$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: WCQB+ERQjriGBISkcNhy4nedjhVsg13PP3DCzL5NFNw= Subject key identifier: 1D:DE:59:E7:A5:B4:AC:ED:18:80:7E:34:FE:EF:44:3A:82:4E:9A:29 Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 0107 Signing time: Sat 23 Nov 2024 03:13:39 +0000 Manifest this update: Sat 23 Nov 2024 03:13:39 +0000 Manifest next update: Sat 30 Nov 2024 03:13:39 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: Lswk8Z7B64VDYQLah9R3QGFJYCkc0w0NOytykvk/YUA=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: rH0gRhN/HJ8HJHVTL+JV1bpQN/J5hF8E0YYPa3z7lJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: Nov 23 03:13:39 2024 GMT Not After : Nov 30 03:13:39 2024 GMT Subject: CN=67414863-72ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:a6:b4:b0:51:eb:53:f8:6c:0f:15:69:dd: dc:48:2e:c7:f2:6a:ea:b8:6c:81:1c:92:63:e0:5f: 80:4f:3b:c1:78:66:d1:e9:6f:29:b4:f9:97:5a:ce: ac:63:6a:ee:65:c2:f0:7b:c0:42:6c:9d:3c:c0:42: 63:de:4d:c7:f9:93:18:eb:fd:5a:8c:dd:4c:43:72: a4:46:28:16:7d:06:ca:dc:ca:20:b8:c7:9f:16:6b: 16:fe:75:ca:58:06:3d:b5:8e:a8:92:8d:73:e7:0b: dd:2c:65:17:b0:b5:5e:53:e5:b8:84:ea:66:cd:14: 69:82:1e:5a:15:f8:50:f9:50:6f:48:28:98:32:09: 24:a7:87:35:49:04:dc:87:db:38:38:b6:2f:26:3f: 15:c9:d1:9a:3f:8d:6d:60:6c:d5:6a:ba:02:d9:b6: 55:dc:06:fe:a6:73:99:9c:67:4a:94:d9:29:d3:1f: 65:10:f6:87:a6:7b:11:ba:ec:4a:ab:06:29:81:a1: 8b:de:ab:ab:2f:e6:52:29:9b:d9:50:81:b8:fa:4b: 50:58:5f:f0:78:66:50:ad:d4:0c:4b:d2:43:b7:7c: 09:00:20:17:2c:4e:ab:cf:16:4a:8b:aa:31:ef:f9: 18:4b:1d:3b:97:3a:ae:92:5d:2f:b3:34:26:b7:29: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:59:E7:A5:B4:AC:ED:18:80:7E:34:FE:EF:44:3A:82:4E:9A:29 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:84:d9:64:d9:1d:06:2d:9d:a9:29:d6:fe:c3:1f:d1:1e:e2: c0:dc:75:ef:09:69:ef:b3:ac:fc:dd:a3:30:8c:dd:77:3f:6d: a3:90:d6:36:b1:8d:16:8d:95:eb:49:59:99:14:6b:f5:8d:00: 94:9b:41:ac:64:49:b4:95:e7:b2:b9:f0:5d:1e:d1:ff:c6:ac: ac:41:ca:a2:2c:44:7a:2c:ff:80:c4:b2:e3:c2:0a:25:82:26: 16:26:3e:57:04:fd:35:4a:1e:07:a9:90:46:b9:7f:80:1d:a1: bb:d3:11:59:4e:6b:1a:af:3a:03:24:6b:6b:84:cc:d7:e3:61: 75:9a:31:cd:32:77:50:af:7a:3b:d6:da:c4:ad:ae:24:c0:58: 2b:5f:68:78:80:3c:de:4e:70:ca:e9:7b:53:e1:d8:87:ae:a9: 5e:47:7f:cb:40:ed:61:30:b7:59:45:42:fd:cb:6b:40:4f:df: 33:c1:e0:6b:f3:7c:84:78:1f:5e:69:f8:8e:77:93:3e:26:08: b3:2a:2b:ee:f3:4b:10:ee:8f:4d:50:16:48:ff:61:37:2f:3c: 1e:22:48:33:79:b2:0d:1f:7e:59:5f:ea:18:9d:e5:12:8f:1c: 35:e8:b6:2f:f8:cf:3f:55:6c:66:bc:9a:fb:f3:d0:92:cf:8a: 3f:73:31:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjQxMTIzMDMxMzM5WhcNMjQxMTMwMDMxMzM5WjAYMRYwFAYD VQQDEw02NzQxNDg2My03MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdqmtLBR61P4bA8Vad3cSC7H8mrquGyBHJJj4F+ATzvBeGbR6W8ptPmXWs6s Y2ruZcLwe8BCbJ08wEJj3k3H+ZMY6/1ajN1MQ3KkRigWfQbK3MoguMefFmsW/nXK WAY9tY6oko1z5wvdLGUXsLVeU+W4hOpmzRRpgh5aFfhQ+VBvSCiYMgkkp4c1SQTc h9s4OLYvJj8VydGaP41tYGzVaroC2bZV3Ab+pnOZnGdKlNkp0x9lEPaHpnsRuuxK qwYpgaGL3qurL+ZSKZvZUIG4+ktQWF/weGZQrdQMS9JDt3wJACAXLE6rzxZKi6ox 7/kYSx07lzqukl0vszQmtymfkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3eWeel tKztGIB+NP7vRDqCTpopMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhhNlk2R0GLZ2pKdb+wx/RHuLA3HXvCWnvs6z83aMwjN13P22jkNY2 sY0WjZXrSVmZFGv1jQCUm0GsZEm0leeyufBdHtH/xqysQcqiLER6LP+AxLLjwgol giYWJj5XBP01Sh4HqZBGuX+AHaG70xFZTmsarzoDJGtrhMzX42F1mjHNMndQr3o7 1trEra4kwFgrX2h4gDzeTnDK6XtT4diHrqleR3/LQO1hMLdZRUL9y2tAT98zweBr 83yEeB9eafiOd5M+JgizKivu80sQ7o9NUBZI/2E3LzweIkgzebINH35ZX+oYneUS jxw16LYv+M8/VWxmvJr789CSz4o/czEx -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:01 2024 by rpki-client on console-fra.rpki-client.org