$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft File: PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json) Hash identifier: JRVIU0E35kGeY4pIfZLpx6D5CpGiww4pAbAWRTd/v7M= Subject key identifier: 5B:13:24:B3:B2:12:DD:6E:E9:06:92:18:5A:C2:49:C1:78:0E:D5:EC Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B Certificate issuer: /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft Manifest number: 4C Signing time: Thu 21 Nov 2024 05:20:16 +0000 Manifest this update: Thu 21 Nov 2024 05:20:16 +0000 Manifest next update: Thu 28 Nov 2024 05:20:16 +0000 Files and hashes: 1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: IfV3fj+P7tfAGZezPBtDEXC2U00Op58mCC1CiVJaEkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B Validity Not Before: Nov 21 05:20:16 2024 GMT Not After : Nov 28 05:20:16 2024 GMT Subject: CN=673ec310-77fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:8e:d3:04:b8:f6:0c:72:ca:e8:73:56:6d: 43:e8:2b:db:96:5d:7c:95:35:eb:9f:77:ad:94:74: 9d:b7:da:6f:a6:00:54:02:a6:c9:47:8e:4b:1b:a3: 1a:2d:91:04:3e:da:cf:db:13:65:9d:d7:aa:66:b0: 57:a7:2e:b1:77:d0:8d:df:20:0c:5d:1c:e3:40:53: 60:86:87:91:5c:58:74:22:1d:23:2f:20:3c:6d:02: ac:d6:2c:cf:89:76:e4:28:a4:a2:bb:18:a9:55:16: 2a:80:6f:ad:82:14:f3:d4:13:59:45:16:bf:55:4f: c9:c2:61:6a:53:66:98:3a:27:67:9c:d5:56:09:87: b2:e6:b8:fe:21:83:53:77:30:be:7b:c2:78:b6:2f: df:e1:e0:ae:7a:59:06:44:82:a4:ce:10:01:f3:69: 29:7a:dd:36:db:54:9f:63:9f:ea:83:c3:10:0b:32: 40:b3:05:63:8d:50:ce:5d:75:01:4b:35:cc:07:89: 0f:a6:ac:3c:38:ad:65:1f:84:81:bf:79:f3:c2:c6: 74:82:53:3a:3a:ab:e2:99:cd:ae:f6:35:54:1d:56: 17:ff:04:e6:96:59:1c:bc:96:e1:41:d8:b7:49:22: 05:6b:71:0e:78:7f:f6:ee:48:c8:41:85:1b:9e:98: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:13:24:B3:B2:12:DD:6E:E9:06:92:18:5A:C2:49:C1:78:0E:D5:EC X509v3 Authority Key Identifier: keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:7d:b5:02:cc:e0:e2:7e:a1:79:38:9a:4d:f0:76:95:17:da: 28:d8:04:c3:60:ba:da:9b:d6:0d:74:21:5d:e0:0b:78:9f:60: 25:05:90:7e:cf:ce:22:23:d7:8e:ca:e2:ac:f7:f2:64:1c:2a: 27:d2:68:61:2e:c5:b4:66:2b:de:2a:8a:4d:8c:d4:d3:53:aa: 69:e9:26:76:1f:59:75:83:05:f8:75:5a:9c:1d:c5:92:9c:1b: b4:de:d5:91:d8:45:2f:8e:43:38:a3:05:c5:0a:50:90:09:56: 6b:aa:71:de:56:df:f3:cb:00:74:aa:85:a7:b9:04:7e:bd:92: d5:ba:32:b1:f6:49:57:b1:ad:e5:da:12:2e:ee:3c:0b:de:97: 06:28:7b:af:0b:26:c6:7b:60:38:18:31:ad:7f:de:73:15:a1: e6:4e:ce:fe:02:18:56:5d:eb:97:d3:e3:32:65:75:cb:51:89: 44:a2:e5:8b:63:51:7a:1d:84:73:51:bc:65:6e:64:fd:44:93: e6:72:bf:9f:b3:73:9d:ef:cd:68:7d:6a:38:07:44:2b:2e:b9: 4f:05:ee:f6:5e:24:50:31:ae:90:10:09:98:cc:70:35:60:f1: 83:dc:ef:0a:e9:21:ba:d4:37:14:b6:36:3c:5c:9e:5c:c3:34: 6c:8f:a9:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzRGMDExMC8GA1UEBRMoM0MyREY4RUI3QzFCRDUwMjMzMDJGNjExQTk3RTA1RDc4 NDE3MDkzQjAeFw0yNDExMjEwNTIwMTZaFw0yNDExMjgwNTIwMTZaMBgxFjAUBgNV BAMTDTY3M2VjMzEwLTc3ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRro7TBLj2DHLK6HNWbUPoK9uWXXyVNeufd62UdJ232m+mAFQCpslHjksboxot kQQ+2s/bE2Wd16pmsFenLrF30I3fIAxdHONAU2CGh5FcWHQiHSMvIDxtAqzWLM+J duQopKK7GKlVFiqAb62CFPPUE1lFFr9VT8nCYWpTZpg6J2ec1VYJh7LmuP4hg1N3 ML57wni2L9/h4K56WQZEgqTOEAHzaSl63TbbVJ9jn+qDwxALMkCzBWONUM5ddQFL NcwHiQ+mrDw4rWUfhIG/efPCxnSCUzo6q+KZza72NVQdVhf/BOaWWRy8luFB2LdJ IgVrcQ54f/buSMhBhRuemNJxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWxMks7IS 3W7pBpIYWsJJwXgO1ewwHwYDVR0jBBgwFoAUPC3463wb1QIzAvYRqX4F14QXCTsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNEYwLzE2MENBQjNBMzQw MDExRUY5NDc3OTU0MEM0RjlBRTAyL1BDMzQ2M3diMVFJekF2WVJxWDRGMTRRWENU cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEMzNDYzd2IxUUl6QXZZUnFYNEYxNFFYQ1RzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz NEYwLzE2MENBQjNBMzQwMDExRUY5NDc3OTU0MEM0RjlBRTAyL1BDMzQ2M3diMVFJ ekF2WVJxWDRGMTRRWENUcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKh9tQLM4OJ+oXk4mk3wdpUX2ijYBMNgutqb1g10IV3gC3ifYCUFkH7P ziIj147K4qz38mQcKifSaGEuxbRmK94qik2M1NNTqmnpJnYfWXWDBfh1WpwdxZKc G7Te1ZHYRS+OQzijBcUKUJAJVmuqcd5W3/PLAHSqhae5BH69ktW6MrH2SVexreXa Ei7uPAvelwYoe68LJsZ7YDgYMa1/3nMVoeZOzv4CGFZd65fT4zJldctRiUSi5Ytj UXodhHNRvGVuZP1Ek+Zyv5+zc53vzWh9ajgHRCsuuU8F7vZeJFAxrpAQCZjMcDVg 8YPc7wrpIbrUNxS2NjxcnlzDNGyPqd8= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org