$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json) Hash identifier: 9ZUdgh8djTOYs3TUldl2wctRjoblcrgj8mZ/1l5qVLo= Subject key identifier: 18:F5:21:C9:3A:5A:A8:9B:1D:BE:31:39:FC:15:CC:7E:38:45:72:35 Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft Manifest number: 048F Signing time: Fri 22 Nov 2024 23:34:52 +0000 Manifest this update: Fri 22 Nov 2024 23:34:51 +0000 Manifest next update: Fri 29 Nov 2024 23:34:51 +0000 Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: KJTI1Ry33dwDeSHPvVolcIoNovWSyXIbxc/y7J9VS0g=) 2: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: Ttn15R/2S0g9Iwpzx7uYzM1uyUX8bVHv0/bnifX+j4M=) 3: 5BADDAF216D911EC9ACD9223C4F9AE02.roa (hash: CjV+BRwzzXLQUXy+rMWWs67nLL9n86TEOpi9l3k8Kdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: Nov 22 23:34:51 2024 GMT Not After : Nov 29 23:34:51 2024 GMT Subject: CN=6741151b-a69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:eb:ad:1a:45:1c:d8:ec:c7:9d:4d:f5:9e: 67:6d:62:8c:bc:97:83:41:93:d6:56:9c:92:c0:bc: 5e:97:0f:9a:e7:20:1e:20:70:43:45:fa:9e:b3:65: 05:90:a8:a2:df:4a:44:46:7e:ce:79:58:6d:39:d6: 76:7c:15:bf:82:92:15:30:d5:10:4f:36:2b:89:9e: c2:42:86:19:7c:46:0d:4e:32:8f:c8:9e:db:c6:c5: c4:84:ba:5d:63:cf:f1:36:95:16:69:18:b4:ed:50: 8a:cb:83:c3:a0:c2:fa:de:11:20:72:c9:e6:ff:01: 4b:c8:07:74:ad:6c:9c:e4:a9:ca:c6:6a:ad:6f:b2: f3:9b:b8:bc:18:95:2f:d9:6b:93:90:f9:90:37:b6: 47:f8:ea:72:4d:ee:71:e7:f0:b9:67:9d:4a:c6:94: 38:64:a5:78:ef:d3:27:70:bb:09:c1:f5:d2:c3:3c: 5b:f6:de:50:22:55:cd:b9:a3:82:1a:10:db:06:99: 07:d2:69:49:3f:56:db:84:ed:d8:41:b0:a8:4c:54: e4:45:24:9f:0c:23:bf:7b:4d:85:9c:63:f2:70:f1: 07:d9:52:29:52:1d:9f:4b:c2:00:29:d7:85:a9:aa: 66:34:63:8f:58:f8:ee:6a:85:f5:86:1a:87:61:8b: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F5:21:C9:3A:5A:A8:9B:1D:BE:31:39:FC:15:CC:7E:38:45:72:35 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7d:cd:c9:70:b1:e4:99:34:0e:72:f1:11:c7:f6:a7:f2:59: b6:65:86:79:8f:64:b3:d7:82:7a:eb:2b:e5:d5:26:19:22:35: c8:72:59:bf:50:6d:2c:df:fd:e8:12:67:e3:7c:ee:6f:03:de: 42:96:83:d3:41:0e:55:05:13:1a:e7:3e:45:a1:f9:16:ab:e7: 47:12:fd:2c:98:26:d2:7f:48:fa:43:59:28:02:81:a9:25:93: b0:0c:53:07:7f:7f:65:9b:c9:ee:21:f6:d6:54:fe:23:88:96: e1:86:4a:cb:1f:1b:52:06:3e:7c:07:56:b8:9f:f0:c6:fe:75: cf:ff:ab:72:dd:0e:cb:2a:62:07:29:de:21:21:f0:f0:10:a5: fd:37:13:46:fa:65:41:ca:95:3d:28:38:63:de:58:12:c5:54: 7f:07:07:a7:12:a9:99:ad:0f:36:3d:7e:55:67:1e:75:ba:04: c2:5f:65:3e:58:af:1b:f5:2f:69:fc:5c:5f:e8:be:51:31:2a: ed:e4:6e:51:b1:09:2f:e9:78:ca:90:c0:e1:1b:ec:ad:7c:32: 62:88:d2:68:15:c2:93:5e:46:10:90:78:8c:f2:b2:bd:75:be: ef:35:29:59:69:9d:6b:d7:00:9a:6f:64:f0:fb:fe:17:b7:7d: 3a:58:15:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjQxMTIyMjMzNDUxWhcNMjQxMTI5MjMzNDUxWjAYMRYwFAYD VQQDEw02NzQxMTUxYi1hNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WXrrRpFHNjsx51N9Z5nbWKMvJeDQZPWVpySwLxelw+a5yAeIHBDRfqes2UF kKii30pERn7OeVhtOdZ2fBW/gpIVMNUQTzYriZ7CQoYZfEYNTjKPyJ7bxsXEhLpd Y8/xNpUWaRi07VCKy4PDoML63hEgcsnm/wFLyAd0rWyc5KnKxmqtb7Lzm7i8GJUv 2WuTkPmQN7ZH+OpyTe5x5/C5Z51KxpQ4ZKV479MncLsJwfXSwzxb9t5QIlXNuaOC GhDbBpkH0mlJP1bbhO3YQbCoTFTkRSSfDCO/e02FnGPycPEH2VIpUh2fS8IAKdeF qapmNGOPWPjuaoX1hhqHYYsrRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj1Ick6 WqibHb4xOfwVzH44RXI1MB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81 T3lQSjN4VFpZWDJrRExKbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmfc3JcLHkmTQOcvERx/an8lm2ZYZ5j2Sz14J66yvl1SYZIjXIclm/ UG0s3/3oEmfjfO5vA95CloPTQQ5VBRMa5z5FofkWq+dHEv0smCbSf0j6Q1koAoGp JZOwDFMHf39lm8nuIfbWVP4jiJbhhkrLHxtSBj58B1a4n/DG/nXP/6ty3Q7LKmIH Kd4hIfDwEKX9NxNG+mVBypU9KDhj3lgSxVR/BwenEqmZrQ82PX5VZx51ugTCX2U+ WK8b9S9p/Fxf6L5RMSrt5G5RsQkv6XjKkMDhG+ytfDJiiNJoFcKTXkYQkHiM8rK9 db7vNSlZaZ1r1wCab2Tw+/4Xt306WBX/ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org