$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: u6MMtCi9IXY5r3a2ClOijQGNbPN2Ic0IeDUiMzuGmCI= Subject key identifier: C9:94:C3:6B:6F:04:63:79:BC:97:53:99:47:DA:7F:40:06:F8:2E:01 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 0326 Signing time: Mon 25 Nov 2024 00:33:28 +0000 Manifest this update: Mon 25 Nov 2024 00:33:27 +0000 Manifest next update: Mon 02 Dec 2024 00:33:27 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: mWMNfqQRLDpAG43DHwIMpoodZkMeblBhZaGwi1bMlSc=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: vvesGwwdw13pevInYyT24HAMslE/0OP0vxw1abDxLHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: Nov 25 00:33:27 2024 GMT Not After : Dec 2 00:33:27 2024 GMT Subject: CN=6743c5d7-cd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:21:28:9f:41:e8:bb:58:4a:40:c8:24:2c: 08:c7:c1:56:26:0b:cb:92:af:b6:96:d2:c9:58:0f: 6e:1b:79:5e:33:95:f0:fc:c2:ae:7e:d9:14:6b:52: e4:2a:4b:cf:4c:9c:19:ec:26:14:cb:e1:ac:98:d8: 01:b0:94:ff:52:df:f5:23:5b:31:31:73:26:d6:ae: d3:a2:75:21:44:b4:df:e8:0f:4d:eb:d0:0b:91:1c: 58:83:97:1a:ed:94:6a:c3:eb:ee:ec:26:6d:09:e2: fc:57:7e:e8:9f:58:7e:b8:e1:99:e4:64:cf:7f:94: d9:30:05:9f:89:0f:41:f3:88:6c:5b:cd:c7:86:ca: 5a:85:66:34:ec:4c:a9:c8:57:e6:1d:b3:3a:9a:3b: 39:dc:a4:55:e7:6e:1c:16:66:8e:16:fc:1f:18:51: 2b:46:88:94:25:0d:65:5d:cd:f8:eb:a3:d5:f2:a9: 0e:b7:b7:97:6c:83:8e:f7:a2:80:c9:ae:8d:55:1a: 3c:8a:b0:37:5c:1d:f6:3d:84:f5:a7:c3:85:04:21: 20:35:ec:93:9d:c1:42:14:a0:0b:68:cb:82:0d:1f: da:84:9d:05:3f:ef:b1:68:c2:5f:52:be:64:b0:b2: 52:bf:f3:53:4f:ef:e9:11:11:69:16:71:64:33:21: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:C3:6B:6F:04:63:79:BC:97:53:99:47:DA:7F:40:06:F8:2E:01 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:35:d8:7f:a6:f3:6b:31:5c:fb:28:68:b5:6c:3e:8e:f9:77: 99:63:fb:fd:a8:d6:c1:ee:98:db:19:f4:da:ad:bf:f5:8a:a1: 85:79:3a:49:92:7c:68:05:59:ba:ed:4c:30:90:f7:56:b5:5a: e9:63:df:dc:6f:63:51:9e:78:5e:c6:c8:33:e3:10:6f:83:6f: ba:e7:d7:fc:af:f4:07:75:82:8c:00:35:b8:73:80:0a:17:20: 8d:78:07:3c:24:11:52:41:0c:e7:16:c6:88:39:e7:08:fb:62: 29:01:7f:62:c5:c9:3a:4b:0b:81:8c:ae:a8:a6:d0:6c:09:68: 1c:1b:1f:b5:4a:6a:dc:a4:5b:a0:10:81:59:e1:a2:f2:6e:f1: 76:38:b2:4c:b5:72:e0:79:64:c7:aa:db:43:52:69:7d:b2:68: d8:9e:4a:33:59:c0:96:c9:7b:14:9e:b4:69:a0:5b:00:b5:66: 07:5e:48:01:16:24:9a:92:44:a1:23:bb:11:ab:e3:b5:03:2a: 98:22:75:ea:ca:97:fc:3b:f3:c8:5f:b7:76:df:fb:ee:c8:17: b7:4d:51:59:59:15:17:a6:03:de:d4:08:0e:3d:a6:2b:2c:c2: b1:d2:6c:aa:fe:47:83:cb:6e:63:b1:ee:a9:23:69:01:af:15: e7:72:bb:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjQxMTI1MDAzMzI3WhcNMjQxMjAyMDAzMzI3WjAYMRYwFAYD VQQDEw02NzQzYzVkNy1jZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRQhKJ9B6LtYSkDIJCwIx8FWJgvLkq+2ltLJWA9uG3leM5Xw/MKuftkUa1Lk KkvPTJwZ7CYUy+GsmNgBsJT/Ut/1I1sxMXMm1q7TonUhRLTf6A9N69ALkRxYg5ca 7ZRqw+vu7CZtCeL8V37on1h+uOGZ5GTPf5TZMAWfiQ9B84hsW83HhspahWY07Eyp yFfmHbM6mjs53KRV524cFmaOFvwfGFErRoiUJQ1lXc3466PV8qkOt7eXbIOO96KA ya6NVRo8irA3XB32PYT1p8OFBCEgNeyTncFCFKALaMuCDR/ahJ0FP++xaMJfUr5k sLJSv/NTT+/pERFpFnFkMyH98wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmUw2tv BGN5vJdTmUfaf0AG+C4BMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdNdh/pvNrMVz7KGi1bD6O+XeZY/v9qNbB7pjbGfTarb/1iqGFeTpJ knxoBVm67UwwkPdWtVrpY9/cb2NRnnhexsgz4xBvg2+659f8r/QHdYKMADW4c4AK FyCNeAc8JBFSQQznFsaIOecI+2IpAX9ixck6SwuBjK6optBsCWgcGx+1SmrcpFug EIFZ4aLybvF2OLJMtXLgeWTHqttDUml9smjYnkozWcCWyXsUnrRpoFsAtWYHXkgB FiSakkShI7sRq+O1AyqYInXqypf8O/PIX7d23/vuyBe3TVFZWRUXpgPe1AgOPaYr LMKx0myq/keDy25jse6pI2kBrxXncrv6 -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:26 2024 by rpki-client on console-fra.rpki-client.org