$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: iCRmKp39p03ISVF0bOPUQybmDvlf2Oz52DZZzXRv4Mc= Subject key identifier: 40:E3:DA:66:0A:31:15:C8:83:DD:0C:6C:43:28:21:D5:0A:D1:67:95 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 30 Signing time: Sun 15 Sep 2024 10:05:39 +0000 Manifest this update: Sun 15 Sep 2024 10:05:38 +0000 Manifest next update: Sun 22 Sep 2024 10:05:38 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: y8p1JFGM7sVadspaisNLjt3x38W3kITINV9NSwf//0A=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: hYjHUfvRUA2oxqxU9L94pcxlxZdbw5TFQJ8mDVWiXNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Sep 15 10:05:38 2024 GMT Not After : Sep 22 10:05:38 2024 GMT Subject: CN=66e6b172-1f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:3f:bb:c5:86:5b:1d:a9:7a:fa:ee:b4:49: ae:6a:47:5b:d5:0a:6b:2a:78:20:85:26:57:eb:1a: 3e:25:b2:73:ef:57:b2:eb:5c:19:61:1f:06:9a:cd: b0:1f:a4:35:80:ec:a6:a5:b7:9e:fd:8b:b5:50:bc: 6d:d1:cb:0c:b3:2e:f1:88:76:40:5a:34:8f:6b:d8: a3:f3:32:d2:97:59:68:fa:b2:5c:27:10:69:8c:d5: ee:be:7a:f8:94:70:d1:7f:33:ad:e8:f1:eb:cd:e3: d4:8a:9f:dc:30:ed:19:53:a4:0f:f8:b6:0b:eb:c9: 45:29:24:d8:65:72:82:dd:c0:10:de:ec:c6:2c:a1: 89:64:5e:90:9c:7d:a2:5b:54:90:3c:85:ef:79:bd: 3c:b3:64:80:17:18:a0:23:d3:e6:ff:c5:20:51:ee: 01:e7:34:9a:1c:c7:7a:48:1a:3c:fb:d6:17:be:37: a6:be:21:fb:3c:bc:ff:c0:58:f6:1f:c2:8b:c7:65: a6:b8:ab:4e:b5:ed:9b:01:cc:5e:59:37:62:78:b6: f2:9b:e5:0e:d6:44:a7:7f:ce:88:28:26:41:fe:aa: f9:76:d3:9d:1c:87:51:1b:c3:ae:7e:c9:d0:60:a8: e3:f9:18:39:5b:15:17:71:48:2c:37:6e:bd:03:9c: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E3:DA:66:0A:31:15:C8:83:DD:0C:6C:43:28:21:D5:0A:D1:67:95 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:05:1c:7c:63:cc:7f:00:71:ba:6c:54:59:76:1a:b4:17:78: c1:d2:96:1e:43:f7:27:1e:31:1f:d9:25:64:65:0a:c4:0d:2b: 05:ba:d9:b8:0e:7d:3a:27:83:e5:47:bc:d5:5d:52:13:29:60: 89:8e:d1:a2:1d:a6:5a:f2:57:d2:f4:56:de:2e:16:58:5f:f5: f5:bc:95:27:17:cc:90:2b:c0:48:fd:5a:09:31:b3:a3:4d:87: ff:26:f6:c4:9f:92:22:3e:12:84:8b:4d:96:5d:5d:94:ff:fa: f4:64:70:8b:20:fc:21:de:4b:ac:b5:55:1c:5f:2d:ed:1a:80: 37:c3:91:f1:00:9c:36:66:85:83:06:32:6a:b6:fa:6d:b8:c9: 94:b0:95:91:7c:b7:cc:1f:fd:e0:bf:38:57:84:e1:ce:a4:67: c0:fb:00:13:44:d6:b6:9f:8c:d6:f9:a3:06:d3:f9:60:f0:c2: 22:1d:cb:8b:87:84:f0:e6:0d:3a:ce:4f:f7:4e:15:31:46:78: 36:bf:c0:7d:46:bc:9e:dd:01:43:aa:ad:3f:e9:ba:5a:49:52: 5b:1b:12:41:e3:19:4c:4d:c0:d4:59:b1:55:30:28:ea:9d:bc: 57:5b:1d:83:dc:2e:94:35:ff:aa:f6:a5:46:70:2e:93:3f:4a: 04:f6:a6:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzlEQTExMC8GA1UEBRMoMkQxRTBFQTc3QUNBM0ZFNTk3REVGMzE5NjIxRUY0MEQx MkQ0QzFEQzAeFw0yNDA5MTUxMDA1MzhaFw0yNDA5MjIxMDA1MzhaMBgxFjAUBgNV BAMTDTY2ZTZiMTcyLTFmNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1dz+7xYZbHal6+u60Sa5qR1vVCmsqeCCFJlfrGj4lsnPvV7LrXBlhHwaazbAf pDWA7Kalt579i7VQvG3RywyzLvGIdkBaNI9r2KPzMtKXWWj6slwnEGmM1e6+eviU cNF/M63o8evN49SKn9ww7RlTpA/4tgvryUUpJNhlcoLdwBDe7MYsoYlkXpCcfaJb VJA8he95vTyzZIAXGKAj0+b/xSBR7gHnNJocx3pIGjz71he+N6a+Ifs8vP/AWPYf wovHZaa4q0617ZsBzF5ZN2J4tvKb5Q7WRKd/zogoJkH+qvl2050ch1Ebw65+ydBg qOP5GDlbFRdxSCw3br0DnDMxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQOPaZgox FciD3QxsQygh1QrRZ5UwHwYDVR0jBBgwFoAULR4Op3rKP+WX3vMZYh70DRLUwdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzOURBLzZDQjlEMEE2MkZB QjExRUZCRUQ5Njc2QUM0RjlBRTAyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFI0T3AzcktQLVdYM3ZNWlloNzBEUkxVd2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz OURBLzZDQjlEMEE2MkZBQjExRUZCRUQ5Njc2QUM0RjlBRTAyL0xSNE9wM3JLUC1X WDN2TVpZaDcwRFJMVXdkdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcFHHxjzH8AcbpsVFl2GrQXeMHSlh5D9yceMR/ZJWRlCsQNKwW62bgO fTong+VHvNVdUhMpYImO0aIdplryV9L0Vt4uFlhf9fW8lScXzJArwEj9Wgkxs6NN h/8m9sSfkiI+EoSLTZZdXZT/+vRkcIsg/CHeS6y1VRxfLe0agDfDkfEAnDZmhYMG Mmq2+m24yZSwlZF8t8wf/eC/OFeE4c6kZ8D7ABNE1rafjNb5owbT+WDwwiIdy4uH hPDmDTrOT/dOFTFGeDa/wH1GvJ7dAUOqrT/pulpJUlsbEkHjGUxNwNRZsVUwKOqd vFdbHYPcLpQ1/6r2pUZwLpM/SgT2prA= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:35 2024 by rpki-client on console-ams.rpki-client.org