$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: rfmP8uo5pJ3YPdr/wCROFEU8rkeGx2k86dDs3appiVY= Subject key identifier: 07:2F:34:68:2F:07:2F:D9:64:A2:35:1A:D2:3B:08:4C:6D:45:53:18 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 04A3 Signing time: Wed 20 Nov 2024 23:38:49 +0000 Manifest this update: Wed 20 Nov 2024 23:38:48 +0000 Manifest next update: Wed 27 Nov 2024 23:38:48 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: +L7x6TPsXeqyfSKMdXe7aCdZ3ej5yQu8UItkMK12piA=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: 4vsf8Wb5GZNfQuzk5ueb59N8mX6Ev5ag+kkwZpFI5OQ=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: rNVFB5BqgsAcIDDAN4WbuUKm/BxRwx0gk0GwaT4vqvg=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: XywXcqM8LylZUO+8HhF5lXgoC53AhfoKIh2RM8hlEZY=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: /NNSrkw0/Mb+wg39zz0HMBaPlsqc85X/IL/r2mMHDUM=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: XibMG3mDhOsSrcuhK/7yeFZ9PLD/xT2M/e0VDdqjP5E=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: vI4wCN8zHHpUwDdSCVBVfzEnFZc2gVGdk5XoB213poc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Nov 20 23:38:48 2024 GMT Not After : Nov 27 23:38:48 2024 GMT Subject: CN=673e7309-2029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:fb:d4:b0:53:5f:e7:32:3f:0c:46:ac:e4: 6b:60:58:dc:37:65:ed:32:c0:58:67:a6:d8:2e:62: f6:97:e5:56:16:d5:38:c5:21:4a:58:ff:f8:a5:8d: 6f:5d:f6:97:99:ac:19:e7:6a:38:9f:9b:a8:c0:16: 29:9d:95:ee:f3:5c:4e:28:f3:2a:c6:6e:72:a7:82: 4d:99:ff:69:f0:f5:ca:81:07:36:81:3a:9f:60:64: d3:40:0f:12:19:2e:96:16:dc:9f:e6:0e:1c:3f:2b: 9c:b1:f4:4e:f9:11:6d:d7:2e:f5:72:e0:77:62:66: a6:ea:56:0b:e9:2a:c4:b2:d9:47:97:7e:78:e5:e0: 50:a3:be:44:af:46:b2:69:38:12:e9:a8:00:c4:4e: ce:10:05:87:14:9f:4d:03:0d:4f:aa:8d:ef:26:cd: c9:52:c4:ed:56:9e:20:ed:95:51:89:50:e1:1c:61: 10:b8:02:63:ed:1b:ca:0e:c4:3a:b4:d3:6e:33:a0: 70:11:21:f7:28:fa:6c:9c:50:5d:1f:76:b3:9b:dd: 7f:24:84:5d:32:39:31:55:ad:9d:73:5f:50:5e:53: 81:c4:a8:d5:4c:05:69:ac:fb:09:a9:e6:6a:66:e2: 94:ac:35:81:0a:22:c2:8e:48:60:2c:5b:ae:90:53: 4d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:34:68:2F:07:2F:D9:64:A2:35:1A:D2:3B:08:4C:6D:45:53:18 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:39:b1:e5:23:7c:1e:d0:84:46:06:ff:b0:67:24:24:a1:4c: ad:a7:ac:e6:f9:ea:74:86:44:68:e0:01:50:f0:26:c2:69:28: f2:19:9b:61:12:f0:e7:8b:95:6d:14:69:c7:a0:42:e0:5e:fc: c9:03:b9:f5:e0:99:38:c4:b6:ad:a4:3b:23:d9:df:96:40:f1: 76:83:bf:d1:4b:b0:27:13:f2:6e:40:2a:5f:58:81:40:fd:0d: de:60:d7:10:6b:a9:c7:41:7f:53:e9:76:ce:77:f3:94:2d:64: 6d:e9:a7:84:e6:b7:78:6f:2b:9e:e9:a9:3b:68:db:47:d9:99: 84:cd:38:55:bd:96:4a:bf:29:70:6f:e5:09:fb:9e:c6:05:ff: b4:99:5d:4c:c9:57:11:7c:86:88:03:c6:20:e3:40:55:d4:62: d8:d2:29:ea:fd:dc:f0:00:4b:98:53:96:49:2b:cf:43:82:0a: 37:8e:2b:b7:ce:dd:9d:6e:15:1c:7c:e0:d1:81:6c:41:2c:48: cd:08:72:63:71:bc:08:c1:3a:69:35:d7:86:51:fc:99:ab:28: 8e:44:53:45:07:2a:7b:90:ce:48:93:74:26:5c:ac:64:9e:ec: 09:69:ba:c6:73:e0:8a:14:9f:7b:49:53:25:56:bc:07:df:64: 6f:03:6c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjQxMTIwMjMzODQ4WhcNMjQxMTI3MjMzODQ4WjAYMRYwFAYD VQQDEw02NzNlNzMwOS0yMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2f71LBTX+cyPwxGrORrYFjcN2XtMsBYZ6bYLmL2l+VWFtU4xSFKWP/4pY1v XfaXmawZ52o4n5uowBYpnZXu81xOKPMqxm5yp4JNmf9p8PXKgQc2gTqfYGTTQA8S GS6WFtyf5g4cPyucsfRO+RFt1y71cuB3Ymam6lYL6SrEstlHl3545eBQo75Er0ay aTgS6agAxE7OEAWHFJ9NAw1Pqo3vJs3JUsTtVp4g7ZVRiVDhHGEQuAJj7RvKDsQ6 tNNuM6BwESH3KPpsnFBdH3azm91/JIRdMjkxVa2dc19QXlOBxKjVTAVprPsJqeZq ZuKUrDWBCiLCjkhgLFuukFNNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcvNGgv By/ZZKI1GtI7CExtRVMYMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKObHlI3we0IRGBv+wZyQkoUytp6zm+ep0hkRo4AFQ8CbCaSjyGZth EvDni5VtFGnHoELgXvzJA7n14Jk4xLatpDsj2d+WQPF2g7/RS7AnE/JuQCpfWIFA /Q3eYNcQa6nHQX9T6XbOd/OULWRt6aeE5rd4byue6ak7aNtH2ZmEzThVvZZKvylw b+UJ+57GBf+0mV1MyVcRfIaIA8Yg40BV1GLY0inq/dzwAEuYU5ZJK89Dggo3jiu3 zt2dbhUcfODRgWxBLEjNCHJjcbwIwTppNdeGUfyZqyiORFNFByp7kM5Ik3QmXKxk nuwJabrGc+CKFJ97SVMlVrwH32RvA2z5 -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:25 2024 by rpki-client on console-fra.rpki-client.org