$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: r8aWOliTgTXkwlA3Zv797B5wuVdg2cMaRjv6dsi09WE= Subject key identifier: 2D:DB:63:A8:38:F8:4B:B1:99:4D:3A:27:2F:79:64:7B:E2:9B:93:4D Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0796 Signing time: Fri 22 Nov 2024 20:51:25 +0000 Manifest this update: Fri 22 Nov 2024 20:51:25 +0000 Manifest next update: Fri 29 Nov 2024 20:51:25 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: vaKMCO18FxXbESkLYmGT461MtO7LAO/aKJTkdPzE7No=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: b+h/ppjl5OqZ84YHWzvHgFGwffNA/fcx3GbK/0z0P+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Nov 22 20:51:25 2024 GMT Not After : Nov 29 20:51:25 2024 GMT Subject: CN=6740eecd-9232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:fd:1d:ef:ea:fe:ec:ec:f7:8d:6f:2d:08: d1:9d:dc:39:94:f7:de:c6:1c:be:46:0b:8c:ff:70: b9:c1:7b:77:8e:fd:c8:9b:2a:64:37:a5:40:a1:41: 6c:6a:02:e3:3e:de:7d:98:e6:60:0a:ef:23:db:35: f8:f4:53:bf:18:8c:d7:dd:40:1c:e4:7e:60:a8:61: 10:6a:e6:7e:e7:24:23:56:63:95:df:06:f5:c9:fd: ec:29:c0:b2:64:99:70:14:f9:a0:99:f0:33:77:8d: df:d7:19:7e:a6:39:10:2d:f2:ce:77:8f:9d:37:80: 5a:9a:29:ec:21:1e:a6:bf:5b:25:16:c5:b6:a8:f3: 2e:b9:3f:b9:33:4e:06:34:0c:c4:e1:22:b0:97:5c: a3:80:6c:93:a1:be:ae:69:51:0e:0e:2e:f0:85:81: f2:b0:63:dc:11:64:38:4e:cb:5d:1d:98:d6:2e:30: 32:50:41:1d:3e:02:f8:c0:fd:a8:8f:fd:70:27:35: cc:3a:e0:6c:4d:b7:b8:f5:34:c7:d4:f2:62:8d:1b: f2:be:22:e8:b0:b4:12:46:26:51:7b:4f:bb:47:e7: 2e:cc:f8:16:86:a4:be:ab:db:ac:f4:8f:e7:04:5f: cb:8d:51:05:b8:ce:82:3a:25:79:47:96:3a:c8:07: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DB:63:A8:38:F8:4B:B1:99:4D:3A:27:2F:79:64:7B:E2:9B:93:4D X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:40:53:36:3f:47:1b:96:9e:2e:49:df:1e:ee:71:15:72:3a: 10:4e:5e:31:8b:5e:5e:05:ba:d1:61:f2:76:23:e6:95:2a:c3: f7:85:f2:46:01:9a:bd:6b:ab:35:f7:56:5b:be:25:49:50:30: 7b:fd:88:5d:49:71:91:3c:82:42:71:23:79:53:e3:f9:98:64: 2b:27:90:ec:b4:0c:4c:55:c4:f4:46:93:ab:1e:a1:1e:a7:9f: f2:1f:c9:72:1a:7a:40:bc:e1:41:ff:01:e4:51:6f:0d:31:ce: d1:15:85:73:ea:77:c4:5f:51:b6:21:45:b7:09:5c:13:a0:b0: 36:d6:96:de:7e:0c:4d:b8:51:8e:07:02:bb:95:9f:f2:6a:53: 31:15:e9:8f:25:b9:ac:e9:27:1e:bd:41:7b:a2:2d:61:44:d9: 01:c0:75:84:33:d2:45:c7:0b:50:c4:cb:4e:55:3a:53:4f:52: 79:29:d6:4a:29:4d:88:13:f0:62:32:c7:e9:de:47:48:2d:76: 98:f3:11:d2:86:ff:45:7a:b4:fe:c8:39:08:95:79:53:96:79: 2a:97:1d:1d:6e:68:9d:d3:81:6c:55:80:9c:c6:9e:e3:44:93: d8:6b:36:5a:f4:fa:e7:b1:02:9d:8e:71:97:93:2f:1b:c4:be: af:79:11:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjQxMTIyMjA1MTI1WhcNMjQxMTI5MjA1MTI1WjAYMRYwFAYD VQQDEw02NzQwZWVjZC05MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4l39He/q/uzs941vLQjRndw5lPfexhy+RguM/3C5wXt3jv3ImypkN6VAoUFs agLjPt59mOZgCu8j2zX49FO/GIzX3UAc5H5gqGEQauZ+5yQjVmOV3wb1yf3sKcCy ZJlwFPmgmfAzd43f1xl+pjkQLfLOd4+dN4BaminsIR6mv1slFsW2qPMuuT+5M04G NAzE4SKwl1yjgGyTob6uaVEODi7whYHysGPcEWQ4TstdHZjWLjAyUEEdPgL4wP2o j/1wJzXMOuBsTbe49TTH1PJijRvyviLosLQSRiZRe0+7R+cuzPgWhqS+q9us9I/n BF/LjVEFuM6COiV5R5Y6yAf0nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3bY6g4 +EuxmU06Jy95ZHvim5NNMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTQFM2P0cblp4uSd8e7nEVcjoQTl4xi15eBbrRYfJ2I+aVKsP3hfJG AZq9a6s191ZbviVJUDB7/YhdSXGRPIJCcSN5U+P5mGQrJ5DstAxMVcT0RpOrHqEe p5/yH8lyGnpAvOFB/wHkUW8NMc7RFYVz6nfEX1G2IUW3CVwToLA21pbefgxNuFGO BwK7lZ/yalMxFemPJbms6ScevUF7oi1hRNkBwHWEM9JFxwtQxMtOVTpTT1J5KdZK KU2IE/BiMsfp3kdILXaY8xHShv9FerT+yDkIlXlTlnkqlx0dbmid04FsVYCcxp7j RJPYazZa9PrnsQKdjnGXky8bxL6veREm -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org