$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: osPO6PKrw5h6JE9gjlyN2k6H9JfJI7gOuDUJZay1zBE= Subject key identifier: 6A:F2:E7:61:0D:2C:23:18:8B:6D:66:7E:78:F3:3B:92:C5:83:85:98 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2C3B Signing time: Fri 22 Nov 2024 15:33:33 +0000 Manifest this update: Fri 22 Nov 2024 15:33:32 +0000 Manifest next update: Fri 29 Nov 2024 15:33:32 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: 0Y5eAJ5sXpfA2QeCCyrQpPQb0C/nYHxhhNvj5Vf5xxU=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: skjzRKV2yiK6mRZi2jO6tjX3v0zfq/yBAWOKemHERmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11344 (0x2c50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Nov 22 15:33:32 2024 GMT Not After : Nov 29 15:33:32 2024 GMT Subject: CN=6740a44c-6390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:bb:e3:38:aa:48:31:68:35:ed:70:7f:3d: ed:fd:25:64:2d:af:f9:ea:58:b5:ba:51:23:d0:c7: dc:fc:36:e1:2a:fb:ba:a6:61:1a:44:19:91:b9:37: 22:b6:c5:c1:12:61:fa:d1:67:da:2d:42:6d:82:79: 3f:94:06:05:50:31:7a:ca:78:d4:48:29:eb:81:30: ff:10:71:09:3f:01:3e:87:a0:3e:80:64:01:eb:89: 40:eb:0b:ba:b6:4a:a4:4c:b8:78:f0:99:10:0b:9f: 7d:48:37:14:e1:63:e0:af:e9:9c:7b:cb:6f:c7:a3: f2:5e:a2:60:80:22:ba:0e:f7:2f:c1:15:a5:2a:9d: 54:61:c4:cd:ac:98:af:ec:2f:45:be:9d:ec:cd:e2: c4:55:b7:dd:5d:9e:79:ea:a9:52:c7:e2:90:c6:c3: f9:ef:fd:03:97:fd:74:1f:83:68:3d:27:9d:05:78: 7d:77:77:69:02:9b:c7:36:88:4c:76:7e:31:7b:76: 81:df:4c:1b:66:28:b2:ce:78:08:f0:f7:43:0c:a3: 62:fe:85:a5:ff:fa:cb:a9:fa:1a:47:eb:c4:77:56: 9a:b7:7c:6a:7e:88:36:2c:d4:89:f5:40:8c:e9:4b: ab:79:4a:c5:71:14:eb:1f:76:ed:29:08:07:0d:5f: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F2:E7:61:0D:2C:23:18:8B:6D:66:7E:78:F3:3B:92:C5:83:85:98 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d7:d4:a8:3b:85:97:e1:e9:de:31:a5:3c:36:36:02:b3:9c: c6:c3:b8:02:73:59:44:9e:46:7b:c0:ea:9f:50:67:ef:26:e5: ed:e0:d3:85:e6:b5:ee:24:93:1e:ca:42:20:6d:6e:2e:49:6d: 5a:cb:06:b4:e7:48:e2:9e:7b:97:c3:de:d8:34:8b:d9:71:b5: ac:ef:86:bf:55:af:7f:54:63:da:91:48:a4:32:4d:6a:9c:24: fb:f4:a7:e8:c3:2a:28:f8:e9:b3:a2:4b:f0:52:a4:b4:22:47: 21:da:84:dc:ed:44:04:b7:73:51:64:37:07:cc:97:30:ed:79: c8:d3:4d:12:51:0e:a8:76:22:7b:85:db:c1:5c:ac:5e:c8:f6: d1:84:5f:95:fc:fb:1c:3f:5c:aa:a7:ca:16:9d:67:c8:98:c1: eb:bb:70:d2:1f:3c:e8:40:a0:ed:70:b4:db:93:14:28:66:df: ac:ed:23:4a:d8:56:48:f3:2b:15:03:87:69:45:7c:ea:2d:3a: ae:13:05:33:9f:e2:c7:9f:e0:55:28:cb:6b:2d:3d:c9:45:8a: 5d:83:07:c9:50:72:03:89:56:42:8e:d8:df:02:27:09:94:f6: d9:f3:83:34:f4:05:61:44:f8:02:db:0f:61:c8:05:bd:a0:ae: e0:5e:10:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjQxMTIyMTUzMzMyWhcNMjQxMTI5MTUzMzMyWjAYMRYwFAYD VQQDEw02NzQwYTQ0Yy02MzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA674ziqSDFoNe1wfz3t/SVkLa/56li1ulEj0Mfc/DbhKvu6pmEaRBmRuTci tsXBEmH60WfaLUJtgnk/lAYFUDF6ynjUSCnrgTD/EHEJPwE+h6A+gGQB64lA6wu6 tkqkTLh48JkQC599SDcU4WPgr+mce8tvx6PyXqJggCK6DvcvwRWlKp1UYcTNrJiv 7C9Fvp3szeLEVbfdXZ556qlSx+KQxsP57/0Dl/10H4NoPSedBXh9d3dpApvHNohM dn4xe3aB30wbZiiyzngI8PdDDKNi/oWl//rLqfoaR+vEd1aat3xqfog2LNSJ9UCM 6UureUrFcRTrH3btKQgHDV9XuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGry52EN LCMYi21mfnjzO5LFg4WYMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo19SoO4WX4eneMaU8NjYCs5zGw7gCc1lEnkZ7wOqfUGfvJuXt4NOF 5rXuJJMeykIgbW4uSW1aywa050jinnuXw97YNIvZcbWs74a/Va9/VGPakUikMk1q nCT79Kfowyoo+OmzokvwUqS0Ikch2oTc7UQEt3NRZDcHzJcw7XnI000SUQ6odiJ7 hdvBXKxeyPbRhF+V/PscP1yqp8oWnWfImMHru3DSHzzoQKDtcLTbkxQoZt+s7SNK 2FZI8ysVA4dpRXzqLTquEwUzn+LHn+BVKMtrLT3JRYpdgwfJUHIDiVZCjtjfAicJ lPbZ84M09AVhRPgC2w9hyAW9oK7gXhDu -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:44 2024 by rpki-client on console-fra.rpki-client.org