$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: oNBJ2W0SEgaMwO0c3q5hkgErfWHXYsYPvht7ITWhnvA= Subject key identifier: ED:C5:EB:31:F9:A1:65:C5:B5:19:BA:4F:7D:9D:28:B2:D3:03:F7:D7 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3430 Signing time: Fri 22 Nov 2024 14:35:04 +0000 Manifest this update: Fri 22 Nov 2024 14:35:04 +0000 Manifest next update: Fri 29 Nov 2024 14:35:04 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: VkNm2dZEWDeF2aNKmEwvalsBvWJ31eNsHTRUSz99peo=) 2: 673DC29606B011EFA665703AC4F9AE02.roa (hash: eFzIE3XgQGBNH4Vf3/zyPlgIukjHrzr3A+HYin6uwTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Nov 22 14:35:04 2024 GMT Not After : Nov 29 14:35:04 2024 GMT Subject: CN=67409698-4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:ec:7c:e9:bc:49:cb:f0:eb:f2:5d:59:61: a1:59:91:89:6a:5f:c6:9d:43:f1:8d:bd:26:b6:2c: 0b:53:e1:cb:e6:23:38:67:59:0e:a2:97:ea:e7:4a: 55:d2:8e:9e:5d:1a:02:0f:34:3f:41:b5:31:20:ae: 9a:b6:99:fe:b0:89:eb:c8:93:fb:49:6c:35:7a:73: 43:25:9f:8b:54:9e:50:71:45:ff:81:5a:61:02:bb: ed:00:b0:a5:e4:19:83:ff:59:6e:96:6d:10:d2:c7: 16:70:2e:9f:35:3d:d6:ea:8f:6d:87:b4:54:3f:19: c9:02:71:02:9e:33:ff:51:c6:48:91:11:d4:bb:f0: 95:f7:b2:33:0c:ae:be:60:a1:5f:d9:8a:e4:3c:fc: 10:c4:eb:4b:f0:22:ed:b7:ef:f7:d2:34:19:3d:38: f1:74:b9:85:c0:2c:5b:38:6c:8a:fb:d4:b0:6c:32: b8:f6:b5:4b:5d:1d:a5:11:e5:6e:28:76:2c:7c:3f: bc:dc:b6:e6:83:ab:17:20:fc:a0:16:ed:53:11:76: a8:3f:95:17:b9:63:90:03:88:e9:f5:c2:86:80:1c: ff:26:7e:b4:b8:e1:99:77:45:2b:93:6a:6d:f0:cf: 4d:44:f7:8f:25:24:87:c3:bb:27:91:74:b7:5c:2f: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:EB:31:F9:A1:65:C5:B5:19:BA:4F:7D:9D:28:B2:D3:03:F7:D7 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3a:0a:71:94:97:38:b9:8b:41:86:5e:b6:66:6a:c4:ba:85: 3e:f8:76:e9:73:06:98:94:6d:68:c1:8a:84:35:dd:35:d0:51: d0:69:02:e2:5e:71:5e:0c:73:7a:5b:60:1c:8b:2a:1b:29:35: 0d:e7:29:7e:83:2c:d8:8e:36:d7:72:db:5e:c2:db:8e:c8:3a: a9:52:b5:c6:d3:a8:68:8d:65:27:12:08:63:31:a4:37:45:41: ba:a4:80:23:9e:e4:e0:73:3a:e6:5c:32:ac:07:39:14:6c:6a: 7b:fc:79:48:c1:d5:d5:e9:7c:bd:95:81:7a:8f:bf:23:be:c0: b2:09:f0:2d:40:cc:de:a3:09:3c:db:34:1c:63:84:84:1e:69: 05:1f:33:87:8a:03:3c:9b:52:7c:04:42:c6:da:8f:87:f0:02: 4d:6c:3f:3f:ee:42:1b:dd:b5:94:88:eb:5e:e4:a1:32:4b:22: 18:31:91:8c:44:52:6e:23:c4:70:35:51:b2:a9:25:a6:60:0e: f0:64:6a:67:6c:40:94:da:ed:84:61:49:c4:c5:57:ce:4f:c8: 25:54:20:b9:b2:3e:0f:d3:79:3c:38:0f:14:fe:b5:43:2e:e6: 9a:16:d1:6c:be:de:df:5d:bb:61:f3:3c:0f:a5:a0:df:2d:14: 36:aa:a8:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjQxMTIyMTQzNTA0WhcNMjQxMTI5MTQzNTA0WjAYMRYwFAYD VQQDEw02NzQwOTY5OC00OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4p7sfOm8Scvw6/JdWWGhWZGJal/GnUPxjb0mtiwLU+HL5iM4Z1kOopfq50pV 0o6eXRoCDzQ/QbUxIK6atpn+sInryJP7SWw1enNDJZ+LVJ5QcUX/gVphArvtALCl 5BmD/1lulm0Q0scWcC6fNT3W6o9th7RUPxnJAnECnjP/UcZIkRHUu/CV97IzDK6+ YKFf2YrkPPwQxOtL8CLtt+/30jQZPTjxdLmFwCxbOGyK+9SwbDK49rVLXR2lEeVu KHYsfD+83Lbmg6sXIPygFu1TEXaoP5UXuWOQA4jp9cKGgBz/Jn60uOGZd0Urk2pt 8M9NRPePJSSHw7snkXS3XC9b8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3F6zH5 oWXFtRm6T32dKLLTA/fXMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADOgpxlJc4uYtBhl62ZmrEuoU++HbpcwaYlG1owYqENd010FHQaQLi XnFeDHN6W2AciyobKTUN5yl+gyzYjjbXcttewtuOyDqpUrXG06hojWUnEghjMaQ3 RUG6pIAjnuTgczrmXDKsBzkUbGp7/HlIwdXV6Xy9lYF6j78jvsCyCfAtQMzeowk8 2zQcY4SEHmkFHzOHigM8m1J8BELG2o+H8AJNbD8/7kIb3bWUiOte5KEySyIYMZGM RFJuI8RwNVGyqSWmYA7wZGpnbECU2u2EYUnExVfOT8glVCC5sj4P03k8OA8U/rVD LuaaFtFsvt7fXbth8zwPpaDfLRQ2qqiC -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:43 2024 by rpki-client on console-fra.rpki-client.org