$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: Px3sIu5sFvJfw19FwdNhPZx4Ae2LyxRYUn2u4W9EhL8= Subject key identifier: C0:B2:8E:35:C7:17:38:64:33:62:04:23:5F:AC:49:4D:E8:40:89:03 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 0835 Signing time: Fri 22 Nov 2024 20:30:45 +0000 Manifest this update: Fri 22 Nov 2024 20:30:44 +0000 Manifest next update: Fri 29 Nov 2024 20:30:44 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: TGNqL3Z1oPxesjYHjX5IxTN3aVEYTXbNtMso2NdeLZo=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: KxcRhUccqmxdIWIfiWTKJTnk4y5BMJvuls5mu7Azigs=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: Nov 22 20:30:44 2024 GMT Not After : Nov 29 20:30:44 2024 GMT Subject: CN=6740e9f5-e3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:95:75:d6:d9:ce:a3:27:c4:71:dc:0c:fd: 04:c7:04:0b:52:09:07:15:19:aa:21:f6:4e:33:2a: 27:26:ab:5f:5a:02:d7:e2:1b:de:79:26:ba:64:85: 56:1c:d6:af:36:9a:a1:cc:8e:96:2d:e8:a6:4b:34: e2:2f:4e:bb:ef:95:6d:2c:6a:30:22:9e:76:85:02: 06:4c:e7:4d:31:b7:d3:df:53:1d:7e:98:58:2e:58: e0:4c:e8:be:58:19:03:70:d5:79:d4:d1:15:32:03: d6:1b:dd:e6:92:65:8d:42:b2:d1:ff:ec:40:42:07: fc:b4:d2:96:c2:69:b5:7f:59:fd:a6:24:84:ae:39: 15:f0:ba:4b:87:89:d3:93:ee:ea:42:66:b7:2c:23: f7:d5:dc:7a:d7:73:46:02:8b:83:f2:26:fc:91:f5: 59:7b:2b:34:4f:f3:77:3a:91:78:73:c2:2a:ee:d2: 8c:ad:74:dc:1b:8c:dc:7b:98:2f:c0:68:52:7c:da: a9:7b:61:05:78:46:5a:97:34:37:47:c7:1a:0c:55: 63:67:88:29:02:4b:cb:3e:6b:a1:8f:70:39:30:33: 6c:2d:6d:a7:2a:82:e8:82:47:77:df:e3:aa:e5:fc: 48:64:cb:d2:61:76:cd:14:15:5b:99:62:df:20:f7: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B2:8E:35:C7:17:38:64:33:62:04:23:5F:AC:49:4D:E8:40:89:03 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:be:7e:31:6b:2a:d5:e4:8f:56:41:74:0e:30:d5:44:18:bf: 77:e2:f0:4b:5f:5e:b9:ab:f2:da:61:45:d8:d2:db:e8:91:45: 43:12:45:e4:fe:15:1b:8c:02:6b:59:f5:71:c0:a7:1b:5a:10: 35:e7:e2:62:0c:c6:77:69:3a:a7:5a:ba:76:f4:3b:ee:cf:db: f0:ff:31:a9:f7:72:7b:be:83:a5:90:7b:70:c4:ae:9b:45:83: fe:1c:1f:83:96:46:09:8f:0a:48:77:07:6f:5e:32:a3:57:df: a1:82:49:7a:d5:3d:94:1f:95:0e:bb:db:04:70:e5:a6:f2:46: 06:c1:2b:be:20:93:c4:8d:2e:0d:5f:b7:d4:ff:fe:b3:0a:47: ed:58:cb:8e:f4:9c:78:59:ba:e3:b9:74:40:db:b4:dc:e0:93: 31:e1:b1:bd:fb:8e:5f:7f:c3:cb:23:0e:dd:5e:28:7b:89:41: 26:0e:7d:17:cc:d9:13:c7:5a:51:4e:b9:10:62:73:12:09:e5: 61:52:e5:f9:1b:c3:1b:7d:62:5e:1e:47:7b:0a:f3:d6:ed:b4: 9c:cd:9b:17:c8:28:2b:a1:0a:99:1e:14:ab:17:04:a5:01:3a: f3:5e:fc:f7:a6:6a:b1:0b:4c:5e:d8:59:6f:49:14:68:3e:e5: ab:49:f4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjQxMTIyMjAzMDQ0WhcNMjQxMTI5MjAzMDQ0WjAYMRYwFAYD VQQDEw02NzQwZTlmNS1lM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4KVddbZzqMnxHHcDP0ExwQLUgkHFRmqIfZOMyonJqtfWgLX4hveeSa6ZIVW HNavNpqhzI6WLeimSzTiL06775VtLGowIp52hQIGTOdNMbfT31MdfphYLljgTOi+ WBkDcNV51NEVMgPWG93mkmWNQrLR/+xAQgf8tNKWwmm1f1n9piSErjkV8LpLh4nT k+7qQma3LCP31dx613NGAouD8ib8kfVZeys0T/N3OpF4c8Iq7tKMrXTcG4zce5gv wGhSfNqpe2EFeEZalzQ3R8caDFVjZ4gpAkvLPmuhj3A5MDNsLW2nKoLogkd33+Oq 5fxIZMvSYXbNFBVbmWLfIPcV6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCyjjXH FzhkM2IEI1+sSU3oQIkDMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChvn4xayrV5I9WQXQOMNVEGL934vBLX165q/LaYUXY0tvokUVDEkXk /hUbjAJrWfVxwKcbWhA15+JiDMZ3aTqnWrp29Dvuz9vw/zGp93J7voOlkHtwxK6b RYP+HB+DlkYJjwpIdwdvXjKjV9+hgkl61T2UH5UOu9sEcOWm8kYGwSu+IJPEjS4N X7fU//6zCkftWMuO9Jx4WbrjuXRA27Tc4JMx4bG9+45ff8PLIw7dXih7iUEmDn0X zNkTx1pRTrkQYnMSCeVhUuX5G8MbfWJeHkd7CvPW7bSczZsXyCgroQqZHhSrFwSl ATrzXvz3pmqxC0xe2FlvSRRoPuWrSfQ1 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org