$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft File: C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json) Hash identifier: /Hr9M5NpnxyB3XFOenWiPA/+uJfbkXJdbPN3i9rdBo0= Subject key identifier: 7A:75:DC:32:DB:8F:CF:82:06:B4:20:95:43:54:D8:DA:57:F6:5D:8E Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 Certificate issuer: /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft Manifest number: 0A Signing time: Wed 25 Dec 2024 06:12:50 +0000 Manifest this update: Wed 25 Dec 2024 06:12:49 +0000 Manifest next update: Wed 01 Jan 2025 06:12:49 +0000 Files and hashes: 1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: UlUSJKtrf49rrHSMr73K+EJY02nqQGn4U6C2ueQnD7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5 Validity Not Before: Dec 25 06:12:49 2024 GMT Not After : Jan 1 06:12:49 2025 GMT Subject: CN=676ba261-cd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:c9:ac:a4:9b:f3:0c:7e:3a:8c:57:4f:ad: 05:b7:f7:59:7c:32:78:d5:e9:60:45:4f:39:32:25: 63:29:42:b6:e6:cf:2b:da:99:a1:23:e4:96:1e:6f: 6d:36:de:3e:40:b4:44:54:1b:fa:e4:53:c4:21:41: de:18:53:fb:83:c4:4d:3f:2c:64:c8:0b:23:4a:1c: bf:bd:76:d0:d4:89:ae:bf:e2:55:01:68:03:d9:fd: 09:7a:03:ef:c5:71:ae:ce:7c:2b:ea:a3:05:88:6d: 46:66:9e:18:34:6b:b3:2b:d1:87:32:a8:03:d5:ac: d8:78:7a:1d:b7:b3:01:20:7b:74:53:d5:32:5d:ac: 99:bf:2d:30:c9:e9:fb:f4:2d:6e:d1:7a:ab:72:32: 2a:8a:aa:56:b5:94:c6:8a:3f:9f:c5:2d:fb:63:93: fb:10:3a:a4:da:ba:91:05:23:fd:6e:1b:4a:03:21: 9b:7e:e9:6d:f2:5c:42:16:bf:13:5f:2a:9f:b3:4d: f6:41:15:21:0e:c1:b5:2d:91:38:40:0a:b7:af:6e: 03:02:8c:a1:40:f0:71:b7:08:0b:9f:be:80:2a:ff: d3:b7:d3:1b:85:b4:c5:c6:7c:02:21:cd:0e:15:61: e8:38:f5:45:7d:df:7e:f7:84:9a:2a:33:38:6f:80: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:DC:32:DB:8F:CF:82:06:B4:20:95:43:54:D8:DA:57:F6:5D:8E X509v3 Authority Key Identifier: keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3c:4b:33:1a:7a:79:68:d3:4f:a9:42:85:c1:f5:1d:d7:69: 21:85:76:f3:2c:17:ba:60:17:2a:ad:ec:80:18:1f:08:22:0e: c4:d7:db:d6:11:37:84:6f:28:96:11:8d:58:80:34:94:3e:89: f3:c0:d8:53:e9:64:9c:fb:8a:e0:68:66:83:52:b2:c3:18:71: f7:5f:54:28:b6:71:08:11:a5:d3:ba:f7:5c:2b:e8:52:96:09: aa:ff:f6:03:fa:b4:18:d3:f9:15:16:38:93:3f:77:84:9a:4f: 5e:f8:ed:be:31:e3:c3:42:7c:85:17:23:07:85:67:f1:c2:4e: b6:10:4e:73:80:8f:70:e5:5a:e2:25:94:3a:1b:34:6d:5c:2c: 49:8c:98:71:2f:c6:e2:67:2c:99:12:57:b9:f0:06:59:a6:c1: 08:c8:ad:d4:d0:89:66:0d:4e:8f:d4:b7:33:19:a5:b2:33:20: 56:85:ce:f6:a3:c6:87:a6:34:96:25:33:a7:0f:6e:39:ef:6d: 21:1c:ee:8b:bb:a2:9b:e6:d2:39:79:41:25:42:0e:d5:d3:52: 80:d8:ad:c3:6d:70:de:d2:92:86:ba:6c:0f:52:89:16:4b:84: d2:0c:8c:d3:d1:cb:a8:ca:e2:e7:22:8f:3d:d1:e3:13:4d:e7: 32:58:43:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoMEI3N0Y3QkQyM0NCNDI4NThEMEJCRkY2RjdFM0FDNzMx MzU1MzFENTAeFw0yNDEyMjUwNjEyNDlaFw0yNTAxMDEwNjEyNDlaMBgxFjAUBgNV BAMTDTY3NmJhMjYxLWNkNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCogMmspJvzDH46jFdPrQW391l8MnjV6WBFTzkyJWMpQrbmzyvamaEj5JYeb202 3j5AtERUG/rkU8QhQd4YU/uDxE0/LGTICyNKHL+9dtDUia6/4lUBaAPZ/Ql6A+/F ca7OfCvqowWIbUZmnhg0a7Mr0YcyqAPVrNh4eh23swEge3RT1TJdrJm/LTDJ6fv0 LW7ReqtyMiqKqla1lMaKP5/FLftjk/sQOqTaupEFI/1uG0oDIZt+6W3yXEIWvxNf Kp+zTfZBFSEOwbUtkThACrevbgMCjKFA8HG3CAufvoAq/9O30xuFtMXGfAIhzQ4V Yeg49UV93373hJoqMzhvgEtzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUenXcMtuP z4IGtCCVQ1TY2lf2XY4wHwYDVR0jBBgwFoAUC3f3vSPLQoWNC7/29+OscxNVMdUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzRDNkY2ODU2QjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9XTkM3XzI5LU9zY3hOVk1k VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzNmM3ZTUExRb1dOQzdfMjktT3NjeE5WTWRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzRDNkY2ODU2QjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL0MzZjN2U1BMUW9X TkM3XzI5LU9zY3hOVk1kVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFg8SzMaenlo00+pQoXB9R3XaSGFdvMsF7pgFyqt7IAYHwgiDsTX29YR N4RvKJYRjViANJQ+ifPA2FPpZJz7iuBoZoNSssMYcfdfVCi2cQgRpdO691wr6FKW Car/9gP6tBjT+RUWOJM/d4SaT1747b4x48NCfIUXIweFZ/HCTrYQTnOAj3DlWuIl lDobNG1cLEmMmHEvxuJnLJkSV7nwBlmmwQjIrdTQiWYNTo/UtzMZpbIzIFaFzvaj xoemNJYlM6cPbjnvbSEc7ou7opvm0jl5QSVCDtXTUoDYrcNtcN7Skoa6bA9SiRZL hNIMjNPRy6jK4ucijz3R4xNN5zJYQz0= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:07 2024 by rpki-client on console-ams.rpki-client.org