$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: Az4VEqWWW7emb0OHEi8qqzCUXKia2teHZYOtorNHktM= Subject key identifier: 36:A3:40:49:D9:D7:5A:0F:25:E3:43:B9:8F:17:12:6A:B0:71:51:3E Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 030B Signing time: Sat 23 Nov 2024 00:46:18 +0000 Manifest this update: Sat 23 Nov 2024 00:46:18 +0000 Manifest next update: Sat 30 Nov 2024 00:46:18 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: miGZAKmVCDjPA7ziQezLRCcSlUFVzIRhcBCW8mVyKFQ=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2V4s60CBepyFsN4hkIBA1O5APSOWrUwQgr6qjDAHtko=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: PpnJ+skHtxU80Y62k+Cdmycu9izolR2+X8heLZ727nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Nov 23 00:46:18 2024 GMT Not After : Nov 30 00:46:18 2024 GMT Subject: CN=674125da-23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:7d:e2:83:71:87:c5:9c:1c:8d:90:40:28: bc:eb:9e:37:e7:7d:2b:cb:d1:81:25:e6:1b:8a:6e: 6e:46:83:65:96:be:45:33:6e:09:0f:b1:53:c8:90: 84:ec:00:ad:ed:c9:fb:83:09:47:a0:55:38:dd:c6: 37:c3:46:0c:41:da:e3:1a:df:d3:26:b5:b7:fa:db: 21:24:03:b8:c8:d4:e4:c1:fd:0a:4c:0d:cf:f7:01: 07:e2:72:29:b6:71:51:d8:ff:ca:08:e7:da:31:ee: 85:9b:dd:ae:99:b7:27:40:88:d0:e5:5a:df:e2:7f: fb:fc:00:6e:be:6c:d6:5b:1a:6a:3a:04:28:e8:d6: 92:93:82:7d:39:6d:3b:b2:96:3f:27:0c:fb:72:62: 77:33:e3:d5:9d:19:a8:b1:63:22:bb:ba:4b:9a:15: de:d9:30:91:c7:39:15:3a:21:7a:a8:39:b8:ce:cc: a0:c3:f7:ed:aa:a1:36:88:30:37:57:40:c1:96:db: 4b:ac:4f:2b:2d:ab:ee:9f:b0:5d:14:6d:4d:c5:c8: 78:7d:bc:98:4f:05:a6:69:4e:b0:1b:ca:c4:6a:c4: af:36:a6:1c:7f:bf:0b:d1:c0:b6:cd:6c:af:02:d1: a0:aa:c7:d9:6c:ff:a0:d7:2e:5d:38:11:68:86:5b: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A3:40:49:D9:D7:5A:0F:25:E3:43:B9:8F:17:12:6A:B0:71:51:3E X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:70:5c:3d:2d:12:e3:8d:c5:94:d0:92:e8:31:97:0c:d5:72: c6:be:91:db:bb:a9:0e:f8:37:c8:d5:b8:0c:a8:3e:b7:17:38: 3a:26:44:2a:6a:dc:db:5b:9f:21:1f:a8:42:ab:fa:8c:6c:af: 7e:9d:eb:a8:b0:36:9c:2a:91:a8:a2:b9:2a:e7:87:fc:5d:86: 4b:f7:df:5f:7f:8d:0a:eb:05:d4:30:34:c5:ce:f0:50:91:38: 7b:86:81:ec:f1:3e:5a:00:76:21:e4:dd:62:cc:0d:74:94:5b: 84:00:23:48:0f:35:0f:88:c5:73:21:3b:06:bf:12:e5:26:db: f3:33:4a:ac:0d:c1:fd:51:ee:dc:fa:b4:47:18:5b:e1:68:c3: 9d:1c:c0:78:15:9b:1f:3a:4e:8d:d5:07:3b:71:fd:5a:90:fb: 04:fb:5a:d7:06:3e:d7:ea:fd:88:0c:25:17:13:b8:34:3d:9d: 6b:90:ff:fc:89:39:e2:14:ac:1e:74:98:5f:5a:b5:d3:72:c2: 8b:0a:56:47:7c:13:ca:21:21:74:ac:b6:77:c6:0e:73:d8:bb: df:f9:18:9f:ac:8e:d5:d0:db:f5:78:98:0e:36:07:14:43:e6: cf:25:96:bf:05:7c:02:b2:16:62:18:70:68:9b:d9:5c:f0:4c: 88:27:50:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjQxMTIzMDA0NjE4WhcNMjQxMTMwMDA0NjE4WjAYMRYwFAYD VQQDEw02NzQxMjVkYS0yM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Xl94oNxh8WcHI2QQCi86543530ry9GBJeYbim5uRoNllr5FM24JD7FTyJCE 7ACt7cn7gwlHoFU43cY3w0YMQdrjGt/TJrW3+tshJAO4yNTkwf0KTA3P9wEH4nIp tnFR2P/KCOfaMe6Fm92umbcnQIjQ5Vrf4n/7/ABuvmzWWxpqOgQo6NaSk4J9OW07 spY/Jwz7cmJ3M+PVnRmosWMiu7pLmhXe2TCRxzkVOiF6qDm4zsygw/ftqqE2iDA3 V0DBlttLrE8rLavun7BdFG1Nxch4fbyYTwWmaU6wG8rEasSvNqYcf78L0cC2zWyv AtGgqsfZbP+g1y5dOBFohlv8lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDajQEnZ 11oPJeNDuY8XEmqwcVE+MB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRcFw9LRLjjcWU0JLoMZcM1XLGvpHbu6kO+DfI1bgMqD63Fzg6JkQq atzbW58hH6hCq/qMbK9+neuosDacKpGoorkq54f8XYZL999ff40K6wXUMDTFzvBQ kTh7hoHs8T5aAHYh5N1izA10lFuEACNIDzUPiMVzITsGvxLlJtvzM0qsDcH9Ue7c +rRHGFvhaMOdHMB4FZsfOk6N1Qc7cf1akPsE+1rXBj7X6v2IDCUXE7g0PZ1rkP/8 iTniFKwedJhfWrXTcsKLClZHfBPKISF0rLZ3xg5z2Lvf+RifrI7V0Nv1eJgONgcU Q+bPJZa/BXwCshZiGHBom9lc8EyIJ1CF -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:48 2024 by rpki-client on console-fra.rpki-client.org