$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json) Hash identifier: 0mMEYZ/o9tW49e8Qa8YPaHbwgJKHqAWi3ck/FoOL12w= Subject key identifier: 7E:0E:BC:56:E5:C3:BD:B9:49:7F:7C:C3:C2:85:BE:5E:C3:17:F9:30 Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft Manifest number: 0144 Signing time: Sat 23 Nov 2024 02:34:38 +0000 Manifest this update: Sat 23 Nov 2024 02:34:37 +0000 Manifest next update: Sat 30 Nov 2024 02:34:37 +0000 Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: oHX+dJqLudxOyz49THtB8VGWNod8HMKugqsUsTT5WaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Validity Not Before: Nov 23 02:34:37 2024 GMT Not After : Nov 30 02:34:37 2024 GMT Subject: CN=67413f3d-41c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:d0:e3:6e:51:52:3d:83:19:e7:b4:53:0c: 4c:67:69:ae:c7:6d:78:d7:52:51:87:b5:0e:2d:1c: fb:2a:60:c2:4d:5f:47:72:42:82:65:73:5f:02:b3: 64:5b:46:a7:50:12:9a:8a:be:d8:4a:e7:3c:53:0c: f5:de:25:53:7c:a8:58:50:88:a9:1b:dc:d3:fa:33: 65:e5:40:48:a9:9c:f0:9f:92:80:55:2f:a3:43:19: 99:5d:04:43:1e:aa:2e:d0:24:89:a4:e8:9a:5d:bd: f7:14:64:83:2c:ce:89:c6:07:e2:6f:8e:ec:d7:f0: c1:e3:e6:e9:1d:14:69:36:57:ef:31:88:0f:6d:83: 83:a6:7e:d4:6e:4a:33:13:e6:de:66:11:97:73:19: 19:60:6c:21:b3:a7:0e:86:a3:c4:cd:34:8c:6b:e5: 99:17:70:12:4f:0f:9f:9b:98:c4:6c:4a:a6:21:5b: 2d:a9:61:d6:af:82:8b:93:d8:f6:5c:c4:29:0a:9d: 2c:e6:dd:75:e5:f9:45:a3:e0:5a:6c:a5:cc:e3:6b: e4:05:cc:91:2d:56:29:ff:f7:26:3d:c3:af:23:eb: 38:2e:2b:ec:ce:68:ce:79:90:62:97:46:40:3a:2c: dd:7f:fb:d1:5d:47:be:7d:9f:a3:81:96:7e:10:97: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0E:BC:56:E5:C3:BD:B9:49:7F:7C:C3:C2:85:BE:5E:C3:17:F9:30 X509v3 Authority Key Identifier: keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:72:95:cb:a9:ae:66:4e:8f:d8:9b:ec:d3:2d:25:a8:d2:36: a4:36:2d:71:6f:41:cc:5b:5b:2f:dc:dc:5d:9b:75:5a:c2:7d: 95:c2:17:ce:33:8b:3d:f0:0a:d5:5a:db:5b:d4:b1:cd:da:4a: d0:fe:0c:2e:33:f1:71:1a:fd:fd:5f:21:86:dd:2f:b8:ec:1b: c4:9a:3d:04:5c:bf:f3:c7:2d:ff:21:44:81:42:95:96:7b:20: 6d:b9:c9:33:4f:92:6d:9a:2a:2d:68:fd:5b:0e:28:68:e2:c8: 83:2a:c3:01:c6:38:74:71:34:07:93:71:8f:0e:d5:6d:9c:0c: be:38:fb:53:1e:cc:6a:a5:62:61:77:c3:ed:97:b3:55:d6:c3: cb:51:8e:c8:17:10:10:9c:30:f5:a0:46:9c:4e:1d:10:42:f9: 5a:d8:ad:3b:03:90:cf:50:28:85:84:2e:01:80:06:21:37:06: d5:4b:d4:9d:65:cd:66:ee:ce:48:a6:aa:3d:e3:c4:82:7a:61: b2:38:b8:d5:72:d2:3c:57:c9:96:13:93:bd:30:57:f0:f8:8b: 91:bd:8f:cb:bb:eb:81:e4:63:02:18:32:bf:9e:2a:19:af:6e: 49:08:0e:12:ff:88:c9:29:72:1b:15:37:11:6c:38:f6:53:c3: f6:10:47:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE RTEyMjJDRUUwHhcNMjQxMTIzMDIzNDM3WhcNMjQxMTMwMDIzNDM3WjAYMRYwFAYD VQQDEw02NzQxM2YzZC00MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnF7Q425RUj2DGee0UwxMZ2mux21411JRh7UOLRz7KmDCTV9HckKCZXNfArNk W0anUBKair7YSuc8Uwz13iVTfKhYUIipG9zT+jNl5UBIqZzwn5KAVS+jQxmZXQRD Hqou0CSJpOiaXb33FGSDLM6Jxgfib47s1/DB4+bpHRRpNlfvMYgPbYODpn7Ubkoz E+beZhGXcxkZYGwhs6cOhqPEzTSMa+WZF3ASTw+fm5jEbEqmIVstqWHWr4KLk9j2 XMQpCp0s5t115flFo+BabKXM42vkBcyRLVYp//cmPcOvI+s4LivszmjOeZBil0ZA Oizdf/vRXUe+fZ+jgZZ+EJdBWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4OvFbl w725SX98w8KFvl7DF/kwMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2 ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHcpXLqa5mTo/Ym+zTLSWo0jakNi1xb0HMW1sv3Nxdm3Vawn2VwhfO M4s98ArVWttb1LHN2krQ/gwuM/FxGv39XyGG3S+47BvEmj0EXL/zxy3/IUSBQpWW eyBtuckzT5JtmiotaP1bDiho4siDKsMBxjh0cTQHk3GPDtVtnAy+OPtTHsxqpWJh d8Ptl7NV1sPLUY7IFxAQnDD1oEacTh0QQvla2K07A5DPUCiFhC4BgAYhNwbVS9Sd Zc1m7s5Ipqo948SCemGyOLjVctI8V8mWE5O9MFfw+IuRvY/Lu+uB5GMCGDK/nioZ r25JCA4S/4jJKXIbFTcRbDj2U8P2EEfE -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org