$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: PHn4qf3XSM4JwOyyOhS8ZtyI//c/EZJBsC9FIE5Ke30= Subject key identifier: 0A:A8:C4:FC:8A:58:86:8F:9F:D0:CB:DF:09:03:F5:E2:14:B5:AD:88 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0BE8 Signing time: Fri 22 Nov 2024 18:23:07 +0000 Manifest this update: Fri 22 Nov 2024 18:23:07 +0000 Manifest next update: Fri 29 Nov 2024 18:23:07 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: TbzUE8uA4p4LEMl+9YqX0Dfq740ITOBzrM8wp2VRi+8=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Nov 22 18:23:07 2024 GMT Not After : Nov 29 18:23:07 2024 GMT Subject: CN=6740cc0b-265a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:0b:aa:09:22:c3:88:12:fc:e7:b8:7f:8d: 0f:b5:52:39:4f:e9:8a:2f:fd:49:04:b9:b0:7c:33: 90:55:a8:78:9f:e4:4a:50:23:92:52:d8:2c:48:38: 97:dd:0b:18:a5:f1:0c:4d:40:f0:89:15:d6:ff:e0: c3:16:53:b7:3c:01:b3:52:3b:58:c7:67:5d:13:62: 28:0d:74:cd:f2:de:d6:eb:60:20:39:85:c0:22:a8: 33:46:ba:57:c5:94:b0:f7:43:4f:a9:50:c0:f7:bb: 52:85:e9:a6:eb:54:0f:f6:57:d0:af:e4:79:a4:8e: 6b:99:b4:3d:58:28:20:78:57:67:a4:a0:d0:7b:c1: db:1f:06:3a:03:0e:fa:d8:61:7f:5f:c8:8b:35:e5: 82:4c:bb:e4:f0:ab:41:b7:b2:b0:b3:c8:3b:11:1b: e4:bf:d3:46:8c:14:4e:a4:ae:ea:85:a4:d9:95:d7: 13:c2:5d:09:64:d7:3b:31:d3:9d:7b:e6:a5:2e:a8: 96:74:f2:f0:d1:78:12:4e:ab:1b:45:ed:a9:f3:9b: f9:60:57:6e:c1:3e:0b:90:ee:b2:ab:61:a8:40:0d: 18:41:49:8d:72:9a:0e:e2:ca:d4:47:70:c5:7e:57: 84:0b:cb:05:69:41:4e:6a:30:a1:37:61:fa:5c:75: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A8:C4:FC:8A:58:86:8F:9F:D0:CB:DF:09:03:F5:E2:14:B5:AD:88 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ab:47:b0:31:dc:06:b1:63:45:1d:d1:7e:2b:2f:f8:ac:dd: f6:1f:89:88:54:f1:50:99:fa:b9:2b:db:ed:cb:5e:ed:e0:d9: c8:a3:8c:8b:dd:77:29:1c:b5:6c:ac:22:18:ab:e4:a9:90:d8: f5:80:ff:eb:1c:21:fd:53:5c:62:e8:be:59:f5:96:33:ea:76: cb:05:8a:b5:7d:cb:47:b7:bd:1a:76:1d:c4:7c:ec:99:f2:34: 38:ae:70:5d:a2:70:09:b2:02:65:76:59:3e:93:c2:88:6e:6c: e0:b7:4c:b0:d4:17:94:8a:c6:04:07:a8:d2:f4:f8:f9:a1:79: 16:30:c9:66:5e:00:41:50:76:48:e1:38:07:e2:20:1a:d7:16: 83:81:af:b4:99:16:bb:34:59:de:a0:bc:5f:33:c4:06:d4:4a: b9:9f:de:79:cf:eb:83:9a:63:0d:e2:5e:83:ea:52:cb:70:08: 72:ab:80:d5:ea:d2:a0:04:c2:2c:b0:26:c2:be:44:ad:de:c3: 75:22:61:bf:ee:47:a3:76:6e:aa:4e:f9:2b:2b:9d:eb:32:1b: 7c:d5:0a:28:fe:61:29:e2:2a:e5:23:9a:a2:d4:b4:7c:bd:15: ce:d4:2c:4f:94:10:ff:7b:46:6b:29:82:fb:c2:92:35:ee:ae: c7:56:cf:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjQxMTIyMTgyMzA3WhcNMjQxMTI5MTgyMzA3WjAYMRYwFAYD VQQDEw02NzQwY2MwYi0yNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9ULqgkiw4gS/Oe4f40PtVI5T+mKL/1JBLmwfDOQVah4n+RKUCOSUtgsSDiX 3QsYpfEMTUDwiRXW/+DDFlO3PAGzUjtYx2ddE2IoDXTN8t7W62AgOYXAIqgzRrpX xZSw90NPqVDA97tShemm61QP9lfQr+R5pI5rmbQ9WCggeFdnpKDQe8HbHwY6Aw76 2GF/X8iLNeWCTLvk8KtBt7Kws8g7ERvkv9NGjBROpK7qhaTZldcTwl0JZNc7MdOd e+alLqiWdPLw0XgSTqsbRe2p85v5YFduwT4LkO6yq2GoQA0YQUmNcpoO4srUR3DF fleEC8sFaUFOajChN2H6XHVsewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqoxPyK WIaPn9DL3wkD9eIUta2IMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVq0ewMdwGsWNFHdF+Ky/4rN32H4mIVPFQmfq5K9vty17t4NnIo4yL 3XcpHLVsrCIYq+SpkNj1gP/rHCH9U1xi6L5Z9ZYz6nbLBYq1fctHt70adh3EfOyZ 8jQ4rnBdonAJsgJldlk+k8KIbmzgt0yw1BeUisYEB6jS9Pj5oXkWMMlmXgBBUHZI 4TgH4iAa1xaDga+0mRa7NFneoLxfM8QG1Eq5n955z+uDmmMN4l6D6lLLcAhyq4DV 6tKgBMIssCbCvkSt3sN1ImG/7kejdm6qTvkrK53rMht81Qoo/mEp4irlI5qi1LR8 vRXO1CxPlBD/e0ZrKYL7wpI17q7HVs8r -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org