$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: mQ/4Dnklgu+tBJQsMfoKbESEgUA3+IMftsbMTTSEowk= Subject key identifier: 81:FC:CA:EF:59:33:6E:AB:26:79:49:94:E9:01:7A:7F:46:66:9A:4D Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 12E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 1291 Signing time: Wed 20 Nov 2024 17:05:24 +0000 Manifest this update: Wed 20 Nov 2024 17:05:24 +0000 Manifest next update: Wed 27 Nov 2024 17:05:24 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: yK/9cacCKV6WMaH+D9b2rjRi+JNoy6Tcxh6tQYFRS4Q=) 2: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: TgKCaNyqUsAljaW26MZPW1C5YESZcO5+K5dprKOUG9E=) 3: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: eR77IizgliF9p3Hk3DKn1CDdr9eC3iyjyvFgBE8PWnk=) 4: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: IUvSWekqWUh8HEG1ptYkkfatRQfLQnnfHPYNX//TZNw=) 5: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: MZBSloCp4vIpAqSRxYYda+A/wH0ayd7dOXpKnFdSxPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4836 (0x12e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Nov 20 17:05:24 2024 GMT Not After : Nov 27 17:05:24 2024 GMT Subject: CN=673e16d4-3e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:64:8a:e8:e6:1d:a6:fa:ec:52:ef:fc:71: d3:25:b2:73:00:7a:66:e6:e0:8f:0e:47:4b:34:a9: fe:34:e6:69:06:a7:d2:61:49:da:cf:1f:64:6c:8d: 82:73:3b:6f:11:3b:71:e2:e5:24:a4:d2:7d:41:b2: 49:92:1b:e8:ba:b9:c3:fc:52:f3:d7:d0:19:ed:af: 9c:4d:f9:79:8a:2c:ae:4b:42:f4:91:53:65:a5:f7: df:71:27:5b:55:63:58:43:8f:b9:83:41:14:50:8f: 24:85:29:6a:a6:69:54:47:dd:ef:f3:bb:a6:a5:3c: 8c:8b:f4:42:41:bb:e1:63:02:66:3f:a6:d4:08:0d: 68:9f:bf:57:f1:c4:ee:22:dc:27:0b:5d:44:03:da: 09:57:3b:67:1a:ba:d0:48:f8:c4:f4:d5:00:42:0f: 79:bf:00:38:9e:bd:a8:cd:4b:0c:c2:97:96:2f:1b: 7d:74:8d:56:8b:26:88:0d:2b:ef:d6:02:20:9a:be: 3f:6a:c6:41:2f:4c:86:a5:e2:70:87:c3:7a:36:3a: 73:45:12:a2:8d:d8:ac:32:b6:a6:19:30:36:4c:fc: cb:15:49:b4:51:8f:ae:53:34:ed:85:9f:b4:a5:5e: 9b:21:ea:f1:21:fa:94:c1:e3:54:ae:53:f1:8e:9f: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FC:CA:EF:59:33:6E:AB:26:79:49:94:E9:01:7A:7F:46:66:9A:4D X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:aa:e2:82:9b:de:6b:c6:ce:9b:e9:9c:67:14:30:fb:71:fa: 57:80:7a:ac:c9:35:35:8f:49:82:a0:5b:e3:65:5b:2c:4e:f8: 08:38:c6:5f:19:7c:ae:48:53:14:38:25:d7:a0:51:2e:60:18: ca:23:67:2e:f0:19:0e:dd:62:5f:43:69:b5:c1:5a:a2:79:9c: 43:94:78:85:37:e2:50:41:a9:e3:fe:15:2a:c2:ad:37:a2:1a: a9:f6:36:f7:ae:f1:2a:ae:fe:9f:3c:07:59:4f:08:da:14:d4: f9:6e:af:ba:92:b3:c1:11:00:ea:71:5e:fb:61:9f:ac:e5:6e: d4:9d:71:49:9a:28:11:09:0c:01:73:b3:42:1e:24:a0:7a:14: f4:ad:f5:37:25:60:b0:7b:d8:da:5e:78:73:72:34:b8:ca:a2: aa:b7:84:b1:be:d6:ee:6e:c1:b7:d8:00:4b:fe:6a:85:40:ba: df:e0:ad:34:f3:52:5f:bb:b0:ce:72:8c:9a:f5:a2:d1:17:cf: 7f:a2:7e:ba:55:b4:c6:9c:4a:70:cc:43:d2:60:02:db:6e:76: 2c:72:27:d3:2f:cc:5f:a2:d3:29:2b:2f:1e:9c:a9:fc:54:d0: 5b:ec:ea:95:86:f5:1a:66:b7:72:a3:5b:6c:dd:12:fd:20:ad: 86:d6:fc:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjQxMTIwMTcwNTI0WhcNMjQxMTI3MTcwNTI0WjAYMRYwFAYD VQQDEw02NzNlMTZkNC0zZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnhkiujmHab67FLv/HHTJbJzAHpm5uCPDkdLNKn+NOZpBqfSYUnazx9kbI2C cztvETtx4uUkpNJ9QbJJkhvournD/FLz19AZ7a+cTfl5iiyuS0L0kVNlpfffcSdb VWNYQ4+5g0EUUI8khSlqpmlUR93v87umpTyMi/RCQbvhYwJmP6bUCA1on79X8cTu ItwnC11EA9oJVztnGrrQSPjE9NUAQg95vwA4nr2ozUsMwpeWLxt9dI1WiyaIDSvv 1gIgmr4/asZBL0yGpeJwh8N6NjpzRRKijdisMramGTA2TPzLFUm0UY+uUzTthZ+0 pV6bIerxIfqUweNUrlPxjp/o3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH8yu9Z M26rJnlJlOkBen9GZppNMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxquKCm95rxs6b6ZxnFDD7cfpXgHqsyTU1j0mCoFvjZVssTvgIOMZf GXyuSFMUOCXXoFEuYBjKI2cu8BkO3WJfQ2m1wVqieZxDlHiFN+JQQanj/hUqwq03 ohqp9jb3rvEqrv6fPAdZTwjaFNT5bq+6krPBEQDqcV77YZ+s5W7UnXFJmigRCQwB c7NCHiSgehT0rfU3JWCwe9jaXnhzcjS4yqKqt4SxvtbubsG32ABL/mqFQLrf4K00 81Jfu7DOcoya9aLRF89/on66VbTGnEpwzEPSYALbbnYscifTL8xfotMpKy8enKn8 VNBb7OqVhvUaZrdyo1ts3RL9IK2G1vx/ -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:01 2024 by rpki-client on console-ams.rpki-client.org