$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: BfKIijhN8HI5e9xnXr7IoxCCIAMxS/CZv+03+IxLEnQ= Subject key identifier: F2:CD:27:01:FA:17:76:BA:15:7A:86:20:C6:8B:B1:7F:4B:2E:D9:8F Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0BD1 Signing time: Fri 22 Nov 2024 18:33:58 +0000 Manifest this update: Fri 22 Nov 2024 18:33:57 +0000 Manifest next update: Fri 29 Nov 2024 18:33:57 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: 816aFhMzeXrA2WXynQg7DlzhwdFNd6fJzk0zapPwuPA=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Nov 22 18:33:57 2024 GMT Not After : Nov 29 18:33:57 2024 GMT Subject: CN=6740ce95-070f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:b8:c4:d0:9f:e1:62:14:c4:c2:41:ce:2a: 6a:5e:9d:04:4a:1d:af:d5:1f:a5:a9:70:26:35:c7: 27:61:a0:01:a9:9a:03:47:63:0c:1c:2c:7d:3e:3f: 36:a4:a8:2a:34:5e:f2:21:9b:59:6b:af:ab:f4:53: 21:da:b1:1b:10:b4:31:bf:3b:cf:c9:b6:5d:2b:39: c2:84:b9:be:4a:c0:fd:0d:2c:1a:9b:e8:51:b4:90: f7:c1:14:ec:38:8b:ed:03:ff:bd:a5:f4:65:3a:ef: 47:42:8a:9d:d5:63:ee:91:74:a2:fd:18:2b:91:f1: f9:4c:5a:12:66:6a:73:96:86:fb:38:10:68:0e:35: 9d:89:1d:13:c5:f6:e3:ce:8d:7e:0a:e5:7c:be:41: 2d:8c:96:0f:ed:0c:5f:af:74:a4:d2:ae:bf:c9:73: e7:74:a2:e7:0b:c7:e5:00:d6:d8:7c:36:60:e4:c1: a9:03:b4:2f:2d:d0:20:9c:eb:36:a2:98:8d:61:af: 56:e1:79:e0:3d:27:25:f7:ab:a9:7f:45:aa:be:be: 4f:6a:ee:00:1f:59:98:78:27:b2:f7:83:91:85:0e: e6:35:25:25:94:56:3f:56:20:8b:96:0c:82:1a:05: 1f:9e:82:7e:6b:ff:d7:26:f4:38:4b:9c:9f:fe:ea: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:27:01:FA:17:76:BA:15:7A:86:20:C6:8B:B1:7F:4B:2E:D9:8F X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:72:b1:fc:ce:67:73:21:c8:a9:23:cf:de:40:73:fe:21:66: 2f:8d:12:32:58:00:78:cc:04:6b:53:db:54:57:a0:ac:8d:d3: 26:29:75:68:c0:ad:87:b8:91:65:d4:4b:e3:28:c0:98:18:d2: 62:85:91:66:74:23:ea:f3:e5:ef:d3:12:a2:a7:1e:87:fd:42: b2:5b:24:a2:60:0f:e4:69:49:a2:86:97:0c:08:3c:90:98:6a: 59:d3:00:16:e0:bb:24:56:e8:22:0e:de:65:c0:3f:1c:e8:96: c4:dc:69:bd:26:de:b5:8e:16:1a:04:1c:85:55:b8:40:91:f6: 05:f1:43:0c:f8:ac:1b:69:69:f3:28:a4:53:96:38:80:32:c1: 7a:ea:8d:d7:97:25:fc:48:2c:50:44:36:eb:15:46:5b:76:89: 70:c5:87:d8:00:c9:bc:0f:00:6c:84:c2:99:39:d3:ab:cb:f4: c8:f2:79:16:72:68:39:58:25:81:4d:ad:2a:8d:aa:1f:3a:5a: 55:e5:7c:fc:3e:a5:e9:fd:48:bc:d9:4a:61:f4:f4:55:34:a8: f2:46:32:cc:6a:a7:f8:5e:d3:47:61:48:b1:23:94:70:44:89: cf:29:ea:f5:ba:c5:e2:f1:a2:c0:ef:35:52:7f:89:c9:d3:b4: 5e:6e:9f:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjQxMTIyMTgzMzU3WhcNMjQxMTI5MTgzMzU3WjAYMRYwFAYD VQQDEw02NzQwY2U5NS0wNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK64xNCf4WIUxMJBzipqXp0ESh2v1R+lqXAmNccnYaABqZoDR2MMHCx9Pj82 pKgqNF7yIZtZa6+r9FMh2rEbELQxvzvPybZdKznChLm+SsD9DSwam+hRtJD3wRTs OIvtA/+9pfRlOu9HQoqd1WPukXSi/RgrkfH5TFoSZmpzlob7OBBoDjWdiR0Txfbj zo1+CuV8vkEtjJYP7Qxfr3Sk0q6/yXPndKLnC8flANbYfDZg5MGpA7QvLdAgnOs2 opiNYa9W4XngPScl96upf0Wqvr5Pau4AH1mYeCey94ORhQ7mNSUllFY/ViCLlgyC GgUfnoJ+a//XJvQ4S5yf/urjGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLNJwH6 F3a6FXqGIMaLsX9LLtmPMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKcrH8zmdzIcipI8/eQHP+IWYvjRIyWAB4zARrU9tUV6CsjdMmKXVo wK2HuJFl1EvjKMCYGNJihZFmdCPq8+Xv0xKipx6H/UKyWySiYA/kaUmihpcMCDyQ mGpZ0wAW4LskVugiDt5lwD8c6JbE3Gm9Jt61jhYaBByFVbhAkfYF8UMM+KwbaWnz KKRTljiAMsF66o3XlyX8SCxQRDbrFUZbdolwxYfYAMm8DwBshMKZOdOry/TI8nkW cmg5WCWBTa0qjaofOlpV5Xz8PqXp/Ui82Uph9PRVNKjyRjLMaqf4XtNHYUixI5Rw RInPKer1usXi8aLA7zVSf4nJ07Rebp9Z -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org