$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: gJg5o04/FB+GJSNuBnveD1dIPP82D4PCNgiplODCvQU= Subject key identifier: CC:8E:41:39:CB:1C:9F:E0:F5:60:A6:EC:00:EA:72:4B:22:D2:B0:CE Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0BBB Signing time: Fri 22 Nov 2024 18:40:46 +0000 Manifest this update: Fri 22 Nov 2024 18:40:45 +0000 Manifest next update: Fri 29 Nov 2024 18:40:45 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: Nl3PFwm/5CHO6CfHvl/g6Tr1kvwQq13e9t7PCekgnxQ=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Nov 22 18:40:45 2024 GMT Not After : Nov 29 18:40:45 2024 GMT Subject: CN=6740d02e-fdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:88:a7:7b:76:b5:df:50:d3:2e:c0:90:87: 66:91:a5:b5:83:cf:a5:78:62:8a:5a:fd:bb:f3:35: 31:8c:f3:cc:1b:4b:b1:66:ad:77:f4:be:30:e2:3a: d3:27:61:52:10:ab:cd:8f:5a:ca:77:f7:17:f6:de: 38:9a:45:60:1a:ca:5f:0d:15:75:87:66:26:f5:11: 50:34:ce:bd:00:11:9c:25:ec:7a:95:4e:7a:00:52: c9:6e:a8:41:e4:91:9a:cb:49:58:1f:04:f7:e8:04: 2b:86:b3:2a:a7:08:b6:7c:49:97:3b:f2:ed:d5:fe: 38:67:a7:c0:63:a6:0f:7c:d4:58:68:bc:e9:82:65: ed:d7:20:72:41:c6:9b:9b:72:d5:e9:97:47:bc:d4: 7c:b2:5c:f2:37:53:c3:f9:df:ce:9a:2d:92:59:03: 50:be:9d:0f:62:e6:98:28:e1:a7:02:37:55:fb:fe: 28:42:29:34:7b:2f:36:8d:3b:a8:e5:af:e7:1c:3f: 06:47:d6:5b:af:47:08:ef:82:41:2d:cf:a6:37:a7: e5:80:02:b0:64:59:0b:16:b9:9e:21:85:09:0b:9c: 72:a4:36:d0:95:30:10:9a:a5:16:a4:fa:b3:d7:aa: b5:9a:2a:71:7d:e4:e5:b8:97:dd:da:07:87:1e:89: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8E:41:39:CB:1C:9F:E0:F5:60:A6:EC:00:EA:72:4B:22:D2:B0:CE X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:da:77:49:0b:d7:40:b6:c6:49:f0:b0:49:49:4e:c5:e3:ae: 26:92:db:f3:6e:6f:41:0d:fd:40:6b:6c:fa:c1:27:90:72:e7: 7a:9e:c1:7f:22:9b:97:67:b4:66:43:71:9b:0a:0d:72:d2:be: 38:35:bb:e4:0e:79:61:64:eb:64:df:4b:41:ab:b5:f0:12:5b: 17:50:16:5d:84:23:3b:22:c9:d2:6c:15:20:67:21:14:17:53: ed:50:45:37:c5:0c:73:70:ad:e6:5e:35:81:96:ca:bf:75:1c: b6:a4:ea:7c:12:e5:52:90:6e:b9:50:dd:4d:90:00:2d:b0:50: c4:52:fa:b4:5d:e8:03:3d:d1:47:30:c1:3f:13:fd:36:d0:05: 55:21:5d:47:f4:df:70:d5:41:ad:52:6a:4c:b6:e1:b5:6c:0b: ac:ca:a6:38:d7:86:25:0a:5c:f9:65:03:bd:a5:d1:fe:1f:a0: 19:87:06:f8:96:12:18:2f:ce:8d:23:83:96:60:03:a5:db:d5: ad:29:31:77:f4:0c:63:9f:c3:68:09:61:cc:8e:bd:0c:a4:ea: 99:79:2e:c1:45:3e:c9:f2:df:66:f5:6f:f1:3d:63:de:77:f4: 11:3c:23:ca:06:11:c8:c0:91:5c:9b:43:a3:57:6f:e9:04:1e: 0a:3c:4b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjQxMTIyMTg0MDQ1WhcNMjQxMTI5MTg0MDQ1WjAYMRYwFAYD VQQDEw02NzQwZDAyZS1mZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM2Ip3t2td9Q0y7AkIdmkaW1g8+leGKKWv278zUxjPPMG0uxZq139L4w4jrT J2FSEKvNj1rKd/cX9t44mkVgGspfDRV1h2Ym9RFQNM69ABGcJex6lU56AFLJbqhB 5JGay0lYHwT36AQrhrMqpwi2fEmXO/Lt1f44Z6fAY6YPfNRYaLzpgmXt1yByQcab m3LV6ZdHvNR8slzyN1PD+d/Omi2SWQNQvp0PYuaYKOGnAjdV+/4oQik0ey82jTuo 5a/nHD8GR9Zbr0cI74JBLc+mN6flgAKwZFkLFrmeIYUJC5xypDbQlTAQmqUWpPqz 16q1mipxfeTluJfd2geHHolmtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyOQTnL HJ/g9WCm7ADqcksi0rDOMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs2ndJC9dAtsZJ8LBJSU7F464mktvzbm9BDf1Aa2z6wSeQcud6nsF/ IpuXZ7RmQ3GbCg1y0r44NbvkDnlhZOtk30tBq7XwElsXUBZdhCM7IsnSbBUgZyEU F1PtUEU3xQxzcK3mXjWBlsq/dRy2pOp8EuVSkG65UN1NkAAtsFDEUvq0XegDPdFH MME/E/020AVVIV1H9N9w1UGtUmpMtuG1bAusyqY414YlClz5ZQO9pdH+H6AZhwb4 lhIYL86NI4OWYAOl29WtKTF39Axjn8NoCWHMjr0MpOqZeS7BRT7J8t9m9W/xPWPe d/QRPCPKBhHIwJFcm0OjV2/pBB4KPEtT -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org