$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: l1hkf7lHpT60/OFcKcX8NxbC7y+RScYGvgANc483dGo= Subject key identifier: 68:64:45:8B:E6:99:35:93:98:7D:4B:E5:04:22:C7:FF:6F:F3:15:F2 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 06 Signing time: Thu 21 Nov 2024 06:16:26 +0000 Manifest this update: Thu 21 Nov 2024 06:16:26 +0000 Manifest next update: Thu 28 Nov 2024 06:16:26 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: vKpI3w/HAMJZpXRiuaTbLTnPE7jmlpRncwHqDzI6KzM=) 2: 0CBC987AA27211EFB7421B1EC4F9AE02.roa (hash: RDmd6ogp6YGmarDu8N07ODFZoFOiCGDHnbF6uT6D6Tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Nov 21 06:16:26 2024 GMT Not After : Nov 28 06:16:26 2024 GMT Subject: CN=673ed03a-6cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a8:76:b3:a8:52:b9:05:6c:e8:a4:14:11:07: 7d:fb:2c:35:e2:57:94:c9:6b:28:e1:5b:63:06:2e: 2a:f2:aa:8e:4f:e2:e1:7a:65:54:ce:c7:d1:6d:0b: 4d:c3:62:b3:38:7c:14:57:8c:25:d0:db:3c:be:11: 13:9c:34:db:5a:35:1c:16:b0:e3:6a:b9:a1:75:b3: ac:ef:1a:4b:dd:52:b6:bf:62:ba:64:4f:ad:fc:58: 51:85:bb:2b:19:fc:6c:01:a4:ec:16:22:e2:bd:6c: 17:ce:92:56:f1:37:a5:3f:26:17:e7:53:7d:2c:5a: 27:a6:91:ae:ba:12:11:f4:47:bd:e7:27:64:f5:f8: 6a:60:3d:12:9e:4f:e1:68:77:51:5f:cc:e2:c9:c0: 9f:79:c4:95:ea:a4:19:aa:9f:69:47:02:c3:e4:a9: d1:31:71:e2:ca:e6:7c:4d:cd:a7:a5:27:2a:87:a5: d3:6c:c2:2d:7d:29:09:fa:f6:e8:e8:e8:1d:cb:c1: d3:92:cd:da:d2:35:bf:eb:97:99:89:bc:7a:67:4a: 8d:6d:c0:8a:e0:d0:ed:18:f9:47:ea:17:57:94:c0: dc:35:46:21:44:0d:92:d0:fd:ee:24:01:24:61:d7: 74:ff:76:f9:3f:19:47:a9:43:e0:40:3d:56:28:be: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:45:8B:E6:99:35:93:98:7D:4B:E5:04:22:C7:FF:6F:F3:15:F2 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:c5:c5:c1:e6:e9:53:6c:57:c0:f8:6f:5e:81:f4:8a:da: 3f:17:ca:bc:58:61:d5:22:36:e8:3d:b4:a1:b5:8d:15:14:bc: 5f:65:29:4a:ca:a8:ef:cd:b1:7f:33:da:df:3d:70:c1:f0:26: 1a:d7:38:db:55:e9:6d:3e:4e:92:2b:d8:6a:54:ef:a4:37:e0: 39:0a:b6:dc:f8:54:19:ce:c2:35:8c:10:2d:e4:0f:8d:42:c3: 58:5c:34:08:b5:76:a9:98:8b:04:ab:11:d6:15:b7:cf:8d:d4: 0e:a7:9f:d7:53:38:62:37:75:57:ca:fb:77:60:fa:23:06:0a: c8:44:62:51:dc:c8:e5:27:bd:59:08:63:9e:76:2b:65:67:0c: 6b:4d:65:10:3c:c7:ed:7f:7e:94:69:02:06:24:93:e1:2e:19: 95:70:d1:d1:26:4b:46:1b:6d:f8:07:74:d8:d8:1f:10:e1:22: d7:39:0d:11:59:29:f5:6a:29:cb:c3:6e:af:e8:b7:54:1f:15: 0e:3c:17:04:20:af:eb:6c:76:de:65:70:76:c7:49:0c:4c:85: cf:f4:3e:37:2d:90:cf:d6:d4:d4:58:71:d6:9d:09:10:cf:3a: a1:57:36:c7:c6:ed:ec:a0:47:e7:77:d3:f2:e5:f3:3f:5c:39: ad:d0:d5:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5NEQ4QjA3MDY2 M0QyQjM0RTAeFw0yNDExMjEwNjE2MjZaFw0yNDExMjgwNjE2MjZaMBgxFjAUBgNV BAMTDTY3M2VkMDNhLTZjZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnqHazqFK5BWzopBQRB337LDXiV5TJayjhW2MGLiryqo5P4uF6ZVTOx9FtC03D YrM4fBRXjCXQ2zy+EROcNNtaNRwWsONquaF1s6zvGkvdUra/YrpkT638WFGFuysZ /GwBpOwWIuK9bBfOklbxN6U/JhfnU30sWiemka66EhH0R73nJ2T1+GpgPRKeT+Fo d1FfzOLJwJ95xJXqpBmqn2lHAsPkqdExceLK5nxNzaelJyqHpdNswi19KQn69ujo 6B3LwdOSzdrSNb/rl5mJvHpnSo1twIrg0O0Y+UfqF1eUwNw1RiFEDZLQ/e4kASRh 13T/dvk/GUepQ+BAPVYovnsfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaGRFi+aZ NZOYfUvlBCLH/2/zFfIwHwYDVR0jBBgwFoAU31/iG3yVUhWTRHF5TYsHBmPSs04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3LzgwMkFFNjQ2QTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3Mw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMzFfaUczeVZVaFdUUkhGNVRZc0hCbVBTczA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTM3LzgwMkFFNjQ2QTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhX VFJIRjVUWXNIQm1QU3MwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFs0xcXB5ulTbFfA+G9egfSK2j8XyrxYYdUiNug9tKG1jRUUvF9lKUrK qO/NsX8z2t89cMHwJhrXONtV6W0+TpIr2GpU76Q34DkKttz4VBnOwjWMEC3kD41C w1hcNAi1dqmYiwSrEdYVt8+N1A6nn9dTOGI3dVfK+3dg+iMGCshEYlHcyOUnvVkI Y552K2VnDGtNZRA8x+1/fpRpAgYkk+EuGZVw0dEmS0YbbfgHdNjYHxDhItc5DRFZ KfVqKcvDbq/ot1QfFQ48FwQgr+tsdt5lcHbHSQxMhc/0PjctkM/W1NRYcdadCRDP OqFXNsfG7eygR+d30/Ll8z9cOa3Q1b0= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org