$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json) Hash identifier: 34MI5oiA1XWAqEXXwwXNie24GbnGkkmPG8mLbT9cejc= Subject key identifier: 54:F9:1F:FF:1F:9E:C1:A1:6E:68:AE:39:3E:23:58:55:83:E0:4C:86 Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft Manifest number: 0612 Signing time: Fri 22 Nov 2024 22:17:37 +0000 Manifest this update: Fri 22 Nov 2024 22:17:37 +0000 Manifest next update: Fri 29 Nov 2024 22:17:37 +0000 Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: CYVqScrR9ihGwaf3/JhACpLEAaVvm5iGIvdpEVZSnig=) 2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: O0WToewD6QdFMbl6xT5t2Q3rykz6toPpLMo5BA08OvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3 Validity Not Before: Nov 22 22:17:37 2024 GMT Not After : Nov 29 22:17:37 2024 GMT Subject: CN=67410301-e59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:b8:be:31:cb:f8:e2:34:c7:c5:3b:57:bd: 93:77:11:36:c1:05:df:4f:1b:ae:0b:28:90:3a:bb: 04:3b:d4:01:e3:52:b0:46:1e:c0:77:5a:00:05:84: 43:f2:06:68:d3:8c:0b:fe:bb:ed:5b:c3:83:46:7f: 18:fc:27:4f:30:ef:46:1c:52:b9:2d:44:16:48:3e: f9:60:ca:f8:9e:d8:82:d4:43:cb:8d:87:9b:09:8e: 92:66:50:93:52:93:39:cc:3a:80:8e:51:23:5c:1f: 35:a6:ff:80:e2:63:c1:34:d5:eb:4b:2b:5a:4d:82: 9c:25:47:a5:42:76:92:b6:2b:18:55:99:45:9e:5c: b0:0c:a4:a5:87:3e:e5:d8:19:22:e1:4d:98:7f:e8: a1:85:fb:26:02:50:5d:ab:6b:2a:b9:cf:4b:0c:c7: e5:37:92:f8:db:29:71:86:c4:a3:5e:fc:e6:a5:ab: fc:54:bd:e6:00:bb:a6:9a:e4:93:04:f5:ee:44:e4: b1:8b:2b:97:75:ce:f4:cb:8e:7d:79:42:08:db:80: e0:67:6e:e0:27:7a:d0:95:b0:6c:61:1d:e0:47:d8: a7:11:76:68:dd:32:01:4b:ab:4b:07:95:f6:05:08: 0b:cd:12:87:7b:d1:f8:31:fa:e8:95:2c:3d:5b:af: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F9:1F:FF:1F:9E:C1:A1:6E:68:AE:39:3E:23:58:55:83:E0:4C:86 X509v3 Authority Key Identifier: keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1a:a0:c9:5f:57:1a:06:25:80:63:0f:de:cf:4b:57:9a:5f: 75:7c:41:ad:d9:a8:bd:8c:d9:7f:c1:eb:2f:d2:4d:e9:d8:1f: ac:f2:f1:79:93:fb:ad:e6:fb:cb:86:5b:51:2b:fb:2b:db:d9: 03:f2:73:7f:bc:c3:26:63:fa:6e:ec:69:c1:d7:b3:8f:4d:01: eb:8e:e8:36:23:6e:6c:51:ba:99:6f:2e:d1:d5:83:10:01:1e: c1:98:82:9c:5a:17:23:0d:28:d7:ee:28:3c:d5:be:04:fa:83: 39:24:da:7b:79:5e:1d:7e:fb:ea:9b:6c:2c:78:2b:21:0a:72: 79:c5:7c:6a:f5:a7:22:1a:be:29:1f:2d:1b:61:08:2e:44:6b: 6f:d0:0d:ae:aa:18:15:17:f2:6a:72:dc:88:cf:ed:08:65:aa: 78:f1:95:76:5f:48:78:c4:71:fd:dd:17:c1:8f:91:77:49:fe: 14:15:1a:8a:58:68:f2:71:ac:ab:48:45:13:1f:89:e8:fb:0f: d1:d6:6d:b5:cb:a7:40:7d:be:7a:a7:70:8f:c9:a2:0e:07:de: 02:31:ef:0c:13:fc:bc:eb:08:8e:78:58:62:d8:7e:bf:6e:fb: df:27:18:d4:b8:51:c4:97:da:99:d3:b8:c2:3f:00:ef:ed:56: ef:0d:82:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5 NTZBN0Q5RTMwHhcNMjQxMTIyMjIxNzM3WhcNMjQxMTI5MjIxNzM3WjAYMRYwFAYD VQQDEw02NzQxMDMwMS1lNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iW4vjHL+OI0x8U7V72TdxE2wQXfTxuuCyiQOrsEO9QB41KwRh7Ad1oABYRD 8gZo04wL/rvtW8ODRn8Y/CdPMO9GHFK5LUQWSD75YMr4ntiC1EPLjYebCY6SZlCT UpM5zDqAjlEjXB81pv+A4mPBNNXrSytaTYKcJUelQnaStisYVZlFnlywDKSlhz7l 2Bki4U2Yf+ihhfsmAlBdq2squc9LDMflN5L42ylxhsSjXvzmpav8VL3mALummuST BPXuROSxiyuXdc70y459eUII24DgZ27gJ3rQlbBsYR3gR9inEXZo3TIBS6tLB5X2 BQgLzRKHe9H4MfrolSw9W6/xZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT5H/8f nsGhbmiuOT4jWFWD4EyGMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1 dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGqDJX1caBiWAYw/ez0tXml91fEGt2ai9jNl/wesv0k3p2B+s8vF5 k/ut5vvLhltRK/sr29kD8nN/vMMmY/pu7GnB17OPTQHrjug2I25sUbqZby7R1YMQ AR7BmIKcWhcjDSjX7ig81b4E+oM5JNp7eV4dfvvqm2wseCshCnJ5xXxq9aciGr4p Hy0bYQguRGtv0A2uqhgVF/JqctyIz+0IZap48ZV2X0h4xHH93RfBj5F3Sf4UFRqK WGjycayrSEUTH4no+w/R1m21y6dAfb56p3CPyaIOB94CMe8ME/y86wiOeFhi2H6/ bvvfJxjUuFHEl9qZ07jCPwDv7VbvDYKh -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org