$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: OGutGgXOEouTXF2jZ9P3x1YFBMvgi4IqvKZjE76lFyE= Subject key identifier: E4:E5:DF:A0:94:2B:D6:DE:95:E9:46:9A:E0:65:9C:14:61:32:A8:9D Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 01D4 Signing time: Sat 23 Nov 2024 01:44:00 +0000 Manifest this update: Sat 23 Nov 2024 01:44:00 +0000 Manifest next update: Sat 30 Nov 2024 01:44:00 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: bDzDAhM4bk9GvlU+0vqxoaKMRbqUhDiNX5Uj7kzOtrg=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Nov 23 01:44:00 2024 GMT Not After : Nov 30 01:44:00 2024 GMT Subject: CN=67413360-1c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1a:dc:c1:6a:55:20:0c:4f:94:07:5f:5e:03: 9e:9c:29:a0:59:28:b9:c1:ed:be:7f:1b:a0:88:fb: d8:74:71:a8:32:6f:d6:33:28:b0:ca:40:fb:b8:42: 18:bf:bd:18:b1:cc:d5:f1:20:0e:72:ad:e3:ca:9f: d6:66:67:e0:d7:87:af:f7:f1:11:18:76:a7:08:5a: 23:ec:43:7d:98:47:fc:02:4e:31:c8:a9:d6:40:10: 24:c7:87:0b:a0:a7:26:dc:19:5d:8e:3a:d8:78:d1: 0d:d1:01:80:41:56:c2:df:fa:f5:51:db:6b:45:7d: c6:a7:75:a0:6f:a9:20:b1:cb:6a:44:4f:d2:d3:3e: 35:23:25:70:4f:18:80:7f:c7:5a:73:56:77:10:9b: 62:b6:99:76:26:db:e9:af:43:3f:01:ff:5f:1d:9e: 02:f3:9a:f7:4e:49:af:cf:61:c7:dd:94:07:0d:6f: 0d:56:ea:6b:4e:3f:9b:7a:af:c8:d0:60:de:de:38: f2:60:de:0b:71:9b:70:3c:36:07:a3:77:fe:e1:d6: 8a:07:9e:d0:5b:a9:1a:ed:d9:56:e2:50:f7:d7:f1: 8a:4e:97:2b:40:57:06:27:f3:b2:bc:06:a7:af:25: 4d:e0:0a:49:c1:7f:b3:1c:f3:91:02:37:07:bd:ca: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E5:DF:A0:94:2B:D6:DE:95:E9:46:9A:E0:65:9C:14:61:32:A8:9D X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:52:71:5b:0a:be:1f:d0:57:85:d6:ae:3b:d6:68:91:02: 02:8f:98:57:c5:07:99:92:af:b1:dd:58:76:95:31:da:76:20: 64:1e:9d:27:a2:91:f7:ff:68:a2:41:dd:09:b6:bc:52:52:d1: 81:d4:2f:15:56:26:e9:ee:27:e4:54:2c:8d:10:ee:ae:fe:e6: 13:0a:24:38:16:c0:c0:8b:28:25:0c:e4:c8:9a:95:be:2d:a8: c2:96:75:f0:e2:24:fd:0b:c2:b3:bd:8a:63:33:05:d9:a4:c3: 9c:c7:bf:25:ff:90:61:0f:e9:53:6f:65:8b:ce:6f:dd:c9:21: e3:30:2b:ca:24:fc:2a:37:90:c2:2b:ec:b5:f7:03:39:0b:ea: 95:14:27:b9:86:db:b7:19:e8:1b:a8:69:35:16:22:9e:b3:7d: 4c:92:2f:58:19:65:cb:09:c4:70:e5:cb:94:a1:d3:78:80:92: b6:ee:8e:fe:d2:1e:5c:ab:f6:cf:38:d7:3b:99:f1:98:a1:eb: 90:09:85:8e:eb:75:a8:80:0c:8d:5c:1b:94:71:2f:7e:85:ad: 01:3f:06:34:68:cf:ac:53:ab:7f:95:ad:6b:e0:95:5b:4e:ee: 34:b2:b6:67:3e:7b:3a:2d:f8:4f:8b:60:33:95:6d:3c:6d:36: cd:2b:06:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjQxMTIzMDE0NDAwWhcNMjQxMTMwMDE0NDAwWjAYMRYwFAYD VQQDEw02NzQxMzM2MC0xYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhrcwWpVIAxPlAdfXgOenCmgWSi5we2+fxugiPvYdHGoMm/WMyiwykD7uEIY v70YsczV8SAOcq3jyp/WZmfg14ev9/ERGHanCFoj7EN9mEf8Ak4xyKnWQBAkx4cL oKcm3BldjjrYeNEN0QGAQVbC3/r1UdtrRX3Gp3Wgb6kgsctqRE/S0z41IyVwTxiA f8dac1Z3EJtitpl2Jtvpr0M/Af9fHZ4C85r3Tkmvz2HH3ZQHDW8NVuprTj+beq/I 0GDe3jjyYN4LcZtwPDYHo3f+4daKB57QW6ka7dlW4lD31/GKTpcrQFcGJ/OyvAan ryVN4ApJwX+zHPORAjcHvcr8BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTl36CU K9belelGmuBlnBRhMqidMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQs1JxWwq+H9BXhdauO9ZokQICj5hXxQeZkq+x3Vh2lTHadiBkHp0n opH3/2iiQd0JtrxSUtGB1C8VVibp7ifkVCyNEO6u/uYTCiQ4FsDAiyglDOTImpW+ LajClnXw4iT9C8KzvYpjMwXZpMOcx78l/5BhD+lTb2WLzm/dySHjMCvKJPwqN5DC K+y19wM5C+qVFCe5htu3GegbqGk1FiKes31Mki9YGWXLCcRw5cuUodN4gJK27o7+ 0h5cq/bPONc7mfGYoeuQCYWO63WogAyNXBuUcS9+ha0BPwY0aM+sU6t/la1r4JVb Tu40srZnPns6LfhPi2AzlW08bTbNKwbM -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org