$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: fmwX4IwTDZISolja4Wucf76jo9rDv/xO01RmmQfUklQ= Subject key identifier: B1:4A:00:E2:00:BB:EE:77:52:9C:8E:BA:19:66:47:01:B1:3C:F6:80 Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2F11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2EE6 Signing time: Fri 22 Nov 2024 15:30:27 +0000 Manifest this update: Fri 22 Nov 2024 15:30:27 +0000 Manifest next update: Fri 29 Nov 2024 15:30:27 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: q9Fr9Jl/0mXYsOllV38vLnXKTUZ1UGCfiWItpJEAlco=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zMgG3GuNf+zDyezkOM45N+LyqO/kzryLIYKrCSpbqDo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: vhNYX3z+Zi/YDPj0M1GT/QNGQGsFRe3lw3Q5mL3YNtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12049 (0x2f11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Nov 22 15:30:27 2024 GMT Not After : Nov 29 15:30:27 2024 GMT Subject: CN=6740a393-c333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:ea:c3:ff:f4:52:d9:0f:5a:b9:5c:a9:0d: 2c:49:30:7a:64:be:42:8e:12:01:fa:c0:23:8b:cd: bc:3e:e3:85:7f:fa:94:a4:8f:ae:0e:e8:93:c8:03: d2:9b:4b:cb:2b:91:df:16:fb:bc:8a:5c:47:49:92: 78:71:5a:26:44:aa:be:d2:d1:4d:4f:c9:9b:cf:d9: 62:a3:3a:1e:2a:0f:44:cf:04:04:fe:ac:1c:cb:bb: 92:1e:43:53:64:9c:d5:99:6c:db:83:9b:cf:90:58: 01:16:f5:49:16:2a:ff:ae:dc:1c:c4:26:9d:62:13: 9c:3f:f0:4b:9a:c1:27:57:e2:be:2e:f1:83:58:94: f7:00:b5:5d:52:bd:0d:db:22:15:3c:e9:7e:56:23: b9:6c:22:62:51:10:d6:c9:84:4c:08:02:e7:41:f5: 32:c8:35:3d:ad:4c:5e:d7:ab:24:97:e1:da:7a:64: 30:61:3e:90:fd:a1:7f:4a:c1:01:0c:a9:bc:ec:06: d9:4f:98:e6:c4:b6:2b:b0:34:c6:76:41:78:41:12: 74:ed:4f:d6:40:7d:4d:2c:d3:86:31:d2:97:1d:20: 56:f5:0d:61:db:55:94:98:76:45:34:5f:b1:26:5b: 4f:79:4c:6c:e2:d6:1a:2d:1c:84:9e:06:35:59:d8: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4A:00:E2:00:BB:EE:77:52:9C:8E:BA:19:66:47:01:B1:3C:F6:80 X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bb:e1:dc:88:5c:89:cb:fc:7f:cf:2c:33:2f:c1:56:76:4f: 9a:c1:a9:88:6a:c6:ba:81:23:6e:01:33:6e:0c:48:90:9d:e6: ee:b6:4c:9e:13:3a:02:35:a8:cf:fb:75:5a:c2:0d:f8:af:d2: 17:1c:dd:09:e2:b9:22:1d:22:85:49:dd:94:bd:52:75:be:3b: 49:9f:70:de:34:8e:28:51:f1:e8:9b:5a:ef:e6:e3:98:82:9d: 42:cb:4a:aa:90:db:47:8b:f1:05:72:09:7d:51:7e:9e:05:09: a0:5e:3a:ae:31:be:83:e6:cc:90:84:31:01:d8:d5:7c:a6:31: d2:32:4e:d2:b2:4b:7f:bd:bf:f0:d5:8b:bd:5b:8f:c5:64:86: 10:ca:de:05:a8:e5:62:a0:de:81:28:4e:dd:1f:ad:13:48:12: 30:0b:41:3a:64:16:73:8e:f9:7b:7d:f1:81:24:c1:66:d9:67: 18:30:09:1d:2b:cf:56:02:f8:65:d8:1f:a5:49:ce:77:6c:54: 69:5d:db:e1:8c:86:94:06:f4:b7:2c:7a:82:a2:91:4c:7b:fa: 74:4e:22:a1:87:c6:ed:59:3c:d7:fe:78:f3:3e:f1:1a:2d:b1: 82:18:7e:ac:8c:77:b3:60:9d:9a:56:5e:5d:c6:ca:97:3e:da: 54:d3:47:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjQxMTIyMTUzMDI3WhcNMjQxMTI5MTUzMDI3WjAYMRYwFAYD VQQDEw02NzQwYTM5My1jMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qnqw//0UtkPWrlcqQ0sSTB6ZL5CjhIB+sAji828PuOFf/qUpI+uDuiTyAPS m0vLK5HfFvu8ilxHSZJ4cVomRKq+0tFNT8mbz9liozoeKg9EzwQE/qwcy7uSHkNT ZJzVmWzbg5vPkFgBFvVJFir/rtwcxCadYhOcP/BLmsEnV+K+LvGDWJT3ALVdUr0N 2yIVPOl+ViO5bCJiURDWyYRMCALnQfUyyDU9rUxe16skl+HaemQwYT6Q/aF/SsEB DKm87AbZT5jmxLYrsDTGdkF4QRJ07U/WQH1NLNOGMdKXHSBW9Q1h21WUmHZFNF+x JltPeUxs4tYaLRyEngY1Wdgn0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFKAOIA u+53UpyOuhlmRwGxPPaAMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7u+HciFyJy/x/zywzL8FWdk+awamIasa6gSNuATNuDEiQnebutkye EzoCNajP+3Vawg34r9IXHN0J4rkiHSKFSd2UvVJ1vjtJn3DeNI4oUfHom1rv5uOY gp1Cy0qqkNtHi/EFcgl9UX6eBQmgXjquMb6D5syQhDEB2NV8pjHSMk7Sskt/vb/w 1Yu9W4/FZIYQyt4FqOVioN6BKE7dH60TSBIwC0E6ZBZzjvl7ffGBJMFm2WcYMAkd K89WAvhl2B+lSc53bFRpXdvhjIaUBvS3LHqCopFMe/p0TiKhh8btWTzX/njzPvEa LbGCGH6sjHezYJ2aVl5dxsqXPtpU00ef -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org