$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: MNHM2JjLIXnO8l8PuQvFXdKmOvzeM/rP3rM8ShWysr8= Subject key identifier: 4D:9C:87:F5:C7:3A:9E:7B:70:D9:18:FE:8A:73:DB:F2:B7:9E:58:63 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0427 Signing time: Wed 20 Nov 2024 23:52:28 +0000 Manifest this update: Wed 20 Nov 2024 23:52:27 +0000 Manifest next update: Wed 27 Nov 2024 23:52:27 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: vUxF62LP8ksuCjo+W0eIYbgkQGWR9DQZBSgZGPOzZZs=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: /e9BPLwzavFi7mOmK+pKtzCtyRFF2aMFazuZ5AqXg3Y=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: XvbM8YA7EOesjJMIl8Is1wcCPsNr+m1Qmyl/6S5dTcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Nov 20 23:52:27 2024 GMT Not After : Nov 27 23:52:27 2024 GMT Subject: CN=673e763c-37e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:f4:87:52:1c:a0:69:3d:87:d8:bb:9a:6c: ca:0d:c3:c0:cb:48:e1:a8:f7:33:d6:12:19:7b:2c: 7c:07:05:5e:79:f5:ba:b0:31:5f:47:34:7d:a2:85: 77:a9:82:9b:ab:a9:3e:16:84:8f:9f:65:3c:f3:99: 80:b3:ba:59:37:51:3a:95:6b:6c:27:07:84:e8:4e: 97:a0:19:68:18:c0:68:dc:6e:02:6f:af:2f:21:f6: 67:a5:1f:5c:20:40:51:2b:bf:74:55:a7:89:b6:48: f1:83:16:f3:91:c0:ce:9d:af:3b:bc:b4:75:23:24: 67:7d:a3:f4:f7:ba:ba:e4:bd:6e:87:5e:ef:4d:f0: a5:1b:64:3a:8a:dc:f4:6b:b5:da:40:b0:20:74:d3: e0:d2:c4:ff:74:c8:45:42:d8:9e:eb:51:f8:3e:8d: cb:58:1f:31:6c:d3:8f:e6:23:b5:f4:0e:ed:2d:d8: a2:23:50:04:e8:fb:2f:fe:aa:0c:de:21:a3:76:bb: 15:40:00:bd:6a:64:39:1d:c1:ed:b7:e7:92:58:db: 7d:e4:3a:75:7b:bf:1e:1d:04:87:ed:28:78:a9:5d: da:60:d2:ef:f5:0f:da:46:e0:77:4b:ac:79:f9:a8: 0b:44:07:75:f8:e9:c0:4f:00:a1:a2:74:2f:50:03: 90:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9C:87:F5:C7:3A:9E:7B:70:D9:18:FE:8A:73:DB:F2:B7:9E:58:63 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:96:d1:f6:d6:b9:17:f4:b7:9f:b3:42:c0:4a:df:1d:dd:6a: 7f:8c:c2:30:02:79:b0:75:6e:9f:fa:29:2f:4a:04:84:0b:80: 89:f3:48:7a:78:fe:52:5f:1a:6f:ad:c0:a3:70:03:4d:7c:bc: e8:a5:4b:72:10:0d:ac:9b:9f:a8:6b:be:66:4e:b5:11:9e:8f: 05:b7:3d:aa:26:8b:0c:c0:66:3f:19:ac:e5:cb:1c:ee:28:17: 4b:99:1a:fb:07:82:3b:36:91:30:2c:d3:34:11:76:2c:6a:da: 78:4d:fb:97:64:4b:f6:de:29:31:8f:71:0d:63:1e:81:59:d3: 87:b1:ad:cc:71:52:e8:fe:0a:a3:0f:30:7e:f3:4a:7c:95:7a: 90:69:5c:43:a2:0d:3c:1b:a3:f1:c2:21:2b:60:77:6a:34:6f: 66:a7:0f:d6:72:23:c3:cb:52:05:b6:c9:43:15:8e:4e:f3:cf: 2e:85:ad:52:b1:68:16:87:bf:c2:10:57:83:99:5b:cd:dc:7c: 71:3c:c6:25:61:3f:58:fe:21:a0:49:23:c4:45:86:df:f2:f7: e3:db:e3:00:e1:48:f6:0b:38:c9:76:11:b9:ef:37:48:e8:3f: 58:5d:77:95:24:65:1e:b7:6b:82:b7:ac:ae:36:92:9f:7b:5d: 08:b4:91:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjQxMTIwMjM1MjI3WhcNMjQxMTI3MjM1MjI3WjAYMRYwFAYD VQQDEw02NzNlNzYzYy0zN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXz0h1IcoGk9h9i7mmzKDcPAy0jhqPcz1hIZeyx8BwVeefW6sDFfRzR9ooV3 qYKbq6k+FoSPn2U885mAs7pZN1E6lWtsJweE6E6XoBloGMBo3G4Cb68vIfZnpR9c IEBRK790VaeJtkjxgxbzkcDOna87vLR1IyRnfaP097q65L1uh17vTfClG2Q6itz0 a7XaQLAgdNPg0sT/dMhFQtie61H4Po3LWB8xbNOP5iO19A7tLdiiI1AE6Psv/qoM 3iGjdrsVQAC9amQ5HcHtt+eSWNt95Dp1e78eHQSH7Sh4qV3aYNLv9Q/aRuB3S6x5 +agLRAd1+OnATwChonQvUAOQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2ch/XH Op57cNkY/opz2/K3nlhjMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjltH21rkX9Lefs0LASt8d3Wp/jMIwAnmwdW6f+ikvSgSEC4CJ80h6 eP5SXxpvrcCjcANNfLzopUtyEA2sm5+oa75mTrURno8Ftz2qJosMwGY/Gazlyxzu KBdLmRr7B4I7NpEwLNM0EXYsatp4TfuXZEv23ikxj3ENYx6BWdOHsa3McVLo/gqj DzB+80p8lXqQaVxDog08G6PxwiErYHdqNG9mpw/WciPDy1IFtslDFY5O888uha1S sWgWh7/CEFeDmVvN3HxxPMYlYT9Y/iGgSSPERYbf8vfj2+MA4Uj2CzjJdhG57zdI 6D9YXXeVJGUet2uCt6yuNpKfe10ItJHJ -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:03 2024 by rpki-client on console-ams.rpki-client.org