$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: DitKVXxKDkSl7Zvqkm2FQYV3tD/N1CUD2xFrADiUstk= Subject key identifier: 29:F3:BA:66:12:63:AD:69:90:D1:F2:FC:57:FD:50:41:ED:92:89:3D Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 016F Signing time: Thu 21 Nov 2024 02:18:53 +0000 Manifest this update: Thu 21 Nov 2024 02:18:53 +0000 Manifest next update: Thu 28 Nov 2024 02:18:53 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: s1IUfXocGUWgrHmVnTj22d4Bax1qzNzwBSnXWXxhyJQ=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: A4+/CvAq5mHbP+AOxvkMWdzg7e9oQgnalc06bQnNQUQ=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: pU/elbUoh0j8PH6/VL9mrY9wNAYpdaUxohsajY0Nvj0=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: JgPeqKU4xsklT076cCsBqaFdVoT5w8sKgLYiNf2MyxI=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: 9yOQAKhFaTfuZqQNPZxR2Z+NGc7nsKwzw6QMxaKVE/0=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: ebvqHzeRlbm2q/dYQIXv+KTaJC9u2MXvSXJ+lCKaLew=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: pq/apOOz1IhPtAtHKhRZyj8F3MjedPS9nKhqg3OZNL4=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: G57w3BY+oamoZrS5obrZv6SV9BGixuS9Eocll81oryM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Nov 21 02:18:53 2024 GMT Not After : Nov 28 02:18:53 2024 GMT Subject: CN=673e988d-935c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:ad:35:4d:d9:59:87:bf:1e:bf:0f:19:cb: ad:23:97:8a:ef:66:3b:37:c3:d6:83:08:96:2d:0e: ef:ee:b7:e3:0a:27:9e:72:85:c0:75:f5:c5:f7:8c: 0c:37:c5:b2:95:ef:24:ba:01:d5:a0:b2:58:30:41: be:d0:64:46:05:f6:b0:2d:6b:d1:fd:a3:0e:31:d4: b8:bc:2c:8d:af:f8:98:72:39:9c:37:77:52:8a:e0: 35:1b:12:22:0e:a3:42:92:08:ff:b9:8c:22:41:4b: 17:89:a4:1d:0f:7a:b8:47:ad:38:d5:5b:e8:07:6b: f6:86:3c:c8:c0:e2:8a:3d:dc:59:1c:5b:c6:d8:b0: 11:c6:6b:2e:a5:91:f3:24:65:58:6a:39:60:c8:35: 76:10:0c:0c:5a:3c:fc:ce:88:fb:76:5f:3f:aa:de: ac:51:ef:b3:6d:50:b5:9b:97:61:19:33:5f:e5:c8: 56:8f:c5:2a:5a:dc:b4:67:15:71:9c:cb:f5:33:d2: 13:83:67:33:ba:cf:2b:90:3b:ee:56:76:a1:59:03: fc:49:27:c5:f6:84:49:42:fb:f6:06:ec:2a:61:a4: 55:c5:1b:2f:83:91:d7:f2:0c:93:8f:49:c0:21:7b: c6:17:18:79:5f:92:b5:ef:31:b7:41:7e:44:c6:0e: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:BA:66:12:63:AD:69:90:D1:F2:FC:57:FD:50:41:ED:92:89:3D X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fb:01:72:1b:81:f4:12:92:11:7e:c8:c8:78:ce:51:17:c2: 85:26:f1:85:47:f8:a2:48:0e:24:96:e9:4c:5a:9b:f9:4f:e0: dc:0b:ed:1d:ae:92:9f:5e:99:e9:a5:d7:b5:c5:3c:3f:eb:1c: 93:6d:06:51:26:e5:4a:c1:80:85:d7:bc:88:a2:d0:12:2d:77: b0:b5:80:d8:52:26:dd:9c:94:49:e8:5d:65:e3:74:d9:a3:a9: 7f:8f:50:9e:d9:ac:e1:e3:6b:a3:ba:0e:8d:78:87:9b:9e:8e: a3:f1:df:e3:31:92:b1:c4:d3:4f:1c:39:d3:97:fc:53:c7:c0: d5:10:7a:9f:e3:67:1a:05:da:c9:40:f1:b6:61:86:c9:18:e5: 6c:9e:d7:b3:f6:b6:d5:ec:04:b1:29:80:ba:07:88:e7:b9:8c: 7d:f3:7d:94:80:f7:48:70:d9:49:f5:56:e5:40:58:cb:8f:9d: 13:a4:19:5d:0f:20:a2:b0:5d:b1:91:8d:6b:db:c5:7a:78:46: d8:70:ad:0a:93:fa:3f:63:f0:27:d4:d8:c0:cb:95:44:1f:d2: 18:aa:bf:3f:f7:19:fc:a7:8f:62:9c:27:5d:47:6f:cd:cd:99: 6a:c7:9d:f0:cd:b5:ad:f8:63:66:aa:7d:a0:af:42:84:57:26: 63:5b:b2:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjQxMTIxMDIxODUzWhcNMjQxMTI4MDIxODUzWjAYMRYwFAYD VQQDEw02NzNlOTg4ZC05MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SqtNU3ZWYe/Hr8PGcutI5eK72Y7N8PWgwiWLQ7v7rfjCieecoXAdfXF94wM N8Wyle8kugHVoLJYMEG+0GRGBfawLWvR/aMOMdS4vCyNr/iYcjmcN3dSiuA1GxIi DqNCkgj/uYwiQUsXiaQdD3q4R6041VvoB2v2hjzIwOKKPdxZHFvG2LARxmsupZHz JGVYajlgyDV2EAwMWjz8zoj7dl8/qt6sUe+zbVC1m5dhGTNf5chWj8UqWty0ZxVx nMv1M9ITg2czus8rkDvuVnahWQP8SSfF9oRJQvv2BuwqYaRVxRsvg5HX8gyTj0nA IXvGFxh5X5K17zG3QX5Exg7R6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnzumYS Y61pkNHy/Ff9UEHtkok9MB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC+wFyG4H0EpIRfsjIeM5RF8KFJvGFR/iiSA4klulMWpv5T+DcC+0d rpKfXpnppde1xTw/6xyTbQZRJuVKwYCF17yIotASLXewtYDYUibdnJRJ6F1l43TZ o6l/j1Ce2azh42ujug6NeIebno6j8d/jMZKxxNNPHDnTl/xTx8DVEHqf42caBdrJ QPG2YYbJGOVsntez9rbV7ASxKYC6B4jnuYx9832UgPdIcNlJ9VblQFjLj50TpBld DyCisF2xkY1r28V6eEbYcK0Kk/o/Y/An1NjAy5VEH9IYqr8/9xn8p49inCddR2/N zZlqx53wzbWt+GNmqn2gr0KEVyZjW7Iw -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:51 2024 by rpki-client on console-fra.rpki-client.org