$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: utERJRB+AJC92rO8k20OdVZEt8zDi8Q939bVWWITGSQ= Subject key identifier: 12:06:38:FA:BA:EE:A2:0F:BA:3A:99:06:66:3C:AB:CF:9F:88:4D:B9 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0C17 Signing time: Fri 22 Nov 2024 18:23:15 +0000 Manifest this update: Fri 22 Nov 2024 18:23:14 +0000 Manifest next update: Fri 29 Nov 2024 18:23:14 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: okzc6/nHJjgcxddpbnAUt6MkbZ6tBBow5G/7L0sKDws=) 2: 717FA770604811EDB338B84DC4F9AE02.roa (hash: 2tZ4h2GPxtQNcv8jA5c9a3Jw7XsP+8OAzijf8yoVYIY=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: qtmkvS7wntM3yvPcYxkpuUPpzwLvpqXTKFNhLIzEUDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Nov 22 18:23:14 2024 GMT Not After : Nov 29 18:23:14 2024 GMT Subject: CN=6740cc12-79a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:79:a9:31:b0:92:33:9e:6d:c1:fa:3f:0a:50: 3b:c2:ad:d3:b3:2c:ad:5a:aa:4d:e0:a1:d1:58:b1: a7:cf:bb:c1:19:10:4a:ed:05:2f:6e:0b:2d:5b:0b: f0:b0:30:1f:91:41:aa:d3:b1:fc:52:8c:3d:a5:d6: ad:5a:96:25:f7:50:52:62:fe:41:08:a1:d6:99:a1: 70:16:34:47:30:5c:3e:dc:c8:39:bd:4d:3f:91:b8: 54:a5:e2:b4:43:66:bf:58:f0:2e:fb:5f:54:a8:2a: 0c:a2:ad:52:93:ee:59:27:e3:0c:64:e4:02:c4:24: 74:11:68:c3:f4:48:42:62:9e:9f:b9:a3:a7:8e:ae: 4f:3f:32:90:02:96:d9:64:27:4e:f7:68:ea:ce:d6: db:56:5d:a6:8e:ad:30:bb:80:0b:4d:96:50:4d:6c: f1:29:df:c5:5f:08:6b:63:c1:d9:04:4b:cc:d1:43: 1a:b0:db:9c:61:a2:0c:69:e1:e7:9f:57:a0:f6:a9: 25:c5:9f:fa:a4:12:fb:f1:28:2f:78:5b:38:c0:c6: 9a:19:72:86:0a:c0:83:57:99:a2:f9:fb:7f:99:00: 0e:83:17:84:a8:b4:37:f4:2f:86:de:f2:80:77:1f: f0:22:ca:03:36:59:53:2b:4e:57:68:75:61:24:3e: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:06:38:FA:BA:EE:A2:0F:BA:3A:99:06:66:3C:AB:CF:9F:88:4D:B9 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:71:a9:a7:b9:9a:82:2c:47:06:d6:5c:21:ff:5e:39:85:8b: fe:9d:49:80:40:84:98:da:e4:39:5d:bc:7d:52:f1:84:2e:1b: cd:fa:49:6f:3a:95:0c:24:50:c6:35:6a:61:e3:ee:83:40:1b: 3c:a9:36:b6:fd:31:db:c0:ef:8a:03:08:6c:88:1b:a6:40:ac: d6:eb:b2:8e:97:e9:f0:f0:6a:75:7a:de:a3:5b:b2:36:09:18: b1:1a:b9:d8:fa:36:eb:3f:28:e9:ae:4e:df:eb:f3:25:ed:9a: 9b:d6:98:92:ff:27:61:fa:a0:16:03:64:15:ab:c8:40:d1:b7: 7a:3d:53:e2:d5:58:96:37:f0:eb:15:8c:ba:5f:0d:bf:b9:8c: 2a:4c:7c:c9:14:d7:59:f8:00:e0:64:86:0c:e0:a1:90:e8:1b: a5:25:12:00:e3:56:12:f9:88:3f:bb:c9:c2:bf:37:ad:40:dd: 4a:b3:a8:b2:5f:88:30:18:ce:c3:42:00:8f:d1:29:0e:2c:ca: c6:b1:e8:de:39:c3:67:08:c1:e5:6a:fb:9d:87:55:d6:62:a6: 93:76:b1:6a:96:27:2c:22:44:95:53:11:76:ba:86:33:d6:f8: 6a:ed:88:02:20:2c:5e:7c:5e:11:4c:8e:7e:fe:4e:11:12:d8: 92:c2:85:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjQxMTIyMTgyMzE0WhcNMjQxMTI5MTgyMzE0WjAYMRYwFAYD VQQDEw02NzQwY2MxMi03OWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8nmpMbCSM55twfo/ClA7wq3TsyytWqpN4KHRWLGnz7vBGRBK7QUvbgstWwvw sDAfkUGq07H8Uow9pdatWpYl91BSYv5BCKHWmaFwFjRHMFw+3Mg5vU0/kbhUpeK0 Q2a/WPAu+19UqCoMoq1Sk+5ZJ+MMZOQCxCR0EWjD9EhCYp6fuaOnjq5PPzKQApbZ ZCdO92jqztbbVl2mjq0wu4ALTZZQTWzxKd/FXwhrY8HZBEvM0UMasNucYaIMaeHn n1eg9qklxZ/6pBL78SgveFs4wMaaGXKGCsCDV5mi+ft/mQAOgxeEqLQ39C+G3vKA dx/wIsoDNllTK05XaHVhJD5TjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIGOPq6 7qIPujqZBmY8q8+fiE25MB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlcamnuZqCLEcG1lwh/145hYv+nUmAQISY2uQ5Xbx9UvGELhvN+klv OpUMJFDGNWph4+6DQBs8qTa2/THbwO+KAwhsiBumQKzW67KOl+nw8Gp1et6jW7I2 CRixGrnY+jbrPyjprk7f6/Ml7Zqb1piS/ydh+qAWA2QVq8hA0bd6PVPi1ViWN/Dr FYy6Xw2/uYwqTHzJFNdZ+ADgZIYM4KGQ6BulJRIA41YS+Yg/u8nCvzetQN1Ks6iy X4gwGM7DQgCP0SkOLMrGsejeOcNnCMHlavudh1XWYqaTdrFqlicsIkSVUxF2uoYz 1vhq7YgCICxefF4RTI5+/k4REtiSwoVa -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org