$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: bW4HJQl/mbZQNVj+zR3RHAjFvplQT38GyrfP0amf7zo= Subject key identifier: CD:B1:53:D6:BE:0A:31:3F:49:BE:18:01:36:A9:75:B5:10:7F:A3:20 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 0111 Signing time: Sat 23 Nov 2024 03:04:16 +0000 Manifest this update: Sat 23 Nov 2024 03:04:15 +0000 Manifest next update: Sat 30 Nov 2024 03:04:15 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: 3yEilTEUqDGwwvV2efywRodOMLzCgCssSASZA/x4Ruc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Nov 23 03:04:15 2024 GMT Not After : Nov 30 03:04:15 2024 GMT Subject: CN=6741462f-1013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:d4:ea:c0:ef:50:cd:d8:27:e2:e5:f2:ed: 47:3a:13:1a:fc:e8:0a:b0:b8:fc:43:a7:a4:3c:f7: 8c:02:4b:da:9c:74:25:dc:c4:55:71:8d:21:d6:6a: 01:d1:d3:96:2f:4c:64:c1:5c:4d:c2:37:97:6b:bb: 0f:33:59:8f:dd:36:f8:67:82:07:2e:62:11:42:0d: 1f:e5:13:76:e4:b8:16:2d:d0:60:9a:7b:2a:4e:20: 84:20:9b:df:65:d4:be:77:48:22:c9:79:b3:5a:db: db:61:15:a0:e8:b4:8f:48:ae:63:41:c7:fa:7a:cf: f0:ea:61:64:ef:d2:a9:15:95:75:e1:74:0a:3f:33: 48:e1:ad:d5:eb:79:b8:a6:fa:1e:65:34:45:52:f9: 3a:b9:70:65:75:33:60:e6:fe:af:62:40:40:37:9b: 9f:aa:12:70:64:4b:66:52:b7:d2:4b:5a:fc:c6:21: 10:54:ad:e8:bf:f9:a0:4c:4b:79:e8:87:44:c8:d8: 4e:2c:d6:d9:27:c2:ea:09:7b:24:c6:6b:eb:af:6e: 02:69:2b:df:93:65:ab:a8:fa:26:e1:5e:e6:dc:d3: 8e:17:62:fc:22:31:6d:a9:80:2d:69:7e:15:55:3d: e7:c3:c9:cd:ee:8d:85:10:dc:9c:c8:79:96:be:d1: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B1:53:D6:BE:0A:31:3F:49:BE:18:01:36:A9:75:B5:10:7F:A3:20 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3a:f4:19:01:7e:8f:25:0a:88:38:2c:f2:44:ce:32:3f:32: cb:51:5f:75:77:b1:dc:de:87:c3:6e:e8:36:c9:0f:88:56:13: 7a:7c:fa:d3:5f:fd:86:bc:e6:2c:c2:6f:8b:89:9c:e3:d7:db: c2:47:6b:17:d7:19:b4:f3:ae:d2:92:e9:d7:2e:a0:68:4c:b8: 35:8c:8b:d7:7c:59:99:25:5b:25:83:9a:1e:0f:01:49:46:34: c1:2e:54:65:4e:ed:d0:ab:39:86:f8:d4:e2:f4:18:ea:02:27: 90:21:a5:e3:72:6e:98:e5:65:43:b9:c8:b9:19:d9:40:00:c3: 10:05:b3:ee:54:af:66:fc:3b:fe:64:59:38:04:be:48:d1:22: 8b:58:a1:fc:2f:24:d6:2d:fc:ab:ae:dc:25:74:7c:f3:ca:44: 3d:4b:c8:c6:32:af:45:64:76:80:3f:f3:56:52:4a:cc:d8:98: b1:19:be:a5:21:40:06:33:88:ac:b5:42:80:81:d6:4e:5c:f9: 3e:d5:92:d2:8b:6a:dc:58:48:be:8d:a7:70:e8:5d:e1:e3:2e: 65:49:f7:b8:bc:0c:9e:d0:da:b4:3b:3b:27:7f:3d:8a:84:3c: a3:30:66:f0:c3:9b:2a:c5:27:b1:70:ba:a8:bb:2a:21:e0:6e: c5:4c:a3:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjQxMTIzMDMwNDE1WhcNMjQxMTMwMDMwNDE1WjAYMRYwFAYD VQQDEw02NzQxNDYyZi0xMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRHU6sDvUM3YJ+Ll8u1HOhMa/OgKsLj8Q6ekPPeMAkvanHQl3MRVcY0h1moB 0dOWL0xkwVxNwjeXa7sPM1mP3Tb4Z4IHLmIRQg0f5RN25LgWLdBgmnsqTiCEIJvf ZdS+d0giyXmzWtvbYRWg6LSPSK5jQcf6es/w6mFk79KpFZV14XQKPzNI4a3V63m4 pvoeZTRFUvk6uXBldTNg5v6vYkBAN5ufqhJwZEtmUrfSS1r8xiEQVK3ov/mgTEt5 6IdEyNhOLNbZJ8LqCXskxmvrr24CaSvfk2WrqPom4V7m3NOOF2L8IjFtqYAtaX4V VT3nw8nN7o2FENycyHmWvtF3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2xU9a+ CjE/Sb4YATapdbUQf6MgMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/OvQZAX6PJQqIOCzyRM4yPzLLUV91d7Hc3ofDbug2yQ+IVhN6fPrT X/2GvOYswm+LiZzj19vCR2sX1xm0867SkunXLqBoTLg1jIvXfFmZJVslg5oeDwFJ RjTBLlRlTu3QqzmG+NTi9BjqAieQIaXjcm6Y5WVDuci5GdlAAMMQBbPuVK9m/Dv+ ZFk4BL5I0SKLWKH8LyTWLfyrrtwldHzzykQ9S8jGMq9FZHaAP/NWUkrM2JixGb6l IUAGM4istUKAgdZOXPk+1ZLSi2rcWEi+jadw6F3h4y5lSfe4vAye0Nq0Ozsnfz2K hDyjMGbww5sqxSexcLqouyoh4G7FTKPi -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org