$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft File: PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json) Hash identifier: ES8oQnXtf1GEuT4FMf/YO/NefqADWUHd3Aw27E4DEX8= Subject key identifier: A2:A3:9A:AE:8B:A0:6D:38:01:30:EB:0A:2D:AA:F6:86:E2:E3:DA:F4 Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B Certificate issuer: /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft Manifest number: 2A Signing time: Sun 15 Sep 2024 10:08:50 +0000 Manifest this update: Sun 15 Sep 2024 10:08:50 +0000 Manifest next update: Sun 22 Sep 2024 10:08:50 +0000 Files and hashes: 1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: wte6yLKox0OoKgDdHqTfjwRw/T7yXcnFUhEn/mtN6F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B Validity Not Before: Sep 15 10:08:50 2024 GMT Not After : Sep 22 10:08:50 2024 GMT Subject: CN=66e6b232-0632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:a0:03:9b:0d:94:1b:c5:f9:72:a9:f7:8f: e7:00:54:fb:cf:a7:72:c9:11:97:27:c6:92:a2:3e: c5:fd:af:d8:19:7a:0a:c0:af:05:97:70:fd:b1:08: a1:c5:c4:9a:4d:82:00:da:f0:4e:23:22:a6:fd:1f: 47:80:10:36:84:04:d8:c6:b2:5b:ca:d9:be:26:ed: c3:68:b6:1e:16:9a:e4:05:e5:bf:c2:6c:31:2c:57: 59:14:53:d4:af:80:08:73:35:99:2f:4a:46:13:82: 2c:d1:c0:1c:a7:65:47:28:51:cc:5f:30:3a:e7:16: 07:28:27:76:ef:9c:ac:c5:02:07:12:c2:ae:b4:de: 13:2f:35:9e:aa:2e:28:c8:7d:bc:2f:9a:37:b4:9f: 3a:7d:d8:f5:f1:78:30:07:06:7b:c4:db:bb:67:cc: 15:f6:ed:c0:85:53:71:c8:cd:53:f8:07:67:00:50: dc:58:a6:e2:db:f0:01:9c:78:54:72:72:85:18:6f: e6:1e:d4:e9:62:53:c8:77:ab:08:ac:2c:b2:6d:5c: 04:a4:12:a2:46:3b:10:2c:19:25:f9:99:23:27:c4: 3a:61:09:a0:cf:b8:f1:a3:e5:bc:8c:34:91:3d:4e: 0c:e1:d0:07:fa:a3:b6:33:c1:93:44:65:91:bd:f0: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A3:9A:AE:8B:A0:6D:38:01:30:EB:0A:2D:AA:F6:86:E2:E3:DA:F4 X509v3 Authority Key Identifier: keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ac:51:1d:90:0c:61:f2:e1:a8:d5:32:cc:90:b1:e5:02:7a: 85:42:52:99:ed:f3:d8:4e:aa:a4:4d:48:36:07:e7:97:3b:8c: e0:a4:16:60:e5:20:fd:da:9c:dd:97:eb:d6:1c:97:b0:d3:87: 8d:10:39:90:1b:62:db:ad:83:a9:d5:f9:52:fd:92:0e:11:f2: e0:a5:15:99:dd:6d:a0:c2:ef:8a:dc:1e:62:dc:3b:74:59:cc: 39:b6:6b:74:6c:a5:4f:6a:dc:43:7e:a6:08:8c:f7:68:23:29: 95:c1:aa:f4:a6:83:2f:4a:3e:9d:5a:e7:41:22:f2:fb:80:bd: 73:73:31:e8:97:49:a1:24:42:42:ab:5f:22:90:9e:75:7d:ab: ab:66:cc:f0:fe:f6:1c:4c:c9:8a:8d:df:d8:d7:40:82:9f:85: b3:94:93:91:a9:91:8c:92:a0:17:cd:f8:1f:6c:2c:7e:98:91: d8:a5:e7:07:cf:88:5a:94:fc:a5:8b:23:48:d5:d6:78:23:d5: 22:59:ed:a7:15:27:24:e4:24:46:2e:88:58:5d:94:41:c9:98: b7:b2:31:60:ea:d9:aa:90:7d:27:f9:a4:4d:fc:4d:6a:e1:8f: 02:d2:dc:eb:c4:af:fc:2b:a8:11:4b:c1:c9:78:80:82:65:68: 53:04:ad:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzRGMDExMC8GA1UEBRMoM0MyREY4RUI3QzFCRDUwMjMzMDJGNjExQTk3RTA1RDc4 NDE3MDkzQjAeFw0yNDA5MTUxMDA4NTBaFw0yNDA5MjIxMDA4NTBaMBgxFjAUBgNV BAMTDTY2ZTZiMjMyLTA2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgs6ADmw2UG8X5cqn3j+cAVPvPp3LJEZcnxpKiPsX9r9gZegrArwWXcP2xCKHF xJpNggDa8E4jIqb9H0eAEDaEBNjGslvK2b4m7cNoth4WmuQF5b/CbDEsV1kUU9Sv gAhzNZkvSkYTgizRwBynZUcoUcxfMDrnFgcoJ3bvnKzFAgcSwq603hMvNZ6qLijI fbwvmje0nzp92PXxeDAHBnvE27tnzBX27cCFU3HIzVP4B2cAUNxYpuLb8AGceFRy coUYb+Ye1OliU8h3qwisLLJtXASkEqJGOxAsGSX5mSMnxDphCaDPuPGj5byMNJE9 Tgzh0Af6o7YzwZNEZZG98I6JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoqOaroug bTgBMOsKLar2huLj2vQwHwYDVR0jBBgwFoAUPC3463wb1QIzAvYRqX4F14QXCTsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNEYwLzE2MENBQjNBMzQw MDExRUY5NDc3OTU0MEM0RjlBRTAyL1BDMzQ2M3diMVFJekF2WVJxWDRGMTRRWENU cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEMzNDYzd2IxUUl6QXZZUnFYNEYxNFFYQ1RzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz NEYwLzE2MENBQjNBMzQwMDExRUY5NDc3OTU0MEM0RjlBRTAyL1BDMzQ2M3diMVFJ ekF2WVJxWDRGMTRRWENUcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWsUR2QDGHy4ajVMsyQseUCeoVCUpnt89hOqqRNSDYH55c7jOCkFmDl IP3anN2X69Ycl7DTh40QOZAbYtutg6nV+VL9kg4R8uClFZndbaDC74rcHmLcO3RZ zDm2a3RspU9q3EN+pgiM92gjKZXBqvSmgy9KPp1a50Ei8vuAvXNzMeiXSaEkQkKr XyKQnnV9q6tmzPD+9hxMyYqN39jXQIKfhbOUk5GpkYySoBfN+B9sLH6Ykdil5wfP iFqU/KWLI0jV1ngj1SJZ7acVJyTkJEYuiFhdlEHJmLeyMWDq2aqQfSf5pE38TWrh jwLS3OvEr/wrqBFLwcl4gIJlaFMErT4= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:08 2024 by rpki-client on console-fra.rpki-client.org