$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: 204nKOUIw+cH0ZmitOEnixjP7CV0taXlhf4aJUsOwW8= Subject key identifier: 07:CF:80:2C:6B:25:F2:40:08:56:F3:8A:4D:CA:7D:40:1E:66:E0:71 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 0233 Signing time: Sat 23 Nov 2024 01:28:21 +0000 Manifest this update: Sat 23 Nov 2024 01:28:20 +0000 Manifest next update: Sat 30 Nov 2024 01:28:20 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: LXYJPEm+PYGCdkA4LGcSj+6j+QOpdVdgzVz4oRAinUM=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: +DAM4u0XWzGXzujdBmpBOJBuyDMu2NVi0XXcoENn480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Nov 23 01:28:20 2024 GMT Not After : Nov 30 01:28:20 2024 GMT Subject: CN=67412fb4-7069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:b4:89:e1:d8:dc:1e:db:4f:3c:72:f2:5d: 4b:d9:3b:53:c4:09:e9:3d:32:ba:a9:21:53:11:84: bb:62:f9:44:6c:90:6c:ea:76:82:35:34:79:31:f0: c0:a0:76:92:5c:f0:bd:b4:a8:3a:10:46:a2:ec:02: d5:fe:df:55:1c:f4:40:c2:2d:d4:91:64:2e:a0:e8: 49:f1:a9:e8:2a:f3:92:b6:61:85:1f:b4:2a:be:22: f7:9e:7f:34:2f:b7:11:ee:20:aa:4a:7f:3c:f5:9c: dc:a9:99:75:57:c0:9f:98:00:2c:cf:f4:70:22:6d: 29:d7:7b:87:d9:b9:37:a5:90:2e:4c:eb:f2:12:ab: 6d:02:26:3a:10:a1:e6:98:48:7f:c3:74:c6:82:71: 69:8b:92:42:6e:43:7b:4c:05:c5:d6:c6:34:89:6b: 60:ab:47:9c:5a:44:e4:ec:5a:7e:bf:83:7e:6d:dc: 55:0d:98:d0:ac:b0:af:4d:54:ae:42:a0:8f:41:b1: 6b:66:4b:b8:55:9f:ce:2e:2b:55:40:02:a7:06:87: 47:cf:bd:51:f8:99:7b:1d:3e:91:2b:71:e2:0d:37: 62:4c:75:4e:a5:c1:70:7d:14:08:83:1f:b1:c1:6a: c4:fc:af:d0:e4:5d:ff:e1:c8:5a:67:25:de:7d:f2: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CF:80:2C:6B:25:F2:40:08:56:F3:8A:4D:CA:7D:40:1E:66:E0:71 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:72:fa:f5:41:1f:a7:3e:7f:0c:57:11:77:58:d4:4c:b3:2f: 06:13:3b:89:bf:35:b8:f9:a0:9d:3e:af:10:9a:78:b5:a4:aa: 93:e8:40:21:88:ad:75:31:21:a8:ea:b0:1f:e4:f6:e1:35:3f: 73:c7:ac:1e:77:9d:9a:13:a5:dc:ca:ca:14:cb:1f:16:d7:c1: c9:40:5b:59:a1:4a:dd:5c:58:cc:ec:a5:01:fe:25:9d:1d:a2: 8b:d4:63:f2:66:a9:cb:35:5d:fd:f4:26:c4:d7:26:41:3a:ab: 0d:a4:a6:80:ff:d6:2e:b4:48:ef:1a:58:27:18:72:b3:29:a5: 68:4d:f7:97:06:dc:fa:79:71:1e:5f:e5:03:e8:2c:98:41:c0: 28:f0:94:5b:c7:d8:9f:c4:67:bb:64:9d:af:ba:9f:d8:f5:2b: 67:8c:9d:71:a3:b7:e5:30:08:66:40:f5:f3:01:6a:96:c2:60: 1d:91:69:66:85:80:39:07:a1:6e:4d:52:61:59:be:4b:9d:ce: 16:48:21:5e:de:0a:79:b6:b4:a2:60:d2:a2:bd:e5:0f:4c:2e: aa:9a:1e:3c:3a:1a:5b:51:22:02:1a:da:a2:5a:71:0f:62:63: 12:f2:5c:d8:4b:67:cb:cc:c8:3e:c3:b6:7e:24:f5:b3:94:af: cc:a6:86:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjQxMTIzMDEyODIwWhcNMjQxMTMwMDEyODIwWjAYMRYwFAYD VQQDEw02NzQxMmZiNC03MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdm0ieHY3B7bTzxy8l1L2TtTxAnpPTK6qSFTEYS7YvlEbJBs6naCNTR5MfDA oHaSXPC9tKg6EEai7ALV/t9VHPRAwi3UkWQuoOhJ8anoKvOStmGFH7QqviL3nn80 L7cR7iCqSn889ZzcqZl1V8CfmAAsz/RwIm0p13uH2bk3pZAuTOvyEqttAiY6EKHm mEh/w3TGgnFpi5JCbkN7TAXF1sY0iWtgq0ecWkTk7Fp+v4N+bdxVDZjQrLCvTVSu QqCPQbFrZku4VZ/OLitVQAKnBodHz71R+Jl7HT6RK3HiDTdiTHVOpcFwfRQIgx+x wWrE/K/Q5F3/4chaZyXeffLjrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfPgCxr JfJACFbzik3KfUAeZuBxMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQcvr1QR+nPn8MVxF3WNRMsy8GEzuJvzW4+aCdPq8Qmni1pKqT6EAh iK11MSGo6rAf5PbhNT9zx6wed52aE6XcysoUyx8W18HJQFtZoUrdXFjM7KUB/iWd HaKL1GPyZqnLNV399CbE1yZBOqsNpKaA/9YutEjvGlgnGHKzKaVoTfeXBtz6eXEe X+UD6CyYQcAo8JRbx9ifxGe7ZJ2vup/Y9StnjJ1xo7flMAhmQPXzAWqWwmAdkWlm hYA5B6FuTVJhWb5Lnc4WSCFe3gp5trSiYNKiveUPTC6qmh48OhpbUSICGtqiWnEP YmMS8lzYS2fLzMg+w7Z+JPWzlK/MpoZ3 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org