$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: dbASRF4Bc116J3zlMO1dx0IaLxmqhtXzHKkg3AgeXcc= Subject key identifier: CE:8E:01:D6:07:EA:DA:9D:BD:4F:AD:2A:CC:A0:96:02:21:8C:36:62 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 0B Signing time: Wed 23 Oct 2024 06:46:54 +0000 Manifest this update: Wed 23 Oct 2024 06:46:53 +0000 Manifest next update: Wed 30 Oct 2024 06:46:53 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: Nsfe4VVHTULX0hah+TjpdOsHSfs5F93e2m9ZF75tqdo=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Oct 23 06:46:53 2024 GMT Not After : Oct 30 06:46:53 2024 GMT Subject: CN=67189bdd-f91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:7a:a4:91:ea:ba:91:98:74:ae:17:9d:e8: 44:9b:44:11:19:a2:35:e6:91:c2:7f:08:ec:85:1b: aa:db:80:9c:68:57:4b:49:eb:e1:e6:da:6e:a5:1f: 2c:69:e8:f3:07:a7:fc:25:c5:60:cb:b9:38:51:a1: 91:0a:05:bb:9e:e3:41:a0:b7:d2:6e:04:1b:72:34: 97:2e:d0:af:09:31:51:91:bb:6d:eb:dc:b9:5e:57: 75:0a:7d:c9:1b:cf:39:e3:42:8d:87:3d:e5:40:e1: c6:e1:b6:4b:63:c3:be:cf:82:83:1b:4b:f8:2a:3e: 73:dd:17:f1:38:e8:b5:7b:41:02:ad:13:46:cf:93: 11:22:97:28:a3:87:fa:cd:a4:93:1d:9c:5d:76:b3: f3:71:dd:ee:65:89:1b:87:b9:b2:ff:6f:9d:ca:44: 9a:14:dd:0d:37:47:bc:fc:55:7b:57:bc:da:f0:8c: 8c:1a:74:ea:f0:e1:c0:e3:4c:cb:15:bc:fd:d7:39: 3b:95:64:4c:55:be:78:cb:76:98:2a:9c:78:16:f0: 57:36:dd:7b:75:68:fa:4c:ba:25:52:04:44:f9:5a: f7:82:11:77:ea:91:86:57:19:51:4e:07:ca:89:03: 54:96:da:c4:a9:d3:a2:b0:3b:59:63:ea:05:a9:fb: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:01:D6:07:EA:DA:9D:BD:4F:AD:2A:CC:A0:96:02:21:8C:36:62 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ed:9b:57:13:21:92:81:7c:b2:1a:d5:98:49:7f:98:b5:22: 75:0c:2c:ee:d1:19:b0:89:d7:05:66:01:10:1e:81:a8:e8:04: 4c:df:8b:92:84:df:b0:b5:c9:cd:4e:9a:88:6a:19:74:6b:26: be:c2:97:1c:4e:58:62:12:66:b8:06:7c:51:60:be:7e:78:ed: 0b:03:e3:50:54:88:cd:8a:c9:aa:82:c3:d9:a6:47:c8:43:55: 8f:d5:bb:cc:1f:4c:dd:9f:e4:93:89:24:3a:8e:7f:8c:08:e4: 4d:c7:c0:23:bb:68:61:0f:32:0c:2b:53:90:6e:e2:90:78:6a: 00:3f:ee:50:78:45:87:eb:8a:58:ee:88:ea:1e:dc:60:a1:5c: 53:aa:8b:2b:b0:72:ac:20:b3:09:df:cc:b6:fd:a7:9d:b6:07: 34:43:05:9b:a7:29:ec:ee:2e:77:05:61:2f:47:4b:6d:f5:8b: 5e:16:02:e9:86:37:5a:b3:6e:58:73:bf:e4:d8:df:d1:9f:f7: 59:f5:ee:6c:34:3b:9c:92:18:39:ec:be:12:fe:cc:bb:2c:3a: cc:c3:20:df:82:0e:47:06:93:4e:7f:09:bb:81:72:34:42:ad: 36:b0:cb:89:be:03:3a:aa:21:92:06:77:50:7b:76:43:da:b1: 75:14:28:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoREQ1NzQ2MEYwQzEyQkUwNTQ2MTNBMkY0Mjk2N0IwN0RB NTY4N0JGMDAeFw0yNDEwMjMwNjQ2NTNaFw0yNDEwMzAwNjQ2NTNaMBgxFjAUBgNV BAMTDTY3MTg5YmRkLWY5MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPB3qkkeq6kZh0rhed6ESbRBEZojXmkcJ/COyFG6rbgJxoV0tJ6+Hm2m6lHyxp 6PMHp/wlxWDLuThRoZEKBbue40Ggt9JuBBtyNJcu0K8JMVGRu23r3LleV3UKfckb zznjQo2HPeVA4cbhtktjw77PgoMbS/gqPnPdF/E46LV7QQKtE0bPkxEilyijh/rN pJMdnF12s/Nx3e5liRuHubL/b53KRJoU3Q03R7z8VXtXvNrwjIwadOrw4cDjTMsV vP3XOTuVZExVvnjLdpgqnHgW8Fc23Xt1aPpMuiVSBET5WveCEXfqkYZXGVFOB8qJ A1SW2sSp06KwO1lj6gWp+1lvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzo4B1gfq 2p29T60qzKCWAiGMNmIwHwYDVR0jBBgwFoAU3VdGDwwSvgVGE6L0KWewfaVoe/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzVBMTgyQzdDODUy MzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2Vf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1ZkR0R3d1N2Z1ZHRTZMMEtXZXdmYVZvZV9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzVBMTgyQzdDODUyMzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdW R0U2TDBLV2V3ZmFWb2VfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADztm1cTIZKBfLIa1ZhJf5i1InUMLO7RGbCJ1wVmARAegajoBEzfi5KE 37C1yc1OmohqGXRrJr7ClxxOWGISZrgGfFFgvn547QsD41BUiM2KyaqCw9mmR8hD VY/Vu8wfTN2f5JOJJDqOf4wI5E3HwCO7aGEPMgwrU5Bu4pB4agA/7lB4RYfrilju iOoe3GChXFOqiyuwcqwgswnfzLb9p522BzRDBZunKezuLncFYS9HS231i14WAumG N1qzblhzv+TY39Gf91n17mw0O5ySGDnsvhL+zLssOszDIN+CDkcGk05/CbuBcjRC rTawy4m+AzqqIZIGd1B7dkPasXUUKIc= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org