$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: p/aIJpItnLiy7s8nH6d1LSlvjlwLoRaFJVGj7tCH0e8= Subject key identifier: 57:A4:D3:3B:6F:BE:3E:62:12:92:41:5F:4F:EA:29:42:10:B6:90:75 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 1D Signing time: Thu 21 Nov 2024 06:02:10 +0000 Manifest this update: Thu 21 Nov 2024 06:02:10 +0000 Manifest next update: Thu 28 Nov 2024 06:02:10 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: oLRUX38vfzNWGMVpwKI5PuiynJ4GTvglMW/xoZT4sZA=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: JVFgNDefGhhZNaP/+45vnp4r1QlTjKCGH5rrYa2eB70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Nov 21 06:02:10 2024 GMT Not After : Nov 28 06:02:10 2024 GMT Subject: CN=673ecce2-7651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f7:c9:2d:b8:e4:9c:1a:c8:05:6f:d8:04:5e: 2e:be:34:5f:87:f6:37:53:06:c0:d3:79:f7:fb:8a: 28:55:0e:6d:57:7a:4e:74:df:59:d4:c2:60:01:84: 8b:ce:6b:bf:63:72:cc:27:a9:8a:3e:bb:33:5c:e6: 92:5b:75:f6:e4:f8:85:e2:30:a5:b4:32:b7:e5:93: c3:20:42:9e:cd:0a:c3:8b:5f:46:5b:e1:c6:2a:0d: a7:a6:c3:bd:01:1f:36:e1:c8:f8:40:8b:4e:e5:79: 6b:e8:6f:5b:c5:80:7a:fe:3e:f7:a1:23:b9:3b:b7: 92:5f:f1:6c:fb:e8:05:12:8c:fa:ca:53:38:02:5b: 05:4a:97:5c:ac:96:fc:e6:4d:f6:8f:b1:ed:72:2d: bd:97:d2:9b:8d:bd:27:a1:6b:c4:6f:7f:89:65:eb: c0:69:9d:cf:a7:ac:e5:66:d7:2f:02:03:5c:bd:37: 03:95:ed:df:d5:66:cf:60:ff:7c:c7:b0:84:5d:7d: 49:0e:d7:c0:6d:08:61:f2:39:15:52:8c:74:60:e8: 01:b7:ee:77:c2:dc:fa:3a:91:67:b9:ac:2c:39:d3: 82:f7:c0:03:bf:22:e7:1a:39:62:36:51:0b:dc:07: c8:c8:56:50:39:62:37:63:b1:65:50:43:7b:9e:b4: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A4:D3:3B:6F:BE:3E:62:12:92:41:5F:4F:EA:29:42:10:B6:90:75 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:43:db:53:e6:0e:6c:57:53:f0:2c:c9:72:37:3c:3f:f7:1d: f7:4a:87:72:7c:1b:ed:ef:7e:6c:eb:dc:c9:2f:5f:8b:42:64: 0a:14:8b:bf:00:39:7f:97:39:cc:23:3a:70:36:bd:4a:c2:16: 3d:c3:d4:79:51:ce:ff:2b:e7:9d:aa:29:ea:8e:af:c8:83:db: 24:97:8f:85:bc:bd:75:45:51:9c:76:4f:34:47:27:e0:d0:d1: fa:ad:75:ad:05:5c:58:31:ed:ea:8b:71:a2:fb:ba:ce:3d:e7: 6a:bb:cf:fd:89:fa:48:a9:18:ab:ff:8f:fb:e6:64:94:a9:76: 5c:7a:02:0e:0e:4a:be:bc:25:7b:f9:57:3f:ab:92:c1:f6:22: 37:4d:79:31:03:2c:1d:7f:eb:33:41:ff:9b:d1:19:19:b2:0a: a4:41:93:bc:51:eb:00:6c:1c:71:68:e6:59:bd:c2:bd:e0:36: 56:14:24:be:3b:05:ce:72:67:3b:cc:11:fc:22:4c:a0:e2:f0: 98:ac:aa:e3:1c:d2:78:fa:d0:c8:18:b6:1a:cd:82:b2:f3:50: 8a:a3:87:04:41:d6:97:6b:d4:25:33:6e:15:d2:34:ed:e4:60: ee:35:b5:99:67:db:f5:06:70:d7:d5:a9:3c:c3:41:b8:4e:85: 08:94:03:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQ4MTExMC8GA1UEBRMoMkRFOEYyMTZEQ0QyQkVDNkQzOEZFQkYwMUUwNkQ4QTk5 MDI3MEVCRjAeFw0yNDExMjEwNjAyMTBaFw0yNDExMjgwNjAyMTBaMBgxFjAUBgNV BAMTDTY3M2VjY2UyLTc2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD198ktuOScGsgFb9gEXi6+NF+H9jdTBsDTeff7iihVDm1Xek5031nUwmABhIvO a79jcswnqYo+uzNc5pJbdfbk+IXiMKW0Mrflk8MgQp7NCsOLX0Zb4cYqDaemw70B HzbhyPhAi07leWvob1vFgHr+PvehI7k7t5Jf8Wz76AUSjPrKUzgCWwVKl1yslvzm TfaPse1yLb2X0puNvSeha8Rvf4ll68Bpnc+nrOVm1y8CA1y9NwOV7d/VZs9g/3zH sIRdfUkO18BtCGHyORVSjHRg6AG37nfC3Po6kWe5rCw504L3wAO/IucaOWI2UQvc B8jIVlA5YjdjsWVQQ3uetGE/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV6TTO2++ PmISkkFfT+opQhC2kHUwHwYDVR0jBBgwFoAULejyFtzSvsbTj+vwHgbYqZAnDr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDgxLzg3RDM1MjBBODlF MTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGVqeUZ0elN2c2JUai12d0hnYllxWkFuRHI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDgxLzg3RDM1MjBBODlFMTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNi VGotdndIZ2JZcVpBbkRyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1D21PmDmxXU/AsyXI3PD/3HfdKh3J8G+3vfmzr3MkvX4tCZAoUi78A OX+XOcwjOnA2vUrCFj3D1HlRzv8r552qKeqOr8iD2ySXj4W8vXVFUZx2TzRHJ+DQ 0fqtda0FXFgx7eqLcaL7us4952q7z/2J+kipGKv/j/vmZJSpdlx6Ag4OSr68JXv5 Vz+rksH2IjdNeTEDLB1/6zNB/5vRGRmyCqRBk7xR6wBsHHFo5lm9wr3gNlYUJL47 Bc5yZzvMEfwiTKDi8JisquMc0nj60MgYthrNgrLzUIqjhwRB1pdr1CUzbhXSNO3k YO41tZln2/UGcNfVqTzDQbhOhQiUA4s= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org