$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: 5Cm8vh+cz7bTGjBBAiNPztA7lGoeEMq0c+IEqIClJFI= Subject key identifier: 2D:BC:E1:2B:97:95:A6:10:AA:6D:D2:16:D1:68:2E:23:76:67:34:3E Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 0A Signing time: Wed 25 Dec 2024 06:12:32 +0000 Manifest this update: Wed 25 Dec 2024 06:12:31 +0000 Manifest next update: Wed 01 Jan 2025 06:12:31 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: hdtkZjLALwVkx9L/lKTSW9YN//pOkfntJYo6Qb+v2c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Dec 25 06:12:31 2024 GMT Not After : Jan 1 06:12:31 2025 GMT Subject: CN=676ba250-1008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:c3:bd:f5:f4:b9:7b:d5:9f:5a:c7:dd:6f: 3c:28:a0:cd:e5:e4:c7:ff:c2:18:50:64:8f:c6:a6: ee:7b:64:28:7b:49:7b:29:a7:ba:66:34:f9:00:08: 47:a5:fe:e8:40:29:2b:ae:da:9a:8e:31:d5:e5:29: 98:fc:e0:35:13:f7:49:c7:4a:09:ee:d5:25:67:79: 28:bc:fb:cb:f9:f8:c5:91:49:83:c9:fd:e7:fa:3f: 57:d9:25:d1:f6:c6:f2:87:39:d6:c3:7a:66:2b:01: 5d:72:2a:33:6b:27:99:05:66:6d:07:20:57:e7:3e: 1a:11:69:b2:73:86:e2:6d:b4:fd:97:f7:d0:fa:62: 00:57:c2:ff:dc:bf:76:49:6b:bf:0e:04:46:5c:8a: 8e:f1:17:95:a9:4d:b3:87:b9:fb:81:08:3a:22:64: 13:15:2a:d5:ce:95:37:aa:f2:94:3c:23:69:70:97: ac:2a:8c:4e:7f:29:71:09:08:cc:14:07:4a:bd:c9: a3:79:1f:01:90:a1:0a:8d:a1:e2:8a:7a:a5:a7:29: d2:4e:9c:1e:76:4e:85:07:d3:37:19:e7:62:3f:f4: 76:ef:95:65:b6:83:70:c7:63:97:84:07:15:20:35: be:4e:58:24:d2:52:b4:6c:d4:ba:37:bd:cb:07:13: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BC:E1:2B:97:95:A6:10:AA:6D:D2:16:D1:68:2E:23:76:67:34:3E X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:51:47:71:e3:7e:ee:3b:17:13:52:da:76:2d:c2:07:11:a2: ef:f5:14:23:81:52:25:84:54:8b:31:c9:fa:39:3f:9d:bf:f6: 43:3b:cf:f2:11:7a:cd:b1:a1:5c:46:e6:9c:d4:17:8a:58:0d: c9:a1:2c:3d:22:bc:1d:91:74:ec:b3:01:a1:e5:db:00:1c:d1: 3d:db:ab:c9:5d:bc:18:4c:40:e1:68:11:1f:4e:3d:cb:aa:e1: e4:58:19:ed:64:04:4e:68:a2:ff:62:62:71:0c:b0:58:2d:a3: 98:5c:60:ff:6f:2d:f0:44:64:62:19:9d:d9:75:63:d9:2f:98: 1b:75:d0:c3:2e:88:00:91:8f:90:7c:aa:16:4a:7b:cf:b2:38: 82:f8:dc:8d:53:3f:b8:fc:db:42:02:6b:95:45:07:33:1b:1b: 7f:cc:e6:cd:16:7f:b1:52:7d:09:c5:1c:52:c9:f1:29:2e:8c: 10:d8:19:7f:e7:da:0e:a7:2f:32:3b:58:7c:59:e5:e1:95:ec: 46:8e:c9:6f:a0:b3:9d:42:79:ee:cd:73:75:97:50:f4:e8:66: db:d9:34:da:a5:dc:f8:7b:ba:9b:22:53:d1:e1:c9:d9:f4:c4: 3f:9b:6a:2c:b4:a2:17:eb:70:65:31:75:97:50:da:71:4b:ea: 3e:1d:25:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzMyQTExMC8GA1UEBRMoREMxMTMwRDg2MTZCQUJDNkNFMDg4RjVGMjBFNjk3MTlB OTlDMzJCQjAeFw0yNDEyMjUwNjEyMzFaFw0yNTAxMDEwNjEyMzFaMBgxFjAUBgNV BAMTDTY3NmJhMjUwLTEwMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRMMO99fS5e9WfWsfdbzwooM3l5Mf/whhQZI/Gpu57ZCh7SXspp7pmNPkACEel /uhAKSuu2pqOMdXlKZj84DUT90nHSgnu1SVneSi8+8v5+MWRSYPJ/ef6P1fZJdH2 xvKHOdbDemYrAV1yKjNrJ5kFZm0HIFfnPhoRabJzhuJttP2X99D6YgBXwv/cv3ZJ a78OBEZcio7xF5WpTbOHufuBCDoiZBMVKtXOlTeq8pQ8I2lwl6wqjE5/KXEJCMwU B0q9yaN5HwGQoQqNoeKKeqWnKdJOnB52ToUH0zcZ52I/9HbvlWW2g3DHY5eEBxUg Nb5OWCTSUrRs1Lo3vcsHE0tbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULbzhK5eV phCqbdIW0WguI3ZnND4wHwYDVR0jBBgwFoAU3BEw2GFrq8bOCI9fIOaXGamcMrsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MzJBLzA4OUJDNEU2QjYz MTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01y cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0JFdzJHRnJxOGJPQ0k5ZklPYVhHYW1jTXJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MzJBLzA4OUJDNEU2QjYzMTExRUZBMkQ3RkI2M0M0RjlBRTAyLzNCRXcyR0ZycThi T0NJOWZJT2FYR2FtY01ycy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ5RR3Hjfu47FxNS2nYtwgcRou/1FCOBUiWEVIsxyfo5P52/9kM7z/IR es2xoVxG5pzUF4pYDcmhLD0ivB2RdOyzAaHl2wAc0T3bq8ldvBhMQOFoER9OPcuq 4eRYGe1kBE5oov9iYnEMsFgto5hcYP9vLfBEZGIZndl1Y9kvmBt10MMuiACRj5B8 qhZKe8+yOIL43I1TP7j820ICa5VFBzMbG3/M5s0Wf7FSfQnFHFLJ8SkujBDYGX/n 2g6nLzI7WHxZ5eGV7EaOyW+gs51Cee7Nc3WXUPToZtvZNNql3Ph7upsiU9Hhydn0 xD+baiy0ohfrcGUxdZdQ2nFL6j4dJXo= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:24 2024 by rpki-client on console-fra.rpki-client.org