$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: 36V07yamwzctTT3EANXMRvFwlH+w60LwZFL1FpcaqLs= Subject key identifier: CD:F2:0A:5A:C2:12:55:98:D6:23:CC:22:BF:06:5A:3E:05:4D:1C:1D Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 07AE Signing time: Fri 22 Nov 2024 20:44:56 +0000 Manifest this update: Fri 22 Nov 2024 20:44:55 +0000 Manifest next update: Fri 29 Nov 2024 20:44:55 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: RwzJPTllupYY9lG2j5ZMoFaljsgW1wPclgh2rYjXOOA=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: tgiKpA5/VOirxpzZclo5SCNNUmu09Z28SHd+MFyd0UE=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: n8qFcHxdOC/HNtBruhuEeiEtGy0dZxWyfWu4yIA24vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Nov 22 20:44:55 2024 GMT Not After : Nov 29 20:44:55 2024 GMT Subject: CN=6740ed47-647e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:c5:fa:a9:35:77:58:5d:b5:5d:02:0e:81: 29:74:7d:5e:76:8f:0f:03:cf:13:13:a1:bb:c0:f2: a2:65:a9:3b:9a:47:0f:53:d1:dc:42:a5:c6:82:a3: 8f:6d:c5:5e:6a:96:58:f4:0e:98:84:4d:ff:48:5e: 36:86:ab:ef:52:18:ce:56:17:65:74:6b:53:b3:29: 8f:88:d3:71:67:be:0b:db:1f:13:35:49:7d:81:7c: fe:41:bf:24:7e:6b:a9:ba:af:59:b3:d2:ea:a6:03: 8c:b7:cd:bb:42:6c:e5:57:5c:99:9a:2f:96:26:a9: c7:de:fb:2c:8c:02:3c:c6:86:40:9c:2b:47:ee:26: 40:21:b2:2f:b0:63:3f:28:ea:c2:e9:69:c8:73:a3: f8:67:85:83:cf:76:8a:29:40:7e:60:65:27:91:ad: 0f:bb:2e:cb:22:24:a5:61:45:92:de:65:02:cf:a8: 3c:92:80:2a:46:a5:29:26:66:a4:cc:d6:b3:dd:cf: c5:7e:51:ea:69:83:0f:03:0a:8d:d1:96:77:cf:01: 80:76:ab:9f:ae:9f:3f:b8:2e:d6:08:3e:b0:69:a5: 24:4d:2a:f7:ff:30:d3:67:2b:d9:e3:b9:48:9b:f7: 3b:8c:ca:ca:12:a9:fe:9d:e0:6f:5b:65:e6:e2:bc: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F2:0A:5A:C2:12:55:98:D6:23:CC:22:BF:06:5A:3E:05:4D:1C:1D X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4a:e0:65:ab:5f:5c:58:4e:39:24:c4:83:63:d5:db:18:b8: ca:4a:ed:71:ea:98:17:c1:ff:d6:85:dd:4a:6e:eb:85:4d:71: 10:0d:8d:52:dc:a7:82:88:40:53:82:53:31:5c:6b:15:07:5b: c5:30:30:c9:30:83:1b:63:04:56:c7:57:92:d1:73:ac:9e:74: 82:60:86:d0:56:a4:ae:ff:5a:00:3c:4e:96:d5:6c:ac:aa:d3: 36:35:92:80:6d:a7:31:61:8d:51:bc:d9:66:4b:95:a9:b4:9f: 0d:65:30:03:da:a2:12:fa:4f:68:40:f9:6b:45:96:21:e4:50: 56:5c:58:3f:80:34:88:78:b4:90:6d:04:3c:51:e3:05:ac:37: 38:8a:32:33:2e:6a:e9:d4:fe:a2:a4:b1:68:22:8a:00:81:65: 28:ee:d9:43:3b:06:32:08:aa:37:66:ff:a8:bd:84:ba:21:5c: 75:6e:26:ab:72:6d:f7:dc:cd:5e:b6:6e:1c:f2:7d:7e:2a:8f: 6f:ab:2b:e8:81:a3:60:33:fe:24:fb:1d:ed:92:a6:0e:ef:9f: b0:bb:8b:75:b5:f9:45:5c:9c:79:29:1f:61:a8:03:67:5c:61: b8:28:79:d1:12:89:96:1c:2e:8e:d4:f8:c6:ca:fd:5b:4c:98: 4f:d9:86:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjQxMTIyMjA0NDU1WhcNMjQxMTI5MjA0NDU1WjAYMRYwFAYD VQQDEw02NzQwZWQ0Ny02NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31XF+qk1d1hdtV0CDoEpdH1edo8PA88TE6G7wPKiZak7mkcPU9HcQqXGgqOP bcVeapZY9A6YhE3/SF42hqvvUhjOVhdldGtTsymPiNNxZ74L2x8TNUl9gXz+Qb8k fmupuq9Zs9LqpgOMt827QmzlV1yZmi+WJqnH3vssjAI8xoZAnCtH7iZAIbIvsGM/ KOrC6WnIc6P4Z4WDz3aKKUB+YGUnka0Puy7LIiSlYUWS3mUCz6g8koAqRqUpJmak zNaz3c/FflHqaYMPAwqN0ZZ3zwGAdqufrp8/uC7WCD6waaUkTSr3/zDTZyvZ47lI m/c7jMrKEqn+neBvW2Xm4rweJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3yClrC ElWY1iPMIr8GWj4FTRwdMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1SuBlq19cWE45JMSDY9XbGLjKSu1x6pgXwf/Whd1KbuuFTXEQDY1S 3KeCiEBTglMxXGsVB1vFMDDJMIMbYwRWx1eS0XOsnnSCYIbQVqSu/1oAPE6W1Wys qtM2NZKAbacxYY1RvNlmS5WptJ8NZTAD2qIS+k9oQPlrRZYh5FBWXFg/gDSIeLSQ bQQ8UeMFrDc4ijIzLmrp1P6ipLFoIooAgWUo7tlDOwYyCKo3Zv+ovYS6IVx1biar cm333M1etm4c8n1+Ko9vqyvogaNgM/4k+x3tkqYO75+wu4t1tflFXJx5KR9hqANn XGG4KHnREomWHC6O1PjGyv1bTJhP2YaJ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:24 2024 by rpki-client on console-ams.rpki-client.org