$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: olEqCoPPEFP0DREjJH7d+5Pj9buLELuRNgtCwbzZ3UY= Subject key identifier: CF:20:25:40:19:CB:24:E2:66:5F:4A:B4:11:25:D0:FC:5D:B8:08:4D Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:36:47 +0000 Manifest this update: Thu 21 Nov 2024 05:36:46 +0000 Manifest next update: Thu 28 Nov 2024 05:36:46 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: O8VRV+2TswXxm9zzmqM3KxvtomMHWxRixxXuHMR+eFc=) 2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: fEssK/rdFbySAulrqFd8AKpPmu+MmmAD1cyPJC/0O8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Nov 21 05:36:46 2024 GMT Not After : Nov 28 05:36:46 2024 GMT Subject: CN=673ec6ef-8bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:00:7c:3a:17:54:41:20:f5:f6:96:0f:e6: 9e:78:e4:de:41:51:d0:eb:4c:9b:6a:b2:c5:d6:b4: 4b:f7:ed:a3:3c:7d:41:c2:b3:90:8f:59:8c:da:02: d6:c2:9f:3a:e0:cf:c2:d9:f9:2a:9a:5e:ee:d4:8a: aa:3d:a5:3a:51:17:ad:7f:3a:4d:65:90:8c:0b:1a: 71:05:fb:a7:38:31:7f:2d:e9:91:b0:e7:c1:f6:23: b3:7a:b9:c3:6c:a7:b6:7f:f5:ce:d0:45:8b:70:f0: d6:69:15:ac:43:89:30:af:8d:de:85:09:1d:76:a9: 59:7b:04:33:17:ae:75:bf:51:13:a9:a3:81:0d:90: c0:ea:86:10:eb:19:6c:17:cd:6e:f2:52:e5:4d:df: 87:71:8b:8d:a5:d6:f9:35:9f:4a:82:6e:2e:63:bf: 51:cf:b8:3f:7a:4d:04:cc:8d:18:ff:2a:85:67:c2: ba:35:66:89:ed:36:4e:5a:21:f3:de:48:9c:21:55: 58:1c:13:d3:18:a9:d4:aa:f5:7f:e4:b8:c7:ed:e3: f1:c8:0e:6f:b1:c9:9c:21:8d:77:e8:fc:5e:92:ac: ca:db:95:17:9b:22:a1:f4:8f:1e:62:48:de:9f:20: 4d:af:a1:38:ea:04:f7:46:3d:3e:35:8f:d9:6f:67: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:25:40:19:CB:24:E2:66:5F:4A:B4:11:25:D0:FC:5D:B8:08:4D X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ef:19:b8:7e:ea:66:94:84:4f:52:64:e0:fb:60:71:f0:49: 25:f8:8d:57:5b:aa:6a:fd:17:98:3f:00:63:9c:69:00:68:7a: 38:77:1c:0a:20:1a:26:1b:c4:7b:df:7c:9a:7d:b3:67:46:43: 74:91:e3:e3:b6:12:48:b8:a3:29:cf:39:ef:76:91:67:83:12: a6:31:42:de:f7:18:1e:1c:32:6f:ba:43:21:6c:cd:de:ac:11: 22:a5:dd:c2:19:1e:e7:f6:10:94:3b:4c:aa:99:e3:6a:f9:9d: b0:eb:ee:ab:58:28:04:88:aa:ac:47:e5:51:05:39:a8:cb:72: 6c:42:1c:c8:11:93:b3:4b:d9:4b:5d:a1:ea:cd:d3:b7:db:98: aa:82:ea:43:dc:1f:f4:f5:d0:30:20:a9:85:0d:75:80:f7:90: b5:1d:aa:54:17:8b:55:25:07:9a:9c:f9:9b:9c:ce:6d:05:a1: 8c:8e:76:82:76:ff:b9:8c:69:1d:1d:96:a9:96:57:c8:fb:b5: d1:5a:8c:36:2e:1d:e6:13:49:ea:a4:26:72:3f:60:62:c9:ca: 00:69:3b:df:f9:d4:a0:07:34:f1:60:f4:3e:5b:5d:ac:5a:6b: 2b:a4:2d:cd:00:e1:a5:e9:48:b2:d7:ec:cf:e6:75:0d:33:b0: ea:33:53:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDY5MDExMC8GA1UEBRMoMDJDRkY3Nzk4RjA1M0U5QzgxRkRDQ0VENzk2MkVDQkI3 NkMxRDIxQTAeFw0yNDExMjEwNTM2NDZaFw0yNDExMjgwNTM2NDZaMBgxFjAUBgNV BAMTDTY3M2VjNmVmLThiZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCaAB8OhdUQSD19pYP5p545N5BUdDrTJtqssXWtEv37aM8fUHCs5CPWYzaAtbC nzrgz8LZ+SqaXu7Uiqo9pTpRF61/Ok1lkIwLGnEF+6c4MX8t6ZGw58H2I7N6ucNs p7Z/9c7QRYtw8NZpFaxDiTCvjd6FCR12qVl7BDMXrnW/UROpo4ENkMDqhhDrGWwX zW7yUuVN34dxi42l1vk1n0qCbi5jv1HPuD96TQTMjRj/KoVnwro1ZontNk5aIfPe SJwhVVgcE9MYqdSq9X/kuMft4/HIDm+xyZwhjXfo/F6SrMrblRebIqH0jx5iSN6f IE2voTjqBPdGPT41j9lvZxwHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzyAlQBnL JOJmX0q0ESXQ/F24CE0wHwYDVR0jBBgwFoAUAs/3eY8FPpyB/czteWLsu3bB0how DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NjkwLzQwOUM5NzBBNUFF MDExRUY4NTgyNzA3RkM0RjlBRTAyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQXNfM2VZOEZQcHlCX2N6dGVXTHN1M2JCMGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 NjkwLzQwOUM5NzBBNUFFMDExRUY4NTgyNzA3RkM0RjlBRTAyL0FzXzNlWThGUHB5 Ql9jenRlV0xzdTNiQjBoby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLvGbh+6maUhE9SZOD7YHHwSSX4jVdbqmr9F5g/AGOcaQBoejh3HAog GiYbxHvffJp9s2dGQ3SR4+O2Eki4oynPOe92kWeDEqYxQt73GB4cMm+6QyFszd6s ESKl3cIZHuf2EJQ7TKqZ42r5nbDr7qtYKASIqqxH5VEFOajLcmxCHMgRk7NL2Utd oerN07fbmKqC6kPcH/T10DAgqYUNdYD3kLUdqlQXi1UlB5qc+Zuczm0FoYyOdoJ2 /7mMaR0dlqmWV8j7tdFajDYuHeYTSeqkJnI/YGLJygBpO9/51KAHNPFg9D5bXaxa ayukLc0A4aXpSLLX7M/mdQ0zsOozU2U= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org