$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: Bj4FVcC4ulo7HLJ6dkz6mldoSht92+FbXAxHP6q60SA= Subject key identifier: 20:3F:E7:FA:89:CC:30:E0:FC:9E:73:3F:F3:2D:75:DC:56:4A:A8:14 Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 024A Signing time: Thu 21 Nov 2024 01:19:06 +0000 Manifest this update: Thu 21 Nov 2024 01:19:06 +0000 Manifest next update: Thu 28 Nov 2024 01:19:06 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: o/lod3dWMRJRb6rdmd0x9HGgSxPzlKbaK5FXj54PuCk=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: QEMOAgpk78T4cfgnhZBQcgORRh937yPLAJRwPHTKv3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: Nov 21 01:19:06 2024 GMT Not After : Nov 28 01:19:06 2024 GMT Subject: CN=673e8a8a-d78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:e0:e0:af:4e:52:fb:df:ca:9b:e6:7e:02: a2:4c:54:4e:a0:fa:a9:e2:89:b0:57:f0:27:5e:a6: 2a:d0:76:c4:da:9b:6b:12:8e:9c:5c:8d:50:d3:75: e6:8d:0c:ed:1b:3f:27:e7:36:31:f1:22:87:ef:b9: f5:d2:e1:99:34:56:b8:e9:6a:92:25:1e:1b:20:a9: 24:05:47:a6:19:c7:d7:60:5d:99:50:b8:6b:fc:ec: 63:7c:b2:d6:28:bd:64:13:aa:1c:dd:9a:77:55:d1: 2b:bc:a3:e0:a6:b3:85:18:66:83:d5:44:24:47:ba: 80:f8:bc:d7:8f:d8:85:4c:9b:e3:bc:1a:f0:77:b5: 93:00:b5:80:b0:c5:03:29:e5:5f:ec:39:bc:60:29: e4:a5:8f:5e:84:22:48:43:79:a0:5c:3c:d9:65:fb: 29:82:d6:a5:97:e8:9d:22:ed:3a:b9:00:64:fd:70: 0b:09:d8:96:d4:7e:37:aa:ce:73:e5:70:90:3c:60: 25:c1:14:77:dc:df:c9:e0:f1:f3:8c:d3:5d:43:51: 7f:4e:5a:89:ac:2f:c0:46:e7:a2:ac:bb:b2:7f:48: 37:18:b5:29:59:7f:50:8d:29:b0:72:92:cc:fd:d2: 33:f0:25:ac:97:2d:af:ef:66:8d:1c:39:d4:51:2a: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:E7:FA:89:CC:30:E0:FC:9E:73:3F:F3:2D:75:DC:56:4A:A8:14 X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:07:98:83:fe:9b:68:df:74:28:85:d2:2a:eb:95:b0:88:f2: 2c:75:97:bc:66:60:75:92:56:5b:d3:62:f9:6e:11:17:25:9d: 31:ec:24:74:39:7e:bc:13:0b:47:a4:69:d7:6d:93:02:d3:48: 80:f1:86:f9:63:0a:74:90:2a:f1:38:40:74:c4:a6:e0:e1:26: 74:53:53:8c:4a:27:d4:f2:03:de:9f:88:67:03:2c:e1:d7:1b: 2d:ff:1c:16:b4:d0:7f:2a:21:04:f3:01:86:4d:25:0b:4d:70: 5b:ef:70:00:ea:45:31:d2:3c:b0:4d:0e:3c:d0:6b:ff:98:96: 28:f6:22:ff:67:8f:56:10:7f:19:c5:95:83:62:72:4a:04:2c: 6d:cb:7d:27:0a:68:5e:30:cb:c6:45:6b:26:06:82:3f:3e:39: c1:62:ce:37:23:b0:6d:a5:4c:cb:08:cd:55:36:c2:2f:e7:6b: 85:a0:54:a2:e6:d0:3b:78:9e:12:82:69:0d:92:bf:cf:35:dc: 16:7f:88:3e:6b:1d:d8:1c:b1:93:c1:16:63:4f:5a:51:aa:b5: bc:7d:de:43:a5:ed:49:3d:c5:ea:26:17:38:b3:a6:89:e7:ef: b4:e9:6f:59:ef:15:a3:49:70:3f:b5:d7:e0:20:95:55:19:5f: dc:40:5a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjQxMTIxMDExOTA2WhcNMjQxMTI4MDExOTA2WjAYMRYwFAYD VQQDEw02NzNlOGE4YS1kNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1Hg4K9OUvvfypvmfgKiTFROoPqp4omwV/AnXqYq0HbE2ptrEo6cXI1Q03Xm jQztGz8n5zYx8SKH77n10uGZNFa46WqSJR4bIKkkBUemGcfXYF2ZULhr/OxjfLLW KL1kE6oc3Zp3VdErvKPgprOFGGaD1UQkR7qA+LzXj9iFTJvjvBrwd7WTALWAsMUD KeVf7Dm8YCnkpY9ehCJIQ3mgXDzZZfspgtall+idIu06uQBk/XALCdiW1H43qs5z 5XCQPGAlwRR33N/J4PHzjNNdQ1F/TlqJrC/ARueirLuyf0g3GLUpWX9QjSmwcpLM /dIz8CWsly2v72aNHDnUUSrNyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA/5/qJ zDDg/J5zP/MtddxWSqgUMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyB5iD/pto33QohdIq65WwiPIsdZe8ZmB1klZb02L5bhEXJZ0x7CR0 OX68EwtHpGnXbZMC00iA8Yb5Ywp0kCrxOEB0xKbg4SZ0U1OMSifU8gPen4hnAyzh 1xst/xwWtNB/KiEE8wGGTSULTXBb73AA6kUx0jywTQ480Gv/mJYo9iL/Z49WEH8Z xZWDYnJKBCxty30nCmheMMvGRWsmBoI/PjnBYs43I7BtpUzLCM1VNsIv52uFoFSi 5tA7eJ4SgmkNkr/PNdwWf4g+ax3YHLGTwRZjT1pRqrW8fd5Dpe1JPcXqJhc4s6aJ 5++06W9Z7xWjSXA/tdfgIJVVGV/cQFoN -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org