$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: P5KTOL/UvrTHFb77335OiHuuTI85RDWIJYpXSOglZAc= Subject key identifier: EA:DF:5B:04:CA:7F:41:AF:13:F7:8C:8E:B1:65:1A:F2:37:82:3E:84 Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 039C Signing time: Sat 23 Nov 2024 00:18:39 +0000 Manifest this update: Sat 23 Nov 2024 00:18:38 +0000 Manifest next update: Sat 30 Nov 2024 00:18:38 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: EeleAD0+7uFo8cTLsyOjvltDopVTnMJCn4l31lhVq8c=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2+LI0FBQeI2/dX1G7Td9+baIQ/+USHCLEosOYsTW+EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Nov 23 00:18:38 2024 GMT Not After : Nov 30 00:18:38 2024 GMT Subject: CN=67411f5f-8bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:9a:ae:da:83:94:6f:a7:3d:4e:77:63:a6: 0f:e6:97:be:f9:ca:49:d1:21:17:78:33:d1:f4:dd: 27:00:2c:c2:f9:b1:1e:ee:12:d0:97:9a:80:c2:8d: f2:88:5b:e5:1c:3f:aa:14:c3:8a:cf:84:58:93:1f: 90:40:49:b9:03:f7:a7:1c:00:b0:d7:31:22:0a:49: 38:56:3f:52:45:a5:8e:4d:a8:fa:c9:d1:f7:db:08: 2e:6e:cb:13:48:d6:ba:6b:d5:62:3c:43:84:30:69: 48:7a:4e:60:99:de:32:4e:bc:6a:aa:db:e8:85:40: e9:03:0b:7b:f7:d1:ca:57:f0:b3:dd:13:6b:10:a3: 6b:60:f9:e8:a5:36:05:76:28:3b:1e:ee:34:cf:2a: 78:45:1d:d1:c2:9e:ed:50:e2:ac:8d:cc:64:7f:9a: a5:bb:ae:5e:af:04:39:50:5b:75:af:ad:49:10:4e: 36:f7:f6:f9:a4:dc:a3:5d:f4:8e:ee:35:c9:42:0c: 80:6d:9d:ab:43:93:95:18:13:60:74:51:e3:f1:dc: 73:8c:f5:4a:62:4b:c4:22:f7:f4:22:f7:d7:de:0f: c5:d7:5f:52:b7:98:8b:01:3b:e9:88:6d:dc:75:c7: a0:4c:ee:01:95:2c:a8:da:9f:95:1d:64:d2:79:f7: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DF:5B:04:CA:7F:41:AF:13:F7:8C:8E:B1:65:1A:F2:37:82:3E:84 X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5c:bb:dd:a9:4d:57:66:84:cf:87:7e:b4:78:67:53:68:74: 5b:41:bb:63:e3:55:af:1d:6b:0d:63:1a:e4:e1:8d:a7:7c:81: 28:a3:ae:f4:15:a9:e8:41:28:22:68:d1:3f:12:1c:06:26:34: 41:9f:36:44:0d:4a:8f:da:8f:cf:b3:64:16:89:5b:5d:7b:39: 3f:53:ee:17:70:b0:92:f4:00:0d:ff:8e:95:74:0d:e4:3c:ba: 3b:8e:c9:9f:10:e4:42:6b:56:64:96:33:04:b2:e4:04:4a:98: af:46:10:ef:1f:4c:16:25:f4:50:03:58:b3:44:be:2b:5b:21: d6:d2:7d:17:7c:03:00:9c:c8:56:2a:55:a0:23:fc:c0:5d:fb: ee:da:06:e0:3c:5c:80:29:25:e8:97:60:53:d3:77:32:89:71: 4b:70:4d:5d:74:d3:08:19:65:ba:d9:1c:9c:23:2a:51:0a:81: 48:1c:02:a7:01:9c:91:4a:e7:33:c7:a3:17:d4:7b:63:c1:89: b5:85:8c:c6:11:5d:12:af:b7:83:ab:cd:3e:3d:5b:19:98:55: 42:12:f6:51:1e:4a:36:99:29:9a:ab:d4:e3:7d:79:79:d8:58: 4c:b2:f6:a7:7f:20:06:43:e6:26:cd:18:a2:b5:92:dc:40:83: 05:4a:92:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjQxMTIzMDAxODM4WhcNMjQxMTMwMDAxODM4WjAYMRYwFAYD VQQDEw02NzQxMWY1Zi04YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbKartqDlG+nPU53Y6YP5pe++cpJ0SEXeDPR9N0nACzC+bEe7hLQl5qAwo3y iFvlHD+qFMOKz4RYkx+QQEm5A/enHACw1zEiCkk4Vj9SRaWOTaj6ydH32wgubssT SNa6a9ViPEOEMGlIek5gmd4yTrxqqtvohUDpAwt799HKV/Cz3RNrEKNrYPnopTYF dig7Hu40zyp4RR3Rwp7tUOKsjcxkf5qlu65erwQ5UFt1r61JEE429/b5pNyjXfSO 7jXJQgyAbZ2rQ5OVGBNgdFHj8dxzjPVKYkvEIvf0IvfX3g/F119St5iLATvpiG3c dcegTO4BlSyo2p+VHWTSefcmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrfWwTK f0GvE/eMjrFlGvI3gj6EMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsXLvdqU1XZoTPh360eGdTaHRbQbtj41WvHWsNYxrk4Y2nfIEoo670 FanoQSgiaNE/EhwGJjRBnzZEDUqP2o/Ps2QWiVtdezk/U+4XcLCS9AAN/46VdA3k PLo7jsmfEORCa1ZkljMEsuQESpivRhDvH0wWJfRQA1izRL4rWyHW0n0XfAMAnMhW KlWgI/zAXfvu2gbgPFyAKSXol2BT03cyiXFLcE1ddNMIGWW62RycIypRCoFIHAKn AZyRSuczx6MX1HtjwYm1hYzGEV0Sr7eDq80+PVsZmFVCEvZRHko2mSmaq9TjfXl5 2FhMsvanfyAGQ+YmzRiitZLcQIMFSpIP -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:50 2024 by rpki-client on console-fra.rpki-client.org