$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: xgzEBcutwPu9vowk4wLBN/wBVNIibW0SZe0J1Uh/xfc= Subject key identifier: 77:78:9C:23:2A:78:24:EE:D5:7A:40:F6:A3:91:7F:1D:A5:38:62:9D Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 0186 Signing time: Sat 23 Nov 2024 01:59:32 +0000 Manifest this update: Sat 23 Nov 2024 01:59:31 +0000 Manifest next update: Sat 30 Nov 2024 01:59:31 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: tDMPWiK1gcw9BW6Q8MdoA/477W/rhUBKof+UoiV9yFE=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Nov 23 01:59:31 2024 GMT Not After : Nov 30 01:59:31 2024 GMT Subject: CN=67413703-27a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:dc:53:3e:64:f6:6f:07:af:32:20:9e:da: 6d:bb:a7:9c:a2:48:c3:99:69:a7:d2:d3:b0:68:3c: 0e:9b:38:2d:b7:9f:a7:f2:00:00:b7:d3:ad:a4:48: 34:be:05:75:df:1d:c8:0d:1f:94:35:a6:6c:b3:1c: 70:da:75:e7:9a:46:8d:4a:20:ca:82:bd:a6:13:72: ee:70:d0:ad:8b:c2:00:db:00:20:1d:cb:78:75:59: 0d:b4:40:e6:60:cb:c3:18:ac:1d:f9:2d:5e:9d:96: b3:67:e9:d2:3e:28:cf:35:b0:16:e4:2e:84:6f:df: 0f:11:83:3a:4c:08:e5:c0:69:d0:af:8c:41:40:af: 95:7b:82:81:e0:78:b4:b1:b6:60:0f:24:02:5e:b1: 37:6b:55:3e:79:12:30:13:3c:e3:a1:ec:2a:b8:82: a4:7e:9b:26:ed:2b:61:ae:27:f7:57:88:1d:b8:dd: e9:37:ce:7f:72:2c:c5:c7:a1:69:f5:d1:b9:43:dc: 17:00:ba:49:ac:58:14:dd:ef:a5:41:ef:dc:52:41: c3:f6:08:36:d6:1f:36:ee:b0:65:2c:11:65:ca:42: 74:26:ef:44:6d:2b:63:e4:3e:ae:87:8d:d7:fa:e9: 97:89:e2:ad:50:3c:49:f8:ae:87:87:8b:af:39:78: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:78:9C:23:2A:78:24:EE:D5:7A:40:F6:A3:91:7F:1D:A5:38:62:9D X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:da:79:32:90:7d:2e:fc:2f:f1:f1:0d:33:10:1e:b1:44: 8c:f6:47:83:96:fc:a3:d5:59:27:03:9e:38:c8:b0:1a:12:f3: 40:aa:13:fb:27:e8:0a:47:6d:31:29:cf:da:6b:57:93:f9:79: a2:37:64:f4:3f:2c:6e:ee:00:ff:0e:12:2c:54:80:0f:9f:53: 99:cf:03:84:e5:3a:fe:c8:0d:e9:cf:9e:66:80:c8:74:d6:95: 4a:f6:9b:1a:2f:70:7e:8b:20:8b:55:f9:db:2c:d1:56:26:ff: b5:a8:9e:48:15:09:21:6d:25:10:7f:c7:bb:f5:db:f0:d0:2b: 04:38:02:13:a3:61:0c:11:24:93:61:20:c3:b2:9b:fb:1c:fa: dc:c5:55:cf:f8:be:74:a2:e4:20:2d:59:fe:b5:9d:f2:c1:a1: 03:ba:78:ea:bd:c7:5d:d2:5e:6e:7b:f9:2c:9a:ef:9e:f9:62: 34:85:33:25:1e:26:35:43:78:11:57:2e:98:36:89:d0:2a:b5: b9:03:40:ab:a2:55:63:0a:df:0d:c6:fa:42:1c:f1:92:af:1b: a2:3f:12:af:af:d4:97:e8:30:64:7b:ff:c5:3d:2a:a2:6d:40: d1:26:9e:4e:76:dd:38:1f:1c:ee:1c:cb:d3:27:12:f1:28:c1: b5:db:6e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjQxMTIzMDE1OTMxWhcNMjQxMTMwMDE1OTMxWjAYMRYwFAYD VQQDEw02NzQxMzcwMy0yN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eXcUz5k9m8HrzIgntptu6ecokjDmWmn0tOwaDwOmzgtt5+n8gAAt9OtpEg0 vgV13x3IDR+UNaZssxxw2nXnmkaNSiDKgr2mE3LucNCti8IA2wAgHct4dVkNtEDm YMvDGKwd+S1enZazZ+nSPijPNbAW5C6Eb98PEYM6TAjlwGnQr4xBQK+Ve4KB4Hi0 sbZgDyQCXrE3a1U+eRIwEzzjoewquIKkfpsm7Sthrif3V4gduN3pN85/cizFx6Fp 9dG5Q9wXALpJrFgU3e+lQe/cUkHD9gg21h827rBlLBFlykJ0Ju9EbStj5D6uh43X +umXieKtUDxJ+K6Hh4uvOXjOpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHd4nCMq eCTu1XpA9qORfx2lOGKdMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQdp5MpB9Lvwv8fENMxAesUSM9keDlvyj1VknA544yLAaEvNAqhP7 J+gKR20xKc/aa1eT+XmiN2T0Pyxu7gD/DhIsVIAPn1OZzwOE5Tr+yA3pz55mgMh0 1pVK9psaL3B+iyCLVfnbLNFWJv+1qJ5IFQkhbSUQf8e79dvw0CsEOAITo2EMESST YSDDspv7HPrcxVXP+L50ouQgLVn+tZ3ywaEDunjqvcdd0l5ue/ksmu+e+WI0hTMl HiY1Q3gRVy6YNonQKrW5A0CrolVjCt8NxvpCHPGSrxuiPxKvr9SX6DBke//FPSqi bUDRJp5Odt04HxzuHMvTJxLxKMG12259 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org