$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: jP9hZmw0IOsj93BN9P14ZO7ATxFdCan+JPlCFzFfgVY= Subject key identifier: 5E:FF:46:0D:16:A4:F2:1D:AA:02:1E:5F:FA:8B:73:7C:AF:12:0D:12 Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 04DC Signing time: Wed 20 Nov 2024 23:21:50 +0000 Manifest this update: Wed 20 Nov 2024 23:21:50 +0000 Manifest next update: Wed 27 Nov 2024 23:21:50 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: z2IkKT3s7TAvCu7ji9LNqE7ZRqXYwcBiXlAjL4EpTAc=) 2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: IVU27JRYWuBmIt6QcWFMqPFM6vDpf9nhIJBTc75GYY0=) 3: 13335846175711ECB0193A7BC4F9AE02.roa (hash: J/ZSx7F/fQvE4Y75QAO9iWDR6yukNHolDDbFAc4SShQ=) 4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: U7esX+0iuEFV+x7WiXgxLOpS83nYnKPDWOfbwdSRies=) 5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: OD4QLqvF0E7NjniUYIqO9yXt+jiElu9IZS+rh6A1NUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Nov 20 23:21:50 2024 GMT Not After : Nov 27 23:21:50 2024 GMT Subject: CN=673e6f0e-8579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:13:13:4d:a8:05:96:3e:94:0b:ab:21:bb:28: 97:a9:59:27:58:05:9e:ab:4f:1a:e2:b7:a4:b3:28: 07:93:77:b7:b2:23:f1:25:49:19:e1:14:8b:58:69: 9b:69:b6:82:e1:35:56:15:81:b7:a5:a2:0c:18:2c: b8:f6:6e:67:e6:ed:83:91:1c:90:6d:af:fb:c2:13: 75:93:27:e7:3d:2c:9e:7a:00:5c:48:22:fd:91:43: 82:47:22:b3:c9:18:4d:0c:77:83:86:27:55:bf:79: 7c:59:04:92:4b:42:d6:eb:60:b9:64:aa:d5:e6:3f: 0b:9a:45:58:2f:d1:d7:e8:13:27:82:fa:f1:83:35: f7:fe:79:fa:74:1e:56:d5:cb:bb:a2:28:35:fb:88: e1:2e:20:95:a6:40:0b:bc:d8:56:39:9e:ba:49:19: d2:9f:47:04:33:08:6b:1d:c8:05:e6:75:35:10:bf: 53:f2:1a:4e:ce:71:ad:b1:71:2d:5d:2f:c8:40:4e: 6f:61:ae:65:ce:78:e4:95:62:8f:90:95:4f:d9:0a: 2d:18:e6:09:dc:a9:8a:57:10:44:1e:8e:0e:18:86: 66:16:7c:05:05:62:f0:46:da:6a:9f:79:22:17:f7: 12:59:8e:eb:58:8a:ad:3c:6d:1a:38:67:38:84:e3: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FF:46:0D:16:A4:F2:1D:AA:02:1E:5F:FA:8B:73:7C:AF:12:0D:12 X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:44:2c:d4:39:b8:a3:b2:44:e0:1c:37:ba:8b:c5:16:2f:0d: 43:04:47:92:4f:d9:01:84:ca:9c:1a:f5:cf:12:a8:f6:f8:dc: 71:39:71:d7:73:24:0c:93:81:44:f3:6e:7a:0c:15:c6:54:f7: f9:ac:67:01:78:25:33:8c:fe:d7:4a:ae:de:37:a1:59:f6:d9: 26:3a:cc:7d:fd:a9:92:ab:51:44:ce:48:9f:f1:49:7c:d1:59: 54:a2:2e:fe:d2:20:3e:e7:3c:ee:c8:ab:c4:30:18:1d:72:dc: f5:14:56:ff:9d:e0:fa:15:61:86:5c:47:fe:f0:1d:cb:8e:4d: 7a:ef:4f:0e:6b:43:e7:d5:b0:63:71:e0:b2:bf:da:6f:25:67: ef:1f:2b:3e:20:b8:f1:87:96:f5:79:c4:81:df:7f:f7:29:b2: f6:de:2c:a1:bd:30:7c:10:d5:6d:fc:8e:66:86:fb:3c:6a:2d: 3e:67:c2:3f:c8:bc:75:0d:8f:52:17:71:f9:12:b9:35:bf:ce: 08:c9:11:6e:b7:f5:25:0d:91:06:7f:e6:8f:c2:10:6b:62:00: e8:ce:25:a3:ea:64:36:88:f8:99:c1:75:30:31:af:46:db:85: 51:c4:f6:c9:77:ad:df:85:41:48:71:5d:64:3e:9d:86:8a:5a: 3e:d3:3b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjQxMTIwMjMyMTUwWhcNMjQxMTI3MjMyMTUwWjAYMRYwFAYD VQQDEw02NzNlNmYwZS04NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hMTTagFlj6UC6shuyiXqVknWAWeq08a4reksygHk3e3siPxJUkZ4RSLWGmb abaC4TVWFYG3paIMGCy49m5n5u2DkRyQba/7whN1kyfnPSyeegBcSCL9kUOCRyKz yRhNDHeDhidVv3l8WQSSS0LW62C5ZKrV5j8LmkVYL9HX6BMngvrxgzX3/nn6dB5W 1cu7oig1+4jhLiCVpkALvNhWOZ66SRnSn0cEMwhrHcgF5nU1EL9T8hpOznGtsXEt XS/IQE5vYa5lznjklWKPkJVP2QotGOYJ3KmKVxBEHo4OGIZmFnwFBWLwRtpqn3ki F/cSWY7rWIqtPG0aOGc4hONhwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7/Rg0W pPIdqgIeX/qLc3yvEg0SMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrRCzUObijskTgHDe6i8UWLw1DBEeST9kBhMqcGvXPEqj2+NxxOXHX cyQMk4FE8256DBXGVPf5rGcBeCUzjP7XSq7eN6FZ9tkmOsx9/amSq1FEzkif8Ul8 0VlUoi7+0iA+5zzuyKvEMBgdctz1FFb/neD6FWGGXEf+8B3Ljk16708Oa0Pn1bBj ceCyv9pvJWfvHys+ILjxh5b1ecSB33/3KbL23iyhvTB8ENVt/I5mhvs8ai0+Z8I/ yLx1DY9SF3H5Erk1v84IyRFut/UlDZEGf+aPwhBrYgDoziWj6mQ2iPiZwXUwMa9G 24VRxPbJd63fhUFIcV1kPp2Gilo+0zth -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:58 2024 by rpki-client on console-ams.rpki-client.org