$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft File: 3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json) Hash identifier: kUCRDWWKNPQf1mNsF2tshGm3udVMUw7BWB77i4ctDfs= Subject key identifier: AF:9E:B5:66:D8:99:79:F7:66:E1:4A:57:8F:32:B0:FC:8F:33:38:2B Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 Certificate issuer: /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft Manifest number: 079B Signing time: Fri 22 Nov 2024 20:49:46 +0000 Manifest this update: Fri 22 Nov 2024 20:49:45 +0000 Manifest next update: Fri 29 Nov 2024 20:49:45 +0000 Files and hashes: 1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: bnI3m6Yzy6mGrbm6kxuq+/dV0iW2H4EnowyABi7Otxk=) 2: D5E920EC194A11EC83D2C21FC4F9AE02.roa (hash: cmaiEU/dqmVQrpTCo/qIiMDiynarYKTuA5D+uHv2d3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583 Validity Not Before: Nov 22 20:49:45 2024 GMT Not After : Nov 29 20:49:45 2024 GMT Subject: CN=6740ee6a-2eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:01:c0:06:18:b7:c8:82:74:70:da:1c:8d: 2d:43:e8:9e:ea:90:24:18:ee:ec:8e:b2:ab:d0:f0: d7:b1:1c:d3:38:78:4d:c6:f1:08:3b:cd:2a:63:c7: 99:4d:b2:01:5e:91:ee:56:82:43:7b:64:7e:69:d7: 2c:cd:85:5d:89:c9:45:3c:a9:f3:86:16:ba:c8:27: a8:86:d2:70:1a:fb:85:d1:b2:06:95:b8:c5:db:1f: f1:14:a1:78:32:3d:f3:ac:a0:d7:75:8c:6e:0f:cc: 01:6b:7d:9d:bd:f4:6b:dd:8a:2a:b4:ec:9f:d0:db: 77:47:b1:a0:ca:98:4f:21:a7:9a:69:ff:eb:28:f8: bd:e6:5f:fa:06:f4:d2:81:14:8f:32:b4:d6:36:94: d1:b3:f1:1c:7a:5b:db:71:2a:76:1c:b3:e1:5d:fe: 06:00:d7:c6:7d:45:46:10:11:b5:c9:16:e5:bb:99: fd:95:19:c0:e9:a2:cb:3f:93:1d:2d:d1:18:38:d2: ee:80:04:5f:e9:b4:bd:44:b7:ca:97:ef:50:9a:93: d6:1b:be:dd:29:40:9f:91:2b:93:5b:96:a2:3a:70: f7:25:a5:55:72:33:18:d4:af:89:f4:ee:92:33:b4: 65:9d:e0:5f:6e:8e:40:20:79:22:73:ce:7a:ab:ab: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:B5:66:D8:99:79:F7:66:E1:4A:57:8F:32:B0:FC:8F:33:38:2B X509v3 Authority Key Identifier: keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e9:ef:27:e3:22:3c:40:78:c2:48:6d:bb:c2:5a:b9:5d:c1: 03:35:6b:6d:db:30:38:73:00:ed:ff:92:5f:90:07:e2:a8:9a: 47:a8:16:49:1e:78:3b:b8:f0:63:3d:9d:dc:c3:f8:47:b0:e2: 1e:3e:e1:e3:a0:7d:59:7e:d9:0d:7f:74:db:c4:67:73:46:2f: 6f:e1:d4:db:cc:d3:31:4c:2d:89:98:16:d7:da:7c:86:32:44: 72:a1:72:46:92:20:73:35:12:78:76:0d:d5:08:9b:2f:4d:4b: 21:42:b3:00:c1:f4:c7:76:98:bb:a0:4e:bd:bf:98:e5:8a:7f: bf:0c:12:5d:fd:ee:ac:02:5c:3c:05:16:57:a2:1e:2a:0e:2e: 0d:0d:4f:33:37:c9:25:da:2a:c7:88:fa:8e:85:a1:d3:cb:da: b0:ea:c8:f2:33:45:43:2c:87:e6:bd:86:17:be:07:ca:93:18: d5:33:e7:62:c7:09:aa:fb:56:99:ac:b4:0d:fc:00:27:64:f3: 31:4c:ed:ab:28:cc:af:5d:be:eb:24:6c:cf:6a:14:3f:bc:56: 33:83:3c:9d:ab:0a:ea:cd:ca:b8:7e:8c:c3:cb:c0:3e:b6:25: fa:fd:df:88:a5:d5:37:23:82:45:a1:8e:d8:d4:57:e4:a7:f5: 6b:d1:7d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz RjQ5RDU1ODMwHhcNMjQxMTIyMjA0OTQ1WhcNMjQxMTI5MjA0OTQ1WjAYMRYwFAYD VQQDEw02NzQwZWU2YS0yZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcABwAYYt8iCdHDaHI0tQ+ie6pAkGO7sjrKr0PDXsRzTOHhNxvEIO80qY8eZ TbIBXpHuVoJDe2R+adcszYVdiclFPKnzhha6yCeohtJwGvuF0bIGlbjF2x/xFKF4 Mj3zrKDXdYxuD8wBa32dvfRr3YoqtOyf0Nt3R7GgyphPIaeaaf/rKPi95l/6BvTS gRSPMrTWNpTRs/EcelvbcSp2HLPhXf4GANfGfUVGEBG1yRblu5n9lRnA6aLLP5Md LdEYONLugARf6bS9RLfKl+9QmpPWG77dKUCfkSuTW5aiOnD3JaVVcjMY1K+J9O6S M7RlneBfbo5AIHkic856q6sMLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+etWbY mXn3ZuFKV48ysPyPMzgrMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT6e8n4yI8QHjCSG27wlq5XcEDNWtt2zA4cwDt/5JfkAfiqJpHqBZJ Hng7uPBjPZ3cw/hHsOIePuHjoH1ZftkNf3TbxGdzRi9v4dTbzNMxTC2JmBbX2nyG MkRyoXJGkiBzNRJ4dg3VCJsvTUshQrMAwfTHdpi7oE69v5jlin+/DBJd/e6sAlw8 BRZXoh4qDi4NDU8zN8kl2irHiPqOhaHTy9qw6sjyM0VDLIfmvYYXvgfKkxjVM+di xwmq+1aZrLQN/AAnZPMxTO2rKMyvXb7rJGzPahQ/vFYzgzydqwrqzcq4fozDy8A+ tiX6/d+IpdU3I4JFoY7Y1Ffkp/Vr0X1d -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org