$ rpki-client -vvf rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft File: ldG-85ALQWWEFku3RjF3EwIpFog.mft (raw, json) Hash identifier: 5l8TSCjQnoLjOwJWs6XwAQeFG/opTCo9kvmssr9aYao= Subject key identifier: 5C:CF:D5:F6:1E:3A:FF:A3:4A:EC:95:75:48:06:D7:D1:00:22:B1:93 Authority key identifier: 95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 Certificate issuer: /CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Certificate serial: 3441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft Manifest number: 3436 Signing time: Sun 24 Nov 2024 14:49:35 +0000 Manifest this update: Sun 24 Nov 2024 14:49:34 +0000 Manifest next update: Sun 01 Dec 2024 14:49:34 +0000 Files and hashes: 1: ldG-85ALQWWEFku3RjF3EwIpFog.crl (hash: HGyO2fZNAH6KUG0HryVxVqqfCojDLFJqTyExRE3nVCQ=) 2: C2F7AE40C03111EA9777314AC4F9AE02.roa (hash: tPW/Egh8IR3GEd0uZMXbPh6pBpBuAbmcNv5np6TmcRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13377 (0x3441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577DD/serialNumber=95D1BEF3900B416584164BB74631771302291688 Validity Not Before: Nov 24 14:49:34 2024 GMT Not After : Dec 1 14:49:34 2024 GMT Subject: CN=67433cff-38bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:01:f4:7d:d9:85:9c:3c:fa:03:b8:31:d6: f5:43:39:b4:63:26:62:3f:7d:0c:f0:b8:d3:21:1c: 7e:a4:21:04:dc:e5:2d:02:9e:9b:6b:16:7f:f7:7f: 13:7e:b1:35:0c:7c:2c:75:0b:94:36:6c:63:5c:ab: cf:6f:47:76:41:fd:61:e0:13:c5:dd:58:36:39:65: 20:c3:bc:27:b0:6d:4c:d7:74:e1:b4:30:7f:eb:ce: a1:3a:d5:c4:f5:bf:27:03:62:67:f1:f7:eb:6d:48: b5:95:46:c4:f5:59:c1:05:56:1d:f2:86:ca:da:ae: 58:aa:fe:0b:df:84:ae:37:76:74:e3:ca:53:42:7b: 96:59:7e:8f:39:a0:8b:1b:39:bb:8d:a8:b0:57:c6: 5d:36:a3:7b:00:02:1b:09:99:30:c7:85:4f:78:bc: 65:49:bc:12:e6:dc:40:33:dc:4f:17:37:99:d9:df: c4:b7:1a:6e:19:e7:d9:cd:c5:b2:9a:ba:ee:c0:a7: 43:cb:f0:00:5a:d0:b0:64:ec:f1:8c:a0:c5:a2:9e: 63:29:3a:13:59:0a:37:60:eb:82:6c:49:9e:60:b4: 71:e2:61:38:81:f9:45:b8:c6:6e:04:55:3e:21:d3: 0c:e0:e5:d3:3b:f3:10:65:c5:50:fa:b9:24:5a:13: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:D5:F6:1E:3A:FF:A3:4A:EC:95:75:48:06:D7:D1:00:22:B1:93 X509v3 Authority Key Identifier: keyid:95:D1:BE:F3:90:0B:41:65:84:16:4B:B7:46:31:77:13:02:29:16:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldG-85ALQWWEFku3RjF3EwIpFog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577DD/D1C5B02A1D9611E2A1CAB47F08B02CD2/ldG-85ALQWWEFku3RjF3EwIpFog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d9:8e:a5:d5:0a:c4:d6:e2:b1:a5:52:fd:cb:5d:52:a1:26: 1a:4a:b4:d8:1c:7f:1b:0c:3d:b5:bc:d4:a4:64:b4:5f:bd:2b: f7:8b:9b:12:f1:6b:40:52:13:c8:fa:c3:ed:4f:7d:07:c3:9c: 0e:38:f6:14:2c:98:fa:f1:a1:b7:d7:5d:61:74:67:98:72:a8: 5b:24:a9:b4:17:bb:70:79:40:56:1a:da:a0:7d:36:c5:44:d7: 6b:ba:81:21:07:3e:26:bc:2a:be:82:b1:6f:47:16:65:c9:c9: 7e:a0:c3:3f:01:3b:84:26:fb:d2:af:54:03:bc:7e:31:4f:43: 7a:02:db:5f:2c:de:96:96:cd:63:0d:88:d5:63:f2:0c:af:5d: 0a:a9:df:b5:c3:24:2b:33:ef:ae:5a:87:dd:38:43:50:7e:2c: d8:70:5b:90:9c:b0:b7:ae:92:d7:9a:ed:ab:25:69:2c:8a:b3: 69:c7:ea:29:0e:0d:c1:62:81:06:ad:be:9f:04:6d:e5:65:88: e1:a5:16:7d:c1:32:b1:6b:29:b5:0f:05:15:90:c3:7b:7b:a5: 7d:b7:b3:65:bb:1c:80:99:ad:3b:87:06:12:03:49:4e:40:cc: 9d:55:83:58:6a:97:9a:d6:ef:2a:0b:b7:04:5d:ed:4f:a2:d9: 5e:d0:f2:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3REQxMTAvBgNVBAUTKDk1RDFCRUYzOTAwQjQxNjU4NDE2NEJCNzQ2MzE3NzEz MDIyOTE2ODgwHhcNMjQxMTI0MTQ0OTM0WhcNMjQxMjAxMTQ0OTM0WjAYMRYwFAYD VQQDEw02NzQzM2NmZi0zOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GgB9H3ZhZw8+gO4Mdb1Qzm0YyZiP30M8LjTIRx+pCEE3OUtAp6baxZ/938T frE1DHwsdQuUNmxjXKvPb0d2Qf1h4BPF3Vg2OWUgw7wnsG1M13ThtDB/686hOtXE 9b8nA2Jn8ffrbUi1lUbE9VnBBVYd8obK2q5Yqv4L34SuN3Z048pTQnuWWX6POaCL Gzm7jaiwV8ZdNqN7AAIbCZkwx4VPeLxlSbwS5txAM9xPFzeZ2d/EtxpuGefZzcWy mrruwKdDy/AAWtCwZOzxjKDFop5jKToTWQo3YOuCbEmeYLRx4mE4gflFuMZuBFU+ IdMM4OXTO/MQZcVQ+rkkWhPBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzP1fYe Ov+jSuyVdUgG19EAIrGTMB8GA1UdIwQYMBaAFJXRvvOQC0FlhBZLt0YxdxMCKRaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdERC9EMUM1QjAyQTFE OTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFXV0VGa3UzUmpGM0V3SXBG b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkRy04NUFMUVdXRUZrdTNSakYzRXdJcEZvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdERC9EMUM1QjAyQTFEOTYxMUUyQTFDQUI0N0YwOEIwMkNEMi9sZEctODVBTFFX V0VGa3UzUmpGM0V3SXBGb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt2Y6l1QrE1uKxpVL9y11SoSYaSrTYHH8bDD21vNSkZLRfvSv3i5sS 8WtAUhPI+sPtT30Hw5wOOPYULJj68aG3111hdGeYcqhbJKm0F7tweUBWGtqgfTbF RNdruoEhBz4mvCq+grFvRxZlycl+oMM/ATuEJvvSr1QDvH4xT0N6AttfLN6Wls1j DYjVY/IMr10Kqd+1wyQrM++uWofdOENQfizYcFuQnLC3rpLXmu2rJWksirNpx+op Dg3BYoEGrb6fBG3lZYjhpRZ9wTKxaym1DwUVkMN7e6V9t7NluxyAma07hwYSA0lO QMydVYNYapea1u8qC7cEXe1Potle0PKw -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:04 2024 by rpki-client on console-fra.rpki-client.org