$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: 5eE8Uyvy/6LuUyfTA+eM1lkE3Y5MtN7iyYIB+jOuuN8= Subject key identifier: D8:13:57:C5:7D:C1:8A:ED:71:99:DD:EC:B1:30:AF:0D:14:52:A7:E0 Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 03E6 Signing time: Sat 23 Nov 2024 00:07:30 +0000 Manifest this update: Sat 23 Nov 2024 00:07:29 +0000 Manifest next update: Sat 30 Nov 2024 00:07:29 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: LU4+F5qYywFSQwo26A+HmOUROxpTWbjg1DjuRFYcLBk=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: Nov 23 00:07:29 2024 GMT Not After : Nov 30 00:07:29 2024 GMT Subject: CN=67411cc1-cb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:d0:2c:f3:6a:2b:32:88:e9:79:06:8f:25: 7b:12:3b:cd:5d:fb:0c:c2:f1:ba:3c:5d:64:45:8e: 8f:f9:77:f3:0b:94:b1:1d:ee:54:0a:3f:c5:5c:62: 19:b5:49:75:0b:db:2e:5e:2e:04:0a:63:4f:e3:9f: 5a:56:ff:39:2f:40:b5:fd:3a:90:1b:37:40:3c:82: 45:f4:ca:a7:6f:b5:e9:36:a2:a5:ff:22:8f:be:3a: 81:ad:9c:3b:02:7a:af:46:8d:34:c8:c8:f0:df:5c: a4:28:cd:ce:4d:b6:f1:6a:ed:83:d7:87:dd:ff:93: f0:39:75:5f:84:24:59:c6:20:02:a0:49:d4:6e:ee: 31:9e:b2:c9:c5:e3:70:bb:06:e5:d3:29:da:b4:54: 34:d3:02:d5:6d:ca:8e:e4:7b:45:27:44:1d:10:99: 85:c6:ba:5c:51:59:2c:f5:31:ce:93:c6:e5:cb:ec: b5:3b:98:a9:fe:f1:34:df:71:c1:c2:27:9f:50:50: 96:1b:6e:6d:40:eb:58:36:b1:af:4c:7e:31:68:08: 92:b0:bd:d4:df:7a:f1:16:e7:a1:32:7e:b2:63:f3: 93:1c:5d:4d:2a:f0:75:03:eb:3b:6e:5a:95:c5:05: 8b:d9:c4:c9:76:ff:47:ff:6d:1f:c1:f5:b6:a7:05: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:57:C5:7D:C1:8A:ED:71:99:DD:EC:B1:30:AF:0D:14:52:A7:E0 X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:74:76:d0:60:94:7f:fb:c9:1f:96:77:7c:17:54:0f:03: d5:17:93:dd:19:a6:ca:37:2e:6c:3a:5f:81:80:27:14:f0:86: 68:b6:09:ae:68:e3:03:bb:6f:b6:0f:4e:b2:91:ca:30:cd:55: 84:c3:66:e0:f2:55:a7:57:d8:64:85:26:61:86:22:b7:51:04: ab:6c:f5:94:e9:5f:eb:d0:df:5f:b7:67:55:7b:00:6b:94:84: c4:8d:e9:e4:d5:12:2c:0e:2d:8f:37:e4:53:08:05:c5:c3:2c: 77:27:8d:cc:4b:47:c2:da:58:86:94:5a:64:a4:21:4a:ee:15: d0:0e:b1:00:d1:e9:05:f3:48:95:03:3f:eb:94:dc:6d:56:5f: d5:21:3d:8d:ce:d2:ac:13:ef:0e:ee:9f:7c:0e:96:b9:2c:b7: 92:12:a4:2b:f6:f4:52:47:fe:2f:cb:13:95:c0:34:56:1a:3e: bf:98:d9:5e:83:e2:f0:06:6d:de:6d:58:b4:18:15:4e:4f:f8: 46:e2:81:60:10:d4:8c:8e:10:55:d2:10:0d:7d:65:2e:33:4b: bc:d4:95:e3:e2:90:5c:4c:48:77:5d:6b:e2:e8:71:7c:7c:b1: a6:a3:82:09:cd:9b:db:c3:18:df:a8:7b:2f:80:fd:23:af:e2: 48:63:f4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjQxMTIzMDAwNzI5WhcNMjQxMTMwMDAwNzI5WjAYMRYwFAYD VQQDEw02NzQxMWNjMS1jYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PDQLPNqKzKI6XkGjyV7EjvNXfsMwvG6PF1kRY6P+XfzC5SxHe5UCj/FXGIZ tUl1C9suXi4ECmNP459aVv85L0C1/TqQGzdAPIJF9Mqnb7XpNqKl/yKPvjqBrZw7 AnqvRo00yMjw31ykKM3OTbbxau2D14fd/5PwOXVfhCRZxiACoEnUbu4xnrLJxeNw uwbl0ynatFQ00wLVbcqO5HtFJ0QdEJmFxrpcUVks9THOk8bly+y1O5ip/vE033HB wiefUFCWG25tQOtYNrGvTH4xaAiSsL3U33rxFuehMn6yY/OTHF1NKvB1A+s7blqV xQWL2cTJdv9H/20fwfW2pwVDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgTV8V9 wYrtcZnd7LEwrw0UUqfgMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52XR20GCUf/vJH5Z3fBdUDwPVF5PdGabKNy5sOl+BgCcU8IZotgmu aOMDu2+2D06ykcowzVWEw2bg8lWnV9hkhSZhhiK3UQSrbPWU6V/r0N9ft2dVewBr lITEjenk1RIsDi2PN+RTCAXFwyx3J43MS0fC2liGlFpkpCFK7hXQDrEA0ekF80iV Az/rlNxtVl/VIT2NztKsE+8O7p98Dpa5LLeSEqQr9vRSR/4vyxOVwDRWGj6/mNle g+LwBm3ebVi0GBVOT/hG4oFgENSMjhBV0hANfWUuM0u81JXj4pBcTEh3XWvi6HF8 fLGmo4IJzZvbwxjfqHsvgP0jr+JIY/RY -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org