$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft File: 34UAobIJAKu39Z62mwcBjfgEXF4.mft (raw, json) Hash identifier: 6qyvfkG+P9b//HP3PGBUnCo8WjXeWVIHp863jUskoqc= Subject key identifier: 53:E0:3E:B6:8E:3E:3A:57:43:F1:F2:5A:75:64:11:5D:9D:F9:3D:7E Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E Certificate issuer: /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Certificate serial: 342F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft Manifest number: 3427 Signing time: Fri 22 Nov 2024 15:19:57 +0000 Manifest this update: Fri 22 Nov 2024 15:19:57 +0000 Manifest next update: Fri 29 Nov 2024 15:19:57 +0000 Files and hashes: 1: 34UAobIJAKu39Z62mwcBjfgEXF4.crl (hash: 4ZNKcXGpD6S2Ov7cR1fkaf/Vh5zVnXlDn75s2Bq1h2w=) 2: B92D2816064311EAAFD3B416C4F9AE02.roa (hash: snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13359 (0x342f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Validity Not Before: Nov 22 15:19:57 2024 GMT Not After : Nov 29 15:19:57 2024 GMT Subject: CN=6740a11d-5efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:38:c1:2d:d5:f5:40:be:c9:3a:50:b5:94: 53:de:ad:49:38:11:87:4e:9b:c9:e5:6e:4e:eb:8f: b6:7f:4d:30:e8:4f:bb:06:9c:2b:40:98:2d:fe:60: 90:24:ab:a9:02:8f:b7:90:c9:f6:ec:f9:9c:59:cf: f5:37:7d:5c:24:cf:54:63:d5:17:bf:c3:a8:58:c5: 89:b3:c0:12:a6:fd:3f:cc:b7:9a:a8:61:95:a7:c4: 91:08:29:f3:d1:7a:0d:63:5d:e4:5a:33:cd:89:3e: 29:62:f5:8a:f2:fb:be:b9:3d:ec:6c:4d:47:90:c0: 66:90:5b:19:96:9c:ee:90:2d:72:f1:5b:6e:5a:34: 5c:07:4e:86:70:b0:17:4e:59:e6:cb:ca:23:f6:0a: 7d:cf:9b:d9:6d:b5:7a:f7:4d:a9:4a:3d:1b:43:60: cb:64:0c:39:e4:05:ff:07:42:2e:f4:9a:09:ed:b2: 08:20:cb:a3:f9:69:3f:71:d5:d2:0b:85:70:ef:f4: 3f:ab:aa:d6:d5:71:4a:76:43:1e:30:f9:b5:ea:c9: 6f:bc:2e:7d:cd:cb:8d:9c:78:e3:f7:c0:fd:f1:b0: 49:fd:ad:b1:34:50:bf:6b:1f:d0:91:cd:b6:b9:ae: 02:5f:fe:c7:54:5c:4b:bd:95:54:3e:39:0d:ea:b4: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E0:3E:B6:8E:3E:3A:57:43:F1:F2:5A:75:64:11:5D:9D:F9:3D:7E X509v3 Authority Key Identifier: keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a7:29:8f:32:3d:d9:3e:16:37:eb:98:b4:d3:66:8c:19:e7: 19:56:8d:4f:35:15:86:7f:9c:c6:e0:4e:75:b3:73:75:ce:8e: 8c:eb:26:42:fd:8a:fd:d5:7f:89:1d:a5:1b:48:45:92:e2:d7: b7:e9:1a:20:83:a4:77:20:f1:b7:67:80:75:4c:c4:c7:0f:8f: 4c:ba:73:d2:47:5b:ad:58:ed:0e:b8:8a:e1:f9:15:c2:01:1f: f9:c7:81:8c:8b:84:c8:45:1b:2e:f7:43:c6:13:2e:83:09:0b: 31:5c:06:5c:d5:04:7f:6c:da:f2:c5:ad:33:35:f1:7b:10:4a: d1:e0:b7:26:31:0d:8f:15:48:41:78:75:6e:c5:6d:9e:f2:b1: f2:5a:1f:07:7a:0a:53:6f:ed:99:55:46:64:14:68:e5:02:3b: c7:4a:fb:01:78:33:a0:7f:55:99:b6:b1:67:31:0a:17:e4:ae: 09:e6:0d:58:09:d7:cc:d2:46:47:ec:f8:21:b7:a4:c2:39:0d: 5c:0e:1b:ef:6a:ce:12:b8:2b:ef:49:ea:08:06:4e:a5:16:8b: f6:da:41:7e:a8:9c:8b:6c:49:c0:c8:aa:de:ac:58:fb:c8:f2: bb:05:7b:9e:46:2a:78:21:f3:66:2b:f8:fe:56:48:fa:db:53: bc:6f:9a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCNzMxMTAvBgNVBAUTKERGODUwMEExQjIwOTAwQUJCN0Y1OUVCNjlCMDcwMThE RjgwNDVDNUUwHhcNMjQxMTIyMTUxOTU3WhcNMjQxMTI5MTUxOTU3WjAYMRYwFAYD VQQDEw02NzQwYTExZC01ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpI4wS3V9UC+yTpQtZRT3q1JOBGHTpvJ5W5O64+2f00w6E+7BpwrQJgt/mCQ JKupAo+3kMn27PmcWc/1N31cJM9UY9UXv8OoWMWJs8ASpv0/zLeaqGGVp8SRCCnz 0XoNY13kWjPNiT4pYvWK8vu+uT3sbE1HkMBmkFsZlpzukC1y8VtuWjRcB06GcLAX Tlnmy8oj9gp9z5vZbbV6902pSj0bQ2DLZAw55AX/B0Iu9JoJ7bIIIMuj+Wk/cdXS C4Vw7/Q/q6rW1XFKdkMeMPm16slvvC59zcuNnHjj98D98bBJ/a2xNFC/ax/Qkc22 ua4CX/7HVFxLvZVUPjkN6rTXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPgPraO PjpXQ/HyWnVkEV2d+T1+MB8GA1UdIwQYMBaAFN+FAKGyCQCrt/WetpsHAY34BFxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI3My9CODhGREU4QzFE QUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFLdTM5WjYybXdjQmpmZ0VY RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0VUFvYklKQUt1MzlaNjJtd2NCamZnRVhGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI3My9CODhGREU4QzFEQUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFL dTM5WjYybXdjQmpmZ0VYRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvpymPMj3ZPhY365i002aMGecZVo1PNRWGf5zG4E51s3N1zo6M6yZC /Yr91X+JHaUbSEWS4te36Rogg6R3IPG3Z4B1TMTHD49MunPSR1utWO0OuIrh+RXC AR/5x4GMi4TIRRsu90PGEy6DCQsxXAZc1QR/bNryxa0zNfF7EErR4LcmMQ2PFUhB eHVuxW2e8rHyWh8HegpTb+2ZVUZkFGjlAjvHSvsBeDOgf1WZtrFnMQoX5K4J5g1Y CdfM0kZH7Pght6TCOQ1cDhvvas4SuCvvSeoIBk6lFov22kF+qJyLbEnAyKrerFj7 yPK7BXueRip4IfNmK/j+Vkj621O8b5rW -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org