$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: AdnbyrhaP3LlHGLgzSNOxgXOp/eiwcoKbx/ATd8LnU4= Subject key identifier: FD:3A:EF:CA:F8:02:F2:56:8D:B7:94:E7:BC:AA:82:ED:7A:43:C7:21 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 0195 Signing time: Thu 21 Nov 2024 01:54:44 +0000 Manifest this update: Thu 21 Nov 2024 01:54:44 +0000 Manifest next update: Thu 28 Nov 2024 01:54:44 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: tWSPcH3x7vJofNo12nHxY5Qb6msIwcvc4tx/OCzoA3E=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: +n0AtuT6Jdla2/49nbRpW9RkyQDKQaYh3sVDv0xviWc=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: xI0GnyvN5cK5+FijAC55cRTHb9/XhLz8klCv+xpDf+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Nov 21 01:54:44 2024 GMT Not After : Nov 28 01:54:44 2024 GMT Subject: CN=673e92e4-acb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:82:a0:1c:91:da:d2:56:13:d3:41:50:d7: 15:7a:9d:30:38:e9:08:7b:40:05:a9:5e:32:40:56: da:8d:5a:88:af:25:1b:97:2b:cf:b0:29:14:9b:19: cc:27:45:4e:f5:c7:f6:6e:8c:bf:2b:c4:0d:a8:dc: cf:9b:51:51:6f:cc:4d:ff:1d:aa:95:a5:b1:b8:a0: 11:29:d0:41:8e:51:e1:54:f5:a9:77:de:a3:7f:0f: a6:7f:aa:fb:6c:03:c4:86:e4:72:2c:28:6f:8d:7b: fd:df:ec:01:d7:19:97:2b:f4:26:44:dd:e4:e9:84: 8f:8e:c4:07:1a:f1:8c:0f:a4:8a:d2:58:52:0b:ba: 5d:fb:aa:bf:b0:b1:b9:bc:c6:de:d6:a1:7f:95:92: 71:4d:d7:81:a7:98:a2:c1:4b:a0:de:32:dd:de:55: 52:4d:b8:29:a9:89:91:c2:bb:84:6a:b8:e5:35:f8: 3e:1f:ce:93:ac:8f:44:1f:c4:36:8a:31:23:c9:9b: ff:09:07:35:58:2c:6b:d8:f7:ee:2c:93:7a:e6:4e: af:e9:bc:0e:ba:8f:2c:90:14:1e:98:eb:85:40:63: c9:af:ca:78:03:be:48:95:05:2a:bd:2f:87:33:42: 5d:57:22:bc:af:1f:64:4f:94:7d:81:df:e8:29:b0: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3A:EF:CA:F8:02:F2:56:8D:B7:94:E7:BC:AA:82:ED:7A:43:C7:21 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6d:16:b2:08:36:1a:e9:18:b0:54:a6:1b:39:11:f0:f2:c2: 4d:92:71:2c:fa:1d:ca:a5:14:e0:1a:bc:65:e5:42:0d:29:08: 00:35:47:02:ee:23:84:5f:61:f8:fc:44:cd:b2:ba:1c:0f:4e: 53:7b:4b:ee:3a:b9:78:06:46:e6:eb:22:6a:e2:21:87:78:b9: 1c:d3:5f:1d:dc:28:a0:71:6d:0b:69:27:3c:a9:1c:72:ee:62: 20:f9:12:58:d4:28:2d:42:d9:f8:81:1e:ab:d6:12:dd:b2:50: 1b:d1:42:3b:36:31:51:76:a6:8a:01:5c:e7:f5:34:bc:3d:c6: d4:0e:68:33:b3:8f:1a:6a:01:3e:51:20:cc:8c:dd:08:1f:8e: 6a:98:21:72:a9:43:14:02:d4:4f:d4:13:a6:5e:66:d8:4c:d6: 5a:76:66:6e:7c:aa:4a:76:bd:4a:c2:69:23:b6:c7:d4:d3:35: 74:dc:c5:84:99:44:83:e1:2c:7a:1d:28:4f:08:3c:ff:56:a9: 54:1c:bf:3f:c3:8c:94:6d:fc:e4:eb:19:6b:b9:6b:4c:1d:23: 90:26:a8:a6:11:2d:1e:3b:9d:48:77:be:43:18:6e:b8:07:50: c2:de:24:71:00:02:85:b2:d6:60:05:8a:da:c3:69:55:70:3b: 79:9f:dd:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjQxMTIxMDE1NDQ0WhcNMjQxMTI4MDE1NDQ0WjAYMRYwFAYD VQQDEw02NzNlOTJlNC1hY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXmCoByR2tJWE9NBUNcVep0wOOkIe0AFqV4yQFbajVqIryUblyvPsCkUmxnM J0VO9cf2boy/K8QNqNzPm1FRb8xN/x2qlaWxuKARKdBBjlHhVPWpd96jfw+mf6r7 bAPEhuRyLChvjXv93+wB1xmXK/QmRN3k6YSPjsQHGvGMD6SK0lhSC7pd+6q/sLG5 vMbe1qF/lZJxTdeBp5iiwUug3jLd3lVSTbgpqYmRwruEarjlNfg+H86TrI9EH8Q2 ijEjyZv/CQc1WCxr2PfuLJN65k6v6bwOuo8skBQemOuFQGPJr8p4A75IlQUqvS+H M0JdVyK8rx9kT5R9gd/oKbC6YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0678r4 AvJWjbeU57yqgu16Q8chMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbbRayCDYa6RiwVKYbORHw8sJNknEs+h3KpRTgGrxl5UINKQgANUcC 7iOEX2H4/ETNsrocD05Te0vuOrl4Bkbm6yJq4iGHeLkc018d3CigcW0LaSc8qRxy 7mIg+RJY1CgtQtn4gR6r1hLdslAb0UI7NjFRdqaKAVzn9TS8PcbUDmgzs48aagE+ USDMjN0IH45qmCFyqUMUAtRP1BOmXmbYTNZadmZufKpKdr1KwmkjtsfU0zV03MWE mUSD4Sx6HShPCDz/VqlUHL8/w4yUbfzk6xlruWtMHSOQJqimES0eO51Id75DGG64 B1DC3iRxAAKFstZgBYraw2lVcDt5n93n -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org