$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: IVCRprI7dnAXQm0DF2tIhVDbKoS9jcVreZm82PSbtKk= Subject key identifier: 33:9E:D5:CA:62:47:1F:D3:88:EE:48:D1:DD:2E:67:44:AC:52:AD:B6 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: 3A Signing time: Mon 25 Nov 2024 05:25:04 +0000 Manifest this update: Mon 25 Nov 2024 05:25:04 +0000 Manifest next update: Mon 02 Dec 2024 05:25:04 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: YiG+osDmsPpyoNxvUbP6D16d41TjN35WTi7z2fVxSw8=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Nov 25 05:25:04 2024 GMT Not After : Dec 2 05:25:04 2024 GMT Subject: CN=67440a30-5977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:92:2e:e1:53:06:19:3a:58:0c:e5:f4:bf: a2:cb:ad:39:19:10:9a:e4:2d:11:d2:d1:9e:e8:27: 59:b3:80:45:d6:4d:7f:58:73:b9:01:f4:3b:69:3c: e7:c6:95:17:f6:e1:17:e5:e6:f6:b7:00:47:95:f2: 77:20:79:bc:fa:b6:6b:91:bc:b9:07:0f:68:8a:29: e6:24:2a:eb:e7:bb:8c:3f:8c:02:30:49:4c:18:9c: 50:60:05:0f:a6:5e:80:db:d8:c7:a8:56:d5:73:92: bb:73:da:b5:1b:01:c7:54:5d:6a:24:b2:ad:01:8d: 30:12:ff:3b:81:4f:60:4a:e6:22:7e:b0:b6:57:01: f9:e5:15:f7:1e:26:d0:c2:7c:08:ae:17:2b:1b:d9: 20:8f:cd:91:3e:e5:87:ea:a7:2c:06:bb:1b:db:48: 59:14:c2:15:55:11:de:8a:40:57:e6:50:46:77:9a: fb:7d:e2:02:6b:b7:d8:c6:13:b4:1f:31:c5:cf:29: bc:80:79:e8:1d:1c:15:ca:ae:9e:18:a2:c8:5f:f9: 43:dc:d5:a7:e6:d2:3a:96:b1:c1:c9:ef:a3:c8:91: 6f:4f:b9:50:79:c7:b5:b6:22:1d:71:3b:08:9a:69: 28:29:43:3e:2d:49:4a:19:86:88:27:41:cf:1a:c2: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:D5:CA:62:47:1F:D3:88:EE:48:D1:DD:2E:67:44:AC:52:AD:B6 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:9b:7b:de:ce:c9:3d:7c:97:47:45:51:81:72:a9:85:da:b3: 34:06:5a:ae:ae:2d:ee:13:4c:3a:f5:47:7d:6b:2b:cd:96:2d: 95:67:92:58:dd:0a:b8:57:b3:61:b5:b0:ad:f5:e3:72:da:5e: e2:8c:e3:ea:3c:77:e2:2b:73:c6:d6:cc:ba:16:64:5e:7d:97: 40:cb:4e:97:4c:7c:a2:a0:46:d7:3b:9b:d3:96:72:03:0b:12: 54:b5:b7:e6:7e:8f:92:32:4b:d8:c9:3d:c4:80:7d:94:59:ff: 8d:cd:35:c2:b5:03:cc:0d:84:dd:a0:13:0f:bd:17:bc:9a:4f: dd:97:cd:39:2e:5c:24:35:29:ef:fd:99:54:29:06:b6:3a:a9: a3:ec:91:4a:e1:dc:86:21:a8:00:c0:7b:cc:01:09:e1:23:af: 6f:39:8a:f3:f8:46:dd:a1:b2:84:7e:91:00:0a:a9:20:9e:a4: 98:0c:fe:bb:d8:49:ee:f6:c5:68:2f:e0:47:36:40:ee:3f:62: 4d:5d:74:10:c1:13:70:e5:fc:b9:2c:9a:35:3f:46:42:89:71: b5:a6:2b:1b:ef:49:00:e3:5d:af:03:cb:b9:16:fb:28:ec:92: 74:61:b9:49:25:a5:38:47:e9:30:74:08:bc:7a:da:56:ba:a8: c0:aa:ed:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0VCOTExMC8GA1UEBRMoM0NDNzc5MEUyMDM3NjY1RUY0OTYyQjgxREFEMkZEMDdF RDQ2RjhCMjAeFw0yNDExMjUwNTI1MDRaFw0yNDEyMDIwNTI1MDRaMBgxFjAUBgNV BAMTDTY3NDQwYTMwLTU5NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiPpIu4VMGGTpYDOX0v6LLrTkZEJrkLRHS0Z7oJ1mzgEXWTX9Yc7kB9DtpPOfG lRf24Rfl5va3AEeV8ncgebz6tmuRvLkHD2iKKeYkKuvnu4w/jAIwSUwYnFBgBQ+m XoDb2MeoVtVzkrtz2rUbAcdUXWoksq0BjTAS/zuBT2BK5iJ+sLZXAfnlFfceJtDC fAiuFysb2SCPzZE+5YfqpywGuxvbSFkUwhVVEd6KQFfmUEZ3mvt94gJrt9jGE7Qf McXPKbyAeegdHBXKrp4Yoshf+UPc1afm0jqWscHJ76PIkW9PuVB5x7W2Ih1xOwia aSgpQz4tSUoZhognQc8awvpTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM57VymJH H9OI7kjR3S5nRKxSrbYwHwYDVR0jBBgwFoAUPMd5DiA3Zl70liuB2tL9B+1G+LIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRUI5LzA1MUM5RTY0NTRB MDExRUY4NkFFNTkyMkM0RjlBRTAyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1M SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE1kNURpQTNabDcwbGl1QjJ0TDlCLTFHLUxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RUI5LzA1MUM5RTY0NTRBMDExRUY4NkFFNTkyMkM0RjlBRTAyL1BNZDVEaUEzWmw3 MGxpdUIydEw5Qi0xRy1MSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMWbe97OyT18l0dFUYFyqYXaszQGWq6uLe4TTDr1R31rK82WLZVnkljd CrhXs2G1sK3143LaXuKM4+o8d+Irc8bWzLoWZF59l0DLTpdMfKKgRtc7m9OWcgML ElS1t+Z+j5IyS9jJPcSAfZRZ/43NNcK1A8wNhN2gEw+9F7yaT92XzTkuXCQ1Ke/9 mVQpBrY6qaPskUrh3IYhqADAe8wBCeEjr285ivP4Rt2hsoR+kQAKqSCepJgM/rvY Se72xWgv4Ec2QO4/Yk1ddBDBE3Dl/LksmjU/RkKJcbWmKxvvSQDjXa8Dy7kW+yjs knRhuUklpThH6TB0CLx62la6qMCq7fs= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:48 2024 by rpki-client on console-ams.rpki-client.org