$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: tqMwoC5ZkP4WGq5RRG7t6wkwLugsrcDS4SrvKbA7YK0= Subject key identifier: B5:3A:B2:A3:1D:BD:A4:43:F7:21:28:71:C0:BE:B2:E3:61:B5:57:B3 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 68 Signing time: Sat 23 Nov 2024 04:57:26 +0000 Manifest this update: Sat 23 Nov 2024 04:57:25 +0000 Manifest next update: Sat 30 Nov 2024 04:57:25 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: sy3j5cr14Pj+m2EpdYh9yeot3AG1ZyQcSmszeufZVRQ=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: I+MzgbGQV3Ix84rdhaAbWOK+GMavwSb8VU8kMKlSBXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Nov 23 04:57:25 2024 GMT Not After : Nov 30 04:57:25 2024 GMT Subject: CN=674160b6-9300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:d5:3e:f6:ea:a0:78:bd:8a:aa:19:45:98: 8e:80:58:57:8c:e6:19:b6:32:9b:dd:34:b0:48:75: 0a:bf:5c:bc:cb:b4:c8:ad:13:36:7a:74:9a:cb:68: 6b:7a:36:3b:0c:5a:1f:8f:95:08:d8:b6:9b:6e:26: dd:13:a5:a6:8c:7e:da:b5:97:3d:b7:d5:8b:9f:70: 8d:19:fb:72:1d:75:dd:e0:7c:01:4e:cd:c0:18:6a: 9d:4e:d9:c1:2a:45:1e:b2:f1:75:f5:4c:1f:ee:38: 22:0e:e7:4a:3d:e4:b7:0b:1f:27:13:87:e5:00:6d: b8:6f:ad:79:f9:08:2b:3d:e2:56:3d:52:52:bf:ce: 87:4a:9e:41:d1:fe:7d:31:02:09:21:22:6f:a1:a7: aa:ff:1a:0a:2d:da:3c:49:c3:41:8b:64:f7:7f:d6: 50:d0:38:b5:79:55:24:0e:5e:0e:75:f6:94:17:1d: 9d:3f:a6:be:e3:61:e5:91:96:53:2b:55:4b:56:a2: 10:82:ab:10:b4:66:5f:71:83:c4:0e:a7:d5:4e:56: 83:d9:d6:0c:cb:33:9b:cd:52:7c:b6:46:85:41:8a: b1:dd:da:e5:d3:2a:4a:c2:d1:c4:a8:1b:c6:09:80: e0:cc:7f:11:57:c0:38:14:2e:9a:01:aa:37:ee:9d: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3A:B2:A3:1D:BD:A4:43:F7:21:28:71:C0:BE:B2:E3:61:B5:57:B3 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2e:b0:8e:87:dc:6b:d6:ad:13:82:f0:2b:76:95:83:98:d9: e3:af:a2:c7:5f:ba:2b:d2:6b:2d:d3:be:63:ca:8f:e0:8a:2b: ae:46:1c:2c:93:0b:93:85:69:62:87:b7:35:15:0c:e9:fb:3a: 45:ff:ee:7a:6b:02:85:2d:b3:16:72:8d:97:b4:43:3b:88:a5: c4:b4:3b:80:c1:3d:3a:0f:3d:9e:21:95:1f:b2:91:bb:e9:4c: d4:2f:18:b4:da:71:ca:bd:a6:8d:6a:b4:c1:01:f3:df:ef:5f: 3a:d1:c6:11:69:04:68:cd:a1:9b:03:67:52:bc:aa:f6:39:c9: 98:16:fd:6e:93:f4:1d:cb:d1:0e:a9:6d:c6:a9:e2:a9:12:35: 8a:ce:f2:17:a4:8b:c3:80:25:5a:25:f1:71:16:0b:89:76:96: 3a:9d:dc:31:17:ab:86:67:5e:ec:03:88:b7:0a:24:2c:14:8e: 45:ee:b5:f4:bd:1d:68:5d:aa:1b:83:28:f4:69:b4:2f:7d:b5: b3:9d:f2:21:a8:e3:e3:3e:ca:90:ee:20:dc:2d:f0:73:38:b7: c8:9b:0e:ba:ee:f0:51:f1:2f:fe:29:44:67:b8:0d:7a:70:84: 84:f1:6f:cb:1d:75:63:36:4c:09:1a:24:22:33:1e:1c:b3:ea: ba:db:86:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTFCQzExMC8GA1UEBRMoRDRCMUREM0VCMUEwNkZBMjYyQUI2QzVFQkY0QUY1MzY3 MUFDRDJGNDAeFw0yNDExMjMwNDU3MjVaFw0yNDExMzAwNDU3MjVaMBgxFjAUBgNV BAMTDTY3NDE2MGI2LTkzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7qNU+9uqgeL2KqhlFmI6AWFeM5hm2MpvdNLBIdQq/XLzLtMitEzZ6dJrLaGt6 NjsMWh+PlQjYtptuJt0TpaaMftq1lz231YufcI0Z+3Iddd3gfAFOzcAYap1O2cEq RR6y8XX1TB/uOCIO50o95LcLHycTh+UAbbhvrXn5CCs94lY9UlK/zodKnkHR/n0x AgkhIm+hp6r/Ggot2jxJw0GLZPd/1lDQOLV5VSQOXg519pQXHZ0/pr7jYeWRllMr VUtWohCCqxC0Zl9xg8QOp9VOVoPZ1gzLM5vNUny2RoVBirHd2uXTKkrC0cSoG8YJ gODMfxFXwDgULpoBqjfunUplAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtTqyox29 pEP3IShxwL6y42G1V7MwHwYDVR0jBBgwFoAU1LHdPrGgb6Jiq2xev0r1NnGs0vQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMUJDLzA1RUVBQkZDMEZB NDExRUZBM0FBOEQzM0M0RjlBRTAyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUxIZFByR2diNkppcTJ4ZXYwcjFObkdzMHZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MUJDLzA1RUVBQkZDMEZBNDExRUZBM0FBOEQzM0M0RjlBRTAyLzFMSGRQckdnYjZK aXEyeGV2MHIxTm5HczB2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0usI6H3GvWrROC8Ct2lYOY2eOvosdfuivSay3TvmPKj+CKK65GHCyT C5OFaWKHtzUVDOn7OkX/7nprAoUtsxZyjZe0QzuIpcS0O4DBPToPPZ4hlR+ykbvp TNQvGLTaccq9po1qtMEB89/vXzrRxhFpBGjNoZsDZ1K8qvY5yZgW/W6T9B3L0Q6p bcap4qkSNYrO8heki8OAJVol8XEWC4l2ljqd3DEXq4ZnXuwDiLcKJCwUjkXutfS9 HWhdqhuDKPRptC99tbOd8iGo4+M+ypDuINwt8HM4t8ibDrru8FHxL/4pRGe4DXpw hITxb8sddWM2TAkaJCIzHhyz6rrbhkM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org