F11EEA7233D2CC4F9AE02.roa (hash: 47zwqpP9eAhOCqvzUy9fMqxxS+0iNoZWW8K5tbmry+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18 Validity Not Before: Nov 22 20:54:45 2024 GMT Not After : Nov 29 20:54:45 2024 GMT Subject: CN=6740ef95-7cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:0b:b0:0a:33:82:f8:2b:80:84:15:80:bc: 58:47:80:d9:e2:bb:1c:2c:36:d1:ee:2d:ae:bb:9e: cb:0d:00:3d:74:2e:49:ae:54:e8:b7:c8:ce:fc:9a: b2:89:72:d1:07:6b:75:e4:2b:f1:e9:d8:20:7c:1c: a3:8f:0f:9b:85:8c:b0:03:c4:b7:f5:a9:93:6e:b9: f5:66:05:2f:13:1a:7c:bf:38:39:c2:3b:fc:8c:c2: 60:99:86:c6:b9:42:63:f4:7b:46:92:9d:38:78:69: 23:65:d8:32:71:8d:5e:6b:70:aa:f5:68:81:66:58: 03:0d:c4:a7:5f:4d:9d:49:6e:7b:07:3c:10:ce:aa: 01:3b:96:06:7c:f9:dd:2d:6b:4e:74:c7:b8:96:72: 3e:d8:ac:36:df:ef:4d:7f:ec:38:13:35:ac:cf:c8: 8d:c7:eb:4d:a1:b3:3d:36:79:f7:4a:eb:0a:89:0a: 7d:08:f4:61:d8:4e:27:d3:28:bb:33:fc:35:c9:dd: f4:8a:91:85:13:50:6d:b1:78:66:fa:a7:19:d8:94: ea:40:bf:d5:ef:51:de:5e:fa:9e:f3:03:e3:72:9f: 66:38:49:9b:09:4a:f3:2e:f1:2d:82:90:01:ea:28: 2f:8a:f2:6f:1f:1d:95:ee:29:57:6d:8e:2f:8a:1f: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:08:F8:40:F1:2B:37:9E:59:69:9C:C0:A3:3E:73:6A:EB:5E:47 X509v3 Authority Key Identifier: keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:ac:97:35:a1:7c:9f:c3:99:6a:23:f6:1e:71:dc:00:56: 47:9a:0e:23:17:fd:a8:15:8a:54:ca:d0:be:fc:fe:03:87:8c: 20:15:17:d9:9f:0b:b3:4a:49:7d:c2:01:9f:a6:89:4c:99:f0: fd:d5:56:c1:7c:84:04:bd:85:a8:05:ac:ed:03:63:65:62:e3: 71:00:22:32:88:7a:1e:50:a0:21:8f:18:5a:95:11:74:e3:f6: 5c:db:cf:bf:5b:2e:33:b8:76:e4:d6:0c:e7:59:fd:c8:54:fd: bc:60:85:c6:ed:5d:6a:b0:ad:b3:c8:49:3d:ca:53:0b:80:1c: 11:bf:5b:25:2f:81:f4:4d:51:41:2d:40:7c:76:c3:20:f0:f8: 4d:97:36:34:3d:dd:c4:3b:73:f4:fc:1a:22:c4:e6:3d:18:71: 5a:0b:d3:6c:30:7d:24:5d:dd:76:51:fb:d9:e8:f7:f4:15:45: c8:3e:5c:0d:62:8c:42:ff:00:80:29:d1:df:93:83:17:3f:25: 80:ad:0d:41:d2:6d:03:e3:b1:08:5d:1b:0f:ca:7d:de:20:95: 75:99:31:a6:13:0f:92:40:5b:80:6b:08:c7:22:67:5d:42:71: c9:dd:e1:ac:b0:8d:b3:25:bf:9a:ab:a5:78:3d:f9:00:c9:8c: 84:06:b0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxOEIxMTAvBgNVBAUTKERENjFDMjJBOTVCMjhFRkRFMzc4MzEyQTc1OUZBQ0FG RUU0MDZDMTgwHhcNMjQxMTIyMjA1NDQ1WhcNMjQxMTI5MjA1NDQ1WjAYMRYwFAYD VQQDEw02NzQwZWY5NS03Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PILsAozgvgrgIQVgLxYR4DZ4rscLDbR7i2uu57LDQA9dC5JrlTot8jO/Jqy iXLRB2t15Cvx6dggfByjjw+bhYywA8S39amTbrn1ZgUvExp8vzg5wjv8jMJgmYbG uUJj9HtGkp04eGkjZdgycY1ea3Cq9WiBZlgDDcSnX02dSW57BzwQzqoBO5YGfPnd LWtOdMe4lnI+2Kw23+9Nf+w4EzWsz8iNx+tNobM9Nnn3SusKiQp9CPRh2E4n0yi7 M/w1yd30ipGFE1BtsXhm+qcZ2JTqQL/V71HeXvqe8wPjcp9mOEmbCUrzLvEtgpAB 6igvivJvHx2V7ilXbY4vih8IYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmDCPhA 8Ss3nllpnMCjPnNq615HMB8GA1UdIwQYMBaAFN1hwiqVso7943gxKnWfrK/uQGwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE4Qi83RTBDRUVGQUVF QjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2M2plREVxZFotc3ItNUFi QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXSENLcFd5anYzamVERXFkWi1zci01QWJCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE4Qi83RTBDRUVGQUVFQjUxMUVBQUE0RkFEMzJDNEY5QUUwMi8zV0hDS3BXeWp2 M2plREVxZFotc3ItNUFiQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjt6yXNaF8n8OZaiP2HnHcAFZHmg4jF/2oFYpUytC+/P4Dh4wgFRfZ nwuzSkl9wgGfpolMmfD91VbBfIQEvYWoBaztA2NlYuNxACIyiHoeUKAhjxhalRF0 4/Zc28+/Wy4zuHbk1gznWf3IVP28YIXG7V1qsK2zyEk9ylMLgBwRv1slL4H0TVFB LUB8dsMg8PhNlzY0Pd3EO3P0/BoixOY9GHFaC9NsMH0kXd12UfvZ6Pf0FUXIPlwN YoxC/wCAKdHfk4MXPyWArQ1B0m0D47EIXRsPyn3eIJV1mTGmEw+SQFuAawjHImdd QnHJ3eGssI2zJb+aq6V4PfkAyYyEBrDY -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org