$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json) Hash identifier: kjCWPX2DNHFvi3tTRgY9Gn4QEqepWraj6udHzwqS/RQ= Subject key identifier: C5:C6:0B:55:CF:4A:08:43:9C:F7:10:CE:6F:25:B2:31:FF:80:1E:EF Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft Manifest number: 073E Signing time: Fri 22 Nov 2024 21:11:36 +0000 Manifest this update: Fri 22 Nov 2024 21:11:35 +0000 Manifest next update: Fri 29 Nov 2024 21:11:35 +0000 Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: U2XMmIe4J3TY9j/NoXg9NyOm5mAiuMBWp0xx26lMbbU=) 2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: AkirY9/rNmVj7TN8MsdHdIWCA1xOWTHf2q0ZzH+k55I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Validity Not Before: Nov 22 21:11:35 2024 GMT Not After : Nov 29 21:11:35 2024 GMT Subject: CN=6740f387-dd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:3a:48:91:96:2b:3b:44:a6:71:6d:65:74: e0:e9:f9:95:2d:ac:08:a8:ef:a8:ec:88:a4:d3:d5: 5b:7e:ce:4d:d5:79:79:28:ee:9c:58:e9:14:cf:56: 6f:32:3d:c5:01:79:2d:16:fe:1a:6b:b9:19:3b:83: 55:ac:82:9d:5d:47:3f:5c:86:97:4a:3f:5f:9a:d0: 17:b6:ad:84:89:2a:6a:3d:b2:8b:66:f7:2b:ac:10: d8:dc:76:f6:f8:52:a8:f8:b1:94:23:0e:c7:17:31: 7e:fd:9d:90:d1:47:8c:a9:6a:50:96:06:8a:15:52: f5:b8:88:c4:d5:98:44:d3:4f:ab:01:75:99:05:b6: ca:85:db:07:48:99:71:3e:cb:4c:20:62:bd:6d:f7: 5c:ab:4c:d0:23:77:6a:67:74:d1:a5:fe:8b:92:1b: f7:fd:c0:fc:be:1e:9d:8b:d2:1d:97:34:8a:06:d4: d0:27:38:e8:2e:8c:c4:8f:c9:79:ec:40:d5:c7:33: 60:bb:f0:11:f8:56:f8:96:5d:96:74:ed:0f:06:bb: b2:9a:da:a5:ad:95:11:27:11:73:e6:db:79:a5:b6: 59:81:df:77:c3:2b:97:5d:91:17:79:d1:20:77:cc: 17:a0:da:76:2c:d0:a4:3c:01:f3:94:bc:9b:51:00: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C6:0B:55:CF:4A:08:43:9C:F7:10:CE:6F:25:B2:31:FF:80:1E:EF X509v3 Authority Key Identifier: keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:49:b5:8e:5e:a5:4e:55:09:3d:2f:be:c3:82:16:3e:bc:c4: d1:8c:03:17:41:05:69:36:62:a9:30:a4:aa:18:d3:ce:e7:6e: 09:ac:be:c2:1a:3d:94:f2:be:e6:e6:b7:52:11:f0:37:d0:17: 0d:1a:70:3c:c7:d9:8d:4f:74:cc:b1:82:b8:18:8f:b1:de:fb: be:c5:08:40:c8:2f:bb:47:ce:1a:e4:7b:84:0d:d4:aa:b9:11: e5:0c:4d:db:bf:23:57:be:ce:9d:71:17:eb:55:91:0a:b9:69: 99:22:6c:0b:97:53:11:f1:97:8c:d6:b1:51:15:cb:df:ca:2c: 2d:f6:1d:0d:0e:c6:18:9b:2e:0e:35:ca:64:89:47:ab:dd:fc: 6f:68:fc:3b:34:f5:69:0b:0d:d4:c9:c1:08:a7:55:22:62:09: 83:19:fe:fb:3a:59:bb:11:26:0c:22:83:53:21:48:a8:e5:5a: a9:d2:14:da:82:2f:9d:e3:61:34:29:94:4d:dc:cf:16:5f:0e: 06:e1:fc:50:f4:79:bb:4f:70:8e:10:4d:66:24:3a:2b:0e:5f: 47:f1:48:1c:09:0d:31:ed:e7:40:40:19:7d:c9:eb:3c:aa:d3: 6f:f7:cd:35:06:d6:78:3f:e0:d3:e2:ca:9b:a7:37:cc:e0:b3: 12:fd:ec:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB OTQ0ODREQjYwHhcNMjQxMTIyMjExMTM1WhcNMjQxMTI5MjExMTM1WjAYMRYwFAYD VQQDEw02NzQwZjM4Ny1kZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmco6SJGWKztEpnFtZXTg6fmVLawIqO+o7Iik09Vbfs5N1Xl5KO6cWOkUz1Zv Mj3FAXktFv4aa7kZO4NVrIKdXUc/XIaXSj9fmtAXtq2EiSpqPbKLZvcrrBDY3Hb2 +FKo+LGUIw7HFzF+/Z2Q0UeMqWpQlgaKFVL1uIjE1ZhE00+rAXWZBbbKhdsHSJlx PstMIGK9bfdcq0zQI3dqZ3TRpf6Lkhv3/cD8vh6di9IdlzSKBtTQJzjoLozEj8l5 7EDVxzNgu/AR+Fb4ll2WdO0PBruymtqlrZURJxFz5tt5pbZZgd93wyuXXZEXedEg d8wXoNp2LNCkPAHzlLybUQAVNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXGC1XP SghDnPcQzm8lsjH/gB7vMB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3 OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy NEI0al9IQllSOS1wUklUYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5SbWOXqVOVQk9L77DghY+vMTRjAMXQQVpNmKpMKSqGNPO524JrL7C Gj2U8r7m5rdSEfA30BcNGnA8x9mNT3TMsYK4GI+x3vu+xQhAyC+7R84a5HuEDdSq uRHlDE3bvyNXvs6dcRfrVZEKuWmZImwLl1MR8ZeM1rFRFcvfyiwt9h0NDsYYmy4O NcpkiUer3fxvaPw7NPVpCw3UycEIp1UiYgmDGf77Olm7ESYMIoNTIUio5Vqp0hTa gi+d42E0KZRN3M8WXw4G4fxQ9Hm7T3COEE1mJDorDl9H8UgcCQ0x7edAQBl9yes8 qtNv9801BtZ4P+DT4sqbpzfM4LMS/eyG -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org