$ rpki-client -vvf rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft File: LVzM98MOtjzd6jS-g75guw4CehM.mft (raw, json) Hash identifier: HZXKhlXuMqS4p99oN06OnWk+XUSn+pOt2X0Sgu0dXm0= Subject key identifier: 61:34:56:E5:96:BD:31:A9:3A:EF:04:7C:3C:87:F8:BC:26:89:47:F6 Authority key identifier: 2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 Certificate issuer: /CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft Manifest number: 0AA5 Signing time: Fri 22 Nov 2024 19:17:44 +0000 Manifest this update: Fri 22 Nov 2024 19:17:44 +0000 Manifest next update: Fri 29 Nov 2024 19:17:44 +0000 Files and hashes: 1: LVzM98MOtjzd6jS-g75guw4CehM.crl (hash: PhSLf5+LFAYxwpXeuw1/9/uJtfplfHZvSz4JlDhOptI=) 2: AE5FD48E431911EAB8FF4125C4F9AE02.roa (hash: b7xKBJG0oZKVyZ2643PnW4vynxMPff8P9zN+YA4f3L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Validity Not Before: Nov 22 19:17:44 2024 GMT Not After : Nov 29 19:17:44 2024 GMT Subject: CN=6740d8d8-6f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:d7:08:c8:ae:0e:75:dc:41:27:60:a2:08: 9b:e6:3f:e3:91:fd:3b:30:ad:dc:fd:22:da:79:f6: b2:94:ec:2e:b6:56:fb:e4:21:94:ab:3c:6a:a4:ea: d7:d2:3f:0b:90:0f:31:8f:bf:94:78:e1:1d:3f:2b: 97:8b:a3:4f:68:25:38:3a:9d:04:c9:96:13:6d:9c: b8:8e:25:c0:f1:3c:f0:2e:ef:cf:59:f7:fe:e8:9a: 97:38:dc:f1:e6:2b:e5:b0:71:91:85:7e:89:f7:13: c8:f7:01:ea:63:b0:16:00:cc:45:60:0f:4a:5b:b7: a7:a9:85:21:d1:80:5e:03:93:40:01:d8:51:ba:ac: a4:30:a0:f1:f8:85:88:83:0a:67:e0:6b:48:6a:f3: e5:ea:c7:8d:b0:6f:a9:93:41:96:3f:a1:4c:75:b6: 04:f9:db:8f:86:a3:1c:1c:13:23:f5:1c:77:90:87: 16:ec:c5:0f:f8:f5:80:68:15:ba:e3:46:c4:03:e1: 2e:e3:98:16:12:9d:94:51:b4:2d:fc:d7:db:5d:1d: 49:fb:1e:6a:9e:f0:7d:62:1a:29:ec:06:2e:e0:62: 1e:41:98:ad:74:4d:7a:4e:b4:95:2a:c5:5d:c2:c6: 95:63:d8:c9:58:e7:2e:78:a9:1d:e8:da:d2:9e:ca: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:56:E5:96:BD:31:A9:3A:EF:04:7C:3C:87:F8:BC:26:89:47:F6 X509v3 Authority Key Identifier: keyid:2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:80:72:23:80:b1:de:51:04:f0:85:d4:8b:ba:5a:a6:20: f9:0f:4c:2d:c1:ec:34:ab:29:90:57:92:50:1a:72:21:5d:0e: e2:84:7b:59:88:70:15:41:a6:e2:0c:64:47:04:e1:0e:87:ca: 3f:9f:56:26:79:2f:08:e0:1b:fe:61:8a:f2:c1:f0:26:8f:92: 9c:75:da:27:d0:44:ba:99:25:bf:5b:15:cf:a7:c8:fe:86:2b: b8:c7:a8:6b:9b:d4:50:a4:0b:71:3b:45:92:20:ad:75:93:a0: 2d:67:64:01:33:e2:d2:66:0a:69:05:a8:b2:9a:92:c5:78:41: 8b:a2:1d:4f:97:e4:33:89:25:ea:1e:4f:b6:97:02:2b:70:f5: 96:37:40:d7:4a:bd:b1:b0:77:92:da:7c:94:a0:2f:5c:5f:23: e2:56:f3:55:47:03:9a:b8:c8:98:8a:f6:8c:92:48:25:9d:0c: 4f:8f:86:7d:0d:13:dd:4b:49:a5:d8:08:c8:fb:53:7b:8b:db: d4:b2:92:ab:7f:49:10:d7:1f:81:b2:4f:41:ea:56:24:f8:8d: fb:e9:c3:4c:14:48:41:28:d0:c1:bb:e9:df:f7:02:f0:46:5b: f5:4a:67:a5:a8:ee:35:3d:13:6b:78:15:b4:09:e6:33:e2:ed: 0e:40:57:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYxMEExMTAvBgNVBAUTKDJENUNDQ0Y3QzMwRUI2M0NEREVBMzRCRTgzQkU2MEJC MEUwMjdBMTMwHhcNMjQxMTIyMTkxNzQ0WhcNMjQxMTI5MTkxNzQ0WjAYMRYwFAYD VQQDEw02NzQwZDhkOC02ZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBPXCMiuDnXcQSdgogib5j/jkf07MK3c/SLaefaylOwutlb75CGUqzxqpOrX 0j8LkA8xj7+UeOEdPyuXi6NPaCU4Op0EyZYTbZy4jiXA8TzwLu/PWff+6JqXONzx 5ivlsHGRhX6J9xPI9wHqY7AWAMxFYA9KW7enqYUh0YBeA5NAAdhRuqykMKDx+IWI gwpn4GtIavPl6seNsG+pk0GWP6FMdbYE+duPhqMcHBMj9Rx3kIcW7MUP+PWAaBW6 40bEA+Eu45gWEp2UUbQt/NfbXR1J+x5qnvB9Yhop7AYu4GIeQZitdE16TrSVKsVd wsaVY9jJWOcueKkd6NrSnsrF/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE0VuWW vTGpOu8EfDyH+LwmiUf2MB8GA1UdIwQYMBaAFC1czPfDDrY83eo0voO+YLsOAnoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjEwQS8yNzQ1NTdGRTQz MTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3RqemQ2alMtZzc1Z3V3NENl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWek05OE1PdGp6ZDZqUy1nNzVndXc0Q2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjEwQS8yNzQ1NTdGRTQzMTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3Rq emQ2alMtZzc1Z3V3NENlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPWoByI4Cx3lEE8IXUi7papiD5D0wtwew0qymQV5JQGnIhXQ7ihHtZ iHAVQabiDGRHBOEOh8o/n1YmeS8I4Bv+YYrywfAmj5Kcddon0ES6mSW/WxXPp8j+ hiu4x6hrm9RQpAtxO0WSIK11k6AtZ2QBM+LSZgppBaiympLFeEGLoh1Pl+QziSXq Hk+2lwIrcPWWN0DXSr2xsHeS2nyUoC9cXyPiVvNVRwOauMiYivaMkkglnQxPj4Z9 DRPdS0ml2AjI+1N7i9vUspKrf0kQ1x+Bsk9B6lYk+I376cNMFEhBKNDBu+nf9wLw Rlv1SmelqO41PRNreBW0CeYz4u0OQFfj -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org