$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: MHcVfCr/iPi7BYUW7e6JUgzo07lhBBrK1DequjuYtzE= Subject key identifier: E3:DB:2A:F6:EF:E1:88:91:E8:F5:B6:3B:A8:9B:3B:D2:4B:C0:FE:0D Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0BAB Signing time: Fri 22 Nov 2024 18:40:31 +0000 Manifest this update: Fri 22 Nov 2024 18:40:30 +0000 Manifest next update: Fri 29 Nov 2024 18:40:30 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: MVimmavz9zoCbEf4r3GHiFief+Jucy6p9KE0SAbgT6M=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Nov 22 18:40:30 2024 GMT Not After : Nov 29 18:40:30 2024 GMT Subject: CN=6740d01f-6739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:ad:9c:51:ba:ea:06:db:d3:a2:46:0f:86: 9d:ed:1e:76:df:ac:32:26:ca:9a:03:2a:29:76:dd: 7e:70:4a:4c:59:68:10:ac:81:25:04:fa:c0:6c:3e: ba:a1:ab:22:01:66:17:69:04:c5:c9:1c:73:07:bb: f4:1e:24:e6:0b:b2:98:01:23:2c:13:cc:6a:10:5b: 88:55:4f:f2:13:6a:c2:cd:8e:26:41:42:c7:01:09: cb:5c:68:40:97:de:2e:40:d6:50:20:3b:d4:38:a0: b6:0b:ff:8b:96:17:8d:e7:f1:03:06:5e:be:52:26: f8:2c:e0:f6:ab:6f:65:1b:18:7f:5a:a2:5a:dd:df: 70:cf:2a:ba:d7:89:13:9e:6c:fc:c4:81:97:77:8e: 55:50:2b:1c:68:b7:d1:b5:68:f1:03:7b:9e:09:8c: 2d:53:58:f3:94:90:a2:39:2b:5a:9f:74:73:b2:0b: 34:59:08:ec:5f:cb:b7:38:8d:e8:20:53:d7:74:43: a1:47:c1:86:67:d4:b0:9e:e8:bb:aa:69:34:99:ae: 89:44:f7:7f:d1:17:62:9d:14:14:dd:5e:ce:01:74: 5a:b1:c2:c5:60:d7:34:b4:58:73:3b:af:96:8d:b8: b7:a9:9d:22:de:13:81:56:99:dc:83:d1:36:62:06: a3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:2A:F6:EF:E1:88:91:E8:F5:B6:3B:A8:9B:3B:D2:4B:C0:FE:0D X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3e:f5:99:89:00:a1:33:9b:da:77:d3:8d:9d:de:d2:55:f2: 70:2e:0d:6f:9b:3a:8d:45:2e:f8:5f:60:0a:fa:6b:89:73:19: a4:62:28:16:e8:42:de:a6:49:e5:d0:e5:c5:7b:e6:95:11:51: f6:69:16:8a:98:31:24:10:b0:9b:ef:7e:8d:b1:e1:34:93:f9: a2:cf:64:15:36:df:39:21:2e:90:dc:bb:7b:27:a0:d9:dd:54: bc:66:a1:03:28:1e:81:ef:d7:cb:62:37:81:06:37:fd:7f:be: 9e:40:75:24:82:fa:d9:2e:1e:b7:5f:2a:c8:18:5f:72:78:9b: 53:82:2d:c8:1c:07:b0:14:54:9d:01:82:fc:17:ca:31:6d:59: 1d:05:b1:9b:a4:ac:60:c0:4f:6d:5a:3d:ce:5c:3f:b1:e8:5f: 96:0e:cb:a8:68:bd:8d:63:d6:37:a8:f7:22:55:47:41:41:8c: 21:47:cc:47:64:43:cb:a0:dc:0a:62:8d:4d:fc:f6:01:14:a5: 9c:48:6f:f3:e7:5f:7e:50:e3:f5:d2:38:d3:48:9a:41:ce:a2: 9e:f8:37:8e:e4:c4:84:28:46:27:8e:5a:59:08:c0:01:35:c4: 28:01:03:47:f5:62:fd:e9:3d:6a:32:8b:24:63:18:e9:93:77: 50:c5:94:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjQxMTIyMTg0MDMwWhcNMjQxMTI5MTg0MDMwWjAYMRYwFAYD VQQDEw02NzQwZDAxZi02NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4WtnFG66gbb06JGD4ad7R5236wyJsqaAyopdt1+cEpMWWgQrIElBPrAbD66 oasiAWYXaQTFyRxzB7v0HiTmC7KYASMsE8xqEFuIVU/yE2rCzY4mQULHAQnLXGhA l94uQNZQIDvUOKC2C/+LlheN5/EDBl6+Uib4LOD2q29lGxh/WqJa3d9wzyq614kT nmz8xIGXd45VUCscaLfRtWjxA3ueCYwtU1jzlJCiOStan3Rzsgs0WQjsX8u3OI3o IFPXdEOhR8GGZ9Swnui7qmk0ma6JRPd/0RdinRQU3V7OAXRascLFYNc0tFhzO6+W jbi3qZ0i3hOBVpncg9E2YgajQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPbKvbv 4YiR6PW2O6ibO9JLwP4NMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNPvWZiQChM5vad9ONnd7SVfJwLg1vmzqNRS74X2AK+muJcxmkYigW 6ELepknl0OXFe+aVEVH2aRaKmDEkELCb736NseE0k/miz2QVNt85IS6Q3Lt7J6DZ 3VS8ZqEDKB6B79fLYjeBBjf9f76eQHUkgvrZLh63XyrIGF9yeJtTgi3IHAewFFSd AYL8F8oxbVkdBbGbpKxgwE9tWj3OXD+x6F+WDsuoaL2NY9Y3qPciVUdBQYwhR8xH ZEPLoNwKYo1N/PYBFKWcSG/z519+UOP10jjTSJpBzqKe+DeO5MSEKEYnjlpZCMAB NcQoAQNH9WL96T1qMoskYxjpk3dQxZTO -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org