$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json) Hash identifier: iT6OvpSx+JFnwnbACzoi9Scxt/FpOZRUrIri6j0IMjQ= Subject key identifier: 35:9D:05:C7:FF:E5:A2:A8:07:A3:C7:F9:CF:79:56:85:A1:23:5B:3A Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft Manifest number: 08 Signing time: Wed 23 Oct 2024 06:50:13 +0000 Manifest this update: Wed 23 Oct 2024 06:50:13 +0000 Manifest next update: Wed 30 Oct 2024 06:50:13 +0000 Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: afllh8C5Rvw2w6zYTubMR4H7KPqiu8jEvU8S1AhXW+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Validity Not Before: Oct 23 06:50:13 2024 GMT Not After : Oct 30 06:50:13 2024 GMT Subject: CN=67189ca5-e589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:40:f7:9e:0c:aa:84:ca:09:8b:8f:37:e9: c3:b2:68:1d:6e:a1:c6:ad:07:8c:0d:f5:f6:dc:1a: 22:9a:ca:29:0d:23:3e:9e:8b:83:9f:10:e5:ac:dd: c7:65:2a:f7:bc:a1:ef:27:dd:b1:cf:26:a9:1d:95: 41:81:5d:e4:12:8c:f2:4f:af:07:b6:ff:06:53:b9: 67:b7:73:82:1a:b5:a6:10:95:2d:7a:4c:06:3f:e0: 29:12:5e:bb:2f:19:a5:48:c4:3d:e2:c4:67:47:1f: f9:3b:8a:94:91:be:a9:e8:da:34:1f:53:2c:c3:24: f0:9a:22:0f:03:a1:fb:fe:7e:0a:3c:56:23:3b:27: 5d:77:ed:fe:2f:c0:bd:83:57:3e:45:89:77:13:53: cc:fa:10:8d:ff:0a:aa:c9:5a:7b:3c:00:5a:75:67: 12:8e:dc:19:0e:f0:31:6d:31:bf:34:f2:fe:5a:2a: 36:8d:99:82:b9:84:b7:81:94:d2:38:ae:90:db:28: 2b:c4:94:2b:44:4c:ff:1b:9e:db:f3:f8:f7:29:05: be:10:1b:89:8a:eb:67:1d:36:5b:77:3a:5d:b0:64: c6:bc:7c:a2:78:1d:2d:c6:05:d8:d4:1b:42:61:db: 36:50:43:43:0e:5a:f7:b3:43:3f:e3:3a:06:36:bf: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9D:05:C7:FF:E5:A2:A8:07:A3:C7:F9:CF:79:56:85:A1:23:5B:3A X509v3 Authority Key Identifier: keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9a:32:cc:0d:56:f3:b3:2f:3f:21:74:d4:c4:3c:d9:dd:62: c1:78:ed:bf:52:55:db:60:e9:43:f2:ef:6c:7a:39:9f:78:91: 4a:a4:4a:18:ae:c7:a1:f6:47:e3:a5:02:66:e7:d5:c5:40:99: 67:40:05:cb:fb:8e:8e:f7:3d:ec:c6:c3:82:7f:46:08:95:d0: 6d:0c:a0:3c:9a:a5:86:4f:ae:56:64:07:b2:41:a7:f1:fa:b8: 3f:e6:89:00:0f:28:dc:48:f0:4d:36:07:c7:50:4e:ad:f9:d0: 80:b2:45:de:f4:36:7e:16:85:63:df:08:07:c6:6c:ab:34:9f: 54:1e:72:f0:8a:64:ed:91:27:b1:34:c7:c5:fb:84:e4:bf:70: 48:d9:2b:4a:10:7b:2c:d1:6a:93:28:c5:f0:26:2d:a4:cf:21: ce:95:70:07:38:d6:03:94:1f:d1:71:4e:fb:fc:d4:dd:bc:a3: 47:48:af:08:36:95:5b:8f:e1:c8:30:a2:4d:f6:95:5e:07:4c: 98:98:0b:62:9f:62:4f:8b:ca:92:3e:3b:f7:1b:5c:a4:8e:56: 1e:05:5e:58:22:4b:4e:7f:2e:8f:f1:b7:a2:b4:86:83:b8:6c: 3d:64:e4:83:2c:1c:c7:bf:6b:c8:d2:5c:71:49:2c:af:ff:26: d8:af:d6:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjNFNzExMC8GA1UEBRMoOTZEMzI1MzkxMTQ2Q0YzQjVEQTNGRTE0NjlGRUMxMjhC NEI2OEM0OTAeFw0yNDEwMjMwNjUwMTNaFw0yNDEwMzAwNjUwMTNaMBgxFjAUBgNV BAMTDTY3MTg5Y2E1LWU1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCptED3ngyqhMoJi4836cOyaB1uocatB4wN9fbcGiKayikNIz6ei4OfEOWs3cdl Kve8oe8n3bHPJqkdlUGBXeQSjPJPrwe2/wZTuWe3c4IataYQlS16TAY/4CkSXrsv GaVIxD3ixGdHH/k7ipSRvqno2jQfUyzDJPCaIg8Dofv+fgo8ViM7J1137f4vwL2D Vz5FiXcTU8z6EI3/CqrJWns8AFp1ZxKO3BkO8DFtMb808v5aKjaNmYK5hLeBlNI4 rpDbKCvElCtETP8bntvz+PcpBb4QG4mK62cdNlt3Ol2wZMa8fKJ4HS3GBdjUG0Jh 2zZQQ0MOWvezQz/jOgY2v1TTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNZ0Fx//l oqgHo8f5z3lWhaEjWzowHwYDVR0jBBgwFoAUltMlORFGzztdo/4Uaf7BKLS2jEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2M0U3LzRBQ0I4QkYwODg3 MTExRUZBNzA4RDE3REM0RjlBRTAyL2x0TWxPUkZHenp0ZG9fNFVhZjdCS0xTMmpF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHRNbE9SRkd6enRkb180VWFmN0JLTFMyakVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 M0U3LzRBQ0I4QkYwODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL2x0TWxPUkZHenp0 ZG9fNFVhZjdCS0xTMmpFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJyaMswNVvOzLz8hdNTEPNndYsF47b9SVdtg6UPy72x6OZ94kUqkShiu x6H2R+OlAmbn1cVAmWdABcv7jo73PezGw4J/RgiV0G0MoDyapYZPrlZkB7JBp/H6 uD/miQAPKNxI8E02B8dQTq350ICyRd70Nn4WhWPfCAfGbKs0n1QecvCKZO2RJ7E0 x8X7hOS/cEjZK0oQeyzRapMoxfAmLaTPIc6VcAc41gOUH9FxTvv81N28o0dIrwg2 lVuP4cgwok32lV4HTJiYC2KfYk+LypI+O/cbXKSOVh4FXlgiS05/Lo/xt6K0hoO4 bD1k5IMsHMe/a8jSXHFJLK//Jtiv1m4= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org