$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: qajJtZApJRYZUT3vnFhb+l2y7Cbf6eYBqbn8XbNxSBg= Subject key identifier: 50:2B:A6:D6:E6:18:C5:E7:01:F3:9D:DD:80:EA:C2:66:AC:CB:C6:48 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: 22 Signing time: Wed 23 Oct 2024 06:29:17 +0000 Manifest this update: Wed 23 Oct 2024 06:29:17 +0000 Manifest next update: Wed 30 Oct 2024 06:29:17 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: eceW67qkPb5wRF4eZR4bLB15Y2VFML6RjYZWdAfBpn8=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Oct 23 06:29:17 2024 GMT Not After : Oct 30 06:29:17 2024 GMT Subject: CN=671897bd-0300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:db:86:ee:40:5c:7a:40:4c:b1:68:2f:07: 1b:5d:22:b6:b6:1c:08:6a:3a:01:4c:79:13:44:35: 10:b9:42:c6:ce:df:cd:ee:27:12:ee:e2:e1:17:d5: 98:44:bd:69:66:ef:63:7a:37:39:c0:53:d6:9b:2b: 84:08:ba:ad:9f:41:5b:0c:1e:b1:e3:3e:71:2b:73: 36:50:6c:7b:c5:64:4a:fb:24:18:7e:80:2c:63:09: cd:05:f2:f2:6d:e3:f5:f7:53:79:b6:79:6a:ac:6f: c4:18:bd:4d:0f:56:15:51:4d:86:28:47:32:d0:5f: f3:5c:48:d3:77:d3:5d:82:05:b5:75:28:4c:40:c5: d8:29:7d:4f:b8:45:70:6e:cd:ee:85:ca:ad:97:7b: 54:a2:1e:27:08:d7:60:52:1d:99:79:5f:2a:69:13: 70:24:3b:dd:32:9f:15:c8:1c:a5:db:df:8d:c3:75: c8:3a:30:8e:e1:12:ee:9b:cf:4a:74:48:4a:77:1b: c2:a2:77:d7:ea:1b:0d:12:3c:3f:50:56:5f:91:a3: da:0a:4a:c3:d1:8d:d2:34:19:36:de:cd:5f:a9:8e: bb:1b:e4:91:f4:93:74:c6:e3:cc:bd:9e:c2:c1:cb: e9:3e:d4:cf:aa:4b:f6:a9:2f:37:1c:be:3d:c3:b0: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:A6:D6:E6:18:C5:E7:01:F3:9D:DD:80:EA:C2:66:AC:CB:C6:48 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bf:44:c5:0d:77:0f:01:33:b2:a6:6c:5a:4e:4b:55:7c:3f: c2:19:9c:8b:2e:96:aa:ce:1b:c4:ba:8d:49:3d:67:96:2d:a3: ef:5a:95:c7:77:7d:46:14:5b:be:15:fb:dc:0d:0b:b1:11:86: 03:a3:ec:64:f1:23:77:90:f9:94:58:ce:cd:cb:94:92:34:d5: 3d:91:a2:f2:5c:37:01:f9:57:83:70:3e:46:20:e6:f5:23:89: e2:76:17:a8:57:24:82:98:5d:a7:28:f2:9d:81:b2:72:79:20: 0a:cb:eb:b0:09:d3:b7:24:c1:d5:36:05:36:05:04:a8:20:dd: 35:7e:2e:23:8b:58:d1:c9:3a:87:1a:e8:39:cc:3e:0f:a3:1c: 68:f7:bd:88:de:1e:47:c7:24:b5:95:d5:bb:2c:f0:81:bd:db: 7a:7d:8c:10:4f:fa:a8:47:89:ac:f3:89:19:c2:08:5e:82:c8: f0:12:6a:ef:ca:c7:c9:34:03:f8:db:c0:29:f2:9f:0d:bb:a7: 5e:3e:d4:10:99:84:d8:a6:2e:2b:c8:e5:c3:4d:04:67:3b:01: b7:e8:7b:f6:e9:cb:bd:90:ef:ca:bc:b6:ed:ae:36:34:47:4c: 6f:7e:40:9e:a5:4c:ef:1b:18:43:fa:44:a9:9a:52:72:3f:bb: 3e:68:53:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTNFRDExMC8GA1UEBRMoREYyNEI0RDUxQzY3ODQxREQ2MDBERDJBNjE3ODZCQ0U5 ODg3ODY2NzAeFw0yNDEwMjMwNjI5MTdaFw0yNDEwMzAwNjI5MTdaMBgxFjAUBgNV BAMTDTY3MTg5N2JkLTAzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfDNuG7kBcekBMsWgvBxtdIra2HAhqOgFMeRNENRC5QsbO383uJxLu4uEX1ZhE vWlm72N6NznAU9abK4QIuq2fQVsMHrHjPnErczZQbHvFZEr7JBh+gCxjCc0F8vJt 4/X3U3m2eWqsb8QYvU0PVhVRTYYoRzLQX/NcSNN3012CBbV1KExAxdgpfU+4RXBu ze6Fyq2Xe1SiHicI12BSHZl5XyppE3AkO90ynxXIHKXb343Ddcg6MI7hEu6bz0p0 SEp3G8Kid9fqGw0SPD9QVl+Ro9oKSsPRjdI0GTbezV+pjrsb5JH0k3TG48y9nsLB y+k+1M+qS/apLzccvj3DsBijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUCum1uYY xecB853dgOrCZqzLxkgwHwYDVR0jBBgwFoAU3yS01RxnhB3WAN0qYXhrzpiHhmcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxM0VELzY3N0FBQTNDNUYz NzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGht Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM3lTMDFSeG5oQjNXQU4wcVlYaHJ6cGlIaG1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx M0VELzY3N0FBQTNDNUYzNzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIz V0FOMHFZWGhyenBpSGhtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABC/RMUNdw8BM7KmbFpOS1V8P8IZnIsulqrOG8S6jUk9Z5Yto+9alcd3 fUYUW74V+9wNC7ERhgOj7GTxI3eQ+ZRYzs3LlJI01T2RovJcNwH5V4NwPkYg5vUj ieJ2F6hXJIKYXaco8p2BsnJ5IArL67AJ07ckwdU2BTYFBKgg3TV+LiOLWNHJOoca 6DnMPg+jHGj3vYjeHkfHJLWV1bss8IG923p9jBBP+qhHiazziRnCCF6CyPASau/K x8k0A/jbwCnynw27p14+1BCZhNimLivI5cNNBGc7Abfoe/bpy72Q78q8tu2uNjRH TG9+QJ6lTO8bGEP6RKmaUnI/uz5oU8I= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org