$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: 3srimlqmKAMXRZ3k7TupKFWGjl2BH1W7pti63AEm2aM= Subject key identifier: 30:7F:1C:7E:84:B5:9F:CB:B3:90:5C:AF:30:C2:B5:A5:8E:51:01:57 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 3456 Signing time: Fri 22 Nov 2024 14:24:21 +0000 Manifest this update: Fri 22 Nov 2024 14:24:21 +0000 Manifest next update: Fri 29 Nov 2024 14:24:21 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: UGCs0faKeIR/zb3BX804T0tUNm8sFfB2Nlx3VwW7lfE=) 2: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 3: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 4: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 5: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 6: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) 7: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 8: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 9: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Nov 22 14:24:21 2024 GMT Not After : Nov 29 14:24:21 2024 GMT Subject: CN=67409415-1460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:65:7d:17:73:8d:1d:34:45:e3:38:32:44: 11:b6:d7:33:90:0a:45:d1:41:3e:f0:60:89:e1:9e: f6:9b:15:2e:b0:f2:a6:dd:a6:c7:1f:6a:cd:32:92: d8:05:aa:ee:1b:ea:6e:35:ea:19:a3:41:df:69:5a: 81:4f:04:c0:42:32:ad:5a:4b:26:31:f9:ec:6b:9a: a2:61:24:ba:b4:bb:c5:16:38:72:c3:d6:d8:8f:53: 61:3c:ca:b7:2f:bd:de:8e:1e:5d:17:6d:b2:df:21: 80:5d:53:f4:48:b0:97:d4:9e:80:ab:4b:74:d6:b1: 7e:56:eb:b7:7a:ce:ab:71:d0:e5:44:ef:aa:ed:dd: 10:f8:99:2f:cd:c4:cb:8c:7e:6a:1e:cf:26:5e:f6: 70:18:13:16:0e:29:cb:ac:70:48:1c:b6:29:90:7c: 34:b5:6b:af:3f:89:df:a7:1f:53:59:aa:ac:70:58: 8b:37:63:6b:f7:bd:9d:b0:36:63:36:ad:74:fd:6a: 4b:c2:14:52:29:bb:3e:5d:3a:1f:a8:66:3d:cc:e5: 5f:f5:64:af:4c:1a:35:8d:f8:db:1c:4b:2d:93:14: 21:19:19:1d:47:1f:36:ec:84:14:0e:ac:5b:be:3b: 3f:26:e3:a9:15:3a:82:10:2b:6d:3b:6b:fb:d7:22: 98:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7F:1C:7E:84:B5:9F:CB:B3:90:5C:AF:30:C2:B5:A5:8E:51:01:57 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bd:fd:25:1e:44:4d:3c:01:b1:cb:6a:67:c0:b9:00:c0:34: 1a:cb:83:de:e4:cb:eb:d0:01:41:04:1c:4c:30:84:1e:4a:d4: 30:31:04:79:77:5d:04:b3:23:84:c9:a3:f0:1f:d3:1c:e5:68: be:32:bb:55:6a:ef:c3:2f:36:02:e4:66:39:dc:e0:a5:8b:75: 40:31:83:bd:e4:ff:ed:39:2b:d0:67:2b:3d:77:9f:e5:56:b6: 4a:b1:ea:db:6b:51:62:82:a5:53:ac:14:62:67:c1:00:02:01: 20:e9:50:85:7d:91:3a:7f:ca:fe:c5:2d:97:37:b7:a0:52:6b: b0:ed:57:38:0a:c9:2d:2f:4e:84:2d:fb:e9:b6:ce:41:e5:0c: ef:61:90:f7:a3:63:af:40:11:b9:1e:e1:f9:f2:16:82:ea:7d: ea:ba:ca:51:5e:00:f4:83:75:d0:8c:21:af:a0:4d:5d:cd:11: d0:d4:c7:b6:71:cf:18:65:57:6d:46:10:f4:40:74:8c:1a:ba: cf:b7:ff:8d:1f:16:7d:d9:4d:63:cc:f6:33:38:d4:9e:b3:17: ae:46:df:9e:0c:31:49:75:86:64:3e:6d:03:e6:76:01:b4:ed: 3f:a7:a9:f5:a3:6d:7b:ca:1b:06:bd:0a:d0:bd:d8:61:4b:ae: 1e:9f:b0:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjQxMTIyMTQyNDIxWhcNMjQxMTI5MTQyNDIxWjAYMRYwFAYD VQQDEw02NzQwOTQxNS0xNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7NlfRdzjR00ReM4MkQRttczkApF0UE+8GCJ4Z72mxUusPKm3abHH2rNMpLY BaruG+puNeoZo0HfaVqBTwTAQjKtWksmMfnsa5qiYSS6tLvFFjhyw9bYj1NhPMq3 L73ejh5dF22y3yGAXVP0SLCX1J6Aq0t01rF+Vuu3es6rcdDlRO+q7d0Q+JkvzcTL jH5qHs8mXvZwGBMWDinLrHBIHLYpkHw0tWuvP4nfpx9TWaqscFiLN2Nr972dsDZj Nq10/WpLwhRSKbs+XTofqGY9zOVf9WSvTBo1jfjbHEstkxQhGRkdRx827IQUDqxb vjs/JuOpFTqCECttO2v71yKYCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB/HH6E tZ/Ls5BcrzDCtaWOUQFXMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOvf0lHkRNPAGxy2pnwLkAwDQay4Pe5Mvr0AFBBBxMMIQeStQwMQR5 d10EsyOEyaPwH9Mc5Wi+MrtVau/DLzYC5GY53OCli3VAMYO95P/tOSvQZys9d5/l VrZKserba1FigqVTrBRiZ8EAAgEg6VCFfZE6f8r+xS2XN7egUmuw7Vc4CsktL06E Lfvpts5B5QzvYZD3o2OvQBG5HuH58haC6n3quspRXgD0g3XQjCGvoE1dzRHQ1Me2 cc8YZVdtRhD0QHSMGrrPt/+NHxZ92U1jzPYzONSesxeuRt+eDDFJdYZkPm0D5nYB tO0/p6n1o217yhsGvQrQvdhhS64en7B/ -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:39 2024 by rpki-client on console-fra.rpki-client.org