$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: IJFuKV0eIWpQsg+X6zJyOpjG7MDnYZen9hudW3ramlA= Subject key identifier: C5:23:FA:C2:58:B6:2E:23:A3:15:B8:98:A6:E5:FC:29:14:40:FA:9F Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: E1 Signing time: Sat 23 Nov 2024 03:34:22 +0000 Manifest this update: Sat 23 Nov 2024 03:34:21 +0000 Manifest next update: Sat 30 Nov 2024 03:34:21 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: CQS32OKdiexsTjrLDr6xD8pHrqaGmVjWf79R7EI+6MM=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: 6GcmHk0R17BhotdAl/CVR2iptIEyT5WrpQF0R+iy09k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: Nov 23 03:34:21 2024 GMT Not After : Nov 30 03:34:21 2024 GMT Subject: CN=67414d3d-7414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b5:c2:5c:bf:a3:a9:7f:e8:86:8b:8f:03:23: 18:b0:c1:ed:98:02:33:88:e4:13:51:96:01:3d:f4: 65:84:ed:07:86:f2:ef:9d:fc:4a:2a:e6:c8:5d:e3: aa:32:b8:91:2f:bd:f6:1b:7d:80:31:a7:14:ae:22: 55:7a:e6:de:b9:8a:79:e6:50:af:b3:ba:89:ee:f6: 7e:4c:47:db:67:d0:b2:d9:97:8c:1e:ca:8c:2d:b5: a8:f3:9c:74:91:68:88:74:ec:b4:bc:a7:bb:66:d7: 09:a4:cf:e9:89:7d:30:c6:a7:3c:7a:88:fa:d5:75: 23:e5:dc:01:42:6f:81:e5:a6:2d:32:a3:8c:56:e1: 6e:50:2a:20:04:42:87:d3:dc:62:e8:3d:bd:37:80: 33:eb:61:0e:8b:15:bf:53:45:4b:7b:33:e9:52:6c: ed:e6:11:64:fb:44:2c:3b:54:f2:12:36:c7:4c:9b: bd:9b:48:85:9d:6c:43:e2:34:9e:12:1e:29:ec:2b: bd:e7:49:d6:53:12:f1:5b:54:21:f6:93:20:46:44: 50:a0:bf:85:27:63:c3:6c:93:d3:68:d4:92:07:02: c7:c0:d3:d9:b7:56:1f:87:e3:5e:5d:1a:2b:09:7c: e4:06:42:5a:9f:a8:00:14:01:05:87:1d:d7:6d:0c: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:23:FA:C2:58:B6:2E:23:A3:15:B8:98:A6:E5:FC:29:14:40:FA:9F X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b6:83:11:b8:82:56:f5:73:85:a7:bc:62:20:62:2e:e1:65: 31:c8:a1:55:51:e5:c8:d2:d9:79:3d:0d:bd:f3:14:95:31:1c: af:9a:d9:cb:64:8b:c2:2f:f6:55:6b:fe:49:4e:49:3e:c8:bb: 24:95:39:aa:9d:55:50:68:12:bf:49:56:dd:c1:0a:83:84:3a: 03:ac:b2:f3:33:c8:04:4e:83:63:2e:c2:b6:5d:23:85:af:64: 80:8e:aa:d3:89:f0:9c:19:fa:c5:46:7f:25:dd:1d:40:60:9a: 52:f6:b3:59:cd:8c:c3:66:ee:b0:96:14:64:c0:7e:fd:21:d0: 45:ea:c9:92:da:f7:ef:45:70:3c:75:96:f0:44:df:93:b3:11: 06:80:8f:4a:41:d0:bd:b3:c3:03:23:f5:8a:94:43:4e:e4:39: a0:c0:b6:4b:99:3c:51:7c:25:f6:2d:78:85:87:af:3c:72:ac: 7d:6f:2d:73:00:aa:12:83:f4:d4:d7:2f:8f:3a:bf:5c:61:60: 36:9a:15:cf:90:ce:9f:ea:e4:d5:e3:92:ae:d8:0a:fe:5f:25: 43:cc:99:b8:18:ad:2b:7d:3b:26:ba:d7:c6:ca:df:e2:19:be: d3:52:81:a4:7c:71:59:a1:0f:a7:76:e1:f8:f8:cb:a3:fd:5e: dd:a0:cf:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjQxMTIzMDMzNDIxWhcNMjQxMTMwMDMzNDIxWjAYMRYwFAYD VQQDEw02NzQxNGQzZC03NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97XCXL+jqX/ohouPAyMYsMHtmAIziOQTUZYBPfRlhO0HhvLvnfxKKubIXeOq MriRL732G32AMacUriJVeubeuYp55lCvs7qJ7vZ+TEfbZ9Cy2ZeMHsqMLbWo85x0 kWiIdOy0vKe7ZtcJpM/piX0wxqc8eoj61XUj5dwBQm+B5aYtMqOMVuFuUCogBEKH 09xi6D29N4Az62EOixW/U0VLezPpUmzt5hFk+0QsO1TyEjbHTJu9m0iFnWxD4jSe Eh4p7Cu950nWUxLxW1Qh9pMgRkRQoL+FJ2PDbJPTaNSSBwLHwNPZt1Yfh+NeXRor CXzkBkJan6gAFAEFhx3XbQx3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUj+sJY ti4joxW4mKbl/CkUQPqfMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjtoMRuIJW9XOFp7xiIGIu4WUxyKFVUeXI0tl5PQ298xSVMRyvmtnL ZIvCL/ZVa/5JTkk+yLsklTmqnVVQaBK/SVbdwQqDhDoDrLLzM8gEToNjLsK2XSOF r2SAjqrTifCcGfrFRn8l3R1AYJpS9rNZzYzDZu6wlhRkwH79IdBF6smS2vfvRXA8 dZbwRN+TsxEGgI9KQdC9s8MDI/WKlENO5DmgwLZLmTxRfCX2LXiFh688cqx9by1z AKoSg/TU1y+POr9cYWA2mhXPkM6f6uTV45Ku2Ar+XyVDzJm4GK0rfTsmutfGyt/i Gb7TUoGkfHFZoQ+nduH4+Muj/V7doM8T -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org