$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: aJx5oPl8dp6MEOQROP5dCsRn+baWNzZ92gYl1/BW1B0= Subject key identifier: 9E:11:89:6B:CB:0F:75:3A:EC:EF:3F:D5:47:EA:09:1D:CE:67:63:3B Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 03C0 Signing time: Sat 23 Nov 2024 00:17:46 +0000 Manifest this update: Sat 23 Nov 2024 00:17:45 +0000 Manifest next update: Sat 30 Nov 2024 00:17:45 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: KSNjEHnw0t1knbCGVAeQstaiJtOOzkjsx9tVV620eyw=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: eTwkMuYUIOgdznBYVf6eQsQpDlEOTC7ueZ80Zm3peOI=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: hTxACudFmaxhiuRlVpfSZ+VLRwh/VJm74WXND1tMFVQ=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: lpn3iJcIxHaHhOivQ0V5OIa9XZf5fOxSNOm7e/UeYag=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: I+R2Z6C5YKl1I0wcACmRXbnf5UAoHuc3xb2D4JHIgVw=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: 0gEYccIBYOr+zuyign/+C00HzqYzr+UjJcZXD9KjzOg=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: aB1vZOko5LuCPFaMLMMYKE7YXbi5h8lQp7z82oAmSsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Nov 23 00:17:45 2024 GMT Not After : Nov 30 00:17:45 2024 GMT Subject: CN=67411f2a-76e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:3f:96:ed:7a:5c:a6:5d:e4:9e:e8:c2:da: b8:74:24:b0:54:25:35:5a:1d:74:c1:14:b1:86:de: 5e:6c:11:2d:2a:33:bd:00:45:f2:e0:14:2f:35:b1: c4:d7:5c:c9:9a:30:87:9d:a9:62:d2:a2:3c:c2:78: 54:78:4c:10:cb:62:72:d3:7d:d9:cd:6f:88:67:a7: cf:b8:34:ae:62:ae:99:16:f5:d9:57:97:fb:fb:95: af:84:47:ff:d3:0f:fa:3b:aa:96:37:1c:e5:40:16: 0a:6a:5e:25:4d:16:c4:10:31:cf:d5:f9:7a:2c:71: 33:73:79:29:61:4f:61:0b:7e:68:4f:0f:a9:ed:c9: 6f:b9:ec:a5:05:98:ce:07:2a:61:ac:f7:84:5e:37: af:0e:49:01:31:c1:0c:33:c5:1e:4b:a9:88:d5:48: 1b:df:2a:b9:41:c4:02:24:fd:fb:2d:98:7f:b3:72: d8:69:0f:a7:3c:a6:e9:f3:8f:02:76:91:fc:ab:aa: 91:fa:58:cb:8a:c3:36:fa:ec:eb:a2:b0:de:29:e5: 95:e1:ee:e8:4f:d8:cc:99:6a:22:0e:17:02:be:ae: 6c:69:99:4e:43:f2:03:6e:c2:c3:9d:b6:f1:4a:4d: 7f:1d:7e:75:1f:69:41:1c:c6:14:5e:e1:ba:14:33: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:89:6B:CB:0F:75:3A:EC:EF:3F:D5:47:EA:09:1D:CE:67:63:3B X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b7:a5:67:c3:af:8b:39:9c:f3:b6:8e:f1:f1:4a:37:7f:17: 7f:69:66:bd:74:94:99:a4:88:a5:3b:84:5e:b2:87:95:03:c9: 3f:63:8b:44:a9:2f:1b:d9:35:ca:33:d6:ab:c5:d7:1f:99:56: 98:5c:c5:8d:b4:73:c1:c1:89:58:62:67:e4:e0:fa:22:18:84: 3b:ed:93:10:8a:c6:c1:6f:20:d5:10:7c:3c:58:20:40:47:62: f9:ca:c6:91:53:33:98:93:e1:dc:dc:0a:c4:9b:46:42:99:f7: 70:1f:f0:11:c7:e9:9a:be:01:16:78:b6:6e:06:da:27:04:8e: 33:e1:f4:3e:78:bf:32:69:43:5e:54:af:b9:f4:4d:8a:5f:e6: 0c:0a:3f:61:c9:66:cd:9f:de:d1:04:cb:f4:80:f9:ae:c7:7e: ff:b9:76:ba:3d:ca:f3:4e:21:12:1c:b7:1b:6d:96:6f:15:c5: 0d:a8:be:d0:13:02:53:c2:42:eb:34:ed:32:ef:49:79:c2:9b: 9c:20:9c:46:09:8c:22:e9:d2:f7:9e:3c:24:2d:eb:c8:a6:76: d0:8b:b4:0b:f0:a4:ae:b3:22:44:80:29:d5:49:11:b3:1c:65: 8d:e5:f6:6a:f6:6a:d3:95:4f:5f:f0:b0:8c:c0:01:56:30:50: 1f:4e:37:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjQxMTIzMDAxNzQ1WhcNMjQxMTMwMDAxNzQ1WjAYMRYwFAYD VQQDEw02NzQxMWYyYS03NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscE/lu16XKZd5J7owtq4dCSwVCU1Wh10wRSxht5ebBEtKjO9AEXy4BQvNbHE 11zJmjCHnali0qI8wnhUeEwQy2Jy033ZzW+IZ6fPuDSuYq6ZFvXZV5f7+5WvhEf/ 0w/6O6qWNxzlQBYKal4lTRbEEDHP1fl6LHEzc3kpYU9hC35oTw+p7clvueylBZjO ByphrPeEXjevDkkBMcEMM8UeS6mI1Ugb3yq5QcQCJP37LZh/s3LYaQ+nPKbp848C dpH8q6qR+ljLisM2+uzrorDeKeWV4e7oT9jMmWoiDhcCvq5saZlOQ/IDbsLDnbbx Sk1/HX51H2lBHMYUXuG6FDP4VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4RiWvL D3U67O8/1UfqCR3OZ2M7MB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAst6Vnw6+LOZzzto7x8Uo3fxd/aWa9dJSZpIilO4ResoeVA8k/Y4tE qS8b2TXKM9arxdcfmVaYXMWNtHPBwYlYYmfk4PoiGIQ77ZMQisbBbyDVEHw8WCBA R2L5ysaRUzOYk+Hc3ArEm0ZCmfdwH/ARx+mavgEWeLZuBtonBI4z4fQ+eL8yaUNe VK+59E2KX+YMCj9hyWbNn97RBMv0gPmux37/uXa6PcrzTiESHLcbbZZvFcUNqL7Q EwJTwkLrNO0y70l5wpucIJxGCYwi6dL3njwkLevIpnbQi7QL8KSusyJEgCnVSRGz HGWN5fZq9mrTlU9f8LCMwAFWMFAfTjcN -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org