$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft File: LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json) Hash identifier: CxZgSE3npRkw2K8391K1jyR4hNX+FlDf91dpspYFzaQ= Subject key identifier: 2B:3B:BE:E1:4B:15:E2:FB:24:3A:4B:0C:5B:BA:DE:4F:A8:0B:DE:4F Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 Certificate issuer: /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft Manifest number: 0B54 Signing time: Fri 22 Nov 2024 18:54:18 +0000 Manifest this update: Fri 22 Nov 2024 18:54:17 +0000 Manifest next update: Fri 29 Nov 2024 18:54:17 +0000 Files and hashes: 1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: uzemcRl4TeItK92AMLDY74WIOQOqOz10KBVZPJRws6o=) 2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: IjPsFFHCvUaMlnUaOFvCNKSeXcsnIqpFaL3Dn7jwLDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Validity Not Before: Nov 22 18:54:17 2024 GMT Not After : Nov 29 18:54:17 2024 GMT Subject: CN=6740d35a-1cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:7d:ae:9e:93:8b:96:f7:b4:1a:ff:c6:c6: 71:ad:ce:64:4d:d2:59:4e:80:5a:c7:0d:53:88:d7: 78:74:53:fa:3d:03:24:fb:cd:64:16:6a:bf:6c:65: b9:35:7c:7c:69:75:b1:66:cc:15:2c:89:8f:e0:93: ce:cb:45:84:87:47:f6:07:bc:ef:d7:f5:bd:31:6c: 22:1a:41:20:a1:fd:f1:20:02:63:c0:54:d3:dd:a1: 09:82:cf:a2:c0:39:db:f3:7d:b2:6e:b1:ce:63:c3: 53:ba:6f:2f:af:06:a3:06:cc:b6:3e:16:e4:86:69: a5:73:7a:70:4e:1a:c4:2e:18:49:38:33:e2:43:bd: 49:ec:6f:c8:cb:91:bf:e0:98:bc:00:f0:18:5b:6e: 9a:7c:36:47:14:aa:65:1b:6f:bb:15:e7:fe:78:64: 80:ac:88:e9:db:98:1d:f3:d5:91:ee:9e:a6:fc:f1: 83:81:37:03:c6:f3:0a:be:02:29:31:3a:24:1d:ea: c9:5b:19:66:d7:eb:f6:c0:1e:e8:e6:16:79:78:93: 35:18:06:0b:d7:0e:6f:e1:23:75:f6:02:f4:b5:13: b5:50:c2:9b:6d:af:e3:7c:d2:37:4b:32:e4:56:0c: 49:cc:80:89:c5:9c:8c:6e:6d:26:61:91:0e:bb:92: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3B:BE:E1:4B:15:E2:FB:24:3A:4B:0C:5B:BA:DE:4F:A8:0B:DE:4F X509v3 Authority Key Identifier: keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:50:ec:b9:45:94:af:cc:db:0c:f0:0f:b2:ce:52:96:1b: 7d:80:fd:c4:9a:80:af:31:62:7f:54:95:04:be:13:3c:3f:7b: 0a:d2:ac:9f:02:ad:82:c1:d9:05:3d:ee:00:ec:5e:48:e8:e5: 02:bc:1f:56:f1:38:a9:a2:fc:f1:53:46:c8:63:92:b7:cc:03: 89:a1:63:9e:89:da:e2:92:11:f1:e6:62:5e:ef:a4:8b:69:29: ad:79:48:52:73:f0:46:a0:4d:94:c6:d5:56:0c:f9:95:0e:fb: 03:79:14:d8:b4:d3:e2:47:26:bc:e5:f7:b4:9c:f5:95:46:41: 78:ad:a9:b8:52:1b:94:7b:27:e4:41:91:e8:51:85:f0:52:c8: 4a:b2:0b:91:d0:98:c1:9f:8a:06:2b:c7:6d:98:d4:9a:a0:0a: 6c:06:a8:4e:cb:18:3a:a3:b9:d3:a8:b0:33:b6:ae:62:76:8c: d6:75:eb:52:fd:1c:19:52:21:fe:3a:91:42:22:c7:2b:e4:59: a0:60:0a:cf:c3:e3:ed:1e:b9:c2:fa:b5:33:41:bb:52:f3:a8: 6e:5b:e6:50:6d:d3:8a:a8:2b:f3:dc:30:18:e3:7b:51:7e:c6: 8b:12:cb:91:31:d4:fc:57:67:17:36:8c:27:68:33:ad:96:62: df:45:91:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4 OTQ1RkNBQjkwHhcNMjQxMTIyMTg1NDE3WhcNMjQxMTI5MTg1NDE3WjAYMRYwFAYD VQQDEw02NzQwZDM1YS0xY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28h9rp6Ti5b3tBr/xsZxrc5kTdJZToBaxw1TiNd4dFP6PQMk+81kFmq/bGW5 NXx8aXWxZswVLImP4JPOy0WEh0f2B7zv1/W9MWwiGkEgof3xIAJjwFTT3aEJgs+i wDnb832ybrHOY8NTum8vrwajBsy2Phbkhmmlc3pwThrELhhJODPiQ71J7G/Iy5G/ 4Ji8APAYW26afDZHFKplG2+7Fef+eGSArIjp25gd89WR7p6m/PGDgTcDxvMKvgIp MTokHerJWxlm1+v2wB7o5hZ5eJM1GAYL1w5v4SN19gL0tRO1UMKbba/jfNI3SzLk VgxJzICJxZyMbm0mYZEOu5K8swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs7vuFL FeL7JDpLDFu63k+oC95PMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5 cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS80NzMzOTU2NjIwOEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4 eHd4a1lsR2Z4dldKUmZ5cmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB63lDsuUWUr8zbDPAPss5Slht9gP3EmoCvMWJ/VJUEvhM8P3sK0qyf Aq2CwdkFPe4A7F5I6OUCvB9W8TipovzxU0bIY5K3zAOJoWOeidrikhHx5mJe76SL aSmteUhSc/BGoE2UxtVWDPmVDvsDeRTYtNPiRya85fe0nPWVRkF4ram4UhuUeyfk QZHoUYXwUshKsguR0JjBn4oGK8dtmNSaoApsBqhOyxg6o7nTqLAztq5idozWdetS /RwZUiH+OpFCIscr5FmgYArPw+PtHrnC+rUzQbtS86huW+ZQbdOKqCvz3DAY43tR fsaLEsuRMdT8V2cXNownaDOtlmLfRZH4 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org