$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: JBwCdDRLZDifTrwfNmMyL6Vjhx5zepRMqwd6JR/6mIc= Subject key identifier: 6A:25:51:DA:86:AB:37:39:2E:29:DA:49:58:D5:BF:93:D6:E1:65:D1 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 1485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 147D Signing time: Sun 24 Nov 2024 16:44:26 +0000 Manifest this update: Sun 24 Nov 2024 16:44:26 +0000 Manifest next update: Sun 01 Dec 2024 16:44:26 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: 1EQ4hqKR3b91gLgKJXbWStUmPrIUR37lGg4vUPtBVsU=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: XC7zxbxHdlAL0s8scJjof6sYByPifHkXs75rsYmLs/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5253 (0x1485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Nov 24 16:44:26 2024 GMT Not After : Dec 1 16:44:26 2024 GMT Subject: CN=674357ea-56d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:f7:84:73:3a:57:79:8c:8d:35:3e:f5:0f: ca:d4:4a:86:15:ea:cf:05:f2:a4:aa:e9:6b:b1:c3: d3:dd:69:7a:f3:53:a1:ab:b3:e2:68:12:9b:c5:cf: f3:c6:ff:20:bc:07:37:fa:88:2f:bf:95:d1:b1:05: 7d:e0:50:b2:2e:25:72:99:24:33:f6:a9:fb:23:13: ac:9e:12:54:3d:33:6d:4c:95:82:89:6c:b4:86:48: 51:d5:0c:a7:33:8f:58:14:45:8e:b5:8a:fc:6c:c5: 1f:d5:47:4d:d5:3b:36:c7:f5:ed:08:34:1a:16:d6: a5:a7:c2:fb:80:cb:79:a0:2e:51:0c:b2:08:a3:53: 45:e7:76:dc:64:5d:ff:64:f3:de:e9:05:70:36:11: a4:a7:af:39:5b:1a:23:db:93:04:18:19:fa:08:73: fc:f1:67:0b:88:08:f5:b2:c6:72:5a:b0:05:45:62: 28:45:8b:5a:c0:b2:b9:31:bd:ed:8e:b9:4e:80:3c: 00:fd:ca:16:20:63:9c:fe:f9:f2:73:ee:87:bf:56: 1a:51:f3:89:5d:db:a1:bb:94:6a:43:51:f1:50:7f: 3b:2e:d7:68:59:66:f1:43:e7:73:29:a3:63:43:26: dc:5f:f2:24:b0:e8:ce:09:f6:26:d4:89:60:2b:f0: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:51:DA:86:AB:37:39:2E:29:DA:49:58:D5:BF:93:D6:E1:65:D1 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e4:52:ac:e9:4b:7a:82:ed:3e:50:08:dd:25:da:de:6d:0e: 91:ed:a4:40:6a:3e:ad:14:ab:39:b7:59:11:f2:99:4c:d1:2f: 72:e5:5e:ca:d5:08:fc:88:4e:2c:d7:2b:40:38:21:10:3e:13: 37:9b:af:ba:ee:ea:2e:5b:fb:ea:0a:a8:40:d3:0b:55:f6:5b: 79:ee:53:bf:ab:f3:cf:94:e2:85:31:91:cb:10:b2:81:18:9e: 67:05:63:b7:9e:c9:7a:da:46:1c:4c:ff:55:05:36:cc:75:af: ac:6a:35:35:65:d9:80:e7:46:50:a2:35:bb:7c:08:2c:3b:7e: a6:9a:93:79:70:f0:1d:c5:92:1a:a8:be:fe:f6:df:ac:90:58: 4a:cd:8d:49:08:f1:82:60:6f:38:95:2f:3d:3b:a1:34:0f:b3: a3:3e:3e:2c:ea:36:3e:4a:05:af:00:11:20:60:1f:f7:2d:b7: 59:b5:7a:cc:bc:ee:18:cf:95:cd:77:04:11:76:6c:6d:41:ca: a3:aa:ea:74:48:94:1d:38:70:66:e1:fd:4c:8b:0a:09:02:20: ca:20:fe:28:da:eb:1c:a0:3c:fc:09:53:31:39:cc:63:67:34: 07:51:4a:6b:0c:aa:57:cf:2f:a7:2d:d3:55:7a:f1:f8:8d:ea: b2:bd:bb:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjQxMTI0MTY0NDI2WhcNMjQxMjAxMTY0NDI2WjAYMRYwFAYD VQQDEw02NzQzNTdlYS01NmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgP3hHM6V3mMjTU+9Q/K1EqGFerPBfKkqulrscPT3Wl681Ohq7PiaBKbxc/z xv8gvAc3+ogvv5XRsQV94FCyLiVymSQz9qn7IxOsnhJUPTNtTJWCiWy0hkhR1Qyn M49YFEWOtYr8bMUf1UdN1Ts2x/XtCDQaFtalp8L7gMt5oC5RDLIIo1NF53bcZF3/ ZPPe6QVwNhGkp685Wxoj25MEGBn6CHP88WcLiAj1ssZyWrAFRWIoRYtawLK5Mb3t jrlOgDwA/coWIGOc/vnyc+6Hv1YaUfOJXduhu5RqQ1HxUH87LtdoWWbxQ+dzKaNj QybcX/IksOjOCfYm1IlgK/BtcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGolUdqG qzc5LinaSVjVv5PW4WXRMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV5FKs6Ut6gu0+UAjdJdrebQ6R7aRAaj6tFKs5t1kR8plM0S9y5V7K 1Qj8iE4s1ytAOCEQPhM3m6+67uouW/vqCqhA0wtV9lt57lO/q/PPlOKFMZHLELKB GJ5nBWO3nsl62kYcTP9VBTbMda+sajU1ZdmA50ZQojW7fAgsO36mmpN5cPAdxZIa qL7+9t+skFhKzY1JCPGCYG84lS89O6E0D7OjPj4s6jY+SgWvABEgYB/3LbdZtXrM vO4Yz5XNdwQRdmxtQcqjqup0SJQdOHBm4f1MiwoJAiDKIP4o2uscoDz8CVMxOcxj ZzQHUUprDKpXzy+nLdNVevH4jeqyvbtb -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:25 2024 by rpki-client on console-fra.rpki-client.org