$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: VZxYg77taPtXK1J/qmKwaUzQTtIoBx038+XSgQxozCs= Subject key identifier: C2:81:86:53:05:B3:EC:03:EB:1E:8D:94:B4:DA:5D:2E:3F:0C:1D:F5 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 343C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3429 Signing time: Wed 20 Nov 2024 14:28:47 +0000 Manifest this update: Wed 20 Nov 2024 14:28:46 +0000 Manifest next update: Wed 27 Nov 2024 14:28:46 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 8aVqXhidrhh8gCiETwHSr62yKQ7/FuMGq3PqssOphZE=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: /KWKCJoYlSZLHI0ouCCxx6TzSSCX6xcOP12a4mUNgts=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: ea8eMteisHvIepMEhAjTnxYwI9xVzRVN61pc6MiuWHw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: kZY0gEYojacBpy6Flxbc6cWYiWfgAwQSMnYX8MagWhA=) 5: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk=) 6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: bbZorhEHvZGDWgYeGn1wGIwXXDeJcbfTgB66dUy14go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13372 (0x343c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Nov 20 14:28:46 2024 GMT Not After : Nov 27 14:28:46 2024 GMT Subject: CN=673df21e-eb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8b:79:a4:bc:a6:4e:a9:9b:8f:29:14:3a:05: ea:82:6c:50:e7:97:f9:24:9d:5c:06:0c:ef:fc:cd: ad:b8:90:34:2f:46:5e:95:be:11:4e:dd:6d:4e:f0: 70:c7:ae:62:8c:74:1a:ba:f7:c5:c6:9a:e0:e5:55: 02:b4:c4:c6:85:e3:fb:39:09:41:93:10:f8:e7:22: 67:fe:ff:29:17:0a:62:a4:69:af:71:d1:40:0b:17: ec:c4:46:e3:d1:1f:88:3a:d3:b8:c3:57:44:7e:15: 3f:4b:7d:c4:67:8f:76:19:98:a4:86:ec:48:29:6f: f9:6b:cf:a6:ad:c8:7c:a2:ee:b9:10:8d:55:a0:2b: f8:72:c2:9c:7e:1f:4f:8a:8e:0e:66:16:f4:b2:33: 94:f8:6d:06:2d:93:71:98:09:b2:4f:ce:0b:12:e9: fd:b9:9a:e0:8a:1d:83:68:dd:64:a4:b1:11:fd:fd: c3:24:fc:c7:30:c1:d9:76:11:d8:90:e2:bf:5e:bc: fb:87:e2:c7:cb:45:f4:91:3e:ed:62:fb:82:c9:1e: 5c:f2:d9:a0:f1:82:1c:e6:04:d0:53:30:3d:ea:bf: 94:f9:a2:77:4f:bf:f8:87:8e:cf:da:3a:37:28:e2: 91:80:d4:ab:8d:48:0e:39:36:3e:bf:8f:4a:50:08: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:81:86:53:05:B3:EC:03:EB:1E:8D:94:B4:DA:5D:2E:3F:0C:1D:F5 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ee:b9:e1:91:53:67:65:67:bb:7e:d5:17:b5:b4:28:d3:41: ab:92:14:64:bc:98:e3:bf:35:b3:06:42:a3:fb:6f:47:45:f9: 68:ae:09:f4:9c:31:87:37:e0:e7:6d:fc:79:41:c1:98:3f:26: e5:ed:5b:c4:ea:d7:5d:1d:31:9c:8d:58:73:f2:3b:b4:b5:58: 3f:2d:78:d9:6f:31:e1:7f:8e:4e:1e:34:0c:8a:ea:16:23:b1: 3a:f2:08:12:da:e1:b1:5e:cb:99:2d:a1:9b:c4:2e:4d:63:c5: c5:72:aa:c8:a5:27:ba:01:b5:02:ac:d3:3b:7c:00:77:78:e7: 9b:ed:f7:53:f2:b6:3d:96:3b:b8:c8:70:8f:a0:f7:82:b4:e3: f9:aa:e7:5b:1d:96:de:26:39:4d:4b:a2:86:e5:75:d0:40:4c: 3c:86:d5:b9:62:f5:e7:9c:bf:35:02:8c:74:5e:40:83:fb:d3: bc:1b:5d:c6:60:39:b7:b3:77:f3:d7:a7:5b:de:dd:0a:1c:0a: f9:5e:3c:03:50:7e:87:ee:d4:ad:27:92:92:93:1c:a5:20:9f: c5:d2:7d:9d:d1:74:e8:b0:ce:94:d8:d6:de:ef:60:a2:77:38: 16:c2:08:15:1f:a2:9d:7f:ba:55:54:a4:cb:ba:99:65:3f:e1: da:ab:30:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjQxMTIwMTQyODQ2WhcNMjQxMTI3MTQyODQ2WjAYMRYwFAYD VQQDEw02NzNkZjIxZS1lYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+4t5pLymTqmbjykUOgXqgmxQ55f5JJ1cBgzv/M2tuJA0L0Zelb4RTt1tTvBw x65ijHQauvfFxprg5VUCtMTGheP7OQlBkxD45yJn/v8pFwpipGmvcdFACxfsxEbj 0R+IOtO4w1dEfhU/S33EZ492GZikhuxIKW/5a8+mrch8ou65EI1VoCv4csKcfh9P io4OZhb0sjOU+G0GLZNxmAmyT84LEun9uZrgih2DaN1kpLER/f3DJPzHMMHZdhHY kOK/Xrz7h+LHy0X0kT7tYvuCyR5c8tmg8YIc5gTQUzA96r+U+aJ3T7/4h47P2jo3 KOKRgNSrjUgOOTY+v49KUAienQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKBhlMF s+wD6x6NlLTaXS4/DB31MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe7rnhkVNnZWe7ftUXtbQo00GrkhRkvJjjvzWzBkKj+29HRflorgn0 nDGHN+Dnbfx5QcGYPybl7VvE6tddHTGcjVhz8ju0tVg/LXjZbzHhf45OHjQMiuoW I7E68ggS2uGxXsuZLaGbxC5NY8XFcqrIpSe6AbUCrNM7fAB3eOeb7fdT8rY9lju4 yHCPoPeCtOP5qudbHZbeJjlNS6KG5XXQQEw8htW5YvXnnL81Aox0XkCD+9O8G13G YDm3s3fz16db3t0KHAr5XjwDUH6H7tStJ5KSkxylIJ/F0n2d0XTosM6U2Nbe72Ci dzgWwggVH6Kdf7pVVKTLupllP+HaqzB2 -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:17 2024 by rpki-client on console-ams.rpki-client.org