$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft File: 3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json) Hash identifier: YULmeIPIn2iAH4baYM3KPtWffVy6JtWE7IhJOPj6znM= Subject key identifier: 39:EC:36:72:52:A5:E9:AA:9A:FE:B5:44:84:BB:95:4D:07:B7:87:7E Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 Certificate issuer: /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft Manifest number: E0 Signing time: Sat 23 Nov 2024 03:34:50 +0000 Manifest this update: Sat 23 Nov 2024 03:34:49 +0000 Manifest next update: Sat 30 Nov 2024 03:34:49 +0000 Files and hashes: 1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: F7x66zNpeIgpZTVnOGVJ4xehsNTkdtbXyhy8tlicO5Q=) 2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 62+q+uvhfjJ30zAscNkGLPxXNqqCO9Ks9yOvU1E/mYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0 Validity Not Before: Nov 23 03:34:49 2024 GMT Not After : Nov 30 03:34:49 2024 GMT Subject: CN=67414d59-d158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:7a:1d:f6:c0:77:81:32:6c:f6:2f:b3:55: d3:05:b2:68:16:b9:ff:27:ab:03:70:bb:1f:83:49: 80:2e:98:eb:fc:c3:21:37:93:52:07:e9:b3:37:44: 29:47:bb:d5:c5:cd:de:e1:5f:5a:84:92:34:d3:eb: d6:c8:d8:be:fc:ce:2d:91:bd:43:13:4a:22:ac:99: 21:4e:30:09:06:87:e2:2b:9e:db:17:3e:0a:05:af: a1:65:9f:6a:ee:56:4c:28:2a:f2:c5:73:29:bb:7b: 52:68:24:e5:dd:9a:6e:97:e5:75:40:29:a1:c0:39: 36:ca:ec:4a:39:18:a4:0c:bf:6e:43:37:18:54:cd: c8:2f:34:9e:23:21:a8:fb:b0:22:d5:c1:1b:fa:64: 8d:8a:12:16:f4:f0:b8:eb:c6:51:77:86:f8:8c:6d: 6b:07:d0:3b:39:69:a1:f4:78:e8:45:72:10:30:a3: 6b:dd:77:27:9d:c0:f3:f6:07:f9:eb:81:8e:ad:22: 14:51:c1:82:9d:1d:06:5b:46:b3:e5:4a:38:56:1e: 2a:46:1f:c6:2c:9c:75:0a:03:91:e6:29:8e:9b:bd: 84:a2:7b:cf:26:61:97:33:8d:4f:5b:c2:51:08:c0: 30:86:27:e6:05:fa:59:31:d2:65:e4:02:64:92:ec: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:36:72:52:A5:E9:AA:9A:FE:B5:44:84:BB:95:4D:07:B7:87:7E X509v3 Authority Key Identifier: keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:11:ad:80:3a:cd:06:53:f5:19:16:aa:1a:06:73:94:29:ec: 21:26:39:3b:39:07:02:dc:4d:bc:5c:80:c0:9b:cd:c4:c2:70: cd:15:44:17:cc:ba:aa:59:34:58:00:6c:5e:9d:26:cf:38:e6: 2e:a8:fc:99:fb:4b:d5:22:5a:3b:b0:d9:91:98:fd:6c:8f:01: 9b:cd:3d:5d:97:ea:22:11:ff:65:4e:75:23:92:07:ec:e5:cc: 9c:19:66:c3:b1:cd:1d:23:03:19:67:38:17:a7:31:85:40:60: e3:dd:93:37:4f:03:bd:f0:c2:65:6e:1a:3a:86:a7:f2:2c:6a: 3a:5c:6c:0b:33:8c:7f:53:ee:b8:11:c5:7c:fb:9e:07:53:8c: 26:cf:4e:ee:94:d0:18:3d:94:5b:46:b9:9a:97:73:06:f7:9f: 38:f5:89:d6:b1:0f:fe:ad:80:7f:eb:26:7b:b8:cb:95:f2:24: 2f:38:79:e7:50:bc:95:e5:68:42:df:17:15:2b:40:e7:67:07: 11:a2:a6:ed:a8:6a:92:69:5f:17:33:60:64:65:db:47:20:d6: 29:66:63:30:2f:39:c3:0b:c5:40:27:42:b8:c6:7a:35:69:0d: cb:74:e4:8f:b8:db:45:8b:13:2e:3f:e6:06:5b:24:56:2b:2d: 4f:be:27:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzIxMTAvBgNVBAUTKERFRjA5QUI3RTZBRDQ4MDBEMDY3RDcwMkFCRjMwMjI2 MjlEQzU2RTAwHhcNMjQxMTIzMDMzNDQ5WhcNMjQxMTMwMDMzNDQ5WjAYMRYwFAYD VQQDEw02NzQxNGQ1OS1kMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxht6HfbAd4EybPYvs1XTBbJoFrn/J6sDcLsfg0mALpjr/MMhN5NSB+mzN0Qp R7vVxc3e4V9ahJI00+vWyNi+/M4tkb1DE0oirJkhTjAJBofiK57bFz4KBa+hZZ9q 7lZMKCryxXMpu3tSaCTl3Zpul+V1QCmhwDk2yuxKORikDL9uQzcYVM3ILzSeIyGo +7Ai1cEb+mSNihIW9PC468ZRd4b4jG1rB9A7OWmh9HjoRXIQMKNr3XcnncDz9gf5 64GOrSIUUcGCnR0GW0az5Uo4Vh4qRh/GLJx1CgOR5imOm72EonvPJmGXM41PW8JR CMAwhifmBfpZMdJl5AJkkuyLrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnsNnJS pemqmv61RIS7lU0Ht4d+MB8GA1UdIwQYMBaAFN7wmrfmrUgA0GfXAqvzAiYp3Fbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzMi9BQzM2QjM2ODUx RjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNBRFFaOWNDcV9NQ0ppbmNW dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2Q2F0LWF0U0FEUVo5Y0NxX01DSmluY1Z1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0IzMi9BQzM2QjM2ODUxRjExMUVFQTdEQzI2NjZDNEY5QUUwMi8zdkNhdC1hdFNB RFFaOWNDcV9NQ0ppbmNWdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgEa2AOs0GU/UZFqoaBnOUKewhJjk7OQcC3E28XIDAm83EwnDNFUQX zLqqWTRYAGxenSbPOOYuqPyZ+0vVIlo7sNmRmP1sjwGbzT1dl+oiEf9lTnUjkgfs 5cycGWbDsc0dIwMZZzgXpzGFQGDj3ZM3TwO98MJlbho6hqfyLGo6XGwLM4x/U+64 EcV8+54HU4wmz07ulNAYPZRbRrmal3MG95849YnWsQ/+rYB/6yZ7uMuV8iQvOHnn ULyV5WhC3xcVK0DnZwcRoqbtqGqSaV8XM2BkZdtHINYpZmMwLznDC8VAJ0K4xno1 aQ3LdOSPuNtFixMuP+YGWyRWKy1Pvid2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org