$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: sT1T628vezJbuaLQ+KWFVVOa9UtDRpYoApi6k4yxbPs= Subject key identifier: 19:DD:13:7E:58:A3:64:9B:35:21:42:83:61:F7:75:87:28:F8:C6:F1 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: E9 Signing time: Sat 23 Nov 2024 03:29:40 +0000 Manifest this update: Sat 23 Nov 2024 03:29:39 +0000 Manifest next update: Sat 30 Nov 2024 03:29:39 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: hwqR/eaCg7BDB46fH7UHyEi33KIc2PNT84nRFoNp0y0=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Nov 23 03:29:39 2024 GMT Not After : Nov 30 03:29:39 2024 GMT Subject: CN=67414c23-ca67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:5b:0c:53:eb:d6:f2:c4:71:41:13:b2:85: 3a:47:c3:09:c5:8b:55:57:85:d6:1e:db:c8:f6:9a: 72:25:f6:e2:c2:55:76:ca:41:da:32:4d:9f:35:d9: 59:10:c9:93:77:12:c7:8e:6e:f8:78:2a:1f:f0:3d: 22:8b:ff:ca:7c:3f:3d:b5:34:3b:2d:ae:cf:66:ad: ce:5c:a2:f4:82:ab:b6:fc:ab:46:54:6c:0a:7a:06: 7a:82:83:47:8e:87:62:34:ae:75:7c:38:68:cf:85: 81:3e:71:a9:df:b2:52:a9:58:d8:9c:5c:88:65:ad: f3:bb:6c:90:7e:39:bb:d4:6e:7e:ac:a1:9c:49:a2: 9c:17:0f:a4:b0:07:95:fc:84:a9:0a:cf:0e:f2:62: 12:37:1c:4f:55:42:eb:f7:e8:af:36:65:65:16:fa: cf:58:78:4d:35:32:63:2c:7d:ea:d8:88:22:e1:2a: e6:77:48:63:92:b4:c8:a8:0b:c2:6c:78:e8:23:63: 8f:09:cb:0e:45:60:78:91:f1:a6:3c:30:95:b2:43: 1a:0d:11:40:53:99:e6:23:2e:35:4c:f2:48:3f:be: 5d:30:0c:b0:24:54:41:29:6e:94:4f:f0:85:cf:42: ab:94:3a:85:e6:c8:06:66:18:14:55:6c:74:fc:b3: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DD:13:7E:58:A3:64:9B:35:21:42:83:61:F7:75:87:28:F8:C6:F1 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:23:eb:9d:37:f1:d9:64:31:22:78:f9:cc:e0:9d:14:e9:af: a8:cc:e3:3f:40:56:9f:b1:52:b2:81:ec:52:e3:44:6c:06:64: 14:f3:9d:56:f4:9f:83:70:1c:c4:5b:13:a1:c3:b2:77:9f:ab: 63:0e:b9:99:99:cc:06:96:4c:04:91:28:63:7d:2b:5c:a5:4d: 4d:a2:c3:be:58:81:3f:4b:66:d9:24:59:2c:b2:01:30:e3:ad: 83:84:b6:85:a1:f5:10:e4:6e:a7:10:23:85:5b:9c:9c:8f:7f: 76:ea:35:ec:4c:5d:e7:dc:e8:0f:29:fa:c6:df:41:12:f6:b3: 68:15:76:f0:45:a3:9f:2f:b9:c1:05:2f:a8:30:ae:9a:fd:a3: 9b:7f:ce:a3:56:ba:5c:b8:e5:b8:13:bd:66:b6:d1:a4:12:bc: 40:f1:29:58:ae:fb:b0:86:cc:08:f0:43:c5:47:22:1b:ed:60: f1:9f:01:7d:11:95:39:d3:c8:51:c8:ff:e9:ee:89:08:5f:14: bf:c9:3f:cf:ef:10:d3:76:09:9a:b2:3a:b8:84:2d:08:6c:77: 3a:f6:e7:7e:94:ae:9b:6b:f1:02:32:af:4e:c4:af:4f:f1:66: 42:47:70:41:85:62:47:7b:f7:e8:a9:2e:99:45:a6:ae:dc:7e: 05:c7:97:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjQxMTIzMDMyOTM5WhcNMjQxMTMwMDMyOTM5WjAYMRYwFAYD VQQDEw02NzQxNGMyMy1jYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTZbDFPr1vLEcUETsoU6R8MJxYtVV4XWHtvI9ppyJfbiwlV2ykHaMk2fNdlZ EMmTdxLHjm74eCof8D0ii//KfD89tTQ7La7PZq3OXKL0gqu2/KtGVGwKegZ6goNH jodiNK51fDhoz4WBPnGp37JSqVjYnFyIZa3zu2yQfjm71G5+rKGcSaKcFw+ksAeV /ISpCs8O8mISNxxPVULr9+ivNmVlFvrPWHhNNTJjLH3q2Igi4Srmd0hjkrTIqAvC bHjoI2OPCcsORWB4kfGmPDCVskMaDRFAU5nmIy41TPJIP75dMAywJFRBKW6UT/CF z0KrlDqF5sgGZhgUVWx0/LPoVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBndE35Y o2SbNSFCg2H3dYco+MbxMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpI+udN/HZZDEiePnM4J0U6a+ozOM/QFafsVKygexS40RsBmQU851W 9J+DcBzEWxOhw7J3n6tjDrmZmcwGlkwEkShjfStcpU1NosO+WIE/S2bZJFkssgEw 462DhLaFofUQ5G6nECOFW5ycj3926jXsTF3n3OgPKfrG30ES9rNoFXbwRaOfL7nB BS+oMK6a/aObf86jVrpcuOW4E71mttGkErxA8SlYrvuwhswI8EPFRyIb7WDxnwF9 EZU508hRyP/p7okIXxS/yT/P7xDTdgmasjq4hC0IbHc69ud+lK6ba/ECMq9OxK9P 8WZCR3BBhWJHe/foqS6ZRaau3H4Fx5fx -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org