$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: wtZ1b5UlTXDNyfJRiTeAhlADhUPV2agFivtR3H6ZWAU= Subject key identifier: 02:72:1D:55:33:B6:1F:03:24:FC:51:69:5A:BA:49:9D:39:C1:49:BB Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 06DC Signing time: Fri 22 Nov 2024 21:34:57 +0000 Manifest this update: Fri 22 Nov 2024 21:34:56 +0000 Manifest next update: Fri 29 Nov 2024 21:34:56 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: +ZyxqOiCNzv80CR3jXqjCguXxND5hQseYuERdmsXD4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: Nov 22 21:34:56 2024 GMT Not After : Nov 29 21:34:56 2024 GMT Subject: CN=6740f901-de49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:36:da:d1:bb:f8:31:70:f4:e7:af:0a:94: 4d:5e:62:1a:70:bf:d2:cc:f9:15:b8:e9:b5:bd:e9: b0:5b:12:4e:e7:80:3b:60:99:41:4b:d0:1d:73:7e: 7c:47:af:dd:4b:d0:75:cd:37:f8:3d:f9:fb:63:a0: 80:c4:b3:d2:fd:f4:1d:54:4b:45:5a:05:70:94:ff: 7a:d6:f8:4e:d6:1d:fb:64:68:af:5f:fc:fc:1c:82: 69:d1:d0:e5:40:66:ad:61:6f:d9:48:89:ba:c1:3b: e3:38:9d:5b:eb:1b:4e:03:6b:ca:ad:f8:c8:06:75: cd:8d:89:47:75:9f:47:bf:70:3f:8f:bd:cb:30:8f: 86:bd:a9:ee:7f:65:59:f9:00:45:45:3d:b1:6c:5e: b5:a1:f5:b3:f8:4f:7d:7f:f8:99:5c:83:63:ff:05: 7c:10:20:cd:a6:43:a2:e3:21:75:09:30:e2:43:cd: dd:01:f8:2a:3c:09:d9:61:d2:d4:6f:c1:22:71:8b: 4b:5b:6d:0b:59:89:36:7e:f3:f2:e8:1d:c9:bf:b0: 7f:3f:8e:f5:77:0f:e9:7b:1a:48:34:cc:25:78:4b: c1:62:81:83:48:25:33:77:2f:fd:82:50:5b:ef:ee: 5e:aa:19:e6:b9:22:a6:af:32:48:12:6f:18:64:3b: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:1D:55:33:B6:1F:03:24:FC:51:69:5A:BA:49:9D:39:C1:49:BB X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:26:d2:6f:da:96:f6:72:72:e4:63:ec:d0:73:5a:d5:7a:4b: d1:71:de:55:37:1d:dc:40:94:44:37:99:b6:5b:78:0a:2d:40: d1:80:41:31:80:31:90:5e:3e:32:b0:c0:e2:ee:d1:80:91:81: 31:b9:1b:a3:fe:ad:a7:34:68:7e:eb:c8:90:07:56:ef:8e:9e: 47:3a:d4:d7:9c:c1:2e:dd:b7:be:47:d0:5e:33:a6:3c:a3:55: 29:fb:72:0e:de:ae:e5:bc:92:11:a7:5b:9b:2a:66:d3:a0:98: 37:fa:d6:6a:27:c1:0a:94:12:66:49:51:42:4a:01:e3:2f:6c: cf:25:be:6f:be:fb:95:5a:c4:0d:15:ec:55:15:b1:96:ef:6e: 53:01:3c:44:a8:07:fa:89:0a:50:3e:a6:cb:57:74:fa:d8:95: e2:df:3d:6b:fe:c0:cb:20:de:de:ff:30:29:ce:80:26:43:22: 09:dd:96:1c:8b:e1:06:43:36:c8:8c:51:82:26:e4:43:ed:12: 1e:34:92:b5:d2:89:9d:14:38:ad:90:8c:60:96:93:11:06:83: 81:77:45:2a:f9:1e:58:43:d2:c8:bc:89:16:1a:7c:fe:83:a5: cc:3f:73:f0:f4:2f:09:6d:34:53:8b:02:29:35:a0:39:30:3b: 7e:2f:78:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjQxMTIyMjEzNDU2WhcNMjQxMTI5MjEzNDU2WjAYMRYwFAYD VQQDEw02NzQwZjkwMS1kZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqE22tG7+DFw9OevCpRNXmIacL/SzPkVuOm1vemwWxJO54A7YJlBS9Adc358 R6/dS9B1zTf4Pfn7Y6CAxLPS/fQdVEtFWgVwlP961vhO1h37ZGivX/z8HIJp0dDl QGatYW/ZSIm6wTvjOJ1b6xtOA2vKrfjIBnXNjYlHdZ9Hv3A/j73LMI+Gvanuf2VZ +QBFRT2xbF61ofWz+E99f/iZXINj/wV8ECDNpkOi4yF1CTDiQ83dAfgqPAnZYdLU b8EicYtLW20LWYk2fvPy6B3Jv7B/P471dw/pexpINMwleEvBYoGDSCUzdy/9glBb 7+5eqhnmuSKmrzJIEm8YZDtPQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJyHVUz th8DJPxRaVq6SZ05wUm7MB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVJtJv2pb2cnLkY+zQc1rVekvRcd5VNx3cQJREN5m2W3gKLUDRgEEx gDGQXj4ysMDi7tGAkYExuRuj/q2nNGh+68iQB1bvjp5HOtTXnMEu3be+R9BeM6Y8 o1Up+3IO3q7lvJIRp1ubKmbToJg3+tZqJ8EKlBJmSVFCSgHjL2zPJb5vvvuVWsQN FexVFbGW725TATxEqAf6iQpQPqbLV3T62JXi3z1r/sDLIN7e/zApzoAmQyIJ3ZYc i+EGQzbIjFGCJuRD7RIeNJK10omdFDitkIxglpMRBoOBd0Uq+R5YQ9LIvIkWGnz+ g6XMP3Pw9C8JbTRTiwIpNaA5MDt+L3jh -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org