$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft File: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft (raw, json) Hash identifier: LONlF7g4QRrNBQzrnGdF7QC+9yWlrsUmbkAvZxGUuvo= Subject key identifier: F8:74:03:66:95:95:15:FC:F7:C7:31:49:C8:37:48:BD:D9:B4:1F:A5 Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft Manifest number: 0200 Signing time: Sat 23 Nov 2024 01:37:53 +0000 Manifest this update: Sat 23 Nov 2024 01:37:53 +0000 Manifest next update: Sat 30 Nov 2024 01:37:53 +0000 Files and hashes: 1: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl (hash: vyYyWg7YqdeLbifw31Lt9whaWy1nXGU9gscQ0BJxu2Y=) 2: BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa (hash: pspkGPfhH+f5mAliCVv5t4mufNrQX+cYgNKwkWqMa3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Validity Not Before: Nov 23 01:37:53 2024 GMT Not After : Nov 30 01:37:53 2024 GMT Subject: CN=674131f1-a2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:3c:b5:35:00:89:72:62:63:0d:06:4c:6e: c1:73:f9:4e:32:a2:e8:b2:b5:40:67:48:0a:fb:89: e9:50:30:c2:44:3a:67:ca:3c:ca:26:81:b4:bb:47: 37:54:ea:5a:03:9d:28:ee:61:16:53:0a:4d:53:bb: 52:6a:4d:58:01:f3:f3:2c:68:50:cf:92:b3:ec:05: c7:95:1d:67:05:0f:37:e5:e7:eb:e9:6f:c9:e6:f7: 77:56:e9:5f:70:71:3d:9d:e2:97:d0:13:a1:3f:61: 77:4d:3c:cf:24:95:83:4a:53:ca:cd:e2:5b:a3:07: 49:d1:a2:13:42:78:51:b3:c5:b8:7c:1b:f3:8d:01: 4f:b4:fd:0a:69:0c:fc:d6:4e:43:2b:7d:d0:5a:cf: db:3c:da:bc:44:b6:66:8c:61:8e:74:ba:cf:37:ce: ee:84:4a:48:5a:04:2e:4b:8e:5e:aa:d6:e9:cd:e9: 9e:d9:61:08:77:76:31:e9:67:0e:b1:b4:df:46:5e: b4:04:e5:f4:64:62:69:ad:9c:0b:d4:cb:29:ce:5d: cf:55:c5:98:27:3e:82:04:01:e9:b5:5d:6f:54:53: 5e:50:4b:a9:7c:3f:6d:47:d5:36:37:10:2f:35:25: f2:d8:7e:87:63:2e:c5:57:09:0d:e7:41:48:67:08: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:74:03:66:95:95:15:FC:F7:C7:31:49:C8:37:48:BD:D9:B4:1F:A5 X509v3 Authority Key Identifier: keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:df:57:73:7c:ec:d5:e7:42:45:06:e6:03:80:2d:3c:6a:ec: 3c:84:a1:b1:de:98:9d:8f:2f:d0:0b:10:32:7f:2a:8f:ba:b9: 8a:ce:94:cb:5c:94:49:72:40:0e:fa:5d:fe:15:72:60:0a:76: 8a:b2:18:2f:24:60:9d:cf:2f:95:e0:91:be:18:80:a1:da:4d: 81:db:96:02:95:7b:e7:39:7c:7a:9d:79:dc:d9:85:5a:44:59: 1b:ad:f2:04:d5:d3:72:0a:d2:89:7b:06:f8:64:1d:3c:0e:75: 00:78:cd:cb:2f:bc:4e:a9:dd:f7:cd:29:a6:9c:e3:72:3a:37: 9b:1c:5b:04:f3:76:c7:29:e2:f6:30:e4:f8:cb:cf:36:77:e4: d4:4c:67:c0:c7:5a:8c:83:75:85:ef:d2:98:bd:81:1f:fc:68: aa:6c:21:75:d5:90:36:0b:b1:31:1d:ab:e4:6f:a6:c2:19:2d: 54:83:ac:4c:44:81:92:0b:1b:7b:65:0f:dd:b2:8c:c3:15:97: 77:b7:3c:18:36:0a:ad:69:5a:00:3a:d4:22:d4:b1:a3:32:76: 0c:f3:0a:3e:86:e0:9f:13:3a:b6:25:cc:c6:14:1e:b9:93:80: be:27:63:e1:a1:c7:bd:a8:92:42:ab:e7:68:b9:cb:96:17:80: 14:7b:d6:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRBNTAxMTAvBgNVBAUTKDk0ODMwRjk0MEQ4RERDN0Y5ODlCN0NBQjEzNjI4M0NG NDMyOTYwQkQwHhcNMjQxMTIzMDEzNzUzWhcNMjQxMTMwMDEzNzUzWjAYMRYwFAYD VQQDEw02NzQxMzFmMS1hMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv88tTUAiXJiYw0GTG7Bc/lOMqLosrVAZ0gK+4npUDDCRDpnyjzKJoG0u0c3 VOpaA50o7mEWUwpNU7tSak1YAfPzLGhQz5Kz7AXHlR1nBQ835efr6W/J5vd3Vulf cHE9neKX0BOhP2F3TTzPJJWDSlPKzeJbowdJ0aITQnhRs8W4fBvzjQFPtP0KaQz8 1k5DK33QWs/bPNq8RLZmjGGOdLrPN87uhEpIWgQuS45eqtbpzeme2WEId3Yx6WcO sbTfRl60BOX0ZGJprZwL1Mspzl3PVcWYJz6CBAHptV1vVFNeUEupfD9tR9U2NxAv NSXy2H6HYy7FVwkN50FIZwhcnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh0A2aV lRX898cxScg3SL3ZtB+lMB8GA1UdIwQYMBaAFJSDD5QNjdx/mJt8qxNig89DKWC9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEE1MC9GN0E2NEIwQTE4 NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNILVltM3lyRTJLRHowTXBZ TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJTVBsQTJOM0gtWW0zeXJFMktEejBNcFlMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEE1MC9GN0E2NEIwQTE4NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNI LVltM3lyRTJLRHowTXBZTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP31dzfOzV50JFBuYDgC08auw8hKGx3pidjy/QCxAyfyqPurmKzpTL XJRJckAO+l3+FXJgCnaKshgvJGCdzy+V4JG+GICh2k2B25YClXvnOXx6nXnc2YVa RFkbrfIE1dNyCtKJewb4ZB08DnUAeM3LL7xOqd33zSmmnONyOjebHFsE83bHKeL2 MOT4y882d+TUTGfAx1qMg3WF79KYvYEf/GiqbCF11ZA2C7ExHavkb6bCGS1Ug6xM RIGSCxt7ZQ/dsozDFZd3tzwYNgqtaVoAOtQi1LGjMnYM8wo+huCfEzq2JczGFB65 k4C+J2Phoce9qJJCq+doucuWF4AUe9YA -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org