$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: lYvRN3d3YrT+WFaWnLwoqOMuUO2stzO9upE8vDaNy0Y= Subject key identifier: BF:0E:D2:70:B8:21:33:B3:C3:2D:C6:07:E1:CB:87:42:08:68:63:49 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 0421 Signing time: Fri 22 Nov 2024 23:55:38 +0000 Manifest this update: Fri 22 Nov 2024 23:55:38 +0000 Manifest next update: Fri 29 Nov 2024 23:55:38 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: prf1u1X24Ebx3YBur5MUybXjXKNCF99L+xGLFIDAd/o=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: 5T7dToRNDFlOZIMhz0V1aN3lG6JivnfiSfUrF62C9Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: Nov 22 23:55:38 2024 GMT Not After : Nov 29 23:55:38 2024 GMT Subject: CN=674119fa-4dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:b3:b9:9b:31:14:58:6f:57:48:59:e5:81: ad:8b:18:ae:aa:ab:90:f2:85:73:ba:0e:c0:06:98: c4:01:73:f7:28:8d:21:a8:09:87:5b:26:a5:da:b4: 6f:d8:83:1f:d5:64:b3:59:f6:0c:89:b7:c9:1d:31: d7:85:5b:08:44:03:c7:11:a0:02:95:8b:32:09:d9: 7e:d0:88:6f:ce:a6:32:7c:01:f0:c7:b3:b1:9a:40: c5:70:91:34:27:6f:b5:8a:15:d7:40:14:5b:65:bc: ef:cb:f9:12:e8:cd:ce:3a:17:11:7d:8d:6b:89:ab: a8:32:9d:3d:95:ec:78:a8:43:d8:f2:05:61:db:fc: 1c:b6:df:58:cf:24:ed:05:62:4a:18:a6:da:91:0e: 2e:11:66:dd:e2:f6:94:42:6a:91:f2:fa:f1:a0:c3: 0b:3f:80:f7:07:8d:31:39:87:4b:b8:57:38:47:af: 78:80:1a:73:5d:e5:f3:55:da:ec:f5:b7:e3:8d:bc: 31:49:15:32:86:77:4c:fb:f2:f7:ac:fe:3d:f3:67: f2:03:2b:62:a8:45:57:7b:a8:81:f8:0c:33:e9:83: 44:a0:7b:af:6e:6e:ad:27:4a:cd:f1:c3:0a:d6:1f: 44:f9:e2:88:19:31:0a:1b:b2:a5:30:82:63:c7:c9: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0E:D2:70:B8:21:33:B3:C3:2D:C6:07:E1:CB:87:42:08:68:63:49 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d5:dd:bd:d2:0d:93:f0:a1:5c:37:af:73:88:56:aa:2b:90: 94:4b:03:cd:ae:19:e9:2d:55:ef:7b:c4:ad:a2:12:09:d8:ee: ae:59:a3:17:9f:ee:f4:63:1e:2d:9e:b4:19:77:46:e4:46:c0: 8c:cb:f0:cf:48:0b:ff:f9:3c:0d:47:00:5a:a2:93:02:25:66: 11:55:15:94:08:1c:3e:5c:2b:8b:69:f6:1e:63:f6:50:ec:99: 43:af:4b:1a:49:14:fc:2d:82:43:53:42:e5:23:da:3a:0a:08: 76:15:0d:98:3d:50:d6:0b:bb:9b:fc:f3:52:ad:9f:24:6b:ae: 00:7e:90:f6:03:a5:36:29:0f:88:88:e5:34:c5:8a:45:c1:db: 28:b9:89:f8:59:6b:7b:ad:4a:73:f6:1c:80:f6:f6:1f:a6:36: 9f:ff:aa:1d:d4:0c:7f:bc:5b:05:4b:16:0e:7d:f7:99:db:b8: 1c:d8:1c:6c:19:fd:61:d2:9c:7a:01:7f:c8:50:fa:0c:d0:27: 52:db:ef:30:a9:3a:0d:6e:69:6a:ec:b5:81:21:64:2b:24:e2: 9c:17:ac:07:08:ba:e4:ff:a0:b2:0f:0b:bb:6d:0f:e6:30:38: 83:78:7d:7e:6a:7a:4f:90:04:72:3a:ae:8b:c1:69:68:55:ba: 32:24:db:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjQxMTIyMjM1NTM4WhcNMjQxMTI5MjM1NTM4WjAYMRYwFAYD VQQDEw02NzQxMTlmYS00ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcWzuZsxFFhvV0hZ5YGtixiuqquQ8oVzug7ABpjEAXP3KI0hqAmHWyal2rRv 2IMf1WSzWfYMibfJHTHXhVsIRAPHEaAClYsyCdl+0IhvzqYyfAHwx7OxmkDFcJE0 J2+1ihXXQBRbZbzvy/kS6M3OOhcRfY1riauoMp09lex4qEPY8gVh2/wctt9YzyTt BWJKGKbakQ4uEWbd4vaUQmqR8vrxoMMLP4D3B40xOYdLuFc4R694gBpzXeXzVdrs 9bfjjbwxSRUyhndM+/L3rP4982fyAytiqEVXe6iB+Awz6YNEoHuvbm6tJ0rN8cMK 1h9E+eKIGTEKG7KlMIJjx8mJPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8O0nC4 ITOzwy3GB+HLh0IIaGNJMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD1d290g2T8KFcN69ziFaqK5CUSwPNrhnpLVXve8StohIJ2O6uWaMX n+70Yx4tnrQZd0bkRsCMy/DPSAv/+TwNRwBaopMCJWYRVRWUCBw+XCuLafYeY/ZQ 7JlDr0saSRT8LYJDU0LlI9o6Cgh2FQ2YPVDWC7ub/PNSrZ8ka64AfpD2A6U2KQ+I iOU0xYpFwdsouYn4WWt7rUpz9hyA9vYfpjaf/6od1Ax/vFsFSxYOffeZ27gc2Bxs Gf1h0px6AX/IUPoM0CdS2+8wqToNbmlq7LWBIWQrJOKcF6wHCLrk/6CyDwu7bQ/m MDiDeH1+anpPkARyOq6LwWloVboyJNug -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org