$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: n6ClJNSaUujHgcC+tpCqs0pZP1ItEHgInwayB1yu7q8= Subject key identifier: CF:20:4A:16:2D:AC:13:87:09:90:57:F0:0D:22:83:5C:D9:72:76:9B Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0100 Signing time: Sat 23 Nov 2024 03:18:39 +0000 Manifest this update: Sat 23 Nov 2024 03:18:39 +0000 Manifest next update: Sat 30 Nov 2024 03:18:39 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: NRald+RMKPr/rEsjJzr0z9qlKTKzB26UzuAnFWacerM=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Nov 23 03:18:39 2024 GMT Not After : Nov 30 03:18:39 2024 GMT Subject: CN=6741498f-d5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:d9:7c:d0:d3:27:37:0f:cb:ca:c4:d2:b9: d0:dd:cd:18:dd:e5:38:03:8a:15:15:61:2d:c5:11: 16:bc:cf:c5:90:7f:84:f4:0a:a7:e2:a5:7f:cc:de: d3:96:3f:28:27:b8:8c:68:1f:8e:0c:02:5f:b1:33: 24:9d:56:bd:22:96:22:3c:1b:e4:fd:e7:4a:5d:97: 8e:ea:fb:3f:09:51:b4:51:af:72:8c:c7:e4:fd:95: d8:62:e8:87:2d:a1:2e:0b:a0:ad:fd:8a:87:62:ea: c4:78:ce:ee:22:bb:e4:cf:e9:e8:63:8d:75:2f:cb: 29:b0:a2:52:b4:b3:8d:e1:6a:3f:9c:6b:25:fb:0c: 93:e4:5f:dc:a0:ec:8e:f6:cc:d8:1b:91:b2:3e:2d: 71:85:68:93:c2:d7:7e:8f:56:fe:9f:d9:14:01:83: da:eb:c0:20:1a:4d:24:13:86:98:29:d5:a8:f5:6f: 69:c1:a7:6e:2f:b6:3b:fd:5f:d1:22:b0:a4:13:6d: 7d:96:d5:5a:1d:31:66:4b:f4:41:3a:4f:9c:72:95: e6:02:0f:a1:3c:17:b9:0d:74:0d:51:c9:0c:d7:ca: a4:2a:23:b2:37:0f:0c:02:1d:84:ae:01:8c:3c:be: 45:7a:62:c5:9e:d9:df:f5:60:0a:53:f8:06:0c:40: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:4A:16:2D:AC:13:87:09:90:57:F0:0D:22:83:5C:D9:72:76:9B X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:16:d2:c9:7d:02:2c:96:43:76:a4:be:8a:48:50:75:cb:ba: f3:90:46:ee:e6:fe:44:27:88:e0:f9:f3:74:5b:56:a2:31:c0: d1:28:54:1f:ab:6a:0b:c1:af:e5:b8:07:ab:1d:29:4f:b2:db: 3b:5e:e7:e0:67:76:b1:0f:0e:39:d3:88:99:12:64:99:ef:90: f3:aa:b2:ef:43:c6:43:6c:06:76:14:e6:e5:6a:ca:b6:02:49: 60:fa:66:3e:f1:82:3f:12:ce:80:9b:82:5a:54:46:97:cc:b1: 89:b2:7e:fc:1c:3e:f1:99:2f:48:4b:68:be:ab:13:a2:f5:be: ef:da:36:0f:d7:99:1b:8a:94:c0:5f:81:41:d0:c0:4f:e8:06: d9:15:d9:69:e6:e7:32:e1:3a:d0:1f:2c:20:ae:50:50:3d:c0: aa:66:76:86:17:b4:85:5d:b1:75:9e:24:71:70:f7:60:ff:8b: e3:5c:41:fa:0f:92:d9:ab:c8:76:3d:7b:83:d7:53:86:dc:00: 0f:99:05:b8:85:08:a0:36:90:31:55:90:c4:a2:2e:57:04:2e: 24:7e:cf:02:bf:fb:97:69:d7:9b:98:28:40:d9:b3:8b:43:19: 75:86:d7:75:ba:eb:9b:0b:3e:f8:c0:7f:ef:03:37:62:97:7e: 9c:a3:65:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjQxMTIzMDMxODM5WhcNMjQxMTMwMDMxODM5WjAYMRYwFAYD VQQDEw02NzQxNDk4Zi1kNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+3ZfNDTJzcPy8rE0rnQ3c0Y3eU4A4oVFWEtxREWvM/FkH+E9Aqn4qV/zN7T lj8oJ7iMaB+ODAJfsTMknVa9IpYiPBvk/edKXZeO6vs/CVG0Ua9yjMfk/ZXYYuiH LaEuC6Ct/YqHYurEeM7uIrvkz+noY411L8spsKJStLON4Wo/nGsl+wyT5F/coOyO 9szYG5GyPi1xhWiTwtd+j1b+n9kUAYPa68AgGk0kE4aYKdWo9W9pwaduL7Y7/V/R IrCkE219ltVaHTFmS/RBOk+ccpXmAg+hPBe5DXQNUckM18qkKiOyNw8MAh2ErgGM PL5FemLFntnf9WAKU/gGDEDKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8gShYt rBOHCZBX8A0ig1zZcnabMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4FtLJfQIslkN2pL6KSFB1y7rzkEbu5v5EJ4jg+fN0W1aiMcDRKFQf q2oLwa/luAerHSlPsts7XufgZ3axDw4504iZEmSZ75DzqrLvQ8ZDbAZ2FOblasq2 Aklg+mY+8YI/Es6Am4JaVEaXzLGJsn78HD7xmS9IS2i+qxOi9b7v2jYP15kbipTA X4FB0MBP6AbZFdlp5ucy4TrQHywgrlBQPcCqZnaGF7SFXbF1niRxcPdg/4vjXEH6 D5LZq8h2PXuD11OG3AAPmQW4hQigNpAxVZDEoi5XBC4kfs8Cv/uXadebmChA2bOL Qxl1htd1uuubCz74wH/vAzdil36co2UO -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org