$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: c1315RLIGdcnxTy2h085UCn3GST/3IIxiI6fCX1wZXE= Subject key identifier: 0F:C4:0E:55:E8:B0:40:D7:37:C1:74:C3:BC:7C:A4:D8:AF:3D:17:29 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: DC Signing time: Sat 23 Nov 2024 03:39:31 +0000 Manifest this update: Sat 23 Nov 2024 03:39:30 +0000 Manifest next update: Sat 30 Nov 2024 03:39:30 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: g5/lQvkrej4mbhrmLHcrP6CnX8QVcCGba6DntIZmlQw=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: gVUndys1FOrdFAUgWj7NFlEkhtcr9jjG/N1oaA3t584=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Nov 23 03:39:30 2024 GMT Not After : Nov 30 03:39:30 2024 GMT Subject: CN=67414e73-ef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:28:dc:1f:93:e3:1b:e5:3e:80:7a:ca:4b: be:61:f1:25:e0:29:09:40:d6:0b:f5:fd:50:dc:fd: a6:15:83:cb:6d:de:9f:fd:68:72:7d:a7:17:5a:e7: f2:35:a4:e8:5a:8a:33:02:60:1e:c7:ee:df:82:8e: 96:2f:55:45:44:38:67:4c:d6:a0:e5:ec:76:88:c0: 3e:59:8b:74:36:7c:0d:66:3b:c6:20:20:26:5d:50: 00:97:c3:31:63:8c:b8:17:10:45:2e:36:a4:94:1f: 83:3a:1f:57:b3:19:8c:52:e5:4a:23:d0:c5:00:5c: 72:c0:3f:ee:dc:99:71:1a:75:be:4f:67:83:3c:fe: f1:2f:25:4d:c3:5e:e0:ac:a2:4d:46:ff:2e:2a:96: 83:c4:fe:74:ef:bd:83:31:e0:9c:cb:be:fc:f6:c7: 0a:91:0e:e2:f5:73:86:e7:0b:be:44:e4:0a:ea:30: 89:9a:c1:3a:9d:3f:b4:42:42:c2:88:93:87:89:bb: 12:e4:5c:3e:c7:0e:73:a7:ff:7d:09:fa:88:a5:cc: d7:7a:f0:c7:7a:33:24:d3:7a:e9:2a:f4:75:59:42: 21:6e:a9:40:a6:58:be:4a:3a:09:97:63:bc:6e:37: ac:2c:cd:a3:22:e2:51:02:ab:13:3f:be:33:c8:c1: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C4:0E:55:E8:B0:40:D7:37:C1:74:C3:BC:7C:A4:D8:AF:3D:17:29 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:07:98:a1:d1:ce:e1:16:e7:9a:3d:7b:b0:17:15:49:72:3b: ac:fb:cd:ae:97:f5:e5:65:e1:1b:09:00:84:c6:a2:3c:54:e9: 48:dd:e8:48:d4:cd:a0:f4:51:bc:ed:6b:35:d7:56:31:fb:d6: 1f:a8:76:cb:ed:00:45:35:6a:bf:40:46:28:6c:84:00:5a:3e: 38:1c:b5:8a:3a:37:b0:c6:02:fd:fe:34:bd:ba:0d:b3:50:28: 7c:8c:9a:2f:3a:57:bd:41:12:f8:1d:1a:5c:86:e8:1f:b9:dd: 75:c6:da:ba:ac:a6:d7:51:1c:1f:32:54:f3:ed:bc:f6:fe:56: c5:7a:d7:55:56:2e:a7:4b:37:7b:80:f6:c1:5b:9e:8f:8f:51: 50:ea:73:0c:cb:fb:07:ac:c3:68:53:dc:e7:98:f5:97:55:a8: 94:4c:cd:a4:87:e9:9d:cf:48:db:1e:87:d1:e2:ef:2b:c7:05: 2b:ba:6f:46:de:86:a5:85:a7:ae:e7:6b:df:bf:61:cc:b9:64: 84:4f:ad:54:37:68:06:41:0a:8b:83:16:8e:bc:44:4b:97:bf: 40:16:6c:20:a6:50:10:89:7d:14:23:e7:e3:d7:9b:2c:f9:9a: 32:3b:1b:ca:f2:46:b7:98:1c:82:53:3c:20:e3:35:d5:9b:10: 22:1d:f9:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjQxMTIzMDMzOTMwWhcNMjQxMTMwMDMzOTMwWjAYMRYwFAYD VQQDEw02NzQxNGU3My1lZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3wo3B+T4xvlPoB6yku+YfEl4CkJQNYL9f1Q3P2mFYPLbd6f/WhyfacXWufy NaToWoozAmAex+7fgo6WL1VFRDhnTNag5ex2iMA+WYt0NnwNZjvGICAmXVAAl8Mx Y4y4FxBFLjaklB+DOh9XsxmMUuVKI9DFAFxywD/u3JlxGnW+T2eDPP7xLyVNw17g rKJNRv8uKpaDxP50772DMeCcy7789scKkQ7i9XOG5wu+ROQK6jCJmsE6nT+0QkLC iJOHibsS5Fw+xw5zp/99CfqIpczXevDHejMk03rpKvR1WUIhbqlApli+SjoJl2O8 bjesLM2jIuJRAqsTP74zyMFc6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/EDlXo sEDXN8F0w7x8pNivPRcpMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlB5ih0c7hFueaPXuwFxVJcjus+82ul/XlZeEbCQCExqI8VOlI3ehI 1M2g9FG87Ws111Yx+9YfqHbL7QBFNWq/QEYobIQAWj44HLWKOjewxgL9/jS9ug2z UCh8jJovOle9QRL4HRpchugfud11xtq6rKbXURwfMlTz7bz2/lbFetdVVi6nSzd7 gPbBW56Pj1FQ6nMMy/sHrMNoU9znmPWXVaiUTM2kh+mdz0jbHofR4u8rxwUrum9G 3oalhaeu52vfv2HMuWSET61UN2gGQQqLgxaOvERLl79AFmwgplAQiX0UI+fj15ss +ZoyOxvK8ka3mByCUzwg4zXVmxAiHfkk -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org