$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: D6rhxZPwe74yR3qVi1KS9qh91yPa0oftUEPVZXaocIQ= Subject key identifier: CB:2F:40:E9:64:C9:2F:BF:40:DA:85:67:AD:F7:22:E7:6C:95:28:5B Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 1A Signing time: Thu 21 Nov 2024 05:58:31 +0000 Manifest this update: Thu 21 Nov 2024 05:58:30 +0000 Manifest next update: Thu 28 Nov 2024 05:58:30 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: WHwf7rs1F0ZRJ++TZuB1WkXi+Yvnb0tbMnrBlbmpVfQ=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Nov 21 05:58:30 2024 GMT Not After : Nov 28 05:58:30 2024 GMT Subject: CN=673ecc06-1ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:f7:ff:ae:dd:5a:e2:85:c9:0f:2b:63:4c: 1e:ae:3f:e7:47:5f:27:39:2f:ae:45:c3:b4:c5:67: b2:fe:db:97:74:73:06:74:d6:b5:b6:c2:0a:77:43: 0f:5a:dc:08:13:7d:c7:8f:e5:28:22:6a:fc:5a:12: 1d:fb:68:63:59:c8:a8:34:b2:4b:cd:c4:a3:29:a3: 7e:31:e4:87:56:b2:dd:e5:c8:6e:74:9e:cb:32:2f: 20:6f:22:c2:40:65:e3:0b:cb:ee:c5:cf:0d:c8:a3: 90:3c:55:73:ed:d1:da:6f:e5:9b:d5:39:f5:21:91: d1:dc:ac:27:fb:44:ae:ae:40:6d:4f:17:64:cd:b7: 15:27:f9:90:98:ee:84:c5:28:12:ad:f9:b0:63:63: 93:92:70:f6:e1:94:3e:b6:3f:2f:bd:47:df:16:b8: 2a:7f:3c:10:e1:a1:0a:ab:c5:63:93:8f:26:a7:da: f2:ef:a9:81:45:2b:cd:44:d0:0d:b2:b1:be:94:50: f0:84:be:7a:a5:d4:e4:1a:d4:8d:51:fb:40:d2:38: 97:c3:68:62:70:20:45:07:d0:51:a8:83:ab:96:f3: 4d:21:54:f2:9e:98:97:ea:a4:7b:5f:c7:ed:a3:c0: cb:94:1c:58:30:ca:16:8d:da:c3:27:7d:ad:be:50: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:40:E9:64:C9:2F:BF:40:DA:85:67:AD:F7:22:E7:6C:95:28:5B X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:1b:d0:3f:cd:28:cf:e3:72:ea:76:43:2c:19:5f:f4:15: 34:50:c0:5d:62:68:e8:f6:df:06:ef:95:c5:14:11:32:4a:eb: 92:93:20:b2:e3:65:81:e1:ba:1b:8d:5d:4c:f3:04:10:55:53: 25:ac:53:e4:5e:c7:62:2d:f1:d3:f6:27:14:6f:10:3b:12:79: c2:63:a7:2b:cc:4b:38:59:9b:db:89:d9:5e:17:cb:fb:6e:2f: 65:13:89:98:a8:d2:25:7f:84:39:42:17:a4:1a:20:b6:51:f9: d2:97:86:1c:0f:72:f4:64:45:6c:6b:f5:fd:85:1f:77:9a:67: 88:af:ac:c8:6d:fa:5e:12:93:87:f0:ce:ac:45:7b:00:e0:2c: 06:2d:04:86:1f:cc:74:72:46:28:b9:44:98:1e:ac:28:a2:ee: dd:70:76:15:a3:76:62:08:3a:bc:b8:4b:8c:a7:12:ac:06:89: da:46:0e:17:11:ae:0e:c8:79:fa:ab:df:b2:11:76:d8:2e:a5: 8f:bd:dc:31:4d:0f:c6:24:0f:e7:87:fd:01:3f:c9:e7:48:fe: 97:fb:3d:e8:f0:2f:4a:32:7b:48:40:25:48:e2:13:ca:56:58: bc:f4:da:0d:d7:6e:00:06:e6:55:9f:b0:6f:6b:16:83:e3:3a: 6a:36:b4:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoREQ1NzQ2MEYwQzEyQkUwNTQ2MTNBMkY0Mjk2N0IwN0RB NTY4N0JGMDAeFw0yNDExMjEwNTU4MzBaFw0yNDExMjgwNTU4MzBaMBgxFjAUBgNV BAMTDTY3M2VjYzA2LTFiYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1rff/rt1a4oXJDytjTB6uP+dHXyc5L65Fw7TFZ7L+25d0cwZ01rW2wgp3Qw9a 3AgTfceP5SgiavxaEh37aGNZyKg0skvNxKMpo34x5IdWst3lyG50nssyLyBvIsJA ZeMLy+7Fzw3Io5A8VXPt0dpv5ZvVOfUhkdHcrCf7RK6uQG1PF2TNtxUn+ZCY7oTF KBKt+bBjY5OScPbhlD62Py+9R98WuCp/PBDhoQqrxWOTjyan2vLvqYFFK81E0A2y sb6UUPCEvnql1OQa1I1R+0DSOJfDaGJwIEUH0FGog6uW800hVPKemJfqpHtfx+2j wMuUHFgwyhaN2sMnfa2+UIgrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyy9A6WTJ L79A2oVnrfci52yVKFswHwYDVR0jBBgwFoAU3VdGDwwSvgVGE6L0KWewfaVoe/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzVBMTgyQzdDODUy MzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2Vf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1ZkR0R3d1N2Z1ZHRTZMMEtXZXdmYVZvZV9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzVBMTgyQzdDODUyMzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdW R0U2TDBLV2V3ZmFWb2VfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQAG9A/zSjP43LqdkMsGV/0FTRQwF1iaOj23wbvlcUUETJK65KTILLj ZYHhuhuNXUzzBBBVUyWsU+Rex2It8dP2JxRvEDsSecJjpyvMSzhZm9uJ2V4Xy/tu L2UTiZio0iV/hDlCF6QaILZR+dKXhhwPcvRkRWxr9f2FH3eaZ4ivrMht+l4Sk4fw zqxFewDgLAYtBIYfzHRyRii5RJgerCii7t1wdhWjdmIIOry4S4ynEqwGidpGDhcR rg7Iefqr37IRdtgupY+93DFND8YkD+eH/QE/yedI/pf7PejwL0oye0hAJUjiE8pW WLz02g3XbgAG5lWfsG9rFoPjOmo2tII= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:04 2024 by rpki-client on console-ams.rpki-client.org