$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: xBX9t6bDtIV4Dpvu1WnKUtnRw7FkCX3CJmgCQ5Ps/f0= Subject key identifier: 00:C8:01:63:C9:A1:51:FF:22:06:32:BC:DB:C4:EE:A0:E2:79:46:9C Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0AE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0AD3 Signing time: Fri 22 Nov 2024 19:09:15 +0000 Manifest this update: Fri 22 Nov 2024 19:09:14 +0000 Manifest next update: Fri 29 Nov 2024 19:09:14 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: EYbAARFeFXIdrmAQT+PbGY/IwzNaTt8QAeoz4c4uR9Q=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: isFXn22manatugHafRu2hqpuY348jCwEcI/j4K+wcRU=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: EpjCnlsJkfHNtp2vFgzZPfvRv085L5br2n3beV/fvF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2788 (0xae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Nov 22 19:09:14 2024 GMT Not After : Nov 29 19:09:14 2024 GMT Subject: CN=6740d6da-16cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:fc:f5:8d:7e:bc:86:4e:49:58:a5:87:e1: a9:2a:3e:2c:58:c6:da:51:17:81:74:23:83:ef:26: 87:19:59:42:02:b3:7d:30:95:93:ef:af:c0:98:ea: af:48:a8:73:0e:fc:66:06:37:99:cc:3d:99:f4:d9: 07:92:9a:0b:92:ac:6c:ef:e3:b7:cf:cb:6f:d9:02: 2e:a6:a2:ab:ff:97:03:34:cf:d3:61:61:b3:f1:d9: e2:89:a6:2e:f3:ab:d1:db:d3:cf:7c:29:c8:84:fe: 34:6f:d6:77:b4:35:65:f6:8b:9f:fe:de:41:8d:52: 27:93:2f:95:b8:28:39:31:de:bd:ac:5e:15:09:7c: 6f:22:a7:66:c8:94:3d:db:23:96:51:90:ad:64:1f: b0:b0:80:c7:07:ef:57:76:49:a7:85:c1:3b:3c:8c: 34:23:c2:92:56:08:c8:42:ea:4b:56:53:57:f8:69: 5e:70:9e:5e:22:78:6c:0f:e4:61:d6:16:24:93:c2: 3b:36:fe:a5:64:ba:b6:ec:9f:43:60:c8:51:9a:6b: 42:b6:63:9e:ba:4a:98:a4:4e:4b:a8:c4:e1:40:e1: 1f:f3:83:80:ca:17:95:41:0a:35:8b:0d:7d:04:84: 41:56:9d:85:21:b8:88:82:c5:ef:5d:aa:dd:9b:d0: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C8:01:63:C9:A1:51:FF:22:06:32:BC:DB:C4:EE:A0:E2:79:46:9C X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ae:f3:1b:a4:72:fd:2f:17:ff:5b:8e:91:2d:6a:7a:95:df: b3:0a:0f:f7:b9:3a:ff:2e:28:8b:bf:d8:df:b0:e1:48:6b:f2: 33:b6:9b:1f:57:cf:54:08:98:34:7b:c6:c7:4f:b8:ab:a1:60: e3:28:d4:63:3e:a0:02:8f:a0:5c:d3:4a:aa:a5:b2:e3:f9:5c: 5c:68:f6:35:d4:98:e4:c4:84:be:78:6a:81:47:c3:6a:fb:85: 2c:d1:e3:56:fc:3c:fb:b3:f8:c2:20:38:d7:5b:d2:41:95:ff: 9e:e7:e4:69:0a:bd:22:00:d5:9c:74:79:1b:10:d8:1c:cb:0d: 52:57:a6:bd:e8:fc:1a:bf:20:6b:4b:0d:3b:83:01:bd:37:eb: 93:d5:d2:97:21:9d:71:b8:4b:ea:07:55:1d:9c:61:01:98:8d: 06:84:cd:b1:97:b6:aa:ee:4f:82:33:b9:2a:fd:0d:93:d5:36: b8:a2:ce:a1:7f:fc:47:f7:28:24:ca:35:63:7e:b8:17:3c:35: bd:94:1c:4a:7b:be:7d:f0:b9:0d:a2:da:fa:fe:7d:46:d1:49: 2e:3d:13:e6:a9:9a:20:b4:ea:8b:b6:3a:ca:7c:10:dd:55:3b: a8:92:00:b0:5a:dc:7b:da:5d:9b:79:2b:d9:4d:ca:84:aa:61: c1:d8:1f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjQxMTIyMTkwOTE0WhcNMjQxMTI5MTkwOTE0WjAYMRYwFAYD VQQDEw02NzQwZDZkYS0xNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ar89Y1+vIZOSVilh+GpKj4sWMbaUReBdCOD7yaHGVlCArN9MJWT76/AmOqv SKhzDvxmBjeZzD2Z9NkHkpoLkqxs7+O3z8tv2QIupqKr/5cDNM/TYWGz8dniiaYu 86vR29PPfCnIhP40b9Z3tDVl9ouf/t5BjVInky+VuCg5Md69rF4VCXxvIqdmyJQ9 2yOWUZCtZB+wsIDHB+9XdkmnhcE7PIw0I8KSVgjIQupLVlNX+GlecJ5eInhsD+Rh 1hYkk8I7Nv6lZLq27J9DYMhRmmtCtmOeukqYpE5LqMThQOEf84OAyheVQQo1iw19 BIRBVp2FIbiIgsXvXardm9DwgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADIAWPJ oVH/IgYyvNvE7qDieUacMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhrvMbpHL9Lxf/W46RLWp6ld+zCg/3uTr/LiiLv9jfsOFIa/Iztpsf V89UCJg0e8bHT7iroWDjKNRjPqACj6Bc00qqpbLj+VxcaPY11JjkxIS+eGqBR8Nq +4Us0eNW/Dz7s/jCIDjXW9JBlf+e5+RpCr0iANWcdHkbENgcyw1SV6a96PwavyBr Sw07gwG9N+uT1dKXIZ1xuEvqB1UdnGEBmI0GhM2xl7aq7k+CM7kq/Q2T1Ta4os6h f/xH9ygkyjVjfrgXPDW9lBxKe7598LkNotr6/n1G0UkuPRPmqZogtOqLtjrKfBDd VTuokgCwWtx72l2beSvZTcqEqmHB2B9A -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org