$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: /d/F6nXbMgwmBNEOVPGr3n+w2x8996/c50XVLGWD6NA= Subject key identifier: 6A:96:67:00:C9:73:18:2A:D8:95:F8:D5:E8:29:26:18:EC:99:E5:5A Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: 65 Signing time: Sat 23 Nov 2024 04:59:23 +0000 Manifest this update: Sat 23 Nov 2024 04:59:22 +0000 Manifest next update: Sat 30 Nov 2024 04:59:22 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: shsunv/VJlVOohQM0FTWy3rs26karekUNKi97WMZUlM=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Validity Not Before: Nov 23 04:59:22 2024 GMT Not After : Nov 30 04:59:22 2024 GMT Subject: CN=6741612a-3f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:ac:53:43:36:f7:ee:0f:cc:d0:87:e7:ab: 97:47:c2:c7:22:72:36:49:a6:fe:68:b4:a7:8e:41: 86:7b:e5:23:b6:ca:34:e9:96:d4:5b:4c:9c:04:9b: 16:0c:7a:6c:8b:6e:9f:54:4e:e9:be:f2:f7:02:29: 59:bf:25:ee:e5:0e:1f:3d:9c:a1:33:97:88:bd:49: cf:cc:20:8d:e1:ab:72:bc:0a:78:d7:bf:9b:76:b7: 6f:85:85:5a:00:54:74:96:4e:f7:ef:03:5a:14:e9: 49:a8:6f:43:d3:00:66:29:b7:68:48:56:d6:6a:2d: 48:39:b1:8f:68:69:ae:3c:06:93:6a:74:85:ac:09: 74:e8:11:60:44:f1:ca:d5:aa:42:8c:28:6e:1c:61: 3b:1e:c9:e6:ae:4e:f9:e9:4c:f9:46:ef:af:16:e9: 4e:53:32:85:ec:a5:96:2c:15:9a:ac:12:f6:c8:25: 0a:40:52:f9:86:be:c1:66:f8:a4:b2:4b:05:d8:e7: cf:07:c4:9a:80:97:df:45:97:e2:e0:9a:85:2e:e6: f1:41:21:36:1c:ff:4e:21:ed:9a:fa:5b:59:83:da: 03:0b:47:5f:70:2b:36:36:42:55:ea:da:df:77:21: c2:d7:a9:87:a1:86:de:1d:d5:86:b8:ec:43:88:87: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:67:00:C9:73:18:2A:D8:95:F8:D5:E8:29:26:18:EC:99:E5:5A X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:06:7c:0b:98:73:83:15:33:83:68:e8:42:ca:c5:4a:f8:56: 70:63:e2:df:58:19:31:90:bd:84:9b:37:16:6f:97:ec:80:42: 94:06:1c:a9:5c:52:55:51:5c:1d:42:c5:de:e3:fc:91:f3:ba: e7:f5:ef:6a:45:84:7c:02:e2:65:be:1b:1f:4b:d4:36:0f:2d: 02:72:aa:ab:db:01:00:31:6d:21:79:8e:0a:60:35:50:95:ce: 47:90:4c:d5:31:67:0a:4d:33:d7:a6:a6:52:dd:70:16:fe:b3: 7a:09:4a:04:9e:98:76:89:0c:c6:5c:b1:2b:de:6d:be:62:63: 54:c4:97:b9:68:76:74:35:89:cd:65:a1:61:0a:c9:ad:03:fd: e3:08:a7:1c:63:ae:05:54:e9:e3:1c:55:aa:a9:01:b8:22:70: b1:b3:af:18:a9:bf:0d:a7:bb:fc:62:30:f0:41:67:6f:72:84: 3c:aa:ad:c5:e5:b6:69:4f:af:15:50:87:e7:b9:ee:37:f6:be: 8f:e7:6f:38:88:c0:9a:a6:98:4a:c2:cb:9c:cc:b3:46:87:10: f4:f4:a1:c8:7d:f6:a7:67:2b:96:5c:4b:81:89:f0:37:32:3d: c1:6e:09:c5:2e:a0:67:c7:6b:0c:cc:a3:f8:c7:47:f4:5c:c0: 86:5f:2b:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTk2ODExMC8GA1UEBRMoMkUwNTJCMzcwMTEzMzEyQUE5ODgzRDk3RURBRDIzMENB MTY2MjE2MjAeFw0yNDExMjMwNDU5MjJaFw0yNDExMzAwNDU5MjJaMBgxFjAUBgNV BAMTDTY3NDE2MTJhLTNmODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp46xTQzb37g/M0Ifnq5dHwscicjZJpv5otKeOQYZ75SO2yjTpltRbTJwEmxYM emyLbp9UTum+8vcCKVm/Je7lDh89nKEzl4i9Sc/MII3hq3K8CnjXv5t2t2+FhVoA VHSWTvfvA1oU6Umob0PTAGYpt2hIVtZqLUg5sY9oaa48BpNqdIWsCXToEWBE8crV qkKMKG4cYTseyeauTvnpTPlG768W6U5TMoXspZYsFZqsEvbIJQpAUvmGvsFm+KSy SwXY588HxJqAl99Fl+LgmoUu5vFBITYc/04h7Zr6W1mD2gMLR19wKzY2QlXq2t93 IcLXqYehht4d1Ya47EOIhxFLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUapZnAMlz GCrYlfjV6CkmGOyZ5VowHwYDVR0jBBgwFoAULgUrNwETMSqpiD2X7a0jDKFmIWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFOTY4LzJCQTJFQzBFMTY5 OTExRUZCQTQwQzkyQUM0RjlBRTAyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdVck53RVRNU3FwaUQyWDdhMGpES0ZtSVdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF OTY4LzJCQTJFQzBFMTY5OTExRUZCQTQwQzkyQUM0RjlBRTAyL0xnVXJOd0VUTVNx cGlEMlg3YTBqREtGbUlXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMoGfAuYc4MVM4No6ELKxUr4VnBj4t9YGTGQvYSbNxZvl+yAQpQGHKlc UlVRXB1Cxd7j/JHzuuf172pFhHwC4mW+Gx9L1DYPLQJyqqvbAQAxbSF5jgpgNVCV zkeQTNUxZwpNM9emplLdcBb+s3oJSgSemHaJDMZcsSvebb5iY1TEl7lodnQ1ic1l oWEKya0D/eMIpxxjrgVU6eMcVaqpAbgicLGzrxipvw2nu/xiMPBBZ29yhDyqrcXl tmlPrxVQh+e57jf2vo/nbziIwJqmmErCy5zMs0aHEPT0och99qdnK5ZcS4GJ8Dcy PcFuCcUuoGfHawzMo/jHR/RcwIZfK98= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:10 2024 by rpki-client on console-ams.rpki-client.org