$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: kvVc6jwMgO/n7qwhHg7sE4QnH9Q5WRH6cqlwPsmlVK0= Subject key identifier: 80:41:EA:08:F1:ED:30:33:3D:D6:1A:D2:2E:42:AA:8D:26:23:F6:13 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 02FC Signing time: Thu 21 Nov 2024 00:48:57 +0000 Manifest this update: Thu 21 Nov 2024 00:48:56 +0000 Manifest next update: Thu 28 Nov 2024 00:48:56 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: HNxwTCxh6RDqQi89njXeUQ+kQl2bHK6aEDFH14Pu0sY=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: BjnEXUQnM/w5/elkxHxhuklRbVefDC0b1z2jDyjryYY=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: Swm8wcaeAGU6W3RSshCj74MA0EDyTsqkbcfipXQ6I6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Nov 21 00:48:56 2024 GMT Not After : Nov 28 00:48:56 2024 GMT Subject: CN=673e8378-934a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:13:6d:08:96:38:1f:85:6f:fb:76:f9:c6: 38:9f:96:c4:ff:71:dd:45:86:6c:34:fb:0c:20:98: 5a:26:f3:b5:45:85:1d:cf:77:e6:05:1f:77:48:c2: 05:10:2a:c9:51:18:32:e2:04:93:5f:9c:e8:54:c3: 34:b8:88:7e:a9:ec:0e:06:c4:75:19:67:5e:5d:17: 45:df:ea:7e:91:a5:3f:7f:f2:54:82:ae:3f:d8:56: 14:75:15:ca:7f:65:e1:7d:c5:7f:29:96:ca:cb:87: d0:c6:67:f7:26:c5:60:a0:f1:09:cc:80:7b:f8:32: c5:81:6a:6c:72:79:23:1d:11:ef:64:0b:e5:77:7c: fb:ae:c3:65:11:78:ef:71:f1:35:d7:03:64:2b:14: 65:1a:d5:71:f7:cb:83:c4:c2:80:04:b6:a8:64:da: 8f:f0:8c:2c:2a:f7:40:4c:1b:56:92:0e:98:76:ec: 9d:d0:de:78:0c:5d:0c:0d:2d:aa:12:16:a7:d6:75: 73:0e:cc:15:35:3d:0e:78:a0:74:ce:8d:fa:5f:29: 28:16:15:5f:46:89:80:98:d7:7f:68:88:a8:9e:92: d3:52:6f:32:26:6d:eb:1f:9e:f2:31:60:f4:e6:2b: 15:ba:eb:93:24:93:0c:95:de:f3:d7:ca:36:4d:83: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:EA:08:F1:ED:30:33:3D:D6:1A:D2:2E:42:AA:8D:26:23:F6:13 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:34:89:e8:10:1a:d0:be:2a:41:8b:63:41:4a:48:1f:4c:23: 5d:d5:9c:be:6d:0d:65:dd:2b:02:c1:c8:21:e4:85:a6:a7:1d: dc:56:d1:3f:5b:41:80:37:96:05:ce:30:76:77:27:ce:28:74: 68:ef:92:fc:d0:19:58:c1:36:64:99:ad:af:c6:7d:2f:05:c3: 15:ed:0b:6b:a4:1d:47:fc:39:14:6b:e4:9a:9f:8f:46:3b:b3: b0:74:79:7a:ef:b0:8d:db:48:c1:b8:8d:2c:e0:23:33:bc:2d: d3:cd:64:24:2d:4e:0f:03:6b:ac:3d:d4:a2:4e:07:58:3e:52: 19:1f:1e:2c:93:ee:a0:ad:1c:e4:75:d8:2a:00:6c:a7:49:7e: 87:30:61:f5:62:fa:09:ed:10:f1:39:85:62:2d:fe:7f:28:d3: ce:02:31:0f:65:a0:75:26:cc:dd:c9:35:c8:35:3f:ea:f1:3f: 77:e4:de:ec:3c:38:23:8b:bf:d7:8d:74:02:0d:a7:3f:ec:1a: 2a:9c:78:68:64:88:4c:ed:32:98:d7:f2:81:c6:ec:49:07:ea: 73:29:63:58:ec:a9:6d:74:d3:91:99:31:14:64:7b:91:d6:28: 29:aa:56:ae:a7:62:71:58:de:6b:c7:00:9a:f5:35:bd:c0:91: fd:fa:57:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjQxMTIxMDA0ODU2WhcNMjQxMTI4MDA0ODU2WjAYMRYwFAYD VQQDEw02NzNlODM3OC05MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOQTbQiWOB+Fb/t2+cY4n5bE/3HdRYZsNPsMIJhaJvO1RYUdz3fmBR93SMIF ECrJURgy4gSTX5zoVMM0uIh+qewOBsR1GWdeXRdF3+p+kaU/f/JUgq4/2FYUdRXK f2XhfcV/KZbKy4fQxmf3JsVgoPEJzIB7+DLFgWpscnkjHRHvZAvld3z7rsNlEXjv cfE11wNkKxRlGtVx98uDxMKABLaoZNqP8IwsKvdATBtWkg6Yduyd0N54DF0MDS2q Ehan1nVzDswVNT0OeKB0zo36XykoFhVfRomAmNd/aIionpLTUm8yJm3rH57yMWD0 5isVuuuTJJMMld7z18o2TYMfrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBB6gjx 7TAzPdYa0i5Cqo0mI/YTMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCANInoEBrQvipBi2NBSkgfTCNd1Zy+bQ1l3SsCwcgh5IWmpx3cVtE/ W0GAN5YFzjB2dyfOKHRo75L80BlYwTZkma2vxn0vBcMV7QtrpB1H/DkUa+San49G O7OwdHl677CN20jBuI0s4CMzvC3TzWQkLU4PA2usPdSiTgdYPlIZHx4sk+6grRzk ddgqAGynSX6HMGH1YvoJ7RDxOYViLf5/KNPOAjEPZaB1JszdyTXINT/q8T935N7s PDgji7/XjXQCDac/7BoqnHhoZIhM7TKY1/KBxuxJB+pzKWNY7KltdNORmTEUZHuR 1igpqlaup2JxWN5rxwCa9TW9wJH9+ldW -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:55 2024 by rpki-client on console-fra.rpki-client.org