$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: E4SqfR5bqYZzdhOM/+0JedwnQOwWl0/8i05ckP/cEQg= Subject key identifier: EF:45:79:5F:71:58:64:FF:A3:1E:4A:4A:F1:DE:AF:9A:97:DC:1C:9A Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: 24 Signing time: Wed 23 Oct 2024 06:28:23 +0000 Manifest this update: Wed 23 Oct 2024 06:28:23 +0000 Manifest next update: Wed 30 Oct 2024 06:28:23 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: fVw/I/HyQKUjlR3e/W15hU7pXJNuYQl+gyxUWqERBYY=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Oct 23 06:28:23 2024 GMT Not After : Oct 30 06:28:23 2024 GMT Subject: CN=67189787-1bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c4:b5:06:b5:be:fd:02:2d:76:fb:3f:51:c7: a3:4a:b6:6c:18:e4:37:f3:07:85:87:fd:9d:89:75: 3a:d9:aa:09:2e:2c:4e:79:0c:90:a5:d7:ae:15:99: cc:3a:3f:92:69:56:aa:2e:db:a1:0d:bf:5b:1e:f8: 2b:74:28:bd:51:c8:44:71:f5:f5:04:0e:46:51:7e: 79:00:d4:53:af:ce:66:32:1f:14:9c:44:72:ea:ca: 6c:50:cf:4b:13:09:72:b9:d2:b1:97:e2:5c:3a:da: a1:f4:5c:fd:f2:e4:e3:db:be:45:b1:32:90:88:2b: b3:e1:30:0f:ea:a6:bc:1f:f3:49:66:d7:57:57:fe: 39:ab:3e:6c:85:37:ec:63:14:d6:55:63:0e:f2:1e: a9:67:48:00:bb:33:ed:ab:f9:c8:67:b6:4c:50:34: 27:48:a2:75:a1:a4:cd:a4:ff:ce:4e:b9:d3:64:f5: 2b:67:bd:6f:5d:d7:80:cc:d2:9a:4c:7e:d6:32:c5: 88:bf:aa:0b:63:d2:e0:8c:cf:ed:fb:3e:c7:41:e9: 9d:38:50:0e:bc:e7:1e:1c:8b:18:8d:e0:4a:a5:42: 2c:67:38:63:dc:15:61:b2:d6:e3:53:6c:17:02:3f: 31:6b:4e:38:0c:b8:de:f7:b5:9d:94:88:50:47:24: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:45:79:5F:71:58:64:FF:A3:1E:4A:4A:F1:DE:AF:9A:97:DC:1C:9A X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e1:33:09:95:9d:95:a1:f3:87:e1:7c:0a:dd:9c:4b:44:9f: 46:80:e0:c8:48:40:10:4d:17:23:46:30:cd:d4:3d:c5:8e:1e: b2:af:64:c0:74:70:42:84:dc:3c:d0:52:93:48:1e:44:75:96: 2e:69:a7:5a:1f:a6:f8:c4:27:d6:e7:6c:70:35:8d:4c:83:be: fc:7b:01:67:55:ba:e9:5c:60:f5:de:9b:f5:33:9d:72:78:8e: c7:75:75:73:74:11:3a:b1:56:b3:0e:2f:03:86:43:94:e3:c6: a2:aa:17:7c:46:b7:9b:ee:c4:a3:b0:c3:5c:07:b6:45:9a:24: e4:fc:6f:a4:f1:e6:f9:60:01:b2:99:e3:5c:10:de:6a:72:0d: 43:d2:79:c0:ee:b8:35:f7:fe:8a:7d:c1:ec:d7:67:3c:99:ad: cd:45:69:78:ba:54:ea:ca:66:d3:42:25:43:7c:9f:be:60:73: ba:79:7a:72:72:d9:d9:74:66:f5:c1:bb:32:a8:ab:ce:8c:61: 73:28:72:97:7f:b9:d2:aa:ca:1d:40:2a:ca:72:fc:2d:ed:59: 04:56:9d:13:09:71:c5:23:ac:4f:ad:77:98:7e:6c:cd:c1:7e: 05:ac:99:e4:47:e0:3f:39:52:a1:58:c7:e8:cd:e6:56:b0:81: 69:f5:bc:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjczQjExMC8GA1UEBRMoRkM5RENDNkJBQzRGM0Q5QkVDOUVEMUU5MDY0RDlCQ0FE Q0Y5QTNBOTAeFw0yNDEwMjMwNjI4MjNaFw0yNDEwMzAwNjI4MjNaMBgxFjAUBgNV BAMTDTY3MTg5Nzg3LTFiYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnxLUGtb79Ai12+z9Rx6NKtmwY5DfzB4WH/Z2JdTrZqgkuLE55DJCl164Vmcw6 P5JpVqou26ENv1se+Ct0KL1RyERx9fUEDkZRfnkA1FOvzmYyHxScRHLqymxQz0sT CXK50rGX4lw62qH0XP3y5OPbvkWxMpCIK7PhMA/qprwf80lm11dX/jmrPmyFN+xj FNZVYw7yHqlnSAC7M+2r+chntkxQNCdIonWhpM2k/85OudNk9StnvW9d14DM0ppM ftYyxYi/qgtj0uCMz+37PsdB6Z04UA685x4cixiN4EqlQixnOGPcFWGy1uNTbBcC PzFrTjgMuN73tZ2UiFBHJGhRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU70V5X3FY ZP+jHkpK8d6vmpfcHJowHwYDVR0jBBgwFoAU/J3Ma6xPPZvsntHpBk2bytz5o6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NzNCLzc5NDYzMENDNURG RTExRUY4QzdFODE3QkM0RjlBRTAyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0ozTWE2eFBQWnZzbnRIcEJrMmJ5dHo1bzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NzNCLzc5NDYzMENDNURGRTExRUY4QzdFODE3QkM0RjlBRTAyL19KM01hNnhQUFp2 c250SHBCazJieXR6NW82ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzhMwmVnZWh84fhfArdnEtEn0aA4MhIQBBNFyNGMM3UPcWOHrKvZMB0 cEKE3DzQUpNIHkR1li5pp1ofpvjEJ9bnbHA1jUyDvvx7AWdVuulcYPXem/UznXJ4 jsd1dXN0ETqxVrMOLwOGQ5TjxqKqF3xGt5vuxKOww1wHtkWaJOT8b6Tx5vlgAbKZ 41wQ3mpyDUPSecDuuDX3/op9wezXZzyZrc1FaXi6VOrKZtNCJUN8n75gc7p5enJy 2dl0ZvXBuzKoq86MYXMocpd/udKqyh1AKspy/C3tWQRWnRMJccUjrE+td5h+bM3B fgWsmeRH4D85UqFYx+jN5lawgWn1vGw= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org