$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: Smpirqac8ZxrGsASOS12uiyuXDuhHy8IJPW1A5Brnac= Subject key identifier: 2C:4F:4A:48:5D:A8:BE:D3:3F:10:00:EA:B5:DC:56:A5:39:83:FF:2D Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 0177 Signing time: Sat 23 Nov 2024 02:07:46 +0000 Manifest this update: Sat 23 Nov 2024 02:07:45 +0000 Manifest next update: Sat 30 Nov 2024 02:07:45 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: Z1HTxOfJx2GtQWno59JkY65qve0mX/Q6En+n/EaM5Gk=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: ++HbJPkCOwI7YEDmwMoGF4+5fvdyuTeBvdjkZ/did0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: Nov 23 02:07:45 2024 GMT Not After : Nov 30 02:07:45 2024 GMT Subject: CN=674138f2-58b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:3d:f7:cd:be:aa:a1:4c:75:83:0e:1d:cf: 47:67:7d:ae:c7:96:80:63:79:2c:b2:e6:b3:4b:2e: c4:5b:fb:6e:52:70:fe:c6:35:66:bd:94:79:94:13: 03:58:04:26:d4:25:01:bf:a4:fa:0c:d0:76:0b:cc: d4:67:fc:5a:84:d2:42:1f:b1:c8:c4:3c:be:cb:2b: d6:94:38:10:93:17:8b:6c:e1:ed:e3:ee:1c:0d:f8: cd:35:ea:ee:33:48:6a:2f:e0:f2:b7:e4:b6:96:f2: a2:87:b3:81:28:7d:21:a7:58:00:9a:d8:f1:0f:b4: 32:94:a7:d7:98:7d:3e:3e:35:5a:fb:f7:44:4d:cc: 8a:28:db:d3:70:e6:0b:ff:e4:4d:44:bf:10:54:38: db:e6:8c:26:c8:42:c7:5c:59:54:cf:47:e3:ab:b6: bc:e6:1d:98:13:8c:98:21:b2:18:1a:bb:e0:f0:1f: 93:dc:28:93:de:60:01:a3:5f:d5:f0:cb:7e:e7:a1: 36:75:8d:5e:87:8e:e8:de:9e:98:56:51:89:dd:34: e8:36:19:c9:aa:67:16:8a:08:98:d9:33:db:fc:fe: ae:37:bf:5f:36:ee:7d:06:b0:22:a6:7f:6d:9a:01: d4:fe:06:f9:9a:99:05:b4:e0:a9:84:f2:4a:1f:d9: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:4A:48:5D:A8:BE:D3:3F:10:00:EA:B5:DC:56:A5:39:83:FF:2D X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3e:e1:2e:a1:4f:6c:68:ec:9b:22:1c:4b:54:25:07:8c:a4: e8:d1:61:84:ea:a0:d6:3c:90:e2:fc:a2:8a:7a:51:1b:e5:85: fb:35:98:8f:4e:34:d5:d5:0e:fe:88:95:9e:22:1e:0d:4f:f3: 66:83:ce:33:e6:42:b9:83:84:ad:20:75:9c:14:aa:94:73:c8: 7a:e5:b7:39:32:cb:8c:6c:40:12:27:1f:78:60:0f:09:fe:ea: 34:94:e2:3e:16:1c:2b:6c:bd:16:31:a9:fe:d7:75:f3:10:88: 30:10:67:80:5e:33:bf:0f:37:4b:1a:55:96:c0:c3:e7:70:2d: 4d:81:00:eb:a8:10:32:53:4a:43:f9:a9:f3:81:86:ac:41:ad: c6:7f:98:bf:12:20:a6:af:22:12:cb:7d:de:97:3b:41:c1:15: d4:9d:45:32:15:d2:76:af:22:84:c5:b3:6a:bb:24:b5:43:81: 74:11:eb:dc:f9:ec:7c:4b:4a:70:a3:ce:61:65:73:2d:ab:14: 3a:8c:91:59:b3:05:f8:f0:0a:f6:c2:89:05:7c:ef:48:bd:11: 44:6f:4d:f6:e7:fe:20:62:d3:3f:f3:86:e7:1b:fc:02:1d:75: ee:4c:75:39:74:5a:d1:6d:d8:25:3b:aa:d1:45:de:ad:63:fd: 43:4c:bd:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjQxMTIzMDIwNzQ1WhcNMjQxMTMwMDIwNzQ1WjAYMRYwFAYD VQQDEw02NzQxMzhmMi01OGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8E9982+qqFMdYMOHc9HZ32ux5aAY3kssuazSy7EW/tuUnD+xjVmvZR5lBMD WAQm1CUBv6T6DNB2C8zUZ/xahNJCH7HIxDy+yyvWlDgQkxeLbOHt4+4cDfjNNeru M0hqL+Dyt+S2lvKih7OBKH0hp1gAmtjxD7QylKfXmH0+PjVa+/dETcyKKNvTcOYL /+RNRL8QVDjb5owmyELHXFlUz0fjq7a85h2YE4yYIbIYGrvg8B+T3CiT3mABo1/V 8Mt+56E2dY1eh47o3p6YVlGJ3TToNhnJqmcWigiY2TPb/P6uN79fNu59BrAipn9t mgHU/gb5mpkFtOCphPJKH9n9zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxPSkhd qL7TPxAA6rXcVqU5g/8tMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKPuEuoU9saOybIhxLVCUHjKTo0WGE6qDWPJDi/KKKelEb5YX7NZiP TjTV1Q7+iJWeIh4NT/Nmg84z5kK5g4StIHWcFKqUc8h65bc5MsuMbEASJx94YA8J /uo0lOI+FhwrbL0WMan+13XzEIgwEGeAXjO/DzdLGlWWwMPncC1NgQDrqBAyU0pD +anzgYasQa3Gf5i/EiCmryISy33elztBwRXUnUUyFdJ2ryKExbNquyS1Q4F0Eevc +ex8S0pwo85hZXMtqxQ6jJFZswX48Ar2wokFfO9IvRFEb0325/4gYtM/84bnG/wC HXXuTHU5dFrRbdglO6rRRd6tY/1DTL39 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org