$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: ZcUtdyycpsRPEVwOLo0qVpnbSBPbhmP9ox+k2uzuE8I= Subject key identifier: CF:65:1F:B4:91:20:CD:E2:07:ED:5A:1F:26:CE:8D:C0:7E:0F:B7:D9 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0AE3 Signing time: Fri 22 Nov 2024 19:06:24 +0000 Manifest this update: Fri 22 Nov 2024 19:06:24 +0000 Manifest next update: Fri 29 Nov 2024 19:06:24 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: xvvyhkyQHAaL6Rq9iVCb7tDPHOu6y9AgD2lpMsy4e3g=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: 3F/TejTZYAuiF6kSX5sGBk6FgiPZU1gx1/Gn0XMbkqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Nov 22 19:06:24 2024 GMT Not After : Nov 29 19:06:24 2024 GMT Subject: CN=6740d630-0177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:c0:7e:50:e6:98:af:e9:71:de:8e:ff:08: 79:bd:a4:b7:55:6b:bd:a2:79:c1:c9:e5:83:0e:0b: a1:79:7c:9f:9f:de:7f:27:c3:3b:4f:42:64:44:e0: 65:cc:b9:02:06:e2:63:16:d4:cc:78:c2:88:e6:eb: dc:14:01:60:67:dd:a8:a7:f1:6e:44:bd:33:92:19: 9c:a7:e9:59:74:d5:27:1c:0b:89:d2:fb:a9:14:82: 2c:8a:dc:f1:f7:72:63:94:91:93:11:36:f6:a9:0c: 60:3e:33:97:58:60:95:f2:b4:7e:c9:d5:c4:a7:8b: 65:75:a1:44:d4:b9:02:3f:cf:16:2c:fd:e6:d4:5b: 69:9a:8e:8a:a2:df:60:01:64:d0:04:a3:6b:67:48: 03:97:f2:63:8f:7d:fe:9f:eb:57:49:b5:78:5d:04: bf:eb:13:ff:20:de:93:6d:88:48:ed:fd:1b:cf:59: 18:6e:ad:26:25:27:e9:4e:84:f0:72:7e:f6:2d:42: 5b:d0:64:20:f6:56:29:21:cf:e4:68:97:e0:61:5e: be:e2:db:85:36:60:2a:56:d4:98:2b:d9:cb:9e:0a: 00:d5:de:b5:8e:a4:66:97:03:34:4b:02:58:30:df: c2:fb:4d:a8:fa:f0:71:14:6e:68:b4:57:40:26:09: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:1F:B4:91:20:CD:E2:07:ED:5A:1F:26:CE:8D:C0:7E:0F:B7:D9 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:69:3c:00:a2:d1:77:36:52:b3:5a:ff:6f:cb:67:2b:b5:fa: 5a:98:4d:c4:4c:98:c3:82:89:63:37:d7:96:04:89:f9:0a:47: 4c:47:fc:51:21:92:31:b3:79:46:66:c3:83:e9:55:20:f0:c3: 79:60:ca:40:17:a2:d9:7d:39:79:7f:68:37:be:23:4f:ea:02: 20:68:31:ea:0e:a6:88:52:81:d5:26:90:c6:d8:85:75:b0:3d: 12:d1:45:ae:ed:03:c1:60:5d:8a:1e:43:3e:f3:d4:5a:0b:30: a2:53:6d:45:29:b4:9c:2f:ca:10:d6:75:b9:dd:af:32:f0:be: f5:b4:95:52:3f:81:d2:1b:7f:ce:12:3c:f7:e2:88:7b:2b:fc: 46:f2:11:7c:d6:80:09:22:5d:40:5d:ef:11:35:7f:bc:ec:b9: 61:3e:e7:33:79:45:63:73:9f:08:76:9b:38:39:28:90:c6:ff: 04:9f:0a:d3:ca:f2:44:d9:1b:0f:7b:a5:2e:5d:5f:e5:79:ab: 93:b8:47:c2:ee:5d:8b:75:39:a3:c2:69:ad:67:73:bb:08:ed: 80:48:d3:f9:75:b8:7e:0a:98:cb:07:20:6d:36:fe:16:1b:cc: f6:23:2c:cc:fa:c4:1d:41:8c:a8:32:44:69:f3:8d:b5:fb:08: 4f:45:35:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjQxMTIyMTkwNjI0WhcNMjQxMTI5MTkwNjI0WjAYMRYwFAYD VQQDEw02NzQwZDYzMC0wMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RLAflDmmK/pcd6O/wh5vaS3VWu9onnByeWDDguheXyfn95/J8M7T0JkROBl zLkCBuJjFtTMeMKI5uvcFAFgZ92op/FuRL0zkhmcp+lZdNUnHAuJ0vupFIIsitzx 93JjlJGTETb2qQxgPjOXWGCV8rR+ydXEp4tldaFE1LkCP88WLP3m1Ftpmo6Kot9g AWTQBKNrZ0gDl/Jjj33+n+tXSbV4XQS/6xP/IN6TbYhI7f0bz1kYbq0mJSfpToTw cn72LUJb0GQg9lYpIc/kaJfgYV6+4tuFNmAqVtSYK9nLngoA1d61jqRmlwM0SwJY MN/C+02o+vBxFG5otFdAJgnVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9lH7SR IM3iB+1aHybOjcB+D7fZMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSaTwAotF3NlKzWv9vy2crtfpamE3ETJjDgoljN9eWBIn5CkdMR/xR IZIxs3lGZsOD6VUg8MN5YMpAF6LZfTl5f2g3viNP6gIgaDHqDqaIUoHVJpDG2IV1 sD0S0UWu7QPBYF2KHkM+89RaCzCiU21FKbScL8oQ1nW53a8y8L71tJVSP4HSG3/O Ejz34oh7K/xG8hF81oAJIl1AXe8RNX+87LlhPuczeUVjc58Idps4OSiQxv8EnwrT yvJE2RsPe6UuXV/leauTuEfC7l2LdTmjwmmtZ3O7CO2ASNP5dbh+CpjLByBtNv4W G8z2IyzM+sQdQYyoMkRp8421+whPRTVx -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:23 2024 by rpki-client on console-ams.rpki-client.org