$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: TBGpqtzwqiOA1BihwALpUT5gp3Fcly4TyJ4shGkuBXw= Subject key identifier: A8:5B:2E:D3:38:56:E1:82:4B:96:DF:E7:34:0F:29:44:A5:D6:CA:58 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 0936 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 0931 Signing time: Fri 22 Nov 2024 20:01:50 +0000 Manifest this update: Fri 22 Nov 2024 20:01:50 +0000 Manifest next update: Fri 29 Nov 2024 20:01:50 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: sq2GGIJJVXNUhc2zQ2I/oHWc0AWu/hSlQdcrTErBQu0=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: N+jthyTGVjfvL/quxUMUol5Q7xnLJ/R/6L1JWE7fVrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2358 (0x936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: Nov 22 20:01:50 2024 GMT Not After : Nov 29 20:01:50 2024 GMT Subject: CN=6740e32e-df51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:06:2a:8a:4e:09:1e:ae:8c:35:3e:0b:f5: 82:49:ae:c3:9d:fa:e2:db:81:5a:40:05:d3:e2:73: 01:5f:42:38:4e:22:82:dd:7e:4d:64:7b:4b:32:e5: 24:46:64:27:38:3d:11:14:e5:57:14:06:13:c2:2a: 5c:48:ca:04:39:fa:82:69:96:3f:ea:0a:cd:ba:64: c6:82:3e:bc:fe:28:c3:e3:8c:bf:ee:b9:37:63:89: e9:4c:bd:04:80:de:95:17:d4:d0:29:34:32:c7:50: 89:2f:54:5f:44:8f:3e:f4:62:a2:66:93:41:cd:81: 71:c0:40:f6:55:68:5b:ff:70:e2:51:6e:1b:8b:40: 0f:25:a4:54:9f:b9:22:de:36:a8:9a:4e:7b:87:f1: 6a:f7:56:12:06:42:fd:0d:3c:cd:f0:ac:96:e4:99: f3:6d:f6:d1:f9:39:ba:a1:ab:c6:a6:cc:8a:73:a1: c6:dc:a4:f1:37:56:b0:5c:ab:e6:16:b8:a7:f8:d9: 42:a0:02:bc:b9:24:fd:78:8e:fa:f0:0f:17:9c:5d: 0b:5a:f4:d9:06:ae:0a:73:3a:ed:6f:2d:a8:8a:3d: 41:4a:45:3d:bb:39:58:2e:66:63:a1:ca:1f:f5:56: 53:1d:2b:92:0f:9f:e2:5a:e7:05:1f:19:37:7f:8c: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5B:2E:D3:38:56:E1:82:4B:96:DF:E7:34:0F:29:44:A5:D6:CA:58 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b6:c1:2f:17:d6:4b:0c:5c:cf:f4:ee:e8:14:92:18:e6:5e: 81:21:05:58:72:24:02:9e:6c:88:14:34:84:24:ef:ba:2f:c4: 2c:d6:65:5b:fb:50:60:57:97:a3:c6:4d:e8:ab:10:cb:c0:d8: 9a:75:04:67:1a:6d:51:13:fe:c7:ca:e9:8e:06:a6:c0:bc:51: 55:a4:3c:33:79:29:d8:bd:48:a2:a3:f2:2b:9b:59:d6:36:a1: a6:9b:4b:40:2f:f7:69:25:03:ae:cd:0e:7d:de:5e:75:57:f6: 56:33:70:2f:f5:aa:9d:2e:8c:5b:df:b3:2c:82:c2:f8:7d:b1: 7f:fa:2e:1e:89:a0:97:dc:b2:6d:a5:64:e4:c1:69:05:8e:53: c4:66:91:3c:a5:03:76:a2:f7:e8:04:64:e3:a3:83:fc:28:0b: 8c:76:fc:e7:e4:bc:81:b9:03:90:ee:0d:0e:85:00:68:fe:65: e1:8d:05:84:5d:ba:43:7b:2d:c1:6d:b6:48:c3:af:1b:f4:f6: 0f:85:ff:05:73:3f:38:3e:09:7a:a4:52:98:86:b4:6f:56:e8: 21:94:25:5b:69:aa:9f:5d:5d:bd:ce:99:b0:e5:fb:42:75:c2: 54:76:9f:7c:09:04:e5:a5:a4:77:36:7a:71:99:c6:15:27:7b: 75:0b:83:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjQxMTIyMjAwMTUwWhcNMjQxMTI5MjAwMTUwWjAYMRYwFAYD VQQDEw02NzQwZTMyZS1kZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnoGKopOCR6ujDU+C/WCSa7Dnfri24FaQAXT4nMBX0I4TiKC3X5NZHtLMuUk RmQnOD0RFOVXFAYTwipcSMoEOfqCaZY/6grNumTGgj68/ijD44y/7rk3Y4npTL0E gN6VF9TQKTQyx1CJL1RfRI8+9GKiZpNBzYFxwED2VWhb/3DiUW4bi0APJaRUn7ki 3jaomk57h/Fq91YSBkL9DTzN8KyW5JnzbfbR+Tm6oavGpsyKc6HG3KTxN1awXKvm Frin+NlCoAK8uST9eI768A8XnF0LWvTZBq4Kczrtby2oij1BSkU9uzlYLmZjocof 9VZTHSuSD5/iWucFHxk3f4x+mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhbLtM4 VuGCS5bf5zQPKUSl1spYMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQtsEvF9ZLDFzP9O7oFJIY5l6BIQVYciQCnmyIFDSEJO+6L8Qs1mVb +1BgV5ejxk3oqxDLwNiadQRnGm1RE/7HyumOBqbAvFFVpDwzeSnYvUiio/Irm1nW NqGmm0tAL/dpJQOuzQ593l51V/ZWM3Av9aqdLoxb37MsgsL4fbF/+i4eiaCX3LJt pWTkwWkFjlPEZpE8pQN2ovfoBGTjo4P8KAuMdvzn5LyBuQOQ7g0OhQBo/mXhjQWE XbpDey3BbbZIw68b9PYPhf8Fcz84Pgl6pFKYhrRvVughlCVbaaqfXV29zpmw5ftC dcJUdp98CQTlpaR3NnpxmcYVJ3t1C4O9 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org