$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: US3xlI28zLKMi+4vroqnjyoU0A7oU6dL1I0z8bjcV+w= Subject key identifier: 3A:E5:09:88:03:56:5B:3D:E0:18:2B:5F:5D:93:FB:07:8F:DE:74:A4 Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: C2 Signing time: Sat 23 Nov 2024 03:58:22 +0000 Manifest this update: Sat 23 Nov 2024 03:58:21 +0000 Manifest next update: Sat 30 Nov 2024 03:58:21 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: tdR2C9rgasmwIB5xSpENIcNVnm54xfCpnM5NgcpzPG8=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: i6YPlaMnGASCs0Ij1ZA+/Al9vtaAI62dbzUJZsHZ5+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: Nov 23 03:58:21 2024 GMT Not After : Nov 30 03:58:21 2024 GMT Subject: CN=674152de-e342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:06:e6:56:d4:a0:cc:16:d1:64:b7:98:dd: 80:a8:22:c1:6a:09:66:e2:b2:af:ac:a0:ca:77:8c: f2:99:11:d3:7b:62:61:73:a7:48:5b:01:e9:28:38: 80:e2:db:7f:cf:2b:8c:9b:bc:92:3f:05:91:05:17: 87:d7:4c:64:dd:de:23:44:18:33:ba:f7:1d:b9:52: 15:3f:5d:f6:76:0a:fb:03:e9:10:64:7b:5a:56:0a: 1f:8d:a7:b0:ea:49:4a:d3:e8:5c:21:89:62:db:c0: eb:ea:b0:28:72:38:a4:a6:58:38:f2:91:d1:d0:73: 70:7b:42:8b:da:f6:7a:e9:87:a9:43:0d:5c:6e:3f: 5c:9e:56:95:91:f2:54:24:c5:b4:d9:13:0f:46:0a: 3d:1e:f1:83:68:62:fe:8f:2c:f5:e4:92:05:22:11: d6:59:1c:d0:c8:89:05:52:ff:e1:d6:d2:01:90:f6: 20:c2:3f:c9:4f:ba:2e:0f:4a:8e:23:91:6b:b7:11: ee:c8:74:da:36:36:05:0a:0b:fc:23:e3:4e:25:58: 46:24:26:6b:f4:d6:db:d7:c3:cd:8c:ed:1a:1c:b7: 2c:6e:79:46:8c:98:fd:ba:de:b9:09:e4:95:c6:bb: 33:d4:e2:f4:1e:1b:07:1d:5a:81:42:b5:f2:3f:c6: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:09:88:03:56:5B:3D:E0:18:2B:5F:5D:93:FB:07:8F:DE:74:A4 X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:aa:8b:47:8f:5b:52:fa:b2:a8:99:97:28:2c:c6:f7:66:88: 27:1c:88:4e:f1:6d:c3:1a:32:fb:9b:e9:0f:31:36:82:42:8f: 71:20:5e:4a:9c:3e:f1:20:1a:df:8e:a9:b1:80:b5:e5:f7:cf: 83:96:a9:73:c4:55:0a:cf:0a:b7:be:f4:f9:da:87:d8:10:15: 4f:72:8a:ff:0c:1e:0f:27:05:96:1d:6f:58:2a:53:42:72:74: 51:8f:b7:a6:7d:0d:2f:14:cf:22:58:88:50:28:93:6c:50:ff: 8e:97:8b:4b:c5:b8:74:d9:ea:72:24:2e:d4:ba:7f:b3:9c:a6: 95:e5:f9:15:69:07:e9:92:39:d2:55:fe:22:f5:24:f8:54:e2: 94:15:d0:83:ef:9c:81:2b:27:79:c5:0d:bd:9f:58:28:1d:0c: 08:8c:f4:c5:97:59:8a:d0:08:48:f2:1f:46:88:51:22:46:50: c2:e2:bb:55:16:4a:48:45:6d:87:e6:13:cd:b8:69:e0:cc:a3: 3a:b0:5e:1a:0c:d2:be:6d:6c:ad:f8:b6:f3:ff:80:80:ec:6c: f0:00:b0:cd:92:3d:1d:f4:30:9e:be:7f:5e:1e:90:4f:77:2f: f4:e0:f1:c6:22:03:ea:62:cb:d5:43:d7:fd:50:bb:56:b2:41: 1d:7b:2e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVEODQxMTAvBgNVBAUTKDk0OUI2NDdBNUY4Qzc5RjZEQTRBRTM2RDlFMDBDNDRF MDJBOUE3QTQwHhcNMjQxMTIzMDM1ODIxWhcNMjQxMTMwMDM1ODIxWjAYMRYwFAYD VQQDEw02NzQxNTJkZS1lMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApC4G5lbUoMwW0WS3mN2AqCLBaglm4rKvrKDKd4zymRHTe2Jhc6dIWwHpKDiA 4tt/zyuMm7ySPwWRBReH10xk3d4jRBgzuvcduVIVP132dgr7A+kQZHtaVgofjaew 6klK0+hcIYli28Dr6rAocjikplg48pHR0HNwe0KL2vZ66YepQw1cbj9cnlaVkfJU JMW02RMPRgo9HvGDaGL+jyz15JIFIhHWWRzQyIkFUv/h1tIBkPYgwj/JT7ouD0qO I5FrtxHuyHTaNjYFCgv8I+NOJVhGJCZr9Nbb18PNjO0aHLcsbnlGjJj9ut65CeSV xrsz1OL0HhsHHVqBQrXyP8ZxZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrlCYgD Vls94BgrX12T+weP3nSkMB8GA1UdIwQYMBaAFJSbZHpfjHn22krjbZ4AxE4Cqaek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ4NC9GODA2OTQzQzg2 QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVmYmFTdU50bmdERVRnS3Bw NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ4NC9GODA2OTQzQzg2QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVm YmFTdU50bmdERVRnS3BwNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqotHj1tS+rKomZcoLMb3ZognHIhO8W3DGjL7m+kPMTaCQo9xIF5K nD7xIBrfjqmxgLXl98+DlqlzxFUKzwq3vvT52ofYEBVPcor/DB4PJwWWHW9YKlNC cnRRj7emfQ0vFM8iWIhQKJNsUP+Ol4tLxbh02epyJC7Uun+znKaV5fkVaQfpkjnS Vf4i9ST4VOKUFdCD75yBKyd5xQ29n1goHQwIjPTFl1mK0AhI8h9GiFEiRlDC4rtV FkpIRW2H5hPNuGngzKM6sF4aDNK+bWyt+Lbz/4CA7GzwALDNkj0d9DCevn9eHpBP dy/04PHGIgPqYsvVQ9f9ULtWskEdey5L -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org