$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: jFrjYuHVWaupCNr22JnFrnwkNGhnBvupqMlUK8EAhD4= Subject key identifier: FB:17:39:5D:41:CC:41:7E:B9:FF:BD:89:C6:37:A2:33:75:01:CE:40 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: AD Signing time: Sat 23 Nov 2024 04:11:22 +0000 Manifest this update: Sat 23 Nov 2024 04:11:21 +0000 Manifest next update: Sat 30 Nov 2024 04:11:21 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: pcB9zbzNbqoeSQIDgDI5Dd5Dwi7DNs1073U3NzW6Fpw=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Nov 23 04:11:21 2024 GMT Not After : Nov 30 04:11:21 2024 GMT Subject: CN=674155e9-983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:ed:fa:bd:53:a6:5e:af:84:e9:9b:3a:fc: 06:32:d3:b0:fd:be:67:4a:e8:91:71:da:f0:5d:50: 2d:13:3c:ba:21:78:52:60:70:f4:42:50:b6:a0:be: b9:c6:91:a3:48:7f:83:a0:89:ec:9a:ef:e6:ad:36: ff:bc:52:d6:49:13:8d:5c:4a:c8:a5:b4:15:fb:32: d4:50:22:dd:82:28:67:cd:ea:4f:ea:69:62:fc:bd: 05:cb:cf:36:fb:80:5f:c5:c7:23:a8:a9:71:b0:e4: 12:07:e4:58:01:6d:22:82:bf:55:4f:7a:74:6a:b6: 82:e0:5d:6c:45:ef:1c:53:87:32:45:bc:2b:01:0d: 0b:23:ba:0f:96:2a:3d:5f:57:ca:73:c1:21:a0:52: 91:0e:bc:d7:92:e3:93:56:da:e4:46:89:35:0e:37: aa:52:79:6e:97:38:1e:a4:4a:07:ac:3f:ca:fc:4a: a1:48:eb:a0:3a:fd:35:25:72:e3:a9:ad:5a:c8:dd: e2:f8:ab:4e:a0:33:7f:74:ff:61:da:7e:a1:e7:b8: 6a:f8:6a:8d:72:db:f5:2d:fe:6c:28:c4:01:fd:d6: b1:4e:b6:23:8b:70:e8:f8:ba:26:90:5f:41:63:33: 36:83:be:53:01:bc:91:64:8d:b1:6d:61:db:74:dc: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:17:39:5D:41:CC:41:7E:B9:FF:BD:89:C6:37:A2:33:75:01:CE:40 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ac:ab:79:ab:0d:94:f1:ce:0d:7c:79:61:9b:94:3d:ef:3a: f0:27:f6:66:3a:64:9b:75:5a:c6:fe:d7:6c:85:14:d5:68:6a: 55:34:cd:ea:a9:58:66:b0:57:a7:5c:91:02:0b:93:97:b1:2f: 47:92:4e:15:b5:3e:04:d1:a9:77:be:58:b4:e6:69:0b:d3:a2: ea:b2:bb:4b:57:70:3e:8c:ba:dc:9d:cc:a1:f9:ee:bb:b7:8a: aa:d9:34:87:62:3e:68:05:17:0a:7f:5c:e1:1c:e6:1e:fb:34: ee:9a:e8:8b:a9:54:cc:fb:a8:3e:da:f6:07:01:96:ba:ec:e8: 0b:4f:0d:ec:f7:ac:00:9e:9e:7e:25:2b:f0:43:8c:77:4c:a4: 23:87:b8:77:b6:32:85:03:05:bd:da:7c:ec:65:e6:fd:ce:ed: 63:52:5f:e0:54:89:df:3b:38:c1:d7:05:51:59:d6:85:81:50: d9:9a:c3:a9:f0:7a:b2:bd:a1:a8:69:a2:9f:cc:84:cc:20:56: 92:56:85:20:34:b2:53:5c:54:1a:d9:82:b9:c6:7c:e3:68:01: 14:02:16:64:8e:68:9a:f8:19:34:14:ce:aa:8c:22:dc:ac:67: 90:ce:ee:c5:35:b3:c3:f4:e0:d5:79:3e:73:2a:aa:e9:58:96: 59:67:6e:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjQxMTIzMDQxMTIxWhcNMjQxMTMwMDQxMTIxWjAYMRYwFAYD VQQDEw02NzQxNTVlOS05ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8Ht+r1Tpl6vhOmbOvwGMtOw/b5nSuiRcdrwXVAtEzy6IXhSYHD0QlC2oL65 xpGjSH+DoInsmu/mrTb/vFLWSRONXErIpbQV+zLUUCLdgihnzepP6mli/L0Fy882 +4BfxccjqKlxsOQSB+RYAW0igr9VT3p0araC4F1sRe8cU4cyRbwrAQ0LI7oPlio9 X1fKc8EhoFKRDrzXkuOTVtrkRok1DjeqUnlulzgepEoHrD/K/EqhSOugOv01JXLj qa1ayN3i+KtOoDN/dP9h2n6h57hq+GqNctv1Lf5sKMQB/daxTrYji3Do+LomkF9B YzM2g75TAbyRZI2xbWHbdNzO2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsXOV1B zEF+uf+9icY3ojN1Ac5AMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAprKt5qw2U8c4NfHlhm5Q97zrwJ/ZmOmSbdVrG/tdshRTVaGpVNM3q qVhmsFenXJECC5OXsS9Hkk4VtT4E0al3vli05mkL06LqsrtLV3A+jLrcncyh+e67 t4qq2TSHYj5oBRcKf1zhHOYe+zTumuiLqVTM+6g+2vYHAZa67OgLTw3s96wAnp5+ JSvwQ4x3TKQjh7h3tjKFAwW92nzsZeb9zu1jUl/gVInfOzjB1wVRWdaFgVDZmsOp 8HqyvaGoaaKfzITMIFaSVoUgNLJTXFQa2YK5xnzjaAEUAhZkjmia+Bk0FM6qjCLc rGeQzu7FNbPD9ODVeT5zKqrpWJZZZ27N -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org