$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: wjK217XWKYLtJ7BCsksUtA//9MUCkfV59f0lBXikHIY= Subject key identifier: 29:70:00:1A:B5:64:2E:C5:23:6E:90:AA:8F:93:C8:06:1F:26:DA:D2 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 03B3 Signing time: Sat 23 Nov 2024 00:18:46 +0000 Manifest this update: Sat 23 Nov 2024 00:18:45 +0000 Manifest next update: Sat 30 Nov 2024 00:18:45 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: rT7nqRPV9qus8wIOIv7DPG3gf3IXtQIJoUMvDp0+SGg=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: Qc67Zl9xH5UQVVuJaiSmRCShgX4fnvxw7leOq59EYpg=) 3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: Gw3lyprk2wHQfVI8gyQDjj5muddHnRtxMvJMvAySrdk=) 4: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: qtIjXGWFBwLcXf/7DCnDMfdtxosWwEooU8YqRW4JUKo=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Zzu4mk3oMia2siQQ0DnH3c4pXZbn4XSvZ0+RKKFCJKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Nov 23 00:18:45 2024 GMT Not After : Nov 30 00:18:45 2024 GMT Subject: CN=67411f65-8e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:9e:ba:e7:70:22:3b:4b:8f:ef:9c:8a:44: ce:fc:94:7e:31:51:f5:2b:85:81:45:75:33:de:05: b9:c3:8c:c8:b1:2c:54:e0:b0:f7:a0:1c:1f:9a:fb: 7a:a8:f0:76:87:18:ce:83:e9:be:3e:1b:e5:4f:45: 89:b0:0f:92:27:9c:f4:9c:4a:e8:f1:b3:83:ef:13: 0e:0b:60:f0:83:93:34:d7:f8:26:58:5b:45:8b:a8: 54:97:fa:1a:25:3b:c2:b9:9e:6c:b3:c3:56:87:a6: 78:22:e2:fd:1f:ee:da:32:30:67:8d:73:f4:f1:2f: be:a8:a2:bf:e4:32:95:a0:d4:91:9c:c0:37:4a:9d: 4d:b9:9b:b4:21:d3:8a:bc:ca:ad:86:54:f4:49:68: f7:21:9f:00:26:58:bb:14:dd:14:c1:bb:e1:fe:8a: c4:57:85:28:f2:73:d1:d6:dc:a6:96:16:2f:43:15: ac:89:23:21:9b:43:fd:dd:1b:f2:3b:5f:c4:31:55: 07:56:f3:5d:39:99:e8:76:69:ac:cf:7d:b7:42:d9: 06:d0:17:c3:fd:2c:ca:da:30:04:4d:ce:79:76:bb: 2d:fc:23:ef:a7:1e:49:af:9a:82:2e:31:0e:ac:e1: 46:1d:0b:3e:6b:c9:7d:5d:24:9f:94:60:64:21:61: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:00:1A:B5:64:2E:C5:23:6E:90:AA:8F:93:C8:06:1F:26:DA:D2 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:65:2b:2e:b5:b5:34:c5:cd:27:93:ac:68:19:1d:61:4c:b1: e5:d3:83:ac:c9:16:73:de:f9:c2:a0:69:d3:3c:2d:f6:95:17: ce:18:1f:43:a2:a1:28:4e:35:e5:d3:d5:b1:d8:0d:ca:00:87: ab:c1:29:eb:7f:01:6b:9d:39:b6:9f:a5:ee:6d:9e:a1:32:dc: a3:39:83:d5:b2:20:4b:51:04:c7:ca:33:5d:c0:6e:89:8c:01: 22:fa:52:d5:a9:58:09:4b:ed:2b:16:88:3c:2b:85:25:5d:6d: 00:61:5b:6b:ff:84:89:af:f0:98:04:93:00:4d:14:42:26:92: b9:3b:37:29:27:e2:ad:25:93:d3:d4:13:e4:c2:30:8f:d8:1d: 9d:d8:c8:01:0a:a7:df:72:c8:01:8e:d4:e4:d5:04:df:67:0f: d3:c5:ab:aa:27:93:1f:32:4d:0f:82:e2:fe:7b:38:c7:c0:7c: e7:8e:cc:d0:68:1b:e2:71:d9:f7:5d:9f:db:42:f2:13:94:ea: db:c6:78:1d:4f:12:07:e3:d8:9e:37:32:12:40:70:a9:b1:00: 8a:21:6b:0f:bd:da:7b:4e:2b:e9:90:47:a6:f1:6c:99:7b:d5: a3:be:02:31:fb:ad:d9:20:e5:c3:9b:cf:6c:41:70:75:62:19: 88:af:1c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjQxMTIzMDAxODQ1WhcNMjQxMTMwMDAxODQ1WjAYMRYwFAYD VQQDEw02NzQxMWY2NS04ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuSeuudwIjtLj++cikTO/JR+MVH1K4WBRXUz3gW5w4zIsSxU4LD3oBwfmvt6 qPB2hxjOg+m+PhvlT0WJsA+SJ5z0nEro8bOD7xMOC2Dwg5M01/gmWFtFi6hUl/oa JTvCuZ5ss8NWh6Z4IuL9H+7aMjBnjXP08S++qKK/5DKVoNSRnMA3Sp1NuZu0IdOK vMqthlT0SWj3IZ8AJli7FN0Uwbvh/orEV4Uo8nPR1tymlhYvQxWsiSMhm0P93Rvy O1/EMVUHVvNdOZnodmmsz323QtkG0BfD/SzK2jAETc55drst/CPvpx5Jr5qCLjEO rOFGHQs+a8l9XSSflGBkIWE33wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClwABq1 ZC7FI26Qqo+TyAYfJtrSMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaZSsutbU0xc0nk6xoGR1hTLHl04OsyRZz3vnCoGnTPC32lRfOGB9D oqEoTjXl09Wx2A3KAIerwSnrfwFrnTm2n6XubZ6hMtyjOYPVsiBLUQTHyjNdwG6J jAEi+lLVqVgJS+0rFog8K4UlXW0AYVtr/4SJr/CYBJMATRRCJpK5OzcpJ+KtJZPT 1BPkwjCP2B2d2MgBCqffcsgBjtTk1QTfZw/TxauqJ5MfMk0PguL+ezjHwHznjszQ aBvicdn3XZ/bQvITlOrbxngdTxIH49ieNzISQHCpsQCKIWsPvdp7TivpkEem8WyZ e9WjvgIx+63ZIOXDm89sQXB1YhmIrxze -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org