$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: DZKbziFB4MkWuPZVqoA6t27tGOYNt5aRRXnmwSInDMU= Subject key identifier: 29:E1:0F:C4:C9:EC:11:68:40:78:EC:98:B1:35:DC:22:02:1E:58:DF Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 0610 Signing time: Fri 22 Nov 2024 22:13:34 +0000 Manifest this update: Fri 22 Nov 2024 22:13:34 +0000 Manifest next update: Fri 29 Nov 2024 22:13:34 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: 3LOnpuq+tImkQsKvwMeIEbukr3RekpoGoBPd1ZWf6Uw=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: hGe29EgQYapx1TOgOkfl/FVvzXgm0bNaKPHQJdt7Pp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Nov 22 22:13:34 2024 GMT Not After : Nov 29 22:13:34 2024 GMT Subject: CN=6741020e-8874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:8e:4b:8e:e2:b0:c1:a4:7c:0c:e9:24:40: 39:99:51:05:ab:5a:e1:94:de:07:b8:95:f2:99:21: 14:45:9f:38:e8:3d:73:74:e6:90:4a:8c:15:d5:8b: 0d:e5:d8:29:0b:f3:c2:c0:95:ab:a7:01:bf:fa:fb: e1:8e:54:42:b1:99:47:68:7e:f4:d2:82:59:7e:68: 24:c0:dd:ef:e9:45:36:df:e1:43:ea:2d:90:5c:f8: cb:46:0d:36:61:e3:22:ff:bb:6a:2d:f4:58:8c:1a: 81:7a:93:3b:7f:92:d7:e8:d6:a4:01:90:7b:5b:b9: c0:db:69:de:13:90:9d:16:68:eb:e1:a7:e5:fc:f0: 74:7c:8b:79:88:35:35:cb:f6:da:7b:76:eb:1d:a5: b7:2e:d8:5b:b8:da:b3:61:18:48:d6:07:fd:eb:e9: f7:70:35:c1:8d:16:8a:fd:b0:e3:a4:d9:3a:06:95: 8c:3f:72:d8:d0:90:8d:d1:63:ba:a6:04:2b:fc:a4: 42:49:a7:8b:00:75:52:e4:14:20:c8:10:ee:2f:8a: 7a:88:b3:68:aa:95:57:b7:33:8a:78:56:e2:a6:85: 43:9e:46:e6:53:d6:bd:95:64:78:94:f7:4b:49:2b: 39:ef:da:b6:86:a4:9c:eb:44:99:3b:eb:d9:88:1d: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E1:0F:C4:C9:EC:11:68:40:78:EC:98:B1:35:DC:22:02:1E:58:DF X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8f:3c:5c:1c:8e:22:8b:18:cc:9e:ef:61:21:ea:82:26:da: d3:02:0c:f7:84:89:c5:fe:35:c3:6d:57:7b:68:44:db:55:3d: 11:fb:6d:b4:1f:9b:f2:58:21:6b:b0:34:72:7e:c8:b6:fd:26: 35:e3:b2:7d:2c:6d:28:43:e7:1d:b9:d2:80:ae:dc:11:ae:e8: bc:e0:62:5c:e5:02:2f:27:4f:06:a1:2b:34:d6:98:47:ea:df: 09:bd:73:33:cb:20:55:b2:fb:c5:7c:ed:09:b1:50:bd:8d:5a: 66:e8:a9:24:f3:ca:e5:73:e5:0d:f5:71:f2:90:72:2e:ea:01: c7:0c:03:f3:c8:2d:fa:f6:b1:c1:cf:66:2c:eb:1c:61:07:42: f2:43:28:8c:03:3d:66:aa:a3:aa:19:6b:41:be:26:b7:e2:1f: f8:90:11:d8:5b:80:23:ac:84:84:33:aa:80:b0:34:1e:16:e4: 6a:88:a6:e6:3b:80:0d:58:ad:f9:3f:2e:af:34:34:24:20:07: 52:3e:a1:47:2c:eb:a6:fe:b4:aa:da:40:75:b6:29:03:9b:16: 5e:8e:b9:75:7e:f2:d3:d9:2f:ee:eb:7b:69:07:76:88:99:ab: 8d:1d:b8:eb:81:f7:7d:b8:3f:4f:a3:b0:2c:d5:e3:7b:d3:a2: 6e:94:27:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjQxMTIyMjIxMzM0WhcNMjQxMTI5MjIxMzM0WjAYMRYwFAYD VQQDEw02NzQxMDIwZS04ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T6OS47isMGkfAzpJEA5mVEFq1rhlN4HuJXymSEURZ846D1zdOaQSowV1YsN 5dgpC/PCwJWrpwG/+vvhjlRCsZlHaH700oJZfmgkwN3v6UU23+FD6i2QXPjLRg02 YeMi/7tqLfRYjBqBepM7f5LX6NakAZB7W7nA22neE5CdFmjr4afl/PB0fIt5iDU1 y/bae3brHaW3LthbuNqzYRhI1gf96+n3cDXBjRaK/bDjpNk6BpWMP3LY0JCN0WO6 pgQr/KRCSaeLAHVS5BQgyBDuL4p6iLNoqpVXtzOKeFbipoVDnkbmU9a9lWR4lPdL SSs579q2hqSc60SZO+vZiB0oiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnhD8TJ 7BFoQHjsmLE13CICHljfMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7jzxcHI4iixjMnu9hIeqCJtrTAgz3hInF/jXDbVd7aETbVT0R+220 H5vyWCFrsDRyfsi2/SY147J9LG0oQ+cdudKArtwRrui84GJc5QIvJ08GoSs01phH 6t8JvXMzyyBVsvvFfO0JsVC9jVpm6Kkk88rlc+UN9XHykHIu6gHHDAPzyC369rHB z2Ys6xxhB0LyQyiMAz1mqqOqGWtBvia34h/4kBHYW4AjrISEM6qAsDQeFuRqiKbm O4ANWK35Py6vNDQkIAdSPqFHLOum/rSq2kB1tikDmxZejrl1fvLT2S/u63tpB3aI mauNHbjrgfd9uD9Po7As1eN706JulCfG -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:45 2024 by rpki-client on console-ams.rpki-client.org