$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: R2YVcYVXbz3HPDb5BnWMy8gpc3UlnDIwBu+zrNUXCZw= Subject key identifier: 6B:62:FB:FC:B5:62:AE:C0:29:C6:F6:6C:5F:38:09:E7:7B:1C:81:F0 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 061A Signing time: Fri 22 Nov 2024 22:20:30 +0000 Manifest this update: Fri 22 Nov 2024 22:20:30 +0000 Manifest next update: Fri 29 Nov 2024 22:20:30 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: ohrShxOtGaYmQIfJXTFTCmmpFqiHXMx5Z7kLJoZHSZ8=) 2: 1019A190866411EF9319811DC4F9AE02.roa (hash: wtwiKt+4TVHusZZf8INhP5+WjxvjhIvi80rOozxsOjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Nov 22 22:20:30 2024 GMT Not After : Nov 29 22:20:30 2024 GMT Subject: CN=674103ae-fcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:d1:ef:e4:6b:a5:11:4f:67:1d:e4:fc:48: e0:6f:d1:9f:37:28:5d:ea:23:a8:93:dd:f9:43:e1: da:ba:be:60:32:e1:6d:4b:a9:9a:6d:50:4a:c0:8f: a7:88:3e:df:26:ac:33:e8:90:85:a8:67:f5:4b:08: 66:f1:9c:c3:4b:f9:ea:a5:62:92:1d:f4:37:a0:b0: 71:60:3d:64:7e:9c:e5:f2:ca:cc:80:bd:27:a7:9e: e5:2b:be:f3:7c:0f:84:a4:a7:b2:6a:0a:93:ef:22: 1e:4d:da:7a:ed:8d:19:10:13:04:f0:31:1e:74:23: a6:59:6c:a2:c4:67:6a:ea:da:61:01:c9:ff:dc:a3: 44:53:84:c2:18:d4:93:e8:24:95:d4:bb:23:55:9d: 0a:4f:f5:2f:ad:09:21:ae:95:04:82:5d:ff:d8:eb: ea:4d:9d:a7:b6:17:b3:e0:f0:ae:f6:2b:f7:01:f6: cb:30:5b:49:21:fb:f3:cc:6b:1c:77:af:ad:9f:23: 9c:58:2e:51:36:78:88:3b:d4:5f:4e:46:76:1d:c0: e1:0e:bf:6e:c6:c1:c5:dc:ae:65:98:fc:52:71:f6: 6d:64:7c:19:d8:88:68:67:a6:c1:f6:0e:aa:75:cc: 1d:e0:c4:fa:84:f6:86:1b:50:0e:96:d1:81:7c:07: 35:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:FB:FC:B5:62:AE:C0:29:C6:F6:6C:5F:38:09:E7:7B:1C:81:F0 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:29:fc:d6:72:d2:6f:02:07:4a:1e:8d:ce:90:95:56:76:46: c4:36:6b:4d:66:26:5e:bd:3c:90:98:85:ca:68:cd:5a:6b:14: 59:81:b7:ef:fb:ef:e7:10:d2:8b:55:07:78:ad:d4:d0:d2:f1: 39:4e:1f:a3:68:65:b7:f3:e9:b4:fd:3c:b5:6a:ba:21:53:8f: 43:5a:c4:3a:67:78:6e:39:83:53:b9:24:a8:b2:ad:59:f4:d6: 33:9f:1e:86:e3:2a:78:87:b6:bf:63:a0:eb:85:30:81:f0:89: 8a:80:e6:73:9a:bd:c1:ef:a2:0d:32:5c:46:3e:83:ad:64:bd: 6c:f2:9d:22:96:83:a6:47:f7:95:23:76:7c:c1:09:60:15:55: de:82:48:f2:dc:a6:b4:39:cb:f4:ea:95:e4:33:da:d3:1f:9e: 3d:68:26:fa:0a:bf:a8:1f:39:b8:7b:72:a1:29:ee:d3:09:ad: dc:69:7e:ff:77:45:12:3a:b9:46:7f:6f:a1:f8:8f:7f:8a:52: bb:79:47:6a:fa:fb:8f:91:34:44:fe:b7:27:15:98:ca:ab:fa: 2c:3e:0d:6e:59:95:5e:b2:08:78:9c:ae:8b:da:76:27:e3:bc: 89:36:7c:12:e6:6b:60:48:88:8e:6e:38:cb:39:49:8f:0f:65: 6b:62:1a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjQxMTIyMjIyMDMwWhcNMjQxMTI5MjIyMDMwWjAYMRYwFAYD VQQDEw02NzQxMDNhZS1mY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NnR7+RrpRFPZx3k/Ejgb9GfNyhd6iOok935Q+Haur5gMuFtS6mabVBKwI+n iD7fJqwz6JCFqGf1Swhm8ZzDS/nqpWKSHfQ3oLBxYD1kfpzl8srMgL0np57lK77z fA+EpKeyagqT7yIeTdp67Y0ZEBME8DEedCOmWWyixGdq6tphAcn/3KNEU4TCGNST 6CSV1LsjVZ0KT/UvrQkhrpUEgl3/2OvqTZ2nthez4PCu9iv3AfbLMFtJIfvzzGsc d6+tnyOcWC5RNniIO9RfTkZ2HcDhDr9uxsHF3K5lmPxScfZtZHwZ2IhoZ6bB9g6q dcwd4MT6hPaGG1AOltGBfAc19wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGti+/y1 Yq7AKcb2bF84Ced7HIHwMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8KfzWctJvAgdKHo3OkJVWdkbENmtNZiZevTyQmIXKaM1aaxRZgbfv ++/nENKLVQd4rdTQ0vE5Th+jaGW38+m0/Ty1arohU49DWsQ6Z3huOYNTuSSosq1Z 9NYznx6G4yp4h7a/Y6DrhTCB8ImKgOZzmr3B76INMlxGPoOtZL1s8p0iloOmR/eV I3Z8wQlgFVXegkjy3Ka0Ocv06pXkM9rTH549aCb6Cr+oHzm4e3KhKe7TCa3caX7/ d0USOrlGf2+h+I9/ilK7eUdq+vuPkTRE/rcnFZjKq/osPg1uWZVesgh4nK6L2nYn 47yJNnwS5mtgSIiObjjLOUmPD2VrYhrH -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org