$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: yF7nzFK5SlZre8OBgowwoC3Vx6hNoGrTwoF8PW8nKAI= Subject key identifier: 90:EB:2F:E0:54:26:75:E5:52:7D:ED:1E:8E:AE:33:F1:5A:59:95:FB Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: A3 Signing time: Thu 21 Nov 2024 04:25:54 +0000 Manifest this update: Thu 21 Nov 2024 04:25:54 +0000 Manifest next update: Thu 28 Nov 2024 04:25:54 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: aPPjb70pS3CMNL2+nODIFmpMZgFoCryZg13pe+wpkTc=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: FaOon3incGL44fXWsUh5gm5uuJKLqWRTOR+SCwv9JuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Nov 21 04:25:54 2024 GMT Not After : Nov 28 04:25:54 2024 GMT Subject: CN=673eb652-0681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:99:a1:56:d2:db:cf:40:ea:83:52:76:c0: 8c:48:f3:37:df:7f:ac:aa:42:a6:c2:f6:6a:4f:fe: bf:ce:75:86:0d:65:b1:a7:b1:83:ce:49:36:bd:0e: 56:fa:76:a7:ad:56:c5:cf:73:da:c4:fc:f3:1e:18: d5:b8:f9:c6:8f:b2:65:2b:27:75:2f:22:5f:12:28: 59:78:98:6d:9a:e0:69:44:3e:76:ee:e0:45:f9:6b: 49:b4:ae:75:09:f8:4f:27:78:91:34:8e:eb:99:3b: 16:84:d8:8a:14:70:f5:5e:f5:68:55:98:79:d4:94: 2d:4f:06:b5:f4:4c:a3:a1:6c:a4:17:5a:86:d6:7d: eb:33:29:1a:7a:10:4a:e9:2c:42:e0:ef:68:0c:1f: 2d:3f:da:99:f3:70:79:e0:64:c2:52:3b:d9:b6:0d: 45:cd:88:1f:1b:5e:6f:55:46:fd:4f:45:89:7d:eb: c1:30:36:77:44:64:e0:ee:f2:dd:94:80:fa:d7:94: 98:bd:11:cc:cf:63:86:fb:6e:0d:08:87:32:58:02: 17:b3:76:69:45:b3:b7:21:7a:5b:dc:f6:25:95:1c: 9d:5f:71:75:8c:ec:50:b1:d5:e6:f0:a3:de:cc:03: ce:0c:48:9e:57:4d:6c:ee:55:35:6d:1c:af:3e:30: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EB:2F:E0:54:26:75:E5:52:7D:ED:1E:8E:AE:33:F1:5A:59:95:FB X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:bf:24:03:8c:f5:77:d7:d1:c4:8c:da:0d:eb:a9:d2:71:2b: e2:25:58:7b:74:8a:7e:50:3d:fe:39:f7:8a:b6:6d:f1:3b:02: 3b:f2:a0:28:0e:8f:da:2f:f3:49:17:5a:47:0b:ef:20:63:90: aa:43:db:9d:1c:ff:d7:8a:3f:c9:63:2e:df:62:82:c9:8c:19: 1d:fe:6f:33:c0:39:33:f3:b7:1d:e3:40:67:ab:5a:10:47:00: 18:71:53:1f:82:54:c8:e8:f5:47:82:b5:64:a0:48:ba:da:f6: db:d9:b5:6d:8f:a3:c2:51:91:d7:8c:47:fc:86:47:9a:ba:8a: 21:f4:3c:0b:a6:d6:3e:90:44:d1:a4:af:fc:24:7a:07:2b:3f: 9b:37:d8:eb:bc:db:cf:93:ad:56:43:f0:02:5f:4e:40:83:fd: 40:06:60:12:69:30:92:a6:21:1f:64:39:4c:f1:1f:68:02:4a: 3e:3d:3a:98:da:ff:de:c3:af:ea:be:58:97:37:fb:c3:93:6f: 10:1c:07:13:93:5d:dc:49:30:8c:c4:bb:55:87:1b:8f:36:6b: 2c:a7:ff:4e:cf:46:c6:0b:9d:b9:2b:28:ef:3b:f8:e8:15:d9: 85:0f:1d:5d:79:15:4f:6e:ea:02:9a:f7:eb:b8:68:b6:61:65: 4f:ee:34:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjQxMTIxMDQyNTU0WhcNMjQxMTI4MDQyNTU0WjAYMRYwFAYD VQQDEw02NzNlYjY1Mi0wNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCGZoVbS289A6oNSdsCMSPM333+sqkKmwvZqT/6/znWGDWWxp7GDzkk2vQ5W +nanrVbFz3PaxPzzHhjVuPnGj7JlKyd1LyJfEihZeJhtmuBpRD527uBF+WtJtK51 CfhPJ3iRNI7rmTsWhNiKFHD1XvVoVZh51JQtTwa19EyjoWykF1qG1n3rMykaehBK 6SxC4O9oDB8tP9qZ83B54GTCUjvZtg1FzYgfG15vVUb9T0WJfevBMDZ3RGTg7vLd lID615SYvRHMz2OG+24NCIcyWAIXs3ZpRbO3IXpb3PYllRydX3F1jOxQsdXm8KPe zAPODEieV01s7lU1bRyvPjA+eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDrL+BU JnXlUn3tHo6uM/FaWZX7MB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTvyQDjPV319HEjNoN66nScSviJVh7dIp+UD3+OfeKtm3xOwI78qAo Do/aL/NJF1pHC+8gY5CqQ9udHP/Xij/JYy7fYoLJjBkd/m8zwDkz87cd40Bnq1oQ RwAYcVMfglTI6PVHgrVkoEi62vbb2bVtj6PCUZHXjEf8hkeauooh9DwLptY+kETR pK/8JHoHKz+bN9jrvNvPk61WQ/ACX05Ag/1ABmASaTCSpiEfZDlM8R9oAko+PTqY 2v/ew6/qvliXN/vDk28QHAcTk13cSTCMxLtVhxuPNmssp/9Oz0bGC525KyjvO/jo FdmFDx1deRVPbuoCmvfruGi2YWVP7jSQ -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org