$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: 0cmLPeQmXoZFMORNLdp17P1eFLqb2ICyy0c9eHIj3AE= Subject key identifier: C6:4D:46:8D:BD:FD:99:FB:C6:1D:AB:BE:D2:66:CA:2C:64:AE:1F:10 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 3457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 343D Signing time: Wed 20 Nov 2024 14:54:54 +0000 Manifest this update: Wed 20 Nov 2024 14:54:54 +0000 Manifest next update: Wed 27 Nov 2024 14:54:54 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: OJMiTmP1xykGCEI31RcM+vpnnTIUNCWOFOLBl+xt3wI=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13399 (0x3457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Nov 20 14:54:54 2024 GMT Not After : Nov 27 14:54:54 2024 GMT Subject: CN=673df83e-04c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:81:bb:58:97:1e:fb:91:4d:5b:8b:12:c1:e7: 6c:16:7a:32:bc:b5:65:ed:a1:bf:bc:bf:9e:51:03: 0b:93:95:e5:65:c9:a3:62:7b:f5:6f:e1:a7:2f:1b: 5f:6f:38:ef:46:ab:9e:14:0a:2c:20:94:6c:42:da: d0:f7:4c:cc:00:e4:19:ca:06:d9:79:69:64:d4:7a: 6d:c1:03:65:cb:08:73:20:15:13:9f:ea:a2:6f:f6: 1e:e8:5f:e4:49:7f:02:97:19:24:13:bf:63:e5:7d: 87:e0:09:f0:e5:93:3a:b0:58:b1:d5:36:80:7d:76: 31:0c:dc:15:59:14:5e:01:79:fb:68:f4:8e:6a:b6: 16:da:32:64:31:9b:b1:f3:cb:4a:33:7b:06:85:0a: bc:11:e7:07:cb:82:b3:00:ac:d6:a4:c3:5f:2c:ad: ce:86:b8:8c:db:f6:df:d6:94:cf:61:49:84:7d:db: c4:51:2f:1b:31:11:a3:e3:b4:a2:f6:fd:2a:73:a1: d9:e7:cf:c8:fc:92:ba:26:46:a7:51:d3:3a:74:59: ab:a7:80:2d:d5:df:4e:c8:7b:40:7d:47:ac:a1:92: b3:94:93:34:f4:c4:89:68:cd:2d:7f:53:05:00:d1: 3c:c3:4a:9a:10:4e:6e:b7:d4:3e:05:6b:3f:89:25: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4D:46:8D:BD:FD:99:FB:C6:1D:AB:BE:D2:66:CA:2C:64:AE:1F:10 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:ee:80:ed:79:60:cf:bb:6c:a0:f9:72:ea:e9:6d:14:a7: be:15:17:c0:07:7d:d0:15:33:c5:46:f9:82:f1:95:51:85:58: d3:1e:22:0f:5b:7a:d9:49:c4:70:2b:8d:35:8f:5a:c5:6c:87: f0:1d:bf:54:6e:a3:82:b1:16:9b:c8:ac:0a:26:2b:db:20:1d: 5c:e5:df:19:54:b4:6f:37:cd:c9:67:e0:a2:dd:38:ee:02:d5: d6:6f:02:ac:6c:0d:44:9c:3d:98:27:60:67:4c:09:29:83:22: 33:7f:82:8a:e1:12:70:74:78:85:c4:19:e1:ee:1c:9c:f5:e0: ff:12:70:be:78:e8:75:bb:01:8c:51:1d:14:a2:e8:c9:23:bb: 46:db:74:16:f6:16:3a:24:1c:81:cc:ed:18:dc:92:58:3c:de: f4:7c:61:1f:b2:56:7c:9d:ce:57:c4:30:2b:c3:a2:4f:8d:07: d0:9e:59:8e:1c:65:1c:0d:0c:c0:2a:3e:d7:b3:3c:82:93:5e: 1f:2e:88:7b:67:90:8b:3c:1a:8d:ca:48:85:12:5d:b1:c6:63: e6:4e:4b:8b:3d:d0:ed:90:3f:28:a1:47:05:c4:36:57:89:cb: 16:47:bf:d7:02:18:ce:9c:03:7d:a4:0e:d9:f6:cf:5e:e2:fb: 6b:9a:9a:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjQxMTIwMTQ1NDU0WhcNMjQxMTI3MTQ1NDU0WjAYMRYwFAYD VQQDEw02NzNkZjgzZS0wNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oG7WJce+5FNW4sSwedsFnoyvLVl7aG/vL+eUQMLk5XlZcmjYnv1b+GnLxtf bzjvRqueFAosIJRsQtrQ90zMAOQZygbZeWlk1HptwQNlywhzIBUTn+qib/Ye6F/k SX8ClxkkE79j5X2H4Anw5ZM6sFix1TaAfXYxDNwVWRReAXn7aPSOarYW2jJkMZux 88tKM3sGhQq8EecHy4KzAKzWpMNfLK3OhriM2/bf1pTPYUmEfdvEUS8bMRGj47Si 9v0qc6HZ58/I/JK6JkanUdM6dFmrp4At1d9OyHtAfUesoZKzlJM09MSJaM0tf1MF ANE8w0qaEE5ut9Q+BWs/iSVeXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZNRo29 /Zn7xh2rvtJmyixkrh8QMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpbe6A7Xlgz7tsoPly6ultFKe+FRfAB33QFTPFRvmC8ZVRhVjTHiIP W3rZScRwK401j1rFbIfwHb9UbqOCsRabyKwKJivbIB1c5d8ZVLRvN83JZ+Ci3Tju AtXWbwKsbA1EnD2YJ2BnTAkpgyIzf4KK4RJwdHiFxBnh7hyc9eD/EnC+eOh1uwGM UR0UoujJI7tG23QW9hY6JByBzO0Y3JJYPN70fGEfslZ8nc5XxDArw6JPjQfQnlmO HGUcDQzAKj7XszyCk14fLoh7Z5CLPBqNykiFEl2xxmPmTkuLPdDtkD8ooUcFxDZX icsWR7/XAhjOnAN9pA7Z9s9e4vtrmpqw -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:03 2024 by rpki-client on console-fra.rpki-client.org