$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: BqQcy6biWtY1H8DphhfTNMAuNoVC/HNAEM+uhUG3rEA= Subject key identifier: 73:01:DD:A0:63:09:E0:1C:F0:60:6A:54:B0:C9:90:08:BD:17:44:26 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 250B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 24FC Signing time: Fri 22 Nov 2024 15:45:34 +0000 Manifest this update: Fri 22 Nov 2024 15:45:33 +0000 Manifest next update: Fri 29 Nov 2024 15:45:33 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: Ux/lCI63MRzNhVfjQfbXrOwxS0d02Wn9b1u0GywlQ9o=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: H+wCANBD5klfwreCxJGeJ4oz5YqLeKbiWBpEUR9/a3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9483 (0x250b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Nov 22 15:45:33 2024 GMT Not After : Nov 29 15:45:33 2024 GMT Subject: CN=6740a71d-aa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:f7:e0:54:8c:07:e6:03:47:11:99:76:99: 17:5d:8e:d7:81:98:30:77:5f:b4:ac:44:d0:4a:7a: 8b:60:af:d1:98:53:8f:81:a6:d2:3b:ee:0e:21:c8: a3:98:3d:69:46:56:d0:bc:b9:93:97:18:07:a2:21: 6d:a6:d4:34:ff:8e:18:75:36:a0:c6:d7:c0:1d:c2: f0:17:db:76:16:c7:f8:11:6d:03:14:90:d5:64:6d: b2:fb:cb:af:52:37:dd:38:14:a8:8d:16:cf:e4:e7: 85:89:46:63:7f:2f:ea:5a:9d:9b:c9:e7:3f:62:26: d7:e7:5b:ab:ab:8d:be:29:06:d4:57:ef:3c:73:ae: 67:8f:5b:cc:e7:4e:98:f9:47:85:6e:58:41:88:d5: f0:65:de:bb:85:f1:36:6b:46:3f:4e:df:4b:d5:8d: 98:bd:a1:ef:15:a7:c8:68:a3:3b:d4:f7:7b:65:3d: 8f:c4:ec:b3:1e:e9:6b:03:7b:6a:5a:01:5b:c8:69: 2b:0f:8b:cf:ea:70:f8:28:21:83:d5:78:a6:7e:16: 94:99:18:7d:57:e6:ea:c5:c2:84:34:ea:d0:4a:ed: 98:2f:b8:d1:aa:2c:b4:de:a3:f1:7e:51:06:88:ef: 80:ba:4f:60:58:de:49:a2:91:cd:11:eb:42:b5:cf: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:DD:A0:63:09:E0:1C:F0:60:6A:54:B0:C9:90:08:BD:17:44:26 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:25:f0:35:58:90:33:88:a0:45:4e:e1:92:e5:74:0f:9d:be: 61:30:ca:96:a4:e7:c7:1d:5a:ba:6d:fa:52:56:a9:2d:a7:c5: 5f:7e:51:65:2d:ba:3a:96:d2:07:40:30:c5:04:64:57:0b:09: e8:e4:d9:5c:fb:d3:49:7d:84:66:9b:0e:e5:e8:b9:5f:a4:08: 65:b5:06:73:16:ed:75:95:1e:7c:24:db:99:9a:87:68:e3:0e: c2:45:f6:a2:a9:b1:49:80:22:60:a8:aa:17:56:07:88:06:22: e5:9a:3a:ac:7c:8a:8d:3e:5f:bc:8c:e6:95:2e:61:0a:00:07: ea:44:8e:43:3f:86:c0:d0:37:65:8b:c1:71:75:8e:40:e6:d2: 66:05:88:9e:6c:47:5c:e7:84:56:ad:d1:a6:ac:cc:9b:1f:98: c3:9a:85:23:86:f0:50:9d:ea:00:52:b6:31:64:97:8a:eb:62: f0:b5:93:05:8b:d3:d4:62:6f:b3:81:e6:5e:b3:ab:c2:13:69: bc:f9:ce:26:60:ad:e4:8b:05:82:1b:1f:a4:cc:5f:29:15:e6: d7:a1:a8:86:9a:b9:bb:f8:85:a1:ab:ee:63:4f:1f:25:f5:eb: 1e:c9:1a:a1:31:2c:47:c6:e6:88:21:bc:0e:d6:dd:ec:57:e6: 96:b1:b9:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjQxMTIyMTU0NTMzWhcNMjQxMTI5MTU0NTMzWjAYMRYwFAYD VQQDEw02NzQwYTcxZC1hYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEb34FSMB+YDRxGZdpkXXY7XgZgwd1+0rETQSnqLYK/RmFOPgabSO+4OIcij mD1pRlbQvLmTlxgHoiFtptQ0/44YdTagxtfAHcLwF9t2Fsf4EW0DFJDVZG2y+8uv UjfdOBSojRbP5OeFiUZjfy/qWp2byec/YibX51urq42+KQbUV+88c65nj1vM506Y +UeFblhBiNXwZd67hfE2a0Y/Tt9L1Y2YvaHvFafIaKM71Pd7ZT2PxOyzHulrA3tq WgFbyGkrD4vP6nD4KCGD1XimfhaUmRh9V+bqxcKENOrQSu2YL7jRqiy03qPxflEG iO+Auk9gWN5JopHNEetCtc/QJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMB3aBj CeAc8GBqVLDJkAi9F0QmMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyJfA1WJAziKBFTuGS5XQPnb5hMMqWpOfHHVq6bfpSVqktp8VfflFl Lbo6ltIHQDDFBGRXCwno5Nlc+9NJfYRmmw7l6LlfpAhltQZzFu11lR58JNuZmodo 4w7CRfaiqbFJgCJgqKoXVgeIBiLlmjqsfIqNPl+8jOaVLmEKAAfqRI5DP4bA0Ddl i8FxdY5A5tJmBYiebEdc54RWrdGmrMybH5jDmoUjhvBQneoAUrYxZJeK62LwtZMF i9PUYm+zgeZes6vCE2m8+c4mYK3kiwWCGx+kzF8pFebXoaiGmrm7+IWhq+5jTx8l 9eseyRqhMSxHxuaIIbwO1t3sV+aWsbmk -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org