$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: //V39UtYS7I7/ZQB/S7temybqtcdR3gc+cWcTeaBZRU= Subject key identifier: C1:FE:36:77:03:54:C6:ED:90:15:28:E0:AB:A4:01:EE:1E:5C:27:6D Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 0663 Signing time: Fri 22 Nov 2024 21:56:04 +0000 Manifest this update: Fri 22 Nov 2024 21:56:04 +0000 Manifest next update: Fri 29 Nov 2024 21:56:04 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: FMJEkx4qv4M7/xyvL5aH2I60HJfiqHQ5pLghhwfOAkI=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: lEAUzX5yromH9S256XNG7qzmeT220WB95GeuIqYuZYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Validity Not Before: Nov 22 21:56:04 2024 GMT Not After : Nov 29 21:56:04 2024 GMT Subject: CN=6740fdf4-37ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1a:e5:c1:e1:cb:a4:fe:dd:3d:92:cf:dc:73: 3b:0b:9a:f4:55:e5:e9:fd:67:cd:b4:e9:06:2d:4b: cd:f6:b7:15:fe:f6:17:18:56:aa:e0:d4:97:36:34: 54:38:6c:40:83:1f:56:6f:4e:b5:f0:f7:bd:e5:53: 43:ab:0b:dc:e2:a2:4a:15:6a:ee:8f:1a:d7:62:81: d4:18:27:12:c5:55:70:af:9f:5d:d1:3e:7b:91:d9: b5:e1:57:0f:07:a2:fb:aa:18:23:da:d3:48:29:f4: 7c:a5:dc:46:54:ae:c3:6e:88:e4:14:47:80:ba:df: 60:7c:e9:b7:c5:b7:4c:cd:4a:22:46:d5:9f:78:fa: 86:42:a1:63:bd:7e:5c:8f:74:21:64:56:54:14:f3: c8:d1:d8:57:57:af:2f:c5:4e:8f:05:81:9b:a0:6c: 45:71:1c:00:04:e4:62:d7:be:ef:70:03:3c:c4:c4: 5b:33:8a:2d:a6:18:da:cc:36:b5:9b:02:33:99:f6: 24:7e:fc:db:3c:4c:35:07:b3:86:ac:b1:25:ec:56: 8b:0b:f9:29:dd:0a:18:64:3f:2d:8a:95:ce:3e:13: c7:58:d1:07:a9:68:58:25:89:26:37:6f:ab:6d:f1: 3d:50:d8:cc:3c:9a:48:41:62:cd:05:cc:a9:e8:22: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FE:36:77:03:54:C6:ED:90:15:28:E0:AB:A4:01:EE:1E:5C:27:6D X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:db:fd:9e:d5:01:f9:59:34:da:c9:17:5d:97:bd:4a:4e: e3:74:ad:a8:66:7f:49:75:c9:e6:63:4f:2c:47:bf:19:0d:bc: 06:98:eb:19:62:58:fd:5f:7e:88:2b:f5:ef:91:21:3e:c3:0b: ef:9a:a5:eb:28:cd:e7:dc:5e:99:69:58:13:5f:6b:86:03:c2: 91:aa:de:42:ed:cf:9b:2d:a4:dc:a6:7f:ad:be:a5:6f:ae:33: 63:c2:15:10:ba:5d:05:2b:4a:6d:29:bf:86:78:e8:da:48:1a: 0f:66:ae:70:e4:17:6c:48:20:7e:6f:f9:c8:34:74:18:dd:6d: f4:76:e9:cc:b0:63:8d:2b:6e:77:1f:e4:ca:e9:b9:d4:cf:61: 52:d5:91:2b:ce:63:ee:83:ca:7a:3d:aa:2b:43:9f:5f:f0:b2: fa:25:d3:ec:2b:16:a6:d8:e2:c3:6f:c6:fd:9c:4d:9b:5e:6b: 43:7d:9e:7a:fd:d6:1b:df:4e:2d:46:bc:dc:47:ee:38:75:a1: 60:5c:43:5b:f2:92:df:9b:50:c5:69:1a:36:ca:0d:dd:56:e7: d1:64:ab:d1:12:a5:d1:31:d5:25:f4:10:39:e7:44:14:f9:5e: ed:1c:f7:31:a4:22:92:9f:73:20:e6:73:2c:af:01:6f:07:c5: b2:26:d9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjQxMTIyMjE1NjA0WhcNMjQxMTI5MjE1NjA0WjAYMRYwFAYD VQQDEw02NzQwZmRmNC0zN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RrlweHLpP7dPZLP3HM7C5r0VeXp/WfNtOkGLUvN9rcV/vYXGFaq4NSXNjRU OGxAgx9Wb0618Pe95VNDqwvc4qJKFWrujxrXYoHUGCcSxVVwr59d0T57kdm14VcP B6L7qhgj2tNIKfR8pdxGVK7DbojkFEeAut9gfOm3xbdMzUoiRtWfePqGQqFjvX5c j3QhZFZUFPPI0dhXV68vxU6PBYGboGxFcRwABORi177vcAM8xMRbM4otphjazDa1 mwIzmfYkfvzbPEw1B7OGrLEl7FaLC/kp3QoYZD8tipXOPhPHWNEHqWhYJYkmN2+r bfE9UNjMPJpIQWLNBcyp6CISowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH+NncD VMbtkBUo4KukAe4eXCdtMB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzg9v9ntUB+Vk02skXXZe9Sk7jdK2oZn9JdcnmY08sR78ZDbwGmOsZ Ylj9X36IK/XvkSE+wwvvmqXrKM3n3F6ZaVgTX2uGA8KRqt5C7c+bLaTcpn+tvqVv rjNjwhUQul0FK0ptKb+GeOjaSBoPZq5w5BdsSCB+b/nINHQY3W30dunMsGONK253 H+TK6bnUz2FS1ZErzmPug8p6PaorQ59f8LL6JdPsKxam2OLDb8b9nE2bXmtDfZ56 /dYb304tRrzcR+44daFgXENb8pLfm1DFaRo2yg3dVufRZKvREqXRMdUl9BA550QU +V7tHPcxpCKSn3Mg5nMsrwFvB8WyJtmg -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org