$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: r3POUdzmxf1VjV1AB/sEZOLDsuJbmBcdu9xOJruiHhI= Subject key identifier: AB:7A:51:DF:71:2A:B2:0D:13:F3:66:35:A8:44:EE:FF:94:9F:8A:08 Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 18 Signing time: Sat 23 Nov 2024 05:58:29 +0000 Manifest this update: Sat 23 Nov 2024 05:58:28 +0000 Manifest next update: Sat 30 Nov 2024 05:58:28 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: IsWWebzb33plyMW3yOEDGvxgqpOt0vIRoG7CaV6Wi4o=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: /wOg9gtrN+8DrYFTeiVl4tpzdcNIlWbG4hivynbKbEQ=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: +LngdED0RAHILC2RDWjFI1sNZlY1zIYnvjgwhn2o9cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Nov 23 05:58:28 2024 GMT Not After : Nov 30 05:58:28 2024 GMT Subject: CN=67416f04-7c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:ee:f2:50:a5:31:2b:c7:e2:29:72:4f:96: 86:9b:89:16:e7:57:45:c2:ba:ef:6c:d6:4d:eb:d7: 91:5a:1c:55:0c:f7:bb:26:f5:dd:d2:6f:89:26:e1: ae:f3:14:5a:a5:a9:0e:bc:93:65:cb:4f:42:3f:67: 13:b6:1e:d6:a2:21:fa:6c:28:8b:31:ab:1a:63:f4: 51:df:2e:d6:ac:7b:89:b6:8c:88:9f:b8:81:c6:1a: 61:13:f5:ec:f4:7d:f7:26:96:19:db:74:9e:1d:a6: 68:09:fc:6e:2f:ce:e9:a9:57:60:9b:42:27:85:22: d1:53:e5:c2:53:ea:a7:e1:13:55:05:95:5f:24:cb: 5f:c2:9f:2a:2b:0f:b6:34:5e:fa:82:05:13:5d:7a: 2e:83:a8:f0:f6:f4:33:ee:b4:3e:f8:3d:e2:42:30: 47:7a:c1:c9:60:10:0f:2a:97:24:c1:88:b1:8a:da: d5:65:11:92:0a:3f:ff:47:6d:dc:67:0f:32:a2:be: ad:9e:e3:75:89:fd:d5:56:50:d4:8b:3e:6e:a0:ee: 66:39:b0:36:fa:56:dd:30:94:8b:37:0d:94:0c:d3: a8:a9:85:19:ea:fa:83:ea:c2:26:76:8b:49:a1:b4: b8:ff:29:91:88:82:83:4f:88:de:d7:56:13:4f:be: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:51:DF:71:2A:B2:0D:13:F3:66:35:A8:44:EE:FF:94:9F:8A:08 X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a8:29:2e:1f:39:a4:b8:58:d1:f8:a9:fc:dc:08:93:fc:1c: 2e:90:ef:b4:b0:8d:8b:49:ba:da:63:8f:25:ce:50:53:ed:9e: b0:72:b3:fb:70:e2:84:e5:f5:9b:9a:d6:4e:8d:1f:35:e4:3d: d7:d5:fa:5e:d7:db:b0:c5:f7:0a:01:93:d1:ca:a2:b4:ed:16: 8f:a7:bf:5c:26:ae:65:b0:aa:a2:79:68:e2:ae:bb:37:bc:8b: 9a:52:7f:58:5e:bb:29:28:7e:f9:f7:b4:e6:02:62:0b:3e:a8: fc:c4:20:4e:f8:5a:c5:c4:e7:87:dd:92:00:1e:1a:eb:c1:73: ee:61:c3:0d:fc:4e:3b:19:1d:66:5d:54:73:2f:ea:f6:9c:8e: c9:f8:e8:9d:e6:c9:b2:1c:16:a1:e0:9d:5a:51:83:fa:15:b7: 05:e6:3c:9c:83:8d:ba:e4:89:f3:bd:53:91:28:4c:07:41:56: 9a:3b:5e:67:18:a7:05:09:8a:72:d7:c0:d5:4a:52:ed:59:5f: 0f:7b:9a:20:fa:49:33:42:f3:57:ce:7a:9a:46:00:a7:58:98: a2:d4:54:b8:66:c9:10:ca:77:13:96:fd:5d:24:b8:21:88:5d: 40:76:aa:52:32:60:48:ac:08:ff:55:34:55:c3:6b:9c:8d:0d: 4b:b5:b0:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDc3ODExMC8GA1UEBRMoRERDNURCMzgxRkYxRUNDQTVCOTVBMjg1MTQ3OTJEQ0RC QTQ5MTgyQjAeFw0yNDExMjMwNTU4MjhaFw0yNDExMzAwNTU4MjhaMBgxFjAUBgNV BAMTDTY3NDE2ZjA0LTdjNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbBe7yUKUxK8fiKXJPloabiRbnV0XCuu9s1k3r15FaHFUM97sm9d3Sb4km4a7z FFqlqQ68k2XLT0I/ZxO2HtaiIfpsKIsxqxpj9FHfLtase4m2jIifuIHGGmET9ez0 ffcmlhnbdJ4dpmgJ/G4vzumpV2CbQieFItFT5cJT6qfhE1UFlV8ky1/CnyorD7Y0 XvqCBRNdei6DqPD29DPutD74PeJCMEd6wclgEA8qlyTBiLGK2tVlEZIKP/9Hbdxn DzKivq2e43WJ/dVWUNSLPm6g7mY5sDb6Vt0wlIs3DZQM06iphRnq+oPqwiZ2i0mh tLj/KZGIgoNPiN7XVhNPvjpzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq3pR33Eq sg0T82Y1qETu/5SfiggwHwYDVR0jBBgwFoAU3cXbOB/x7MpblaKFFHktzbpJGCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENzc4LzVCOEQ4NjY4OTBF MjExRUY5NzYxMkE0NkM0RjlBRTAyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2NYYk9CX3g3TXBibGFLRkZIa3R6YnBKR0NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE Nzc4LzVCOEQ4NjY4OTBFMjExRUY5NzYxMkE0NkM0RjlBRTAyLzNjWGJPQl94N01w YmxhS0ZGSGt0emJwSkdDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADioKS4fOaS4WNH4qfzcCJP8HC6Q77SwjYtJutpjjyXOUFPtnrBys/tw 4oTl9Zua1k6NHzXkPdfV+l7X27DF9woBk9HKorTtFo+nv1wmrmWwqqJ5aOKuuze8 i5pSf1heuykofvn3tOYCYgs+qPzEIE74WsXE54fdkgAeGuvBc+5hww38TjsZHWZd VHMv6vacjsn46J3mybIcFqHgnVpRg/oVtwXmPJyDjbrkifO9U5EoTAdBVpo7XmcY pwUJinLXwNVKUu1ZXw97miD6STNC81fOeppGAKdYmKLUVLhmyRDKdxOW/V0kuCGI XUB2qlIyYEisCP9VNFXDa5yNDUu1sIw= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org