$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json) Hash identifier: BqaktqYjWNoVIgo5cY5N5qQ+/sJm+bdSnKJnvUb7ngk= Subject key identifier: 72:DE:41:6B:4C:E6:39:94:C7:F2:EA:03:FA:D1:56:3A:CA:54:B8:D8 Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft Manifest number: 0BCD Signing time: Fri 22 Nov 2024 18:32:38 +0000 Manifest this update: Fri 22 Nov 2024 18:32:37 +0000 Manifest next update: Fri 29 Nov 2024 18:32:37 +0000 Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: d+u76TgZdbctw0cAZ2mha+KWsyq9u46hBgDyeni+xnM=) 2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: aBMu9G2pUD6O2IPIMcDI/GAMJ6VzUvCjlnn21Cf41Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: Nov 22 18:32:37 2024 GMT Not After : Nov 29 18:32:37 2024 GMT Subject: CN=6740ce46-ed5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:b9:e6:82:da:7b:dc:70:02:65:64:0f:b5: bf:71:8d:77:bc:0e:41:d3:9d:87:cb:6b:13:fc:cf: 84:95:0d:25:9b:97:d5:be:92:28:2d:a4:7b:c1:7f: 8f:fe:8f:44:b3:06:fb:cf:f6:9f:99:3d:70:fc:c3: b8:cf:a6:42:80:53:17:2a:c0:84:5b:66:6a:fd:8c: f4:fa:c6:e3:d0:33:55:7b:0f:70:1e:ad:41:59:87: 8d:48:08:73:60:ac:a2:f7:22:56:0d:1c:74:c5:b8: 06:5b:6b:04:50:34:06:e4:88:15:51:71:80:30:ec: 49:69:b5:27:98:36:ae:54:d9:4e:3e:72:e4:5d:94: f3:e1:d2:86:28:11:5c:37:38:a6:eb:87:dd:3c:8f: 8e:51:d5:d7:07:12:38:48:dc:0f:e8:b1:e6:6a:33: 42:6d:de:1f:04:d8:55:80:16:96:9c:8f:bd:01:ff: 46:90:72:42:12:b0:00:aa:4c:f1:a9:fd:e4:9a:55: a8:ee:a9:d5:47:26:68:57:ea:f7:74:fd:3c:3d:09: b3:5e:f3:0c:f6:83:b1:17:ca:57:94:4b:b1:37:38: 11:9e:1a:f7:01:7e:fb:d2:27:8e:de:a0:23:77:1f: 02:b6:8c:64:6e:9d:5e:22:f6:2b:ed:5e:c0:a4:15: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DE:41:6B:4C:E6:39:94:C7:F2:EA:03:FA:D1:56:3A:CA:54:B8:D8 X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:df:32:73:ba:7f:22:e2:bf:d2:f7:39:43:4d:bf:9a:38:0f: 24:d8:3a:60:6c:7b:06:2c:50:46:c5:32:57:2f:ab:57:21:1e: b9:00:af:27:a7:eb:18:1b:31:42:57:e5:40:3b:03:03:fe:e7: c6:bc:73:10:31:7f:21:76:b6:7a:49:fb:5b:9b:53:1f:3b:d4: 15:52:25:67:37:b3:d4:c5:9f:86:51:9c:b8:60:19:c5:f2:d3: 90:94:c6:4c:87:76:a6:ac:1a:65:26:5f:d4:b3:ef:e3:83:37: 5a:fb:51:bc:b9:af:5e:a7:9a:ae:ab:13:c4:63:b8:26:c9:c6: f3:b3:d7:7b:3e:74:1a:0a:60:28:a9:7b:42:e9:f9:cc:06:6c: 80:fc:d7:bf:21:28:da:d0:6d:84:41:21:7d:16:bf:bc:1f:a6: e7:23:99:48:d5:50:cd:33:67:79:a5:1c:10:31:65:28:67:63: 40:73:9d:0a:7e:14:7d:ac:94:0e:c9:00:f8:c2:d4:ac:43:dc: 16:27:30:c6:65:71:43:2a:51:fe:30:04:c5:ec:3c:12:a4:e8: 8e:4e:95:df:67:86:40:43:a2:ef:77:a0:2e:e2:62:a0:6c:9b: 9a:dc:9d:f3:17:42:4c:1b:20:c6:84:7c:84:19:d7:6a:05:b3: 92:f1:26:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjQxMTIyMTgzMjM3WhcNMjQxMTI5MTgzMjM3WjAYMRYwFAYD VQQDEw02NzQwY2U0Ni1lZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuK55oLae9xwAmVkD7W/cY13vA5B052Hy2sT/M+ElQ0lm5fVvpIoLaR7wX+P /o9Eswb7z/afmT1w/MO4z6ZCgFMXKsCEW2Zq/Yz0+sbj0DNVew9wHq1BWYeNSAhz YKyi9yJWDRx0xbgGW2sEUDQG5IgVUXGAMOxJabUnmDauVNlOPnLkXZTz4dKGKBFc Nzim64fdPI+OUdXXBxI4SNwP6LHmajNCbd4fBNhVgBaWnI+9Af9GkHJCErAAqkzx qf3kmlWo7qnVRyZoV+r3dP08PQmzXvMM9oOxF8pXlEuxNzgRnhr3AX770ieO3qAj dx8Ctoxkbp1eIvYr7V7ApBXx5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLeQWtM 5jmUx/LqA/rRVjrKVLjYMB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTZFOC83QkNBRkYwMjA5MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlk V1pHU2pWbWsyMlZCR3BhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN3zJzun8i4r/S9zlDTb+aOA8k2DpgbHsGLFBGxTJXL6tXIR65AK8n p+sYGzFCV+VAOwMD/ufGvHMQMX8hdrZ6Sftbm1MfO9QVUiVnN7PUxZ+GUZy4YBnF 8tOQlMZMh3amrBplJl/Us+/jgzda+1G8ua9ep5quqxPEY7gmycbzs9d7PnQaCmAo qXtC6fnMBmyA/Ne/ISja0G2EQSF9Fr+8H6bnI5lI1VDNM2d5pRwQMWUoZ2NAc50K fhR9rJQOyQD4wtSsQ9wWJzDGZXFDKlH+MATF7DwSpOiOTpXfZ4ZAQ6Lvd6Au4mKg bJua3J3zF0JMGyDGhHyEGddqBbOS8SYn -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org