$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: VUkz5PwMZ8yV5KHQMCDS6bX2V6zZt+HWBjDOk5ak8n0= Subject key identifier: 93:BF:D6:BD:CB:DC:8B:A0:AD:75:79:23:7D:3A:30:85:32:BA:6C:68 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 3439 Signing time: Fri 22 Nov 2024 15:01:12 +0000 Manifest this update: Fri 22 Nov 2024 15:01:12 +0000 Manifest next update: Fri 29 Nov 2024 15:01:12 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: gDKeGeqQjUzvbL5Qr37ZDQ4cU2sk9bMBp5PyoBavpec=) 2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: 3fSEvKM13CebYGAsrgkzFIerRrbjNtx416zFYNRYGP0=) 3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: aVfEOKnVDm2poRF4e8I0r6U1onr3PWkW1eUF2/DigYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13380 (0x3444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Nov 22 15:01:12 2024 GMT Not After : Nov 29 15:01:12 2024 GMT Subject: CN=67409cb8-be0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:f0:a7:59:23:00:3c:35:62:5a:86:28:43: eb:62:c3:3b:25:e2:ea:22:0d:0c:0e:17:09:9d:b0: 77:8b:4c:a0:c5:7e:de:2f:15:2f:c4:79:57:d7:db: 8b:1f:71:87:bd:a0:47:12:76:bd:01:56:42:83:4a: 00:c1:d8:78:19:09:26:ad:1c:9e:22:15:1a:5e:f3: dc:2d:7a:ba:60:60:f0:6a:2b:5b:73:75:b8:9a:4a: 3a:52:11:42:8d:a4:49:ff:87:5c:83:87:7b:09:7d: b5:b0:0d:41:7c:c9:8e:07:24:1d:df:8b:06:31:06: 47:a9:18:ba:11:d2:54:95:bc:b6:26:d4:16:f0:2d: c5:41:00:c0:ef:0c:bb:2b:04:f1:a5:f2:50:6b:31: a8:e7:a1:d7:bc:0e:5a:5d:2e:14:db:5a:ce:00:bd: 38:05:3a:a5:a8:1a:ea:34:34:47:57:35:24:1b:d0: 0a:ad:f6:71:01:a8:da:04:bb:fd:2e:ab:27:02:e7: 41:52:e4:08:0c:69:ce:5e:02:02:73:c4:66:ec:4d: 89:e9:1b:fc:e1:aa:9a:40:e6:86:7f:ad:77:e2:ad: ba:1d:cf:c9:60:d2:75:77:b5:a6:b6:17:e8:e8:34: f6:e8:b9:cd:72:62:50:c0:90:af:c2:c5:96:de:bf: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BF:D6:BD:CB:DC:8B:A0:AD:75:79:23:7D:3A:30:85:32:BA:6C:68 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:23:8e:58:ae:9a:d1:02:1e:df:e0:cc:1b:30:3a:3e:da:67: 64:8c:fe:2a:3a:5c:41:39:7b:6e:8b:60:d0:e3:1d:46:81:28: 04:37:24:93:b6:02:05:a8:89:00:b7:ce:9c:e6:54:7f:02:0a: da:01:6b:89:a3:d2:f0:3b:66:49:e2:dd:07:af:7d:f6:15:dd: 6d:db:23:55:f4:f4:03:b3:0c:37:ef:5c:8c:6e:87:6e:01:70: 41:74:65:31:8b:b8:34:c2:c6:42:5c:f0:2a:d0:54:48:23:21: 59:7a:f7:43:88:4c:80:18:5d:8f:34:44:08:3b:f3:f4:d0:60: 85:5c:c1:1c:a2:99:0e:cc:57:5c:6c:c7:43:30:42:a4:b0:b2: 86:e3:4e:2e:86:c7:f6:2e:cf:3d:3f:b2:36:35:af:67:9d:d5: 63:d6:29:07:98:5f:c7:8e:d9:dc:35:7a:17:90:14:41:4b:c5: 3f:cf:20:f6:2e:89:eb:3a:a3:ae:48:8c:fe:b3:a1:8b:0a:56: fc:07:97:da:39:b7:94:68:b1:1c:0d:22:e5:b2:34:20:42:0e: af:ab:9e:96:93:b5:34:21:8e:2b:db:45:39:f3:89:e6:ea:b7: 69:44:b0:c1:f0:8b:2e:36:10:39:52:c1:65:d4:1b:86:b4:27: 70:ab:c2:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjQxMTIyMTUwMTEyWhcNMjQxMTI5MTUwMTEyWjAYMRYwFAYD VQQDEw02NzQwOWNiOC1iZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhbwp1kjADw1YlqGKEPrYsM7JeLqIg0MDhcJnbB3i0ygxX7eLxUvxHlX19uL H3GHvaBHEna9AVZCg0oAwdh4GQkmrRyeIhUaXvPcLXq6YGDwaitbc3W4mko6UhFC jaRJ/4dcg4d7CX21sA1BfMmOByQd34sGMQZHqRi6EdJUlby2JtQW8C3FQQDA7wy7 KwTxpfJQazGo56HXvA5aXS4U21rOAL04BTqlqBrqNDRHVzUkG9AKrfZxAajaBLv9 LqsnAudBUuQIDGnOXgICc8Rm7E2J6Rv84aqaQOaGf6134q26Hc/JYNJ1d7Wmthfo 6DT26LnNcmJQwJCvwsWW3r88jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO/1r3L 3IugrXV5I306MIUyumxoMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjI45YrprRAh7f4MwbMDo+2mdkjP4qOlxBOXtui2DQ4x1GgSgENyST tgIFqIkAt86c5lR/AgraAWuJo9LwO2ZJ4t0Hr332Fd1t2yNV9PQDsww371yMbodu AXBBdGUxi7g0wsZCXPAq0FRIIyFZevdDiEyAGF2PNEQIO/P00GCFXMEcopkOzFdc bMdDMEKksLKG404uhsf2Ls89P7I2Na9nndVj1ikHmF/HjtncNXoXkBRBS8U/zyD2 LonrOqOuSIz+s6GLClb8B5faObeUaLEcDSLlsjQgQg6vq56Wk7U0IY4r20U584nm 6rdpRLDB8IsuNhA5UsFl1BuGtCdwq8I/ -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:59 2024 by rpki-client on console-ams.rpki-client.org