$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: KPyxXtso6y43GQSv6CvFHPagGyW6nuO6JhUmkCkjpS0= Subject key identifier: 4B:2D:78:EB:1B:6C:28:BE:1B:71:0E:B3:7E:A8:BF:19:94:3E:71:60 Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 0742 Signing time: Fri 22 Nov 2024 21:09:28 +0000 Manifest this update: Fri 22 Nov 2024 21:09:27 +0000 Manifest next update: Fri 29 Nov 2024 21:09:27 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: RIVCDBi48sJjHJcMoH/7yAd5M7+kIkAOSjfwKTMOYvY=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: M4pjCMYYfpB1KEdpnrpm8Bjvlm6TuG5EpxaK1nBrHRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Nov 22 21:09:27 2024 GMT Not After : Nov 29 21:09:27 2024 GMT Subject: CN=6740f308-a2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:53:28:7c:e7:b9:9a:68:3e:3f:11:85:e5: ab:8c:b5:57:f5:b3:62:a8:8c:f7:33:b8:ec:38:68: 25:41:7b:11:65:ac:e6:09:de:27:f2:18:af:c9:16: cc:6d:66:f7:16:db:31:37:ff:24:81:1b:61:c7:0c: f1:72:ba:00:cc:aa:e0:53:fa:7a:96:58:7f:1a:2a: 2e:4e:94:da:9e:0a:6a:76:93:f5:44:bd:47:31:91: 38:19:cf:b6:2b:d4:71:e3:4c:cb:28:33:73:2e:f4: 7c:27:34:dd:93:96:0f:ff:de:19:c6:26:7c:06:66: e3:22:2d:aa:73:ac:ff:52:fd:ae:be:b9:10:20:8a: 24:48:ae:cc:8a:66:9d:8d:98:3f:3a:48:9b:77:a8: f2:26:3e:35:a3:98:27:a9:28:b6:6f:6d:db:69:f6: cb:8f:df:c4:6e:2a:cc:99:77:82:6b:4d:25:8c:a5: a7:98:ea:ff:89:c0:a3:b0:50:e8:f9:1c:23:6d:cf: 8d:d1:91:0d:89:e8:1b:87:ae:56:b2:7c:c5:ba:63: 14:0b:b6:50:53:83:39:5d:e9:27:3b:f4:34:61:66: 78:a5:6a:f8:4d:68:37:bd:b8:30:72:16:44:11:69: 02:d7:d4:3d:a5:59:39:bc:2e:b1:42:08:b4:af:a0: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:78:EB:1B:6C:28:BE:1B:71:0E:B3:7E:A8:BF:19:94:3E:71:60 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:6f:7a:78:2b:92:4e:4d:52:9d:70:02:f8:89:b3:76:1d:b1: cc:e7:56:95:3b:65:59:cf:a3:9e:d6:15:ca:39:3f:69:7a:30: 40:dc:15:14:15:0b:ca:1b:b7:ab:c9:62:40:98:c0:8a:d9:54: 89:54:e7:c7:27:39:72:69:26:22:79:e0:93:2c:5b:05:94:dd: af:2d:39:4c:79:34:b6:f8:78:66:d0:1b:23:ff:97:31:7d:2e: 62:34:3c:30:27:bd:8c:dc:67:05:0f:70:4b:4f:35:8b:fe:d7: d4:34:02:df:a0:7c:f1:24:78:5d:ac:98:b7:00:ec:ff:e1:60: fd:c9:05:66:48:bd:e8:19:a1:7c:b5:ea:33:d6:83:5b:d9:57: 76:47:41:a6:36:e0:e3:d3:80:de:47:c8:b9:5c:16:23:9c:8a: d2:ef:59:74:20:7c:66:4f:c2:e0:2e:ee:56:a5:d4:f8:d2:d3: 69:1e:f7:a8:90:c4:6d:68:0d:2b:1a:e5:42:af:86:c2:69:b3: 2d:83:ea:9e:64:c2:6d:3f:33:bb:1c:37:3b:34:d8:5e:95:8a: 98:6c:a1:d1:9a:16:98:57:ff:fa:32:af:b5:51:d9:4a:b4:ad: 62:25:08:37:64:37:b1:63:85:b0:94:66:46:4a:b2:f5:a9:d4: f8:9e:39:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjQxMTIyMjEwOTI3WhcNMjQxMTI5MjEwOTI3WjAYMRYwFAYD VQQDEw02NzQwZjMwOC1hMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8A1TKHznuZpoPj8RheWrjLVX9bNiqIz3M7jsOGglQXsRZazmCd4n8hivyRbM bWb3FtsxN/8kgRthxwzxcroAzKrgU/p6llh/GiouTpTangpqdpP1RL1HMZE4Gc+2 K9Rx40zLKDNzLvR8JzTdk5YP/94ZxiZ8BmbjIi2qc6z/Uv2uvrkQIIokSK7Mimad jZg/Okibd6jyJj41o5gnqSi2b23bafbLj9/EbirMmXeCa00ljKWnmOr/icCjsFDo +Rwjbc+N0ZENiegbh65WsnzFumMUC7ZQU4M5XeknO/Q0YWZ4pWr4TWg3vbgwchZE EWkC19Q9pVk5vC6xQgi0r6CxHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsteOsb bCi+G3EOs36ovxmUPnFgMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSb3p4K5JOTVKdcAL4ibN2HbHM51aVO2VZz6Oe1hXKOT9pejBA3BUU FQvKG7eryWJAmMCK2VSJVOfHJzlyaSYieeCTLFsFlN2vLTlMeTS2+Hhm0Bsj/5cx fS5iNDwwJ72M3GcFD3BLTzWL/tfUNALfoHzxJHhdrJi3AOz/4WD9yQVmSL3oGaF8 teoz1oNb2Vd2R0GmNuDj04DeR8i5XBYjnIrS71l0IHxmT8LgLu5WpdT40tNpHveo kMRtaA0rGuVCr4bCabMtg+qeZMJtPzO7HDc7NNhelYqYbKHRmhaYV//6Mq+1UdlK tK1iJQg3ZDexY4WwlGZGSrL1qdT4njlB -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org