$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: gfJ+R2c0Q6w/6BuhqUVVT0lkyWghFAgLwpocm6AVFp4= Subject key identifier: 26:53:85:07:93:B9:FB:1E:01:29:3C:75:72:B8:21:EF:91:C5:11:6B Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 90 Signing time: Mon 25 Nov 2024 04:27:18 +0000 Manifest this update: Mon 25 Nov 2024 04:27:18 +0000 Manifest next update: Mon 02 Dec 2024 04:27:18 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: 7jaCeQ99IrFskESQO0KA9vUiQFNWOfer9Gkxg71BYjY=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 4aEk8Fo4ZtjX2t7vRJE+qDahRN/pzY/Ldf8wIZXNlMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Nov 25 04:27:18 2024 GMT Not After : Dec 2 04:27:18 2024 GMT Subject: CN=6743fca6-34b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:25:26:b1:9b:16:69:78:ac:c5:ba:26:d5: 15:87:e1:e5:94:16:99:51:d0:46:99:34:d7:42:fb: fb:4b:91:a1:dd:96:c0:97:a5:ee:83:96:3f:b3:03: 9d:b4:ef:dd:d2:15:f6:c1:cb:4a:be:bc:3d:8d:93: 5a:c1:00:be:2e:a1:ab:e2:58:e5:82:4a:14:27:f5: b5:da:71:57:dc:a1:35:12:b7:85:7d:34:51:88:9c: 5a:72:f6:7e:66:97:0b:8d:03:0b:a9:b4:9a:8d:17: 6d:e8:93:67:0a:f2:90:65:98:1c:95:e3:53:48:b4: fa:ce:41:f8:88:fb:6f:d9:2f:8b:4c:32:a8:31:65: 2f:be:6b:29:ca:85:8b:60:97:82:e8:fe:20:ff:b9: 03:f5:32:42:d2:78:f6:4b:3f:be:3f:01:2e:44:45: 9e:f4:48:fb:cb:d7:cd:28:f3:27:5c:ef:4e:49:79: e8:44:d0:ff:2c:43:f6:77:87:90:ff:75:ab:cf:1b: c5:9c:8f:23:4d:ce:9a:b2:f4:68:81:32:fa:ff:e0: 33:b1:b1:c9:ce:71:13:09:46:3b:33:a2:c0:f0:c4: 8f:3d:ed:c3:b9:9c:fb:bf:9e:04:74:64:df:4c:01: 74:6b:37:52:f8:8f:53:72:8b:0c:a0:4f:c0:0f:13: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:53:85:07:93:B9:FB:1E:01:29:3C:75:72:B8:21:EF:91:C5:11:6B X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:dd:df:a2:14:e6:a6:23:1a:70:83:17:df:67:b3:71:8d:82: 5e:ae:b2:b4:cd:3a:1e:3f:20:0c:6e:8b:4e:b4:09:58:21:c4: b8:77:3e:d1:48:a4:89:20:b2:f3:db:02:35:ef:5b:a6:c5:04: da:2e:13:46:f8:75:6c:0b:0f:2d:37:0a:7b:8e:15:31:af:9d: dc:5b:38:1b:d6:55:4f:44:f5:f9:78:54:81:ac:be:08:88:fd: 73:7d:28:db:13:70:ea:22:bc:e6:e0:1f:68:8b:39:d6:5c:f9: e7:6c:af:40:1a:0b:11:1d:cf:30:a5:1a:46:41:af:63:59:1b: 5c:f4:0d:d4:4e:26:b0:6e:ba:16:d0:a2:49:f2:a7:fe:93:a8: 42:f6:7b:4d:85:28:5d:ec:61:09:6b:a2:b7:e3:cb:6e:a4:23: 04:4f:f5:d1:29:dc:ea:6c:c1:92:f1:73:0e:6e:7b:b8:49:42: 64:77:9e:f6:a6:f8:6c:ff:96:85:29:17:c9:06:7a:65:ba:a9: ce:ee:84:af:43:6e:90:32:cb:89:77:e1:ff:9d:a2:b3:cd:20: 84:43:a4:01:a4:0d:bd:b3:50:d9:69:62:e7:bd:5e:86:fd:08: df:99:a4:6d:20:36:0d:06:29:02:e1:38:63:63:bc:dd:59:5f: 42:c0:b9:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjQxMTI1MDQyNzE4WhcNMjQxMjAyMDQyNzE4WjAYMRYwFAYD VQQDEw02NzQzZmNhNi0zNGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIklJrGbFml4rMW6JtUVh+HllBaZUdBGmTTXQvv7S5Gh3ZbAl6Xug5Y/swOd tO/d0hX2wctKvrw9jZNawQC+LqGr4ljlgkoUJ/W12nFX3KE1EreFfTRRiJxacvZ+ ZpcLjQMLqbSajRdt6JNnCvKQZZgcleNTSLT6zkH4iPtv2S+LTDKoMWUvvmspyoWL YJeC6P4g/7kD9TJC0nj2Sz++PwEuREWe9Ej7y9fNKPMnXO9OSXnoRND/LEP2d4eQ /3WrzxvFnI8jTc6asvRogTL6/+AzsbHJznETCUY7M6LA8MSPPe3DuZz7v54EdGTf TAF0azdS+I9TcosMoE/ADxN59wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZThQeT ufseASk8dXK4Ie+RxRFrMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp3d+iFOamIxpwgxffZ7NxjYJerrK0zToePyAMbotOtAlYIcS4dz7R SKSJILLz2wI171umxQTaLhNG+HVsCw8tNwp7jhUxr53cWzgb1lVPRPX5eFSBrL4I iP1zfSjbE3DqIrzm4B9oiznWXPnnbK9AGgsRHc8wpRpGQa9jWRtc9A3UTiawbroW 0KJJ8qf+k6hC9ntNhShd7GEJa6K348tupCMET/XRKdzqbMGS8XMObnu4SUJkd572 pvhs/5aFKRfJBnpluqnO7oSvQ26QMsuJd+H/naKzzSCEQ6QBpA29s1DZaWLnvV6G /QjfmaRtIDYNBikC4ThjY7zdWV9CwLmF -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:05 2024 by rpki-client on console-fra.rpki-client.org