$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft File: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json) Hash identifier: EkToAwW8YdjvjoIv6R8+T5wG29HWZffPAJKUeQL6Mc0= Subject key identifier: 6D:09:08:AB:28:95:00:DA:05:79:14:1F:70:03:E5:61:1A:EB:7C:D1 Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 Certificate issuer: /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft Manifest number: 0333 Signing time: Sat 23 Nov 2024 00:38:57 +0000 Manifest this update: Sat 23 Nov 2024 00:38:56 +0000 Manifest next update: Sat 30 Nov 2024 00:38:56 +0000 Files and hashes: 1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: 4yyxcJmKAl9xhnldZIG77dRRWP9wyzn4sGB/egzsYp0=) 2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: brqvD0nhUd1opPdVSG+VpZIcp0CeDJNJnNKorIsgs0I=) 3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: 9zn7pbPKQ2T1L+hAV4OH1u9xUWLZPh4RSl4GJG1GgQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Validity Not Before: Nov 23 00:38:56 2024 GMT Not After : Nov 30 00:38:56 2024 GMT Subject: CN=67412420-e7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:f7:84:ec:88:02:6c:4c:d5:c7:20:55:73: 03:24:66:df:e6:0b:f4:4c:40:d9:d0:fb:cd:95:34: 6a:0d:9a:96:86:b6:4f:2b:dd:b9:a7:ef:29:00:3a: 65:0e:2e:47:9c:77:5d:37:99:6c:fb:0f:f6:59:c6: f6:9d:7d:60:22:b5:0c:13:a0:11:93:42:6c:58:49: e3:4d:6b:b8:f4:db:a1:ae:37:d4:1e:9c:fc:4f:03: 44:9e:14:b0:3e:81:b7:7b:e9:58:a1:bf:34:71:77: 6d:6a:bd:38:33:b7:50:56:56:0d:4f:4f:e1:17:17: 52:1c:8e:90:d5:62:bb:71:54:81:5c:89:62:70:53: 66:74:9f:df:a3:e4:d2:d9:ec:1e:a5:c4:c1:9f:e7: bf:9c:71:82:1a:77:b2:87:a4:17:5d:e2:c6:7d:85: 2a:39:d8:d4:2d:87:4b:97:f9:d9:75:04:a4:1b:46: 21:61:25:3e:1f:0c:db:95:d9:28:22:ad:de:ef:56: 64:9e:50:ac:aa:0d:95:2a:4b:7f:66:cf:59:db:d0: d8:23:21:e2:9c:aa:5d:78:d3:67:a9:a6:76:24:68: 78:cc:13:fb:a4:b9:11:20:10:98:e3:80:9d:69:17: 48:98:64:4d:ce:b2:6d:e2:8f:32:54:e4:03:18:84: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:09:08:AB:28:95:00:DA:05:79:14:1F:70:03:E5:61:1A:EB:7C:D1 X509v3 Authority Key Identifier: keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:72:b7:7a:55:79:5b:77:7d:34:b5:84:bc:aa:0a:cb:d3:33: 1b:0a:a8:94:ed:8e:41:71:16:53:09:88:ea:8b:40:71:ef:24: aa:ed:6a:66:1a:ad:e5:ad:88:1b:b5:91:0a:3d:bb:05:c7:c8: 87:d9:a7:e6:e1:d1:35:93:ca:3a:1c:ae:04:b1:47:fc:01:66: e7:ac:a4:81:70:4d:91:e5:9e:b9:e1:58:60:7c:5d:52:26:b1: 8c:41:1f:76:de:63:92:17:6c:79:f1:07:1b:b5:df:b1:c8:92: 97:ae:71:c7:72:04:52:7e:73:db:f8:e0:d5:8a:02:92:d9:6d: 52:6a:4b:05:55:6f:24:71:55:73:43:26:e4:e1:11:f3:ec:6b: 8d:89:4d:c7:00:a4:b4:32:8a:6c:a4:c1:79:b9:f2:5a:c5:ee: f4:ef:4e:d0:fd:a3:83:69:6b:e2:da:f9:71:98:df:1f:ca:c2: d8:ee:90:5b:a0:bd:e3:0f:23:be:c7:6f:ae:b0:69:80:82:21: 08:0c:20:f4:94:49:bf:40:b9:a3:38:11:ec:e0:e2:8c:43:b2: 63:c9:09:db:30:5a:10:d4:fc:da:e0:88:88:18:3a:cb:d5:ae: 2c:4d:c3:60:f2:6f:f7:73:21:08:7a:f9:c1:ab:59:94:b3:6f: 29:23:1a:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw NkQxOTc0NzMwHhcNMjQxMTIzMDAzODU2WhcNMjQxMTMwMDAzODU2WjAYMRYwFAYD VQQDEw02NzQxMjQyMC1lN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2j73hOyIAmxM1ccgVXMDJGbf5gv0TEDZ0PvNlTRqDZqWhrZPK925p+8pADpl Di5HnHddN5ls+w/2Wcb2nX1gIrUME6ARk0JsWEnjTWu49NuhrjfUHpz8TwNEnhSw PoG3e+lYob80cXdtar04M7dQVlYNT0/hFxdSHI6Q1WK7cVSBXIlicFNmdJ/fo+TS 2ewepcTBn+e/nHGCGneyh6QXXeLGfYUqOdjULYdLl/nZdQSkG0YhYSU+Hwzbldko Iq3e71ZknlCsqg2VKkt/Zs9Z29DYIyHinKpdeNNnqaZ2JGh4zBP7pLkRIBCY44Cd aRdImGRNzrJt4o8yVOQDGIT6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0JCKso lQDaBXkUH3AD5WEa63zRMB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjE4MC8xMDJCQTE5RTlFNDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdo QTZpRFYzYWVGMk1HMFpkSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMcrd6VXlbd300tYS8qgrL0zMbCqiU7Y5BcRZTCYjqi0Bx7ySq7Wpm Gq3lrYgbtZEKPbsFx8iH2afm4dE1k8o6HK4EsUf8AWbnrKSBcE2R5Z654VhgfF1S JrGMQR923mOSF2x58Qcbtd+xyJKXrnHHcgRSfnPb+ODVigKS2W1SaksFVW8kcVVz Qybk4RHz7GuNiU3HAKS0MopspMF5ufJaxe70707Q/aODaWvi2vlxmN8fysLY7pBb oL3jDyO+x2+usGmAgiEIDCD0lEm/QLmjOBHs4OKMQ7JjyQnbMFoQ1Pza4IiIGDrL 1a4sTcNg8m/3cyEIevnBq1mUs28pIxqU -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org