$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft File: 3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json) Hash identifier: aR0TFBTyj0sPf8wujJe0tjT5Sau524Xkq9lEcwxxHgk= Subject key identifier: 76:18:0D:82:CF:D7:32:6D:AB:46:E5:69:14:E0:90:65:6E:80:B9:25 Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 0FF2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft Manifest number: 0FE7 Signing time: Wed 20 Nov 2024 17:24:15 +0000 Manifest this update: Wed 20 Nov 2024 17:24:14 +0000 Manifest next update: Wed 27 Nov 2024 17:24:14 +0000 Files and hashes: 1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: CuV18J0iPidFNgH1YzbYbwhISgkZwx8nm0MlPAvSqSc=) 2: E366C4B83B2611E9906E7B81C4F9AE02.roa (hash: 0HRB4yQNmTs94kn47WtW3j4lNGNrzmTjcfELkQSYx6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4082 (0xff2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Nov 20 17:24:14 2024 GMT Not After : Nov 27 17:24:14 2024 GMT Subject: CN=673e1b3e-e557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:52:fa:7c:2b:c4:95:39:53:59:1f:01:4a: c0:dc:45:46:4e:5a:6a:4c:12:95:70:c0:b2:91:c3: fa:9f:c9:d0:cd:85:ba:c3:ac:29:9d:ef:d9:c4:2a: 3b:ff:2e:24:0d:a2:a2:a1:b3:09:1c:a0:23:fc:38: 52:69:b5:b0:a9:28:28:83:66:ca:bb:4d:2a:b2:f2: e3:e9:e3:7d:f8:49:da:78:2a:a6:ee:2b:07:48:0e: f1:80:40:a7:69:2b:2e:9a:9e:a9:46:93:6a:2e:df: 66:4e:f8:39:44:54:47:f7:19:ff:9b:0b:1f:37:2f: 62:f2:3e:3c:1e:26:4d:f0:7d:5d:70:83:7d:54:90: b3:a0:c8:ed:ba:9e:2a:d2:ae:66:36:1b:42:8c:93: cd:92:f8:a7:24:76:f9:35:b4:0b:e1:e7:da:be:d8: ff:ef:fc:47:c6:7a:38:cf:3c:c5:69:fe:0b:55:d6: 98:65:8a:94:55:d5:d2:8f:40:89:7c:7a:c0:2d:74: ae:43:92:31:05:72:07:bf:bf:3b:9c:b7:01:09:20: 1d:96:39:f4:37:10:cd:39:1f:99:7b:65:26:99:70: 6e:50:fd:f6:05:70:92:ad:d0:1a:be:58:10:4f:aa: 2d:5c:cc:07:93:d6:bc:94:3e:97:29:4c:21:f6:8e: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:18:0D:82:CF:D7:32:6D:AB:46:E5:69:14:E0:90:65:6E:80:B9:25 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3c:4a:ab:53:08:8f:94:31:b2:67:22:72:e7:8c:61:93:2e: a6:af:46:97:48:92:b7:d8:98:7e:35:d1:f6:df:89:74:32:aa: 28:e0:a1:17:25:c9:de:d4:0a:ac:03:f3:32:07:87:ec:ae:2a: 58:61:71:42:13:69:ff:c4:d3:40:46:a6:8e:66:48:94:d5:96: 08:31:68:49:6a:54:bc:ed:9f:84:e3:4d:27:1d:54:3a:52:3f: 08:86:4e:88:5e:51:bc:3d:91:cf:b2:70:4a:98:aa:12:bc:87: 96:80:cd:b1:a6:70:a8:b0:26:ec:fb:f4:09:ff:18:7f:0c:7e: 7b:07:ab:f5:91:0d:2a:43:be:d8:83:fa:20:6a:72:49:90:ad: b3:0b:82:56:a7:1b:d0:7b:bd:38:da:6a:6b:78:be:60:8d:f4: c4:53:cd:32:be:7e:aa:6b:34:65:96:1e:78:88:28:10:f1:49: d1:b0:fe:99:83:9c:ed:df:10:33:76:6e:06:51:91:a3:3f:75: c8:85:6d:c2:a2:12:e8:6d:5b:68:a0:be:54:de:a4:d4:e8:d8: 86:8c:ca:55:b8:b6:6e:92:bb:b6:9a:76:07:bf:d8:82:84:a7: 19:42:e6:9e:89:28:07:18:6c:b4:ac:2c:26:b9:2d:c3:7a:f5: 0c:94:3f:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjQxMTIwMTcyNDE0WhcNMjQxMTI3MTcyNDE0WjAYMRYwFAYD VQQDEw02NzNlMWIzZS1lNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiNS+nwrxJU5U1kfAUrA3EVGTlpqTBKVcMCykcP6n8nQzYW6w6wpne/ZxCo7 /y4kDaKiobMJHKAj/DhSabWwqSgog2bKu00qsvLj6eN9+EnaeCqm7isHSA7xgECn aSsump6pRpNqLt9mTvg5RFRH9xn/mwsfNy9i8j48HiZN8H1dcIN9VJCzoMjtup4q 0q5mNhtCjJPNkvinJHb5NbQL4efavtj/7/xHxno4zzzFaf4LVdaYZYqUVdXSj0CJ fHrALXSuQ5IxBXIHv787nLcBCSAdljn0NxDNOR+Ze2UmmXBuUP32BXCSrdAavlgQ T6otXMwHk9a8lD6XKUwh9o5cAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYYDYLP 1zJtq0blaRTgkGVugLklMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM4Ni80OUNENkEzQzNCMjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5 OVZnZWE4eTB3VXB1Wnh0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAPEqrUwiPlDGyZyJy54xhky6mr0aXSJK32Jh+NdH234l0Mqoo4KEX Jcne1AqsA/MyB4fsripYYXFCE2n/xNNARqaOZkiU1ZYIMWhJalS87Z+E400nHVQ6 Uj8Ihk6IXlG8PZHPsnBKmKoSvIeWgM2xpnCosCbs+/QJ/xh/DH57B6v1kQ0qQ77Y g/oganJJkK2zC4JWpxvQe7042mpreL5gjfTEU80yvn6qazRllh54iCgQ8UnRsP6Z g5zt3xAzdm4GUZGjP3XIhW3CohLobVtooL5U3qTU6NiGjMpVuLZukru2mnYHv9iC hKcZQuaeiSgHGGy0rCwmuS3DevUMlD84 -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:23 2024 by rpki-client on console-ams.rpki-client.org