$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft File: 63_piS3wACVfzzrAsrTRKupv-AY.mft (raw, json) Hash identifier: tC8S7XTtVo3vIYV+a141s+sEiqsQWIis4ly1n/myNrA= Subject key identifier: 6A:06:20:FE:6A:9C:5E:63:7E:65:5F:E5:81:36:37:7E:63:07:44:70 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 354E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft Manifest number: 3493 Signing time: Fri 22 Nov 2024 14:54:36 +0000 Manifest this update: Fri 22 Nov 2024 14:54:35 +0000 Manifest next update: Fri 29 Nov 2024 14:54:35 +0000 Files and hashes: 1: 63_piS3wACVfzzrAsrTRKupv-AY.crl (hash: EHgfWw8zSMlAfqh0RvFXQ5PIMNbXBQ2VhJFaQ+oDhPo=) 2: 150612CA903711EEB0B65F74C4F9AE02.roa (hash: Zph4qw7OPknDovoxX3cm0uRfAXTr+TUdnZIAn859WAM=) 3: FD206C4EF80B11EAA0659123C4F9AE02.roa (hash: rbHmJ7wg+EQEHnyfTG4+nvFCGTpxVf1MlsE3F9F45/k=) 4: BB8E79F23D7211ED80C24116C4F9AE02.roa (hash: /UQcwZPg26VqsQtvRJJDSvHXzuNexFFzMoF+ofGjcoo=) 5: 6A6FBBFE16C111ECB341F934C4F9AE02.roa (hash: pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=) 6: F4ABC602F57411E9B18D9325C4F9AE02.roa (hash: VwL1SA1XYUQEX2a/7luueLDgNwQBDHg9AU4D4r2vHAQ=) 7: D53B3AEE89FE11E6A44EAA55C4F9AE02.roa (hash: QrrS2VxYNscI/BOk9bE6lCTC7XbP/jpfa//4gPNZQ8Y=) 8: 355461A4372C11EDB1059640C4F9AE02.roa (hash: koGkOVdAIOzAkdXNFvneL4bWaW+bmp6jpepdCCYoFbI=) 9: 347735B4C00511EE82324069C4F9AE02.roa (hash: fNvMfFA8SZsS2jWyHTOpKkLQBUAi5cx79SftmeTD8YM=) 10: B3501A3838BB11EB9F5B573BC4F9AE02.roa (hash: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=) 11: 9566944A8D4111EB81CBE475C4F9AE02.roa (hash: 1tIVsx8hYlvkqLU4QzVnNUag+wclIVuhXc3VSs3WI6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13646 (0x354e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Nov 22 14:54:35 2024 GMT Not After : Nov 29 14:54:35 2024 GMT Subject: CN=67409b2b-87c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:14:9f:95:cc:df:3e:35:de:ee:00:f2:c3: 1a:08:81:f0:f8:b6:1e:cd:7f:80:ca:04:20:b7:d8: 40:93:3b:30:54:5d:1e:ab:41:e9:13:15:5c:17:16: e1:6c:c8:db:4f:9e:d5:1c:bc:03:fe:c1:1c:41:86: 7a:c7:b2:7b:18:8a:a8:54:e3:99:ff:ac:34:f6:bd: 53:72:fd:8f:83:d6:b0:a1:69:2e:c4:16:14:4e:25: a1:9a:98:ae:ae:fa:b9:1c:63:7a:87:d4:86:21:7f: 2e:30:ef:cb:38:be:be:70:09:8f:12:ae:e9:dc:be: 73:44:11:19:5a:62:6c:94:e8:0b:5d:45:49:0b:9a: c9:78:cb:23:8d:e7:c3:6d:0b:f2:c8:4d:1b:63:82: b5:04:bf:bb:93:18:77:b0:25:c2:b0:e2:a1:09:9e: c6:ba:c3:db:68:a3:97:ba:62:b4:dd:56:04:90:33: 0c:ab:59:f0:0b:4a:c7:6c:c9:23:91:76:c4:b9:86: 7c:40:77:d9:d0:b9:6b:34:07:35:6a:66:16:32:df: d9:7b:a5:18:a4:76:85:97:bb:65:b8:76:99:f9:e2: e7:2b:00:68:36:3d:b4:c0:48:59:d1:d7:70:ae:07: 2c:4a:cf:7a:3e:95:e5:42:0f:2c:61:7c:4d:2d:cc: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:06:20:FE:6A:9C:5E:63:7E:65:5F:E5:81:36:37:7E:63:07:44:70 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:50:e8:89:e1:b8:83:4d:5d:d9:e2:2d:6c:99:28:28:65:90: bf:8b:85:a4:da:6e:23:50:4a:83:40:06:c1:d1:df:94:40:c3: 18:38:84:e3:b8:22:7c:61:ed:a6:4d:e8:44:21:71:27:57:10: 7d:76:96:1a:7d:75:ab:1f:5d:4f:ff:00:e5:6d:bb:f8:c8:b1: 9d:ee:99:bd:4d:61:bc:51:1f:82:91:eb:47:35:3c:eb:cd:9b: 8a:1b:f2:2e:36:75:77:41:d3:f5:99:6b:e9:2e:88:7d:e5:30: 51:d9:46:af:a4:98:92:0c:93:86:57:9d:d9:6c:b0:70:03:ea: ff:10:8c:25:26:45:60:fd:e6:9e:d3:e3:f7:a9:b9:04:95:4a: 09:0b:dd:a9:f7:04:08:d5:3d:cf:01:70:6b:3a:64:6c:68:f8: 7a:1d:98:cc:de:af:d5:bd:4f:7a:30:0b:e1:e1:78:03:e1:ac: 88:48:73:6b:64:f0:1b:1b:47:6e:a7:4d:fd:01:d8:65:53:04: 61:ef:26:b0:76:62:17:20:03:04:92:20:ef:a5:ce:30:55:ae: 45:16:aa:2a:1a:f7:60:e0:17:8d:a3:56:78:db:89:7d:96:e2: 3d:61:f5:4c:a4:7c:ab:d9:ae:fe:8c:54:22:15:8b:d6:a9:4f: 34:88:a9:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjQxMTIyMTQ1NDM1WhcNMjQxMTI5MTQ1NDM1WjAYMRYwFAYD VQQDEw02NzQwOWIyYi04N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfIUn5XM3z413u4A8sMaCIHw+LYezX+AygQgt9hAkzswVF0eq0HpExVcFxbh bMjbT57VHLwD/sEcQYZ6x7J7GIqoVOOZ/6w09r1Tcv2Pg9awoWkuxBYUTiWhmpiu rvq5HGN6h9SGIX8uMO/LOL6+cAmPEq7p3L5zRBEZWmJslOgLXUVJC5rJeMsjjefD bQvyyE0bY4K1BL+7kxh3sCXCsOKhCZ7GusPbaKOXumK03VYEkDMMq1nwC0rHbMkj kXbEuYZ8QHfZ0LlrNAc1amYWMt/Ze6UYpHaFl7tluHaZ+eLnKwBoNj20wEhZ0ddw rgcsSs96PpXlQg8sYXxNLcydjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoGIP5q nF5jfmVf5YE2N35jB0RwMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUJCMS84ODc0RTlFODFEOTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FD VmZ6enJBc3JUUkt1cHYtQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeUOiJ4biDTV3Z4i1smSgoZZC/i4Wk2m4jUEqDQAbB0d+UQMMYOITj uCJ8Ye2mTehEIXEnVxB9dpYafXWrH11P/wDlbbv4yLGd7pm9TWG8UR+CketHNTzr zZuKG/IuNnV3QdP1mWvpLoh95TBR2UavpJiSDJOGV53ZbLBwA+r/EIwlJkVg/eae 0+P3qbkElUoJC92p9wQI1T3PAXBrOmRsaPh6HZjM3q/VvU96MAvh4XgD4ayISHNr ZPAbG0dup039AdhlUwRh7yawdmIXIAMEkiDvpc4wVa5FFqoqGvdg4BeNo1Z424l9 luI9YfVMpHyr2a7+jFQiFYvWqU80iKlV -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org