$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: fE8xlYY5QY5NT1Yowg2PsjnhnYg1fit3TjgEs5zxqhs= Subject key identifier: C0:59:BE:C0:17:3C:F7:D1:01:0A:88:95:EE:D8:19:70:1E:9C:38:59 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 53 Signing time: Sat 23 Nov 2024 05:10:35 +0000 Manifest this update: Sat 23 Nov 2024 05:10:35 +0000 Manifest next update: Sat 30 Nov 2024 05:10:35 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: 8Zt8Z3x0DIeS+RBnkVJBAa/C/Acwx6LoJgpnMoomOTQ=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: hYjHUfvRUA2oxqxU9L94pcxlxZdbw5TFQJ8mDVWiXNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Nov 23 05:10:35 2024 GMT Not After : Nov 30 05:10:35 2024 GMT Subject: CN=674163cb-0839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:bf:74:2f:5c:a3:e4:28:6b:7c:04:be:79: cd:2e:a2:26:a1:f6:d6:10:1b:c6:6d:26:73:18:ed: e1:d5:e8:02:1d:8e:d2:4e:60:a1:8b:df:8e:33:fc: 29:54:75:22:81:26:2b:34:db:d3:d8:a1:6d:3b:bb: 61:29:87:48:d6:73:10:d0:d7:9f:48:b7:05:51:82: b5:bf:29:0a:93:bd:da:ac:fb:31:3c:f2:f5:12:a9: 70:13:3c:7e:f9:2f:a3:5f:7b:3e:bf:26:88:0e:88: f2:86:5b:c8:36:9b:b2:98:3a:5f:95:12:b5:70:cf: f2:77:e3:a6:b6:de:38:2c:ef:47:67:fc:cd:62:53: 1e:e1:b8:84:18:b8:44:9d:1b:aa:85:08:eb:d1:ca: e5:a0:b6:6c:a5:ea:2b:30:3e:b2:33:b3:36:f8:8b: 29:54:2f:2d:5a:ca:46:41:2c:5c:69:e9:72:6c:13: 4e:b3:28:9a:bc:33:f0:96:e3:78:3b:fc:46:0c:ed: 0a:f9:f5:50:29:a6:cc:33:5f:11:fa:83:69:0b:9b: a5:b9:a2:b9:bd:8a:3a:a6:ff:69:e6:2b:c9:06:6a: ef:3a:44:0d:13:67:b2:75:8c:15:6b:70:0f:61:18: e1:43:1a:52:12:b8:76:99:a3:39:1f:91:c1:86:df: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:59:BE:C0:17:3C:F7:D1:01:0A:88:95:EE:D8:19:70:1E:9C:38:59 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:48:04:bb:8f:2e:a7:3d:69:ba:d9:b0:9e:63:77:01:d5:17: af:de:21:4d:78:8f:21:8a:18:de:0b:dd:55:df:f3:0f:80:20: 92:8f:48:47:15:b3:70:81:cb:2a:7f:45:58:64:be:d5:b6:71: cf:fd:04:a3:bf:85:0a:80:a2:ed:17:87:cd:03:17:41:47:af: ce:14:ef:85:39:c9:6e:d0:ef:34:6b:62:36:42:7d:af:fd:86: 6c:41:62:b2:18:f4:f0:6b:8a:4f:ce:69:49:f8:05:43:b7:bf: bf:f3:9e:0c:6a:07:3b:9c:d1:18:99:ed:f6:d0:1f:2e:7e:09: 68:5f:c7:37:14:4c:98:22:ac:e5:7d:6c:37:f3:b8:9b:6e:c7: 42:d0:e7:fe:8f:4c:92:0c:92:7a:28:9b:20:2f:5a:6e:43:18: 3c:0a:d8:f9:be:7c:e9:97:cb:fe:8d:55:02:dc:59:e8:7d:d5: 3c:4f:c5:e5:ba:e8:da:12:83:ec:b9:f1:0f:4b:aa:ef:f4:1b: 5e:50:b8:bf:be:87:6e:62:8b:bb:1d:40:2b:21:ab:8e:50:de: 4d:0b:fc:84:8f:5d:27:c7:8f:e5:61:5b:93:0d:43:ce:22:c5: 25:ae:6a:13:ce:8a:e7:3c:e1:a0:72:9a:74:61:ab:c0:30:a9: 33:79:e9:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzlEQTExMC8GA1UEBRMoMkQxRTBFQTc3QUNBM0ZFNTk3REVGMzE5NjIxRUY0MEQx MkQ0QzFEQzAeFw0yNDExMjMwNTEwMzVaFw0yNDExMzAwNTEwMzVaMBgxFjAUBgNV BAMTDTY3NDE2M2NiLTA4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz2b90L1yj5ChrfAS+ec0uoiah9tYQG8ZtJnMY7eHV6AIdjtJOYKGL344z/ClU dSKBJis029PYoW07u2Eph0jWcxDQ159ItwVRgrW/KQqTvdqs+zE88vUSqXATPH75 L6Nfez6/JogOiPKGW8g2m7KYOl+VErVwz/J346a23jgs70dn/M1iUx7huIQYuESd G6qFCOvRyuWgtmyl6iswPrIzszb4iylULy1aykZBLFxp6XJsE06zKJq8M/CW43g7 /EYM7Qr59VAppswzXxH6g2kLm6W5orm9ijqm/2nmK8kGau86RA0TZ7J1jBVrcA9h GOFDGlISuHaZozkfkcGG30wrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwFm+wBc8 99EBCoiV7tgZcB6cOFkwHwYDVR0jBBgwFoAULR4Op3rKP+WX3vMZYh70DRLUwdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzOURBLzZDQjlEMEE2MkZB QjExRUZCRUQ5Njc2QUM0RjlBRTAyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFI0T3AzcktQLVdYM3ZNWlloNzBEUkxVd2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz OURBLzZDQjlEMEE2MkZBQjExRUZCRUQ5Njc2QUM0RjlBRTAyL0xSNE9wM3JLUC1X WDN2TVpZaDcwRFJMVXdkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1IBLuPLqc9abrZsJ5jdwHVF6/eIU14jyGKGN4L3VXf8w+AIJKPSEcV s3CByyp/RVhkvtW2cc/9BKO/hQqAou0Xh80DF0FHr84U74U5yW7Q7zRrYjZCfa/9 hmxBYrIY9PBrik/OaUn4BUO3v7/zngxqBzuc0RiZ7fbQHy5+CWhfxzcUTJgirOV9 bDfzuJtux0LQ5/6PTJIMknoomyAvWm5DGDwK2Pm+fOmXy/6NVQLcWeh91TxPxeW6 6NoSg+y58Q9Lqu/0G15QuL++h25ii7sdQCshq45Q3k0L/ISPXSfHj+VhW5MNQ84i xSWuahPOiuc84aBymnRhq8AwqTN56Rk= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org