$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: NIKRqK0U3bHmKgHj7GAvglw/t/CPHOlxieIwzuyyOnk= Subject key identifier: 15:D0:F8:CC:3C:9D:11:EE:CA:69:0D:E7:EB:14:52:3A:12:04:A5:D5 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0ACA Signing time: Fri 22 Nov 2024 19:12:36 +0000 Manifest this update: Fri 22 Nov 2024 19:12:36 +0000 Manifest next update: Fri 29 Nov 2024 19:12:36 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: 5EtuP8reTNhq/XYAbrKclsGUlsIXc1A5Eq0Apg1UtKs=) 2: B76E518A1ED011EFAB39482AC4F9AE02.roa (hash: JZVX1mYWxvx3DuiFZY84uw6rWyCqk7v0HK2SQQP29l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2784 (0xae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Nov 22 19:12:36 2024 GMT Not After : Nov 29 19:12:36 2024 GMT Subject: CN=6740d7a4-9cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:3c:c4:7e:7d:7c:72:1d:d2:ec:64:fa:66: f4:86:0e:bb:02:73:66:70:f0:d5:d6:34:c0:6e:ca: ca:31:70:6e:98:b2:c9:94:bb:45:4f:fa:c2:eb:b2: 28:ef:5e:88:73:8b:72:72:a5:ee:0c:59:ae:bb:38: a6:f9:84:4f:86:fb:8c:6f:c1:16:d7:23:61:54:41: d7:b6:81:90:8d:fb:42:bb:a7:4c:01:71:fd:e7:3a: 11:17:5a:27:a4:53:9f:ee:7f:f6:40:a9:ef:5e:56: 07:f8:0c:6b:e9:22:d2:37:21:be:64:99:fc:1d:a6: e7:ab:c5:54:dd:4b:ca:be:02:44:ee:1c:49:48:1f: 74:e0:5b:74:f5:5a:00:b9:92:98:6d:59:85:c4:98: 29:4f:cc:82:b3:47:f2:f2:33:20:cb:66:d1:a8:5d: 34:3f:8d:63:e4:1c:8e:b0:91:41:f9:e8:fb:7f:f1: ad:32:3f:b4:b7:32:22:05:09:d6:5a:1d:a6:40:d3: 90:bc:dd:d8:28:31:a4:8f:d8:58:7e:10:1d:47:bc: f8:ac:ae:a7:7e:6c:ed:03:b5:5a:55:59:fe:f3:a5: 42:19:99:b1:d0:d0:6e:3a:89:33:11:cd:cf:b7:9d: c5:12:a1:e5:53:6c:ec:a0:60:77:fe:14:c4:70:bf: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D0:F8:CC:3C:9D:11:EE:CA:69:0D:E7:EB:14:52:3A:12:04:A5:D5 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d9:0f:5f:0d:3c:13:fe:cd:80:8d:b4:1f:88:6f:0f:d4:9e: 5c:13:4e:fd:58:2b:6c:d7:93:80:ed:53:56:bb:03:2c:ad:41: 70:0b:53:24:60:50:ad:32:d2:cc:f5:13:71:02:87:7c:24:2a: 75:91:84:77:0f:52:72:42:6f:49:19:45:dc:e4:44:0a:96:2c: 8f:fd:1d:27:ea:14:5d:fa:83:87:20:87:cd:81:e2:18:cc:c6: c3:42:f1:89:3b:98:ce:38:46:1c:fa:af:3b:89:6b:53:c4:cc: 26:6d:c9:74:b7:32:f2:2a:16:bc:cf:79:6e:01:21:45:14:f5: b4:5b:a6:55:6f:7e:bf:a5:e3:6f:58:45:7e:9a:fb:2e:a1:6b: 89:ea:04:e6:f2:f2:ba:24:ec:f7:a1:48:8e:ac:2b:96:f1:d0: 9c:58:8f:15:5d:36:61:05:c3:12:e3:b6:4c:4f:00:36:15:2d: d0:27:3b:30:14:ad:50:78:51:3f:4b:14:83:26:5a:d3:7d:e5: 58:07:9c:c6:02:90:f3:76:42:25:51:68:e8:d2:ed:ee:69:8b: d1:d9:13:69:1a:a9:dc:de:69:db:44:ea:21:28:55:47:57:ca: 5f:32:30:97:04:bc:27:6e:7d:d3:c1:97:09:31:4a:1c:46:83: 58:68:c9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjQxMTIyMTkxMjM2WhcNMjQxMTI5MTkxMjM2WjAYMRYwFAYD VQQDEw02NzQwZDdhNC05Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R08xH59fHId0uxk+mb0hg67AnNmcPDV1jTAbsrKMXBumLLJlLtFT/rC67Io 716Ic4tycqXuDFmuuzim+YRPhvuMb8EW1yNhVEHXtoGQjftCu6dMAXH95zoRF1on pFOf7n/2QKnvXlYH+Axr6SLSNyG+ZJn8Habnq8VU3UvKvgJE7hxJSB904Ft09VoA uZKYbVmFxJgpT8yCs0fy8jMgy2bRqF00P41j5ByOsJFB+ej7f/GtMj+0tzIiBQnW Wh2mQNOQvN3YKDGkj9hYfhAdR7z4rK6nfmztA7VaVVn+86VCGZmx0NBuOokzEc3P t53FEqHlU2zsoGB3/hTEcL9MVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXQ+Mw8 nRHuymkN5+sUUjoSBKXVMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq2Q9fDTwT/s2AjbQfiG8P1J5cE079WCts15OA7VNWuwMsrUFwC1Mk YFCtMtLM9RNxAod8JCp1kYR3D1JyQm9JGUXc5EQKliyP/R0n6hRd+oOHIIfNgeIY zMbDQvGJO5jOOEYc+q87iWtTxMwmbcl0tzLyKha8z3luASFFFPW0W6ZVb36/peNv WEV+mvsuoWuJ6gTm8vK6JOz3oUiOrCuW8dCcWI8VXTZhBcMS47ZMTwA2FS3QJzsw FK1QeFE/SxSDJlrTfeVYB5zGApDzdkIlUWjo0u3uaYvR2RNpGqnc3mnbROohKFVH V8pfMjCXBLwnbn3TwZcJMUocRoNYaMm4 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org