$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: /sxlih7OYJcaVnUIG0uloPjHr5HC2jkKVeTNxKPWnw8= Subject key identifier: A9:F4:27:F1:2A:F7:14:6C:1C:77:C2:7C:0D:F6:17:9C:CE:94:B7:3D Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 3426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 3424 Signing time: Fri 22 Nov 2024 15:07:28 +0000 Manifest this update: Fri 22 Nov 2024 15:07:28 +0000 Manifest next update: Fri 29 Nov 2024 15:07:28 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: R/HOAQhXqZwZWpEYXM7miE0t5Dq3Sad0cdgO87Q/ES4=) 2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13350 (0x3426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: Nov 22 15:07:28 2024 GMT Not After : Nov 29 15:07:28 2024 GMT Subject: CN=67409e30-1e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:61:00:d2:61:5c:2a:d1:be:6c:ad:87:12: 02:d3:d0:86:b1:74:65:aa:06:2e:20:3f:01:3b:9a: 47:9e:e5:76:bd:57:1c:0b:73:d8:21:7d:e7:66:f0: 8c:9c:d3:97:04:cb:e5:13:f5:17:55:fa:bd:b8:fe: ec:1a:41:23:9a:7f:f9:56:1e:a0:d1:d9:87:7f:19: 39:d3:a4:96:08:bc:cd:24:54:0c:58:b5:91:00:a7: a9:3f:73:79:c8:65:c7:38:c0:ef:31:c1:3b:30:1b: 01:4e:f5:99:d8:a0:16:f8:d7:c1:25:e4:fd:70:10: 45:d8:b5:7b:aa:0d:c3:e6:de:07:b1:df:1b:84:c9: e8:f7:1f:bf:d0:e1:0b:dc:66:44:4f:54:bd:bb:c8: a3:d7:ce:60:9f:fd:bb:f2:c1:85:3c:1c:2f:47:d7: 35:e7:0e:de:88:64:8b:d9:f3:fe:1f:64:93:b1:0d: 72:27:88:04:de:29:ae:8e:10:25:49:70:c3:2c:d9: bf:7a:da:75:88:76:d1:2a:7b:51:19:47:92:98:59: 44:2f:6d:5d:6c:42:ee:b6:93:a5:ae:0d:27:3b:d0: 4f:a4:1d:fe:83:b4:dc:eb:e7:b2:63:0c:f8:b4:f5: 03:d2:24:43:44:79:dc:25:05:da:11:c6:a2:9e:71: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:27:F1:2A:F7:14:6C:1C:77:C2:7C:0D:F6:17:9C:CE:94:B7:3D X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e6:df:d2:07:fd:16:64:29:7b:60:9d:84:ba:e2:79:ba:cc: 5b:98:e8:57:cd:70:f0:00:81:27:16:2b:c0:a6:42:b3:b8:7d: 86:50:30:27:71:f6:4e:1f:e2:e1:07:e1:35:02:88:2b:6a:d3: bd:4c:d5:43:b3:65:a3:44:2b:e6:e9:31:5a:a8:8a:50:52:88: 21:fa:43:68:83:09:dc:4b:08:ca:43:a6:2c:73:d3:2d:01:a4: 73:6f:2d:18:41:7a:0c:7e:09:57:12:d1:6b:46:cf:94:94:d0: 49:ef:c5:c9:5d:87:9a:ff:64:cb:03:d9:67:87:e7:e9:ce:92: 76:39:8a:83:88:fe:73:f1:83:37:cd:df:8a:33:4f:36:5d:a8: 9f:18:8f:0d:d6:0d:c7:56:0a:d0:3a:66:d6:24:9d:08:58:95: d4:e6:fc:28:a3:7b:8a:30:28:cf:a3:b8:88:8a:b6:55:b4:e7: be:0c:f6:56:6c:d5:84:d2:f0:5b:a5:c8:22:1c:24:68:3b:00: 26:21:4b:fb:4e:c7:de:92:b2:f5:65:ab:39:40:bc:94:38:b4: 72:13:db:d9:5b:85:f7:32:6a:15:5d:2b:dd:f7:31:1f:1d:67: 3f:0c:db:b1:a6:6b:6f:50:02:0a:bb:9b:7c:c6:57:9e:68:7b: a5:14:8d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjQxMTIyMTUwNzI4WhcNMjQxMTI5MTUwNzI4WjAYMRYwFAYD VQQDEw02NzQwOWUzMC0xZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOphANJhXCrRvmythxIC09CGsXRlqgYuID8BO5pHnuV2vVccC3PYIX3nZvCM nNOXBMvlE/UXVfq9uP7sGkEjmn/5Vh6g0dmHfxk506SWCLzNJFQMWLWRAKepP3N5 yGXHOMDvMcE7MBsBTvWZ2KAW+NfBJeT9cBBF2LV7qg3D5t4Hsd8bhMno9x+/0OEL 3GZET1S9u8ij185gn/278sGFPBwvR9c15w7eiGSL2fP+H2STsQ1yJ4gE3imujhAl SXDDLNm/etp1iHbRKntRGUeSmFlEL21dbELutpOlrg0nO9BPpB3+g7Tc6+eyYwz4 tPUD0iRDRHncJQXaEcainnGFnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn0J/Eq 9xRsHHfCfA32F5zOlLc9MB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz5t/SB/0WZCl7YJ2EuuJ5usxbmOhXzXDwAIEnFivApkKzuH2GUDAn cfZOH+LhB+E1AogratO9TNVDs2WjRCvm6TFaqIpQUogh+kNogwncSwjKQ6Ysc9Mt AaRzby0YQXoMfglXEtFrRs+UlNBJ78XJXYea/2TLA9lnh+fpzpJ2OYqDiP5z8YM3 zd+KM082XaifGI8N1g3HVgrQOmbWJJ0IWJXU5vwoo3uKMCjPo7iIirZVtOe+DPZW bNWE0vBbpcgiHCRoOwAmIUv7TsfekrL1Zas5QLyUOLRyE9vZW4X3MmoVXSvd9zEf HWc/DNuxpmtvUAIKu5t8xleeaHulFI3f -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org