$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json) Hash identifier: 7zQFFw9JhzONGApWsM0Ybp7+s5zYzAEr88EvYqwf93o= Subject key identifier: A0:36:4E:A1:AF:06:03:C7:C1:41:04:11:26:A1:BB:28:0C:04:8C:50 Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft Manifest number: 098E Signing time: Fri 22 Nov 2024 19:50:19 +0000 Manifest this update: Fri 22 Nov 2024 19:50:19 +0000 Manifest next update: Fri 29 Nov 2024 19:50:19 +0000 Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: gtX1RQeogKRdWR8cbjutzv7zNmjPa8cY76PkwkmA5Bw=) 2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: StcHXD7OSDwjaAiPvm4lKhdtSQLcm5zEPAFncff2hIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Validity Not Before: Nov 22 19:50:19 2024 GMT Not After : Nov 29 19:50:19 2024 GMT Subject: CN=6740e07b-684e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:98:15:49:2c:92:3f:70:d9:0d:d0:6a:d4: b0:4a:29:b4:39:3b:58:7e:e5:63:a2:5d:86:5d:a6: 4d:84:7e:a8:60:76:8d:38:7c:81:96:8f:2b:15:62: 2f:b6:f7:97:3a:9c:14:8b:2a:09:0d:b9:9c:2f:61: e4:4a:85:c3:ce:29:ba:e1:5f:3a:46:de:84:69:78: e1:33:f6:e9:2a:02:5d:51:6d:81:d4:6d:1b:df:4a: fd:ab:b5:9d:c2:a9:9c:69:e3:b1:ed:ed:60:fc:da: e9:a7:3e:98:55:a3:82:01:ce:fa:9c:d8:43:7f:39: 44:b0:cc:dd:fd:b4:d3:e7:16:cc:00:17:eb:05:55: 15:a2:e2:39:5f:81:c3:96:09:30:cf:6a:d1:03:54: e1:4f:5f:2a:ab:90:d2:0b:b1:26:46:16:9c:2f:dd: da:32:7f:10:34:52:7d:66:b8:a0:ce:dd:03:47:17: ad:cd:29:02:bb:1e:78:a2:16:df:f6:9f:a7:be:e0: ab:0a:b8:74:ea:06:37:c8:8d:91:80:62:c4:0f:47: 4c:31:84:38:99:5e:29:d5:41:fa:09:4e:86:6c:ac: 9d:42:7a:5b:5c:3c:7d:8e:43:7e:23:78:86:de:7e: 25:15:d8:82:d5:26:24:80:7a:18:c3:fb:18:26:d5: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:36:4E:A1:AF:06:03:C7:C1:41:04:11:26:A1:BB:28:0C:04:8C:50 X509v3 Authority Key Identifier: keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a9:09:4c:30:ff:61:77:72:82:04:f7:b9:1c:89:27:e8:b9: c4:95:ef:b7:06:20:9e:a6:4d:f1:0d:bd:82:34:78:95:71:76: fa:00:db:24:da:63:af:e8:57:6c:c5:f7:f6:af:50:81:1a:46: 8f:ba:11:d1:c6:32:ee:bc:18:84:36:3d:f2:53:aa:4b:2d:70: 5e:1b:60:12:e0:78:54:f8:7e:09:40:9c:2f:39:c5:24:d0:eb: 18:06:01:89:6c:6d:55:03:8e:55:7b:3c:dd:11:64:25:71:65: b3:e3:b8:86:58:73:f7:a8:ea:45:9c:61:3e:bf:ea:e6:63:e5: 4c:87:a4:76:67:08:5b:ef:9a:54:9d:43:46:6e:44:1d:1f:a8: e8:fe:ba:6a:91:0a:10:0f:c0:12:28:3f:cd:d8:e6:c5:db:d2: 7b:f1:8b:ce:35:bf:97:a9:c8:dc:e6:91:24:cd:62:cf:91:c5: fa:88:a5:37:6d:03:de:14:4e:7f:bb:29:ff:32:d4:7c:a3:56: ea:cf:59:55:85:22:3c:d1:d8:a1:97:df:80:df:d5:e2:ea:c8: a5:c6:2a:0d:e1:27:28:b5:3a:13:9a:73:04:13:a8:83:28:a2: 3f:5e:98:47:5f:66:da:96:9a:67:6b:dd:29:68:4a:ce:53:61: bc:29:b7:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIwMDc2QjdCNTVG REZBMDQ3NDAwHhcNMjQxMTIyMTk1MDE5WhcNMjQxMTI5MTk1MDE5WjAYMRYwFAYD VQQDEw02NzQwZTA3Yi02ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSiYFUkskj9w2Q3QatSwSim0OTtYfuVjol2GXaZNhH6oYHaNOHyBlo8rFWIv tveXOpwUiyoJDbmcL2HkSoXDzim64V86Rt6EaXjhM/bpKgJdUW2B1G0b30r9q7Wd wqmcaeOx7e1g/Nrppz6YVaOCAc76nNhDfzlEsMzd/bTT5xbMABfrBVUVouI5X4HD lgkwz2rRA1ThT18qq5DSC7EmRhacL93aMn8QNFJ9Zrigzt0DRxetzSkCux54ohbf 9p+nvuCrCrh06gY3yI2RgGLED0dMMYQ4mV4p1UH6CU6GbKydQnpbXDx9jkN+I3iG 3n4lFdiC1SYkgHoYw/sYJtWr6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKA2TqGv BgPHwUEEESahuygMBIxQMB8GA1UdIwQYMBaAFPq94H0sVY29zzwyAHa3tV/foEdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzRS9BM0MwN0I4Njc5 ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4VmpiM1BQRElBZHJlMVg5LWdS MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yM2dmU3hWamIzUFBESUFkcmUxWDktZ1IwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4Vmpi M1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6qQlMMP9hd3KCBPe5HIkn6LnEle+3BiCepk3xDb2CNHiVcXb6ANsk 2mOv6Fdsxff2r1CBGkaPuhHRxjLuvBiENj3yU6pLLXBeG2AS4HhU+H4JQJwvOcUk 0OsYBgGJbG1VA45VezzdEWQlcWWz47iGWHP3qOpFnGE+v+rmY+VMh6R2Zwhb75pU nUNGbkQdH6jo/rpqkQoQD8ASKD/N2ObF29J78YvONb+Xqcjc5pEkzWLPkcX6iKU3 bQPeFE5/uyn/MtR8o1bqz1lVhSI80dihl9+A39Xi6silxioN4ScotToTmnMEE6iD KKI/XphHX2balppna90paErOU2G8Kbeb -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org