$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: 6tl/RXtu2U3n0mCufQccKn3aGFYhKzGnLAodYY6O+II= Subject key identifier: AC:6C:E6:34:84:40:24:24:6A:20:7C:9D:EB:9E:B1:45:E1:7C:68:96 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 03A9 Signing time: Sat 23 Nov 2024 00:17:53 +0000 Manifest this update: Sat 23 Nov 2024 00:17:52 +0000 Manifest next update: Sat 30 Nov 2024 00:17:52 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: tirF+7rdbhP6OSd0/D85chNOw0gRX9OeIsVom8JdLy0=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: N5LWFk30bxfGEjnI/0LUgGK8Je9skUkmcUeWBKL7XaM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: L+4Lrg0LST+xlCPRZ+c8/SmkJQOixAhrBKDqQLo3DG4=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: Egiew0vIR4ASEObbQXrj+Fnao9gPGKz63PPXUXFBbpA=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: Z6KFl5cF5bVExSjJp72ePfl6f6wUu4zvQN9XMoTQ/QY=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: 1W1utkz3ijyEngxKL3HT/wTn1CGNqvqDy4otJjVWoPI=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: GbVMv+sx7LPV2Egetdh3mHAabLSsFSIVDky1cvCHiFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Nov 23 00:17:52 2024 GMT Not After : Nov 30 00:17:52 2024 GMT Subject: CN=67411f30-087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:56:86:c1:a3:62:20:71:d6:dd:d4:95:1a: f7:60:de:52:af:9d:b9:31:84:15:36:d3:c7:1d:34: 9d:19:6b:58:aa:ef:64:be:24:c0:ef:96:26:98:43: 33:2e:d5:16:83:05:95:80:ae:a6:9b:9f:2d:bd:9a: 7f:95:f2:57:70:72:ce:9b:a8:39:28:05:e5:f5:82: 4c:76:cb:61:3f:d9:0c:d1:51:30:a8:af:d2:37:c1: af:98:84:6a:f3:16:99:d5:da:f1:fc:b4:3b:91:c4: 13:80:5b:51:5a:70:a0:bf:2d:07:76:0e:f5:67:41: 4b:ab:4a:7d:2c:5d:00:05:07:33:a6:04:2c:44:9c: 73:7e:4b:dc:74:00:06:e4:1e:6e:14:15:e8:92:6b: c0:9b:2a:c1:22:8a:84:1c:1c:2a:dd:1e:cf:64:15: 2b:3e:02:df:7e:52:a1:31:ee:5d:d1:36:31:6a:4f: 4e:54:0f:0c:0c:ae:bb:fb:e7:7f:b4:1b:8d:da:11: 51:e0:1f:6f:9f:57:10:04:e3:89:73:f4:7d:49:27: 8a:3f:5a:0e:a0:af:df:f1:b7:ea:d4:0a:68:c3:f6: 42:1b:6d:ee:e5:57:3e:f1:40:49:5a:b4:e9:f5:ed: 87:5f:da:ac:20:a4:9f:cc:90:db:b2:78:8e:a9:7f: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6C:E6:34:84:40:24:24:6A:20:7C:9D:EB:9E:B1:45:E1:7C:68:96 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f1:4c:3d:b2:48:6f:57:cb:42:a2:77:8f:c6:92:a7:4f:8a: dc:d1:2b:af:b8:d1:6c:36:e6:84:96:76:0e:30:57:e7:42:5c: 30:72:58:9d:ea:b3:c4:d5:57:0e:b1:52:2c:1a:92:ed:ed:63: be:5c:9d:09:dd:07:48:ba:27:1a:4b:ba:ed:a8:58:49:60:ac: 98:fd:02:34:96:2e:59:c5:aa:21:7b:02:59:1b:7a:50:e4:fa: dd:86:ff:29:a4:b5:8d:92:a5:dc:9f:77:07:df:73:3a:30:df: c6:10:35:7d:e0:fa:30:54:c2:20:b7:05:5b:76:26:b8:ec:b7: 5e:1f:a3:6b:77:fe:71:8b:93:f9:a7:a2:94:e0:5f:17:fa:ae: 85:6f:c2:13:86:8d:26:cb:81:35:ab:9e:f8:1d:1c:a3:10:71: 01:47:91:56:19:06:71:4b:11:cd:4a:fc:94:8e:f1:27:04:6b: 2e:c9:e4:d4:12:64:54:c0:2c:a1:cc:33:c4:f4:00:8b:73:fc: bf:0b:30:41:89:a8:c7:88:0d:ad:bd:1b:06:49:2d:68:56:3e: ab:98:b8:d0:0e:1c:77:20:b2:08:58:ff:58:f5:20:24:2b:25: 6a:03:5a:81:4a:dc:40:e2:24:0f:c4:04:d8:4d:a4:98:b6:0d: 98:c5:21:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjQxMTIzMDAxNzUyWhcNMjQxMTMwMDAxNzUyWjAYMRYwFAYD VQQDEw02NzQxMWYzMC0wODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUdWhsGjYiBx1t3UlRr3YN5Sr525MYQVNtPHHTSdGWtYqu9kviTA75YmmEMz LtUWgwWVgK6mm58tvZp/lfJXcHLOm6g5KAXl9YJMdsthP9kM0VEwqK/SN8GvmIRq 8xaZ1drx/LQ7kcQTgFtRWnCgvy0Hdg71Z0FLq0p9LF0ABQczpgQsRJxzfkvcdAAG 5B5uFBXokmvAmyrBIoqEHBwq3R7PZBUrPgLfflKhMe5d0TYxak9OVA8MDK67++d/ tBuN2hFR4B9vn1cQBOOJc/R9SSeKP1oOoK/f8bfq1Apow/ZCG23u5Vc+8UBJWrTp 9e2HX9qsIKSfzJDbsniOqX/zcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxs5jSE QCQkaiB8neuesUXhfGiWMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA8Uw9skhvV8tConePxpKnT4rc0SuvuNFsNuaElnYOMFfnQlwwclid 6rPE1VcOsVIsGpLt7WO+XJ0J3QdIuicaS7rtqFhJYKyY/QI0li5ZxaohewJZG3pQ 5Prdhv8ppLWNkqXcn3cH33M6MN/GEDV94PowVMIgtwVbdia47LdeH6Nrd/5xi5P5 p6KU4F8X+q6Fb8ITho0my4E1q574HRyjEHEBR5FWGQZxSxHNSvyUjvEnBGsuyeTU EmRUwCyhzDPE9ACLc/y/CzBBiajHiA2tvRsGSS1oVj6rmLjQDhx3ILIIWP9Y9SAk KyVqA1qBStxA4iQPxATYTaSYtg2YxSH4 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org