$ rpki-client -vvf rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft File: LtTacwW1lNyVt6BBDZrLKN4pIL8.mft (raw, json) Hash identifier: YKHDDj8OV+M6NXP5cg+J8Hc1XbXMHe2ZlosQVwL9Fuk= Subject key identifier: 9F:B8:58:9C:DF:93:BB:0B:21:A8:D6:3A:4A:08:7B:D8:85:1E:14:66 Authority key identifier: 2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF Certificate issuer: /CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft Manifest number: 041F Signing time: Fri 22 Nov 2024 23:56:14 +0000 Manifest this update: Fri 22 Nov 2024 23:56:13 +0000 Manifest next update: Fri 29 Nov 2024 23:56:13 +0000 Files and hashes: 1: LtTacwW1lNyVt6BBDZrLKN4pIL8.crl (hash: +K1BUAC1u4ARnFdXq0Ig3Oych+HQ2jhXZc+gzgpOwPY=) 2: 1FB929041CA111EF9B7AE315C4F9AE02.roa (hash: r/MoApslSb/1l+vgcXkpxaRCoUoDOe7dlWiXHMOk6Wc=) 3: A88BB9A01CA011EFB3F91015C4F9AE02.roa (hash: HuZjrX5i4PmkPF0GRyXx9Tn20damMvDAVdJG/oBTeck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454E4/serialNumber=2ED4DA7305B594DC95B7A0410D9ACB28DE2920BF Validity Not Before: Nov 22 23:56:13 2024 GMT Not After : Nov 29 23:56:13 2024 GMT Subject: CN=67411a1e-58be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:13:7f:8d:cd:eb:87:fb:3c:3b:39:ee:b2: 70:a8:3e:aa:c2:1f:68:00:15:c1:32:8f:0b:53:f2: f8:2d:9b:9d:bd:38:9e:cb:b9:1a:67:46:a5:8b:d7: 96:94:ec:5d:ac:39:40:c3:af:f0:be:d7:3a:40:88: 48:49:55:7b:74:1d:df:d5:da:11:da:9b:2e:bd:bf: 95:d2:4a:f8:47:c8:1e:29:d3:b1:5f:f8:b9:18:02: 67:27:95:9c:2d:d0:10:69:3c:23:f1:5b:ff:43:08: 1b:fc:63:72:31:15:52:b7:3f:ce:69:f8:25:75:35: 0d:a0:b3:9b:2b:13:a3:ba:69:23:89:aa:e2:c4:39: d6:55:22:17:3f:e4:43:56:29:c9:88:fb:33:71:74: aa:cb:4f:e1:18:a6:1e:6d:66:3c:f4:b1:28:8b:39: a1:84:2b:93:9a:f3:47:b3:90:e7:5f:92:97:a4:46: 1d:1a:01:b3:7b:47:16:28:e3:bc:7f:db:3a:b2:df: fc:d7:5f:2b:a9:4d:a9:f2:fb:80:1b:96:7f:08:37: 57:6a:71:78:20:7a:d0:68:ff:50:b5:64:75:71:b3: 7c:99:85:9a:73:a5:bc:21:59:68:6f:43:db:85:d7: ac:34:f3:4f:28:25:66:e6:82:90:7b:69:a3:e4:e8: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:58:9C:DF:93:BB:0B:21:A8:D6:3A:4A:08:7B:D8:85:1E:14:66 X509v3 Authority Key Identifier: keyid:2E:D4:DA:73:05:B5:94:DC:95:B7:A0:41:0D:9A:CB:28:DE:29:20:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtTacwW1lNyVt6BBDZrLKN4pIL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454E4/7714C67A438411EC9A8A3309C4F9AE02/LtTacwW1lNyVt6BBDZrLKN4pIL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2e:1f:41:c3:cc:a3:2f:02:f8:a4:94:e6:94:d4:b0:ba:e2: 5d:7b:6b:84:98:fa:ed:df:e7:3e:c1:a2:82:c0:ab:0a:34:c5: 6f:c5:ed:dd:bb:64:64:2f:43:c2:2a:5b:52:6d:c5:bf:54:a8: c3:27:cd:99:21:99:9b:b7:9a:b3:92:87:f2:ce:76:bc:29:fc: dd:89:d8:12:d3:73:aa:77:ed:4d:9b:20:93:ef:7e:b9:13:93: 69:13:d4:69:df:5c:40:6d:5f:f5:24:f5:c3:50:19:d5:44:f2: bd:cb:aa:c7:d8:10:d0:95:4c:b5:f7:20:e3:28:f9:a9:c7:31: 18:a5:24:32:5b:70:cb:e6:e5:7a:85:40:88:81:37:5a:35:1b: cb:2f:27:90:9a:44:5a:0a:1b:ca:0e:e8:ca:f6:31:06:72:6b: d7:93:eb:51:f0:d7:4b:99:0d:11:ba:e0:11:03:15:e5:af:d9: 7c:3f:25:b3:fd:61:32:49:d2:8a:f4:18:89:b4:42:9f:03:4b: b9:ce:8d:2e:c6:d0:84:ea:ba:bc:92:f2:0c:d8:6d:ac:e5:af: 1a:76:29:01:96:50:02:39:03:f9:90:cf:5e:65:9e:3b:6e:b2: 41:d8:48:4d:4e:21:be:5b:8d:7d:d4:be:79:87:b0:d9:f1:d4: 40:b0:e5:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RTQxMTAvBgNVBAUTKDJFRDREQTczMDVCNTk0REM5NUI3QTA0MTBEOUFDQjI4 REUyOTIwQkYwHhcNMjQxMTIyMjM1NjEzWhcNMjQxMTI5MjM1NjEzWjAYMRYwFAYD VQQDEw02NzQxMWExZS01OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nwTf43N64f7PDs57rJwqD6qwh9oABXBMo8LU/L4LZudvTiey7kaZ0ali9eW lOxdrDlAw6/wvtc6QIhISVV7dB3f1doR2psuvb+V0kr4R8geKdOxX/i5GAJnJ5Wc LdAQaTwj8Vv/Qwgb/GNyMRVStz/OafgldTUNoLObKxOjumkjiarixDnWVSIXP+RD VinJiPszcXSqy0/hGKYebWY89LEoizmhhCuTmvNHs5DnX5KXpEYdGgGze0cWKOO8 f9s6st/8118rqU2p8vuAG5Z/CDdXanF4IHrQaP9QtWR1cbN8mYWac6W8IVlob0Pb hdesNPNPKCVm5oKQe2mj5Oh6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+4WJzf k7sLIajWOkoIe9iFHhRmMB8GA1UdIwQYMBaAFC7U2nMFtZTclbegQQ2ayyjeKSC/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRFNC83NzE0QzY3QTQz ODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxOeVZ0NkJCRFpyTEtONHBJ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x0VGFjd1cxbE55VnQ2QkJEWnJMS040cElMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRFNC83NzE0QzY3QTQzODQxMUVDOUE4QTMzMDlDNEY5QUUwMi9MdFRhY3dXMWxO eVZ0NkJCRFpyTEtONHBJTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHLh9Bw8yjLwL4pJTmlNSwuuJde2uEmPrt3+c+waKCwKsKNMVvxe3d u2RkL0PCKltSbcW/VKjDJ82ZIZmbt5qzkofyzna8KfzdidgS03Oqd+1NmyCT7365 E5NpE9Rp31xAbV/1JPXDUBnVRPK9y6rH2BDQlUy19yDjKPmpxzEYpSQyW3DL5uV6 hUCIgTdaNRvLLyeQmkRaChvKDujK9jEGcmvXk+tR8NdLmQ0RuuARAxXlr9l8PyWz /WEySdKK9BiJtEKfA0u5zo0uxtCE6rq8kvIM2G2s5a8adikBllACOQP5kM9eZZ47 brJB2EhNTiG+W4191L55h7DZ8dRAsOWm -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org