$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: FeK4ANH5HtBHigqRVD/8855tjSCewEjrMPh9Z2t4oF0= Subject key identifier: C2:21:9D:2A:A1:CB:0F:EB:2E:42:B3:36:4B:4A:AC:38:5E:09:3E:E4 Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 3440 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 3433 Signing time: Wed 20 Nov 2024 14:39:19 +0000 Manifest this update: Wed 20 Nov 2024 14:39:19 +0000 Manifest next update: Wed 27 Nov 2024 14:39:19 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: pYj0jVd3h9DRzS1Mn6owf6iIN781hcjJ1W3UiQfNIqk=) 2: D1893F2435F111EBBFEA4039C4F9AE02.roa (hash: SDlK72tVgqLaEiiVBcuX/ceq5NukKuq9JwXB6vZpsxI=) 3: 83D16ACCF54C11EEB856F155C4F9AE02.roa (hash: xZPMbqwzJRxdS3NKOuo3HufbnVPt6zDUUGu0rLBix2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13376 (0x3440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Nov 20 14:39:19 2024 GMT Not After : Nov 27 14:39:19 2024 GMT Subject: CN=673df497-876c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1a:ef:7c:c9:22:77:3d:7d:78:d9:ea:18:ec: 9d:54:c8:71:45:5e:e7:86:56:9b:1c:18:c4:fd:83: 56:c9:d9:61:47:be:dc:9d:74:13:5c:dc:9b:10:37: 40:5d:be:fb:f8:1c:e1:75:8f:9e:46:9a:5f:3c:6c: bf:88:a3:06:30:db:8d:d4:9f:31:f1:3f:26:a8:7f: dc:f8:d1:40:c8:6d:1f:02:40:eb:aa:2a:26:17:90: 66:26:49:93:fe:63:5a:8a:fa:aa:f5:c9:8a:c3:5e: a2:85:f2:22:f1:42:cb:25:48:45:3a:7e:ee:f7:34: 40:a7:0f:83:49:24:d3:0c:21:22:73:7e:f3:7e:fd: 06:df:02:3a:63:b0:53:87:bd:73:14:fe:32:23:8c: 4a:b8:15:9a:da:6f:e1:a3:c4:d9:bd:da:ca:37:ba: 65:47:b2:c4:02:25:f2:00:85:19:b0:0e:3e:a4:d1: e8:ae:c9:49:11:ed:d8:6f:e6:e1:ae:90:8b:9e:18: 65:b7:aa:d7:75:b3:df:e4:58:b2:c7:e6:5b:d5:be: e1:79:da:6c:74:5d:05:8d:c0:9f:ed:d2:22:23:fe: 05:f5:86:a1:30:f9:d6:3b:71:ad:c6:a9:9c:37:8d: 1c:fc:d0:8a:d2:d2:fe:21:26:a0:dd:20:c4:bb:45: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:21:9D:2A:A1:CB:0F:EB:2E:42:B3:36:4B:4A:AC:38:5E:09:3E:E4 X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a9:2d:e9:1a:81:e1:5f:72:79:ec:56:3a:4c:ef:d9:9c:ae: fc:19:19:5d:a6:21:85:e9:d1:55:f6:b1:80:5c:13:94:33:1c: 6c:e9:58:80:79:6c:d4:7c:d5:b1:ff:74:fa:b2:a3:a4:70:f9: 74:46:a5:d3:38:a5:60:c2:f4:d5:ed:02:b1:c6:d1:13:aa:f5: 88:0c:50:93:14:f9:6b:2a:db:05:c8:35:71:a6:b4:4b:7e:96: 5d:db:d3:28:d8:3d:ab:c4:0e:6c:fd:f7:f5:3c:65:ee:61:d5: 02:77:8f:f6:70:f7:d8:04:12:a8:6e:69:d7:fe:37:d8:72:ee: 71:e5:74:74:80:5a:09:71:ae:e8:42:85:c7:61:38:0c:53:cd: 96:38:26:b8:ee:73:1c:ba:a1:90:7a:3c:1a:a0:bb:f0:60:f2: 36:49:73:f2:fc:e6:b6:2b:13:b1:ea:09:0c:e7:8c:bb:39:41: b7:e4:5b:3a:28:97:19:bd:af:ed:ec:11:9f:23:52:d3:2b:b2: 62:7d:d1:c2:c5:b0:e3:b9:44:bc:38:02:c7:ba:88:ce:61:f4: b8:0d:4b:0b:e4:8a:f4:d0:0d:63:f0:d4:56:21:64:ae:7a:47: b9:ba:62:be:15:fa:0d:07:34:58:6e:50:3b:b1:3c:fd:a9:79: 4d:f7:c0:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjQxMTIwMTQzOTE5WhcNMjQxMTI3MTQzOTE5WjAYMRYwFAYD VQQDEw02NzNkZjQ5Ny04NzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BrvfMkidz19eNnqGOydVMhxRV7nhlabHBjE/YNWydlhR77cnXQTXNybEDdA Xb77+BzhdY+eRppfPGy/iKMGMNuN1J8x8T8mqH/c+NFAyG0fAkDrqiomF5BmJkmT /mNaivqq9cmKw16ihfIi8ULLJUhFOn7u9zRApw+DSSTTDCEic37zfv0G3wI6Y7BT h71zFP4yI4xKuBWa2m/ho8TZvdrKN7plR7LEAiXyAIUZsA4+pNHorslJEe3Yb+bh rpCLnhhlt6rXdbPf5Fiyx+Zb1b7hedpsdF0FjcCf7dIiI/4F9YahMPnWO3Gtxqmc N40c/NCK0tL+ISag3SDEu0VIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIhnSqh yw/rLkKzNktKrDheCT7kMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9qS3pGoHhX3J57FY6TO/ZnK78GRldpiGF6dFV9rGAXBOUMxxs6ViA eWzUfNWx/3T6sqOkcPl0RqXTOKVgwvTV7QKxxtETqvWIDFCTFPlrKtsFyDVxprRL fpZd29Mo2D2rxA5s/ff1PGXuYdUCd4/2cPfYBBKobmnX/jfYcu5x5XR0gFoJca7o QoXHYTgMU82WOCa47nMcuqGQejwaoLvwYPI2SXPy/Oa2KxOx6gkM54y7OUG35Fs6 KJcZva/t7BGfI1LTK7JifdHCxbDjuUS8OALHuojOYfS4DUsL5Ir00A1j8NRWIWSu eke5umK+FfoNBzRYblA7sTz9qXlN98BV -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:28 2024 by rpki-client on console-fra.rpki-client.org