$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: sO6CI1kPnD6y4nxN2zjAJb9SAAGktTF8E5gh21xS1LQ= Subject key identifier: 07:F3:D4:C9:E6:95:1C:CB:D0:6F:1C:A2:9F:CB:F1:D1:03:0D:CF:EF Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 0463 Signing time: Fri 22 Nov 2024 23:41:45 +0000 Manifest this update: Fri 22 Nov 2024 23:41:44 +0000 Manifest next update: Fri 29 Nov 2024 23:41:44 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: McOLPGVcHgbAWUoWt5jzzd6tRSBufqKBbQR1hLOw/L8=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: wh1NM+NSrXNgk+dMjusznA6q+s8v+UAafuQbIX3k9wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Nov 22 23:41:44 2024 GMT Not After : Nov 29 23:41:44 2024 GMT Subject: CN=674116b9-a26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:86:89:f6:2d:3c:6d:69:8a:cb:13:73:45: 49:64:e3:02:b1:e9:9a:81:2a:b9:52:f3:60:47:cd: f9:5a:0f:29:48:44:05:df:80:cc:1b:82:9f:40:da: ab:a7:8a:bf:10:2e:0a:6c:3d:a6:a5:51:63:32:4c: 03:42:49:24:ed:42:f3:e5:69:a5:ea:46:2a:89:ac: 64:5c:ab:01:60:ff:c6:23:18:03:96:9e:3e:8c:b2: a9:50:e5:12:8b:5f:92:1a:fa:19:98:9a:f1:cf:db: 17:1a:0f:6d:ba:cd:4e:8a:65:35:d2:d2:b1:f5:38: 53:7e:58:19:b4:85:a4:c9:af:60:a2:a7:f8:1c:95: 4f:73:d6:c4:26:27:59:08:2b:49:be:40:a9:8a:9e: 28:79:d0:19:42:93:2b:0f:fd:96:ba:37:f6:a0:19: 80:e9:54:3d:8f:ff:a5:fd:81:5c:a3:d6:6d:11:c1: d2:18:4e:ce:a5:ad:d1:7c:d9:88:7c:b6:c1:a6:55: a5:5c:6f:d2:1d:38:14:3c:de:77:9c:82:0c:a1:2c: 92:5f:4e:60:28:87:fc:ec:ac:27:94:d9:a8:4c:0c: 02:13:14:2f:37:68:a6:d9:f7:c3:b6:bd:7d:90:0e: 0d:f6:81:74:85:78:f4:31:4f:94:b7:43:59:ba:74: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:D4:C9:E6:95:1C:CB:D0:6F:1C:A2:9F:CB:F1:D1:03:0D:CF:EF X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:32:d0:8a:d5:ea:b3:f0:f4:aa:53:18:e5:a5:e5:dc:60:c8: 42:5f:32:e4:be:e9:cb:60:a2:09:04:0a:42:39:55:27:30:32: 26:1c:88:b8:4d:e4:96:b3:c7:06:8b:79:67:8e:cd:7a:5a:87: 6e:59:aa:cb:7e:d7:ea:04:c1:c2:b7:48:92:2d:b8:95:27:45: 5e:db:e0:38:4e:8d:f4:89:83:cb:72:e8:95:82:1d:50:0d:39: ef:ec:e0:85:fe:7d:91:13:69:dc:da:bb:71:5b:2e:88:f8:3c: 1f:c9:23:f0:4d:fb:c3:c1:03:ba:bf:1f:a8:71:9a:a1:e2:43: de:48:16:e7:2e:15:08:c0:d8:00:d6:d2:12:3e:96:fd:df:d8: e6:31:98:e2:da:bc:0a:7a:8f:e1:73:05:c6:df:12:b8:bf:64: 4c:bc:1c:d7:c5:2d:9f:36:b0:1d:29:6a:6f:7b:aa:53:ed:55: 5e:70:a3:e5:cd:61:2b:c6:58:58:b1:03:b4:85:31:70:d3:d1: 60:43:f5:78:2f:d3:e9:29:b5:94:ae:fb:b1:d0:6e:a2:c0:3c: fb:02:21:63:ef:03:eb:0c:b7:df:36:46:38:6c:c4:85:8f:25: d9:5e:d0:d7:88:7b:25:50:ba:77:48:1c:52:3a:64:5c:3f:45: c5:f8:02:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjQxMTIyMjM0MTQ0WhcNMjQxMTI5MjM0MTQ0WjAYMRYwFAYD VQQDEw02NzQxMTZiOS1hMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5eGifYtPG1pissTc0VJZOMCsemagSq5UvNgR835Wg8pSEQF34DMG4KfQNqr p4q/EC4KbD2mpVFjMkwDQkkk7ULz5Wml6kYqiaxkXKsBYP/GIxgDlp4+jLKpUOUS i1+SGvoZmJrxz9sXGg9tus1OimU10tKx9ThTflgZtIWkya9goqf4HJVPc9bEJidZ CCtJvkCpip4oedAZQpMrD/2Wujf2oBmA6VQ9j/+l/YFco9ZtEcHSGE7Opa3RfNmI fLbBplWlXG/SHTgUPN53nIIMoSySX05gKIf87KwnlNmoTAwCExQvN2im2ffDtr19 kA4N9oF0hXj0MU+Ut0NZunSrSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfz1Mnm lRzL0G8cop/L8dEDDc/vMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOMtCK1eqz8PSqUxjlpeXcYMhCXzLkvunLYKIJBApCOVUnMDImHIi4 TeSWs8cGi3lnjs16WoduWarLftfqBMHCt0iSLbiVJ0Ve2+A4To30iYPLcuiVgh1Q DTnv7OCF/n2RE2nc2rtxWy6I+DwfySPwTfvDwQO6vx+ocZqh4kPeSBbnLhUIwNgA 1tISPpb939jmMZji2rwKeo/hcwXG3xK4v2RMvBzXxS2fNrAdKWpve6pT7VVecKPl zWErxlhYsQO0hTFw09FgQ/V4L9PpKbWUrvux0G6iwDz7AiFj7wPrDLffNkY4bMSF jyXZXtDXiHslULp3SBxSOmRcP0XF+AIV -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org