$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: hGZKxJXJzypJMNwCitw6GTnFVOxfxct9a5G9ceCha2s= Subject key identifier: 6A:43:C1:5D:85:8C:3E:DA:AD:61:9A:F3:0F:29:62:99:F3:73:E0:A0 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 052C Signing time: Fri 22 Nov 2024 23:09:55 +0000 Manifest this update: Fri 22 Nov 2024 23:09:54 +0000 Manifest next update: Fri 29 Nov 2024 23:09:54 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: U1gyF+iyRHdzvBeYap2dzXYrNTxqLSqe+6qtDWN4pA8=) 2: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 2aWXQNNMXtNMfUOin6lgFHg66dnKR9UhJDXK2a/H1WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Nov 22 23:09:54 2024 GMT Not After : Nov 29 23:09:54 2024 GMT Subject: CN=67410f42-8fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:61:18:1b:68:ee:95:b1:78:cd:fe:ea:09:c2: b7:e4:80:5b:ea:de:ae:11:2b:c5:d4:a9:66:8f:5a: 0d:96:cd:33:73:c0:35:41:ed:6e:c7:95:f5:94:ca: ef:3f:b3:c2:fe:be:d7:71:39:23:6a:98:7a:ff:5e: 60:4c:80:ea:f2:d1:2f:97:2e:27:6f:8d:53:c4:33: d3:bc:36:23:10:61:c8:0a:23:22:a6:fd:1e:82:0a: 05:dc:a4:6a:cd:b0:d2:d4:19:d7:1e:03:46:48:bd: f1:33:0d:a2:a9:16:f2:4c:6f:c6:7f:be:2e:c0:34: f0:ba:00:76:d9:a8:58:79:c8:c1:b0:b9:aa:d6:37: e9:6f:25:d9:93:59:0a:fc:b4:d1:30:87:ed:e7:82: 45:a8:34:0e:c5:9d:96:a3:43:c2:b7:9c:c6:9e:50: a1:bc:a8:0c:8a:56:d6:62:63:d5:77:e0:ae:50:50: 67:b3:9b:70:51:c8:e2:39:c7:f7:2f:80:6c:2a:38: 70:a3:b2:dd:58:fc:2a:b7:10:d3:cc:5a:64:4f:69: ce:20:71:93:0d:85:bd:74:1e:45:e3:58:8c:c8:9a: 64:f6:f4:e3:20:e6:22:93:26:38:64:53:56:a8:4f: fe:ce:a6:5a:f8:42:45:de:84:7e:b1:48:04:ca:c6: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:43:C1:5D:85:8C:3E:DA:AD:61:9A:F3:0F:29:62:99:F3:73:E0:A0 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d4:ee:f8:11:76:4d:56:bf:34:7b:22:27:e9:e0:1a:5f:ad: 2b:ba:cc:9d:88:15:9b:48:b0:31:f5:a6:c5:e8:f0:ec:a3:c4: b2:9b:8a:f5:ad:da:b8:16:b5:9b:44:bf:ca:22:59:df:29:9b: ea:33:16:7a:bd:75:e2:62:ed:49:b0:3c:f8:fe:11:d6:70:67: 2a:74:0e:b9:2c:b7:07:49:ed:42:fd:cc:25:90:1e:4b:46:68: fa:e3:61:7d:6f:c3:9a:ff:e7:f8:39:e5:c5:1a:d5:5d:ab:20: ae:d0:19:89:eb:17:98:a1:20:db:1c:05:02:eb:a0:ae:66:7c: 00:40:82:eb:6a:41:6c:64:0d:df:19:c6:ae:d7:4d:09:ab:74: f5:79:31:95:b4:11:9d:a9:a3:8d:03:90:fd:9e:a4:6d:12:4b: f2:3d:14:aa:7b:e8:8c:33:47:c1:c5:a6:2e:80:5b:42:75:93: df:5e:37:2f:0c:2e:8a:e3:d7:61:43:a6:6e:32:b3:0a:b8:f3: c3:78:87:d3:cb:42:db:28:be:49:d7:d8:4a:46:48:62:7f:ac: 6b:f7:97:55:5b:d5:e2:b6:09:ad:0d:13:4d:18:31:70:ed:8a: 58:f4:de:e5:c2:35:2a:69:25:77:0f:b1:9f:ab:df:0e:87:70: a7:c9:53:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjQxMTIyMjMwOTU0WhcNMjQxMTI5MjMwOTU0WjAYMRYwFAYD VQQDEw02NzQxMGY0Mi04ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WEYG2julbF4zf7qCcK35IBb6t6uESvF1Klmj1oNls0zc8A1Qe1ux5X1lMrv P7PC/r7XcTkjaph6/15gTIDq8tEvly4nb41TxDPTvDYjEGHICiMipv0eggoF3KRq zbDS1BnXHgNGSL3xMw2iqRbyTG/Gf74uwDTwugB22ahYecjBsLmq1jfpbyXZk1kK /LTRMIft54JFqDQOxZ2Wo0PCt5zGnlChvKgMilbWYmPVd+CuUFBns5twUcjiOcf3 L4BsKjhwo7LdWPwqtxDTzFpkT2nOIHGTDYW9dB5F41iMyJpk9vTjIOYikyY4ZFNW qE/+zqZa+EJF3oR+sUgEysb4wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpDwV2F jD7arWGa8w8pYpnzc+CgMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT1O74EXZNVr80eyIn6eAaX60rusydiBWbSLAx9abF6PDso8Sym4r1 rdq4FrWbRL/KIlnfKZvqMxZ6vXXiYu1JsDz4/hHWcGcqdA65LLcHSe1C/cwlkB5L Rmj642F9b8Oa/+f4OeXFGtVdqyCu0BmJ6xeYoSDbHAUC66CuZnwAQILrakFsZA3f Gcau100Jq3T1eTGVtBGdqaONA5D9nqRtEkvyPRSqe+iMM0fBxaYugFtCdZPfXjcv DC6K49dhQ6ZuMrMKuPPDeIfTy0LbKL5J19hKRkhif6xr95dVW9XitgmtDRNNGDFw 7YpY9N7lwjUqaSV3D7Gfq98Oh3CnyVOs -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org