$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: vh7IRU1Ps8pE9bNND7dpnPIaD02lwOpBcaxv88gBcYc= Subject key identifier: C0:0E:3D:76:9A:78:21:F3:1E:A1:98:64:91:F8:00:78:6A:C1:D9:E8 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0DF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0DEA Signing time: Wed 20 Nov 2024 17:44:34 +0000 Manifest this update: Wed 20 Nov 2024 17:44:33 +0000 Manifest next update: Wed 27 Nov 2024 17:44:33 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: XAcG8p+qGnQ/vudIP5hVj7LAlymtXTWhZM7mKfGirFo=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: Ro2TBCoOvqNYKcY9yM3cP6moWqnC6oV3HDt4ZFiaByw=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: 9idr4hMEjqRY5wM+deucWAwZdEbuhbDvaDiXQBgXJls=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: Jye8x95uFjD/OaUFMn6lb2ErVEwMFKU3iECzbKAX1vQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3576 (0xdf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Nov 20 17:44:33 2024 GMT Not After : Nov 27 17:44:33 2024 GMT Subject: CN=673e2001-4e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:17:90:32:fe:6b:3f:3e:e3:d0:17:1a:c3:6a: 88:57:df:00:19:3c:18:14:c5:0d:cc:4e:dd:25:a4: 27:84:5d:02:be:e7:7b:88:35:f2:05:96:57:02:7f: 33:65:ad:c6:e3:39:9a:07:ce:93:1c:b8:fd:8c:cb: b7:af:5a:c5:25:d9:85:12:5b:8c:e9:fe:04:d3:fa: 5d:c4:ae:80:71:f0:f7:d9:2f:69:19:6e:61:10:79: 24:45:a1:4c:8b:d8:aa:c8:79:2c:2a:9d:3f:3c:3d: fe:b8:a3:06:aa:c0:40:c5:f5:55:5b:b4:d4:49:ed: 1f:f4:b7:69:1b:58:f3:ec:72:03:10:e7:b9:5c:55: 01:f0:c9:da:31:c4:e8:ec:9a:7d:7a:cf:6f:91:7b: b3:11:f5:44:cd:39:c4:2d:76:e6:27:20:7b:c8:ce: c7:09:04:4c:2a:75:1c:6b:46:7c:e2:63:b6:ad:67: a8:2f:23:8b:a0:fa:6e:ba:16:bc:3e:cd:55:92:9f: 07:2f:a7:db:76:57:b6:81:fc:57:0a:cf:df:71:ab: 53:96:be:46:cb:de:99:94:d9:c4:be:85:cc:9e:fc: 65:21:05:6e:c2:c0:90:bc:0d:1d:51:92:9e:11:59: de:c2:c0:4a:06:e0:21:7d:6b:e0:34:3c:ec:3e:98: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0E:3D:76:9A:78:21:F3:1E:A1:98:64:91:F8:00:78:6A:C1:D9:E8 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e2:39:0c:3b:e0:81:ac:78:0a:c2:2f:03:5a:09:2e:02:ca: 92:1c:37:94:42:76:e9:45:a2:33:7d:7e:ef:cc:eb:68:ef:d7: 2a:71:ea:76:29:2d:70:40:8f:33:e9:f6:49:f4:ab:a3:64:01: 2c:02:a8:87:45:bb:c4:c9:74:e4:16:c4:fa:5a:b6:66:da:2f: df:d6:cb:1b:3d:36:22:e6:eb:b8:bd:1c:b7:f0:8a:12:36:89: bb:d7:74:e5:44:5d:fe:71:a6:47:63:22:3c:9f:ea:5c:57:e7: ff:c8:b3:16:70:3d:15:c7:38:62:ab:05:67:4f:91:2c:b2:d1: d2:e7:79:ad:fb:8c:63:e0:14:a4:88:b2:6d:08:72:c6:ae:9d: 72:ea:51:ee:30:d5:0c:89:0d:18:76:5f:e3:92:ad:05:bc:24: 63:18:ec:39:44:0e:58:b8:f1:c0:e1:41:1e:ae:e2:14:fd:93: e7:4c:44:73:a4:ba:bc:fa:5e:0a:6b:46:11:20:f0:4a:3e:41: 3d:0b:73:3f:40:6e:71:77:86:e9:26:a9:59:a2:9f:62:58:23: b2:09:c7:28:8b:97:5f:d5:83:fc:8c:a7:b4:1c:54:1d:4b:4f: 00:b1:a2:6f:6a:b6:dd:df:69:5d:3f:73:5c:bf:41:b9:a3:bf: bb:0b:5f:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjQxMTIwMTc0NDMzWhcNMjQxMTI3MTc0NDMzWjAYMRYwFAYD VQQDEw02NzNlMjAwMS00ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ReQMv5rPz7j0Bcaw2qIV98AGTwYFMUNzE7dJaQnhF0Cvud7iDXyBZZXAn8z Za3G4zmaB86THLj9jMu3r1rFJdmFEluM6f4E0/pdxK6AcfD32S9pGW5hEHkkRaFM i9iqyHksKp0/PD3+uKMGqsBAxfVVW7TUSe0f9LdpG1jz7HIDEOe5XFUB8MnaMcTo 7Jp9es9vkXuzEfVEzTnELXbmJyB7yM7HCQRMKnUca0Z84mO2rWeoLyOLoPpuuha8 Ps1Vkp8HL6fbdle2gfxXCs/fcatTlr5Gy96ZlNnEvoXMnvxlIQVuwsCQvA0dUZKe EVnewsBKBuAhfWvgNDzsPpjEHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAOPXaa eCHzHqGYZJH4AHhqwdnoMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4jkMO+CBrHgKwi8DWgkuAsqSHDeUQnbpRaIzfX7vzOto79cqcep2 KS1wQI8z6fZJ9KujZAEsAqiHRbvEyXTkFsT6WrZm2i/f1ssbPTYi5uu4vRy38IoS Nom713TlRF3+caZHYyI8n+pcV+f/yLMWcD0VxzhiqwVnT5EsstHS53mt+4xj4BSk iLJtCHLGrp1y6lHuMNUMiQ0Ydl/jkq0FvCRjGOw5RA5YuPHA4UEeruIU/ZPnTERz pLq8+l4Ka0YRIPBKPkE9C3M/QG5xd4bpJqlZop9iWCOyCccoi5df1YP8jKe0HFQd S08AsaJvarbd32ldP3Ncv0G5o7+7C18H -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:05 2024 by rpki-client on console-fra.rpki-client.org