$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: 5xc2PK3wC8/rXTESEN0oT+ojU1V9fHS+zRII/ts5MMg= Subject key identifier: 15:07:BD:F2:61:B1:D9:58:81:F1:49:08:04:B6:0B:20:E3:6D:DB:3B Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 04B8 Signing time: Fri 22 Nov 2024 23:28:28 +0000 Manifest this update: Fri 22 Nov 2024 23:28:27 +0000 Manifest next update: Fri 29 Nov 2024 23:28:27 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: M66HjYDD9s8d0mqeTmxti2OW4sIh36TDJANUuyN06JM=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Nov 22 23:28:27 2024 GMT Not After : Nov 29 23:28:27 2024 GMT Subject: CN=6741139b-1c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:24:a8:7a:09:bb:5a:f5:98:ef:b2:ee:9f: 50:38:45:04:4f:be:fd:51:88:ae:8b:01:25:13:c7: dd:9a:cd:dd:c2:1f:bc:40:0b:8f:97:d6:80:66:73: 6e:e0:0a:c9:96:53:04:ba:d1:11:8b:19:7e:52:dd: 84:84:37:fc:e8:84:cf:32:bc:4e:06:c2:d6:0d:1c: b9:2e:c0:05:14:13:c1:8d:ae:59:04:fb:25:04:7d: de:dc:b6:d7:c6:92:e8:64:a9:02:66:0c:8f:db:3c: a4:01:82:a2:6a:bd:45:d2:98:16:80:44:22:f2:5a: ae:cf:df:9d:9e:1e:28:74:19:77:55:22:ae:cf:14: cb:8c:45:b8:a9:70:15:a3:4e:07:71:a3:16:f5:7f: 52:9b:db:62:51:bd:6d:80:0e:1b:12:84:d8:f1:c2: d7:7c:03:b6:9d:79:8d:74:95:c1:44:52:7e:57:0e: 42:6a:85:5e:88:94:a7:53:0a:a8:82:57:06:8f:5e: 56:dd:a1:44:62:00:4f:e7:a2:92:59:2a:25:5b:b1: 1a:42:92:c2:0b:3c:d2:6c:06:5e:06:d7:c8:7f:90: 47:75:68:38:ef:e0:61:89:c4:d1:9b:75:a5:27:ad: ba:fc:82:0c:cb:3e:93:b2:29:6c:63:94:99:fb:d1: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:07:BD:F2:61:B1:D9:58:81:F1:49:08:04:B6:0B:20:E3:6D:DB:3B X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e8:d4:bb:6a:36:0a:44:6d:99:46:47:98:fb:57:36:aa:59: 59:e3:53:4c:14:b6:ba:42:76:9d:0b:78:80:20:ff:a0:e5:ed: f8:e7:72:5a:22:02:70:fa:66:cf:52:e6:6c:64:f8:db:ec:a4: ef:86:fb:c4:0c:3a:e1:2f:ee:eb:0b:a6:39:9f:4c:2a:8b:38: 3e:91:5d:22:20:20:df:85:88:2f:a2:44:51:cd:1a:14:bb:32: 4e:6f:78:23:88:aa:e4:5b:6b:d4:b5:68:01:e5:bb:27:60:5a: dd:3d:9c:4f:d0:50:10:d5:19:a9:27:32:eb:5e:18:51:9c:ad: c2:29:7f:c3:ed:eb:be:fa:5a:32:92:d2:ad:51:35:cb:2c:24: 4d:53:e8:ad:70:f6:8d:49:34:ab:0a:74:bc:c8:47:a9:ce:94: 4f:40:b2:20:2d:02:77:1e:63:a1:82:1d:93:7f:72:e7:9d:a2: 76:fe:6f:0e:a5:3b:16:23:ec:24:b8:5f:88:90:09:80:9f:7d: 50:6f:2d:d9:ab:63:76:0a:cc:6d:5f:19:6a:2c:5b:d1:de:4c: aa:cd:5c:e5:d5:16:38:6b:51:72:fd:23:52:3f:29:a6:d9:c7: b1:20:0e:da:35:8d:3f:a2:b9:3f:47:5f:d8:24:98:52:e5:b8: fb:f5:a9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjQxMTIyMjMyODI3WhcNMjQxMTI5MjMyODI3WjAYMRYwFAYD VQQDEw02NzQxMTM5Yi0xYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlgkqHoJu1r1mO+y7p9QOEUET779UYiuiwElE8fdms3dwh+8QAuPl9aAZnNu 4ArJllMEutERixl+Ut2EhDf86ITPMrxOBsLWDRy5LsAFFBPBja5ZBPslBH3e3LbX xpLoZKkCZgyP2zykAYKiar1F0pgWgEQi8lquz9+dnh4odBl3VSKuzxTLjEW4qXAV o04HcaMW9X9Sm9tiUb1tgA4bEoTY8cLXfAO2nXmNdJXBRFJ+Vw5CaoVeiJSnUwqo glcGj15W3aFEYgBP56KSWSolW7EaQpLCCzzSbAZeBtfIf5BHdWg47+BhicTRm3Wl J626/IIMyz6TsilsY5SZ+9GYSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUHvfJh sdlYgfFJCAS2CyDjbds7MB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB6NS7ajYKRG2ZRkeY+1c2qllZ41NMFLa6QnadC3iAIP+g5e3453Ja IgJw+mbPUuZsZPjb7KTvhvvEDDrhL+7rC6Y5n0wqizg+kV0iICDfhYgvokRRzRoU uzJOb3gjiKrkW2vUtWgB5bsnYFrdPZxP0FAQ1RmpJzLrXhhRnK3CKX/D7eu++loy ktKtUTXLLCRNU+itcPaNSTSrCnS8yEepzpRPQLIgLQJ3HmOhgh2Tf3LnnaJ2/m8O pTsWI+wkuF+IkAmAn31Qby3Zq2N2CsxtXxlqLFvR3kyqzVzl1RY4a1Fy/SNSPymm 2cexIA7aNY0/ork/R1/YJJhS5bj79anK -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org