$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: rBGilNvNl5/uGq3t5HA+/pslZOTzoAxxN4xcZQvIIQY= Subject key identifier: 2D:92:43:C1:09:51:A5:6A:4D:EC:70:EB:C6:BD:D4:87:76:D6:1E:E2 Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 0677 Signing time: Fri 22 Nov 2024 21:54:41 +0000 Manifest this update: Fri 22 Nov 2024 21:54:41 +0000 Manifest next update: Fri 29 Nov 2024 21:54:41 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: XrSmgBsQrMGHfa2b1m4Pn4tFfaJ/2RwSqvcFLgUsR/o=) 2: 10125F86258D11EE90D2D87EC4F9AE02.roa (hash: RRd9626oufWQNsXlUb3qkz1Xr4UeRexRn6TmN9fSM8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: Nov 22 21:54:41 2024 GMT Not After : Nov 29 21:54:41 2024 GMT Subject: CN=6740fda1-59e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:32:55:59:f4:08:91:42:d9:35:7d:14:ad: 6e:ab:74:a0:37:4b:31:08:ca:76:5b:9c:d8:a7:af: 62:7b:08:0b:dd:c6:ae:08:6e:fc:e9:32:92:62:51: ea:8f:7d:81:eb:14:1d:a6:51:e0:b0:bd:81:bf:0e: 56:49:bd:ff:c7:a1:60:b1:e7:dd:f7:c6:b8:f0:fa: ac:09:ec:58:96:b9:97:cd:34:c3:fc:95:4d:7d:e0: 57:9b:5c:c0:6f:fb:46:1d:4e:4a:4d:a7:97:85:d1: 79:5a:59:67:b6:0e:e2:ae:86:29:d8:e4:46:dd:98: 3d:74:3c:88:bc:9f:e7:b2:be:90:ae:a3:8a:72:da: 20:37:2e:eb:fe:7c:a6:65:85:db:62:a3:ef:c6:14: ca:19:ac:0e:d6:c5:ef:97:4d:b4:e7:12:5f:b1:6e: 2a:4c:8a:be:75:87:4b:c2:78:38:a8:9b:2c:4e:4c: 6d:6c:3c:62:53:d3:76:8b:25:81:61:32:b2:1b:c1: fc:47:ce:8c:4d:3d:7a:13:f5:18:6d:73:b3:40:3e: 89:0a:7c:18:7b:95:c4:12:c0:ae:b0:a0:4f:cd:e6: f3:5d:39:c8:f8:27:f5:ac:6d:d1:8e:95:cd:5f:b4: b6:19:d4:81:0d:d5:96:48:05:fb:4d:62:e1:1c:e1: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:92:43:C1:09:51:A5:6A:4D:EC:70:EB:C6:BD:D4:87:76:D6:1E:E2 X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b8:07:b6:02:36:50:f2:3c:50:73:33:88:51:4f:ef:6f:b6: 92:c0:42:2f:18:43:56:b9:40:57:38:39:cd:18:0a:88:f3:ac: d2:23:17:32:a9:69:aa:75:27:a0:cb:91:d6:3f:38:3d:bc:fb: c6:01:c1:e3:2f:97:25:66:a1:64:27:e9:f3:c4:bb:21:4a:c9: bc:2f:76:94:93:e1:b3:8e:aa:de:3b:33:2f:0c:a9:71:c3:45: 8c:1c:34:8c:43:68:5b:64:ab:17:82:23:11:09:64:71:b8:8c: f1:f8:0b:69:9d:64:95:fb:ab:d0:f7:c3:9b:2b:9b:30:e5:ab: c5:35:28:dd:35:57:bd:fe:44:5c:d9:90:7d:83:99:e7:d7:cc: b3:bd:f4:e5:21:4a:80:66:1e:b4:8c:10:4c:b2:d5:4e:fb:eb: 04:41:62:06:31:29:df:0c:47:36:1a:b5:ba:57:74:47:af:92: c0:33:0a:8d:98:11:a5:1d:b4:68:bd:4d:8d:18:0b:47:ac:56: 4f:28:88:03:58:52:42:f6:fb:32:e5:de:8b:98:ca:0b:fc:15: 50:4a:52:d7:15:d7:51:c2:61:2d:52:2a:06:ba:6a:06:eb:68: ea:4c:4a:f4:ca:82:00:72:2d:65:94:1c:df:be:99:80:97:06: a2:82:a7:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjQxMTIyMjE1NDQxWhcNMjQxMTI5MjE1NDQxWjAYMRYwFAYD VQQDEw02NzQwZmRhMS01OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c0yVVn0CJFC2TV9FK1uq3SgN0sxCMp2W5zYp69iewgL3cauCG786TKSYlHq j32B6xQdplHgsL2Bvw5WSb3/x6Fgsefd98a48PqsCexYlrmXzTTD/JVNfeBXm1zA b/tGHU5KTaeXhdF5Wllntg7iroYp2ORG3Zg9dDyIvJ/nsr6QrqOKctogNy7r/nym ZYXbYqPvxhTKGawO1sXvl0205xJfsW4qTIq+dYdLwng4qJssTkxtbDxiU9N2iyWB YTKyG8H8R86MTT16E/UYbXOzQD6JCnwYe5XEEsCusKBPzebzXTnI+Cf1rG3RjpXN X7S2GdSBDdWWSAX7TWLhHOHhkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2SQ8EJ UaVqTexw68a91Id21h7iMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7uAe2AjZQ8jxQczOIUU/vb7aSwEIvGENWuUBXODnNGAqI86zSIxcy qWmqdSegy5HWPzg9vPvGAcHjL5clZqFkJ+nzxLshSsm8L3aUk+GzjqreOzMvDKlx w0WMHDSMQ2hbZKsXgiMRCWRxuIzx+AtpnWSV+6vQ98ObK5sw5avFNSjdNVe9/kRc 2ZB9g5nn18yzvfTlIUqAZh60jBBMstVO++sEQWIGMSnfDEc2GrW6V3RHr5LAMwqN mBGlHbRovU2NGAtHrFZPKIgDWFJC9vsy5d6LmMoL/BVQSlLXFddRwmEtUioGumoG 62jqTEr0yoIAci1llBzfvpmAlwaigqek -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org