$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json) Hash identifier: 4edTpBTJReQ2eIYFkts334ocAD9y97b1EGKAHNQcYY4= Subject key identifier: 64:84:20:32:F5:DC:F0:F6:E1:C0:68:99:18:65:18:7D:A8:A2:20:DA Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft Manifest number: 05 Signing time: Wed 23 Oct 2024 06:53:50 +0000 Manifest this update: Wed 23 Oct 2024 06:53:50 +0000 Manifest next update: Wed 30 Oct 2024 06:53:50 +0000 Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: fZmJH7/nTpvs144Jtz/rgxi2M0XzxOR/8km9jNKmgR4=) 2: 3E4B299C8D0F11EF8F639372C4F9AE02.roa (hash: AVx/iyCGk2KIXaJoPOBeu0OxLH0XFejGW4gjRHxRbdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Validity Not Before: Oct 23 06:53:50 2024 GMT Not After : Oct 30 06:53:50 2024 GMT Subject: CN=67189d7e-ea48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:97:c4:70:ae:2f:38:79:29:00:cb:b6:7c: 16:5b:bd:05:d0:b0:ce:08:69:a4:84:28:95:fc:bc: 65:91:6c:4d:47:d1:da:84:7f:c1:e7:7b:f5:2e:ea: 72:d2:c0:95:5a:81:96:a3:07:f0:1b:5a:7b:2b:e4: a0:5f:7b:50:f2:51:57:f2:88:42:9f:c7:17:59:3f: a6:36:4f:66:ce:8d:b2:91:9e:ef:53:2f:1e:5a:f3: e5:a1:ff:00:68:21:34:be:8a:8a:fe:d6:7b:47:1d: b6:73:cf:f6:0e:67:ac:87:eb:a5:8b:d1:81:5f:07: c4:85:ff:09:a4:e4:c2:b7:0b:b8:c2:37:41:a7:b4: 3d:85:52:87:8b:a2:51:e6:d9:16:b0:89:6c:75:ae: 0c:65:84:ca:4e:4c:ce:29:6c:88:98:bb:e0:16:07: 28:88:eb:e3:23:f5:aa:2a:53:8e:88:bb:66:e0:58: e7:d3:41:7a:09:f6:07:df:cc:99:b4:11:4e:e1:18: 75:9b:1e:dd:d5:84:aa:a9:05:9a:7f:91:8f:e6:78: be:20:e5:79:89:4a:b0:dd:86:27:e4:b1:f8:1a:b0: ec:f4:da:e1:21:a3:0a:e2:ca:d3:ba:4d:94:3f:21: 60:e3:b7:0d:70:12:2d:c7:60:73:f1:2d:e8:e6:a6: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:20:32:F5:DC:F0:F6:E1:C0:68:99:18:65:18:7D:A8:A2:20:DA X509v3 Authority Key Identifier: keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:4f:66:6a:0f:ea:b8:63:73:e6:1b:7a:b7:ca:41:5b:4f:24: 3e:3b:f0:3e:8b:99:f0:db:2e:07:91:94:4f:75:0f:cf:6a:6e: 58:6b:56:67:2a:06:41:50:cb:c0:27:ab:8d:7e:86:28:72:6f: b5:22:c5:f9:98:7c:cb:4a:f2:09:3c:f4:e3:7a:c8:72:50:87: 9e:da:df:f9:54:b3:d3:67:8c:4d:00:ef:65:c8:89:3e:93:7a: 2e:21:cf:cd:bc:f0:3e:df:db:2f:5a:98:c6:d4:47:4b:74:87: 49:de:61:91:89:00:a9:7d:ca:34:55:cb:eb:1c:8a:d0:e8:92: cc:f6:d3:4f:67:24:92:49:6a:3d:2e:93:85:98:bc:77:85:84: 63:84:24:59:4e:ab:ea:12:e9:9e:20:1b:34:5e:ef:8f:e9:51: d2:aa:0f:1f:7f:05:b1:ea:46:e6:12:5b:ac:df:b3:9d:3c:45: 30:5a:c3:11:e8:f1:33:37:27:70:ad:5f:e2:3f:8b:e9:57:cd: a0:18:e7:35:ef:42:c7:36:09:fb:fe:66:b5:01:ba:24:03:69: ee:32:0d:24:96:78:6f:cc:d3:87:8c:8d:09:8d:9f:f3:89:4e: 56:49:eb:8f:f6:80:16:d7:cb:0c:bc:bf:84:02:29:d7:28:eb: f2:56:fd:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoOTQ1MzlGODJBMzVFQjIxNThFRDdDMzYyRDVCQTE1NDMz RTdFRDJFMTAeFw0yNDEwMjMwNjUzNTBaFw0yNDEwMzAwNjUzNTBaMBgxFjAUBgNV BAMTDTY3MTg5ZDdlLWVhNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAppfEcK4vOHkpAMu2fBZbvQXQsM4IaaSEKJX8vGWRbE1H0dqEf8Hne/Uu6nLS wJVagZajB/AbWnsr5KBfe1DyUVfyiEKfxxdZP6Y2T2bOjbKRnu9TLx5a8+Wh/wBo ITS+ior+1ntHHbZzz/YOZ6yH66WL0YFfB8SF/wmk5MK3C7jCN0GntD2FUoeLolHm 2RawiWx1rgxlhMpOTM4pbIiYu+AWByiI6+Mj9aoqU46Iu2bgWOfTQXoJ9gffzJm0 EU7hGHWbHt3VhKqpBZp/kY/meL4g5XmJSrDdhifksfgasOz02uEhowriytO6TZQ/ IWDjtw1wEi3HYHPxLejmpoX9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZIQgMvXc 8PbhwGiZGGUYfaiiINowHwYDVR0jBBgwFoAUlFOfgqNeshWO18Ni1boVQz5+0uEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0E0OUNEREI4OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbEZPZmdxTmVzaFdPMThOaTFib1ZRejUtMHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0E0OUNEREI4OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2xGT2ZncU5lc2hX TzE4TmkxYm9WUXo1LTB1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALhPZmoP6rhjc+YberfKQVtPJD478D6LmfDbLgeRlE91D89qblhrVmcq BkFQy8Anq41+hihyb7UixfmYfMtK8gk89ON6yHJQh57a3/lUs9NnjE0A72XIiT6T ei4hz8288D7f2y9amMbUR0t0h0neYZGJAKl9yjRVy+scitDoksz2009nJJJJaj0u k4WYvHeFhGOEJFlOq+oS6Z4gGzRe74/pUdKqDx9/BbHqRuYSW6zfs508RTBawxHo 8TM3J3CtX+I/i+lXzaAY5zXvQsc2Cfv+ZrUBuiQDae4yDSSWeG/M04eMjQmNn/OJ TlZJ64/2gBbXywy8v4QCKdco6/JW/aA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:21 2024 by rpki-client on console-fra.rpki-client.org