$ rpki-client -vvf rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft File: -LGWnnogmA-I6xCFb5oqWhkT3VE.mft (raw, json) Hash identifier: 9FsfHh61Jb7FBzZm8haEvdeNakMdRklOkkHVnm9k+HU= Subject key identifier: 7B:A2:C6:CE:97:BF:A3:1A:D7:DB:9C:DA:97:A6:B6:7C:6E:7A:D1:2F Authority key identifier: F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51 Certificate issuer: /CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft Manifest number: 047C Signing time: Fri 22 Nov 2024 23:35:37 +0000 Manifest this update: Fri 22 Nov 2024 23:35:37 +0000 Manifest next update: Fri 29 Nov 2024 23:35:37 +0000 Files and hashes: 1: -LGWnnogmA-I6xCFb5oqWhkT3VE.crl (hash: 0GDJjRI3EGBPyRceWtdhwOUa0ni4rYCPsdp6LKTG2i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.crl rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51 Validity Not Before: Nov 22 23:35:37 2024 GMT Not After : Nov 29 23:35:37 2024 GMT Subject: CN=67411549-548e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:37:60:76:db:97:32:85:b4:32:ac:a6:6d: 35:1b:cd:7f:9a:02:cb:85:65:71:f3:a4:22:bf:a9: 9b:7f:a7:d8:67:4b:eb:af:8a:b4:3e:f5:8b:32:c1: 88:a8:7e:a9:c9:33:e3:66:f1:4c:80:42:0c:01:f0: 6c:cf:be:b5:6e:9e:1c:70:99:1e:e4:98:40:db:e9: df:a2:cb:22:fe:40:7b:0e:74:16:f6:16:b9:bc:14: 48:9e:1e:fb:05:17:85:5c:d4:c1:2c:ff:71:90:52: 13:0d:79:bd:1b:0d:9f:e2:dc:52:df:50:ad:1b:ce: f3:c2:ee:6e:02:68:71:f9:ee:93:32:7a:62:23:01: 5e:f0:7e:94:ed:b6:6b:9e:4d:e4:f3:9c:97:d8:2a: e0:91:92:fb:cb:d8:94:61:5d:cb:b7:64:90:16:bb: fd:34:14:3e:61:f4:f4:89:7f:d8:e2:41:7d:16:9d: c9:c9:df:f3:a4:ad:81:ce:51:29:d3:42:3f:e7:b7: 9a:5a:6e:3f:d2:8b:21:83:73:d0:f4:96:5f:11:d3: 9f:dd:34:24:c3:a6:71:03:da:25:59:e4:9b:df:36: a8:f6:b1:1f:17:f9:35:57:6d:89:3d:90:e6:36:c9: 3c:74:ce:97:3d:01:7b:0c:bc:83:b2:1e:f3:7e:48: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A2:C6:CE:97:BF:A3:1A:D7:DB:9C:DA:97:A6:B6:7C:6E:7A:D1:2F X509v3 Authority Key Identifier: keyid:F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:dc:93:88:3b:16:06:02:07:f1:c0:15:03:73:fb:68:65:4d: 2b:01:25:2e:e7:7c:4e:fa:41:9a:0d:a0:09:77:78:7f:9b:0a: 65:22:a7:ad:1c:08:f6:83:38:bf:c7:6a:3f:ce:a4:fc:da:0e: 42:ca:58:7c:47:d8:e6:3e:52:6f:7e:18:94:0e:ee:e8:69:74: b5:a0:34:c8:69:d1:aa:9d:27:b6:f2:06:e2:4e:9d:d7:ad:c4: 9a:bb:8b:f7:9f:54:8e:89:c6:34:d6:94:ba:ea:02:9e:2c:80: 55:d4:3d:ba:7f:77:ab:ad:00:ff:8c:1c:dd:dd:5b:9f:2f:6c: d7:f1:f7:ef:54:d0:15:cc:d3:5a:c3:24:a4:32:68:fe:8d:4e: eb:b0:b4:8a:8e:18:60:b6:0b:b2:fc:ce:b6:73:37:fd:8b:f3: b4:f6:35:33:82:e7:e8:b6:cf:52:ac:f1:61:3d:32:7e:b1:6c: 5e:5e:6d:65:40:86:54:bf:89:2c:69:92:0d:14:cb:96:ce:dc: 99:ea:3c:52:7c:36:f9:8c:17:69:25:ce:1f:38:90:b5:de:c7: 3f:b6:53:6e:2a:6a:c4:5f:f5:e7:4d:99:60:fa:06:1c:58:6b: dd:5d:78:a0:32:40:4f:49:bb:95:0e:77:c8:85:80:ae:7e:0a: d5:5c:91:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4QkQxMTAvBgNVBAUTKEY4QjE5NjlFN0EyMDk4MEY4OEVCMTA4NTZGOUEyQTVB MTkxM0RENTEwHhcNMjQxMTIyMjMzNTM3WhcNMjQxMTI5MjMzNTM3WjAYMRYwFAYD VQQDEw02NzQxMTU0OS01NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqw3YHbblzKFtDKspm01G81/mgLLhWVx86Qiv6mbf6fYZ0vrr4q0PvWLMsGI qH6pyTPjZvFMgEIMAfBsz761bp4ccJke5JhA2+nfossi/kB7DnQW9ha5vBRInh77 BReFXNTBLP9xkFITDXm9Gw2f4txS31CtG87zwu5uAmhx+e6TMnpiIwFe8H6U7bZr nk3k85yX2CrgkZL7y9iUYV3Lt2SQFrv9NBQ+YfT0iX/Y4kF9Fp3Jyd/zpK2BzlEp 00I/57eaWm4/0oshg3PQ9JZfEdOf3TQkw6ZxA9olWeSb3zao9rEfF/k1V22JPZDm Nsk8dM6XPQF7DLyDsh7zfkhHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuixs6X v6Ma19uc2pemtnxuetEvMB8GA1UdIwQYMBaAFPixlp56IJgPiOsQhW+aKloZE91R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzhCRC85MzVDMDhFNDE5 QzExMUVDOEI3REEzNzJDNEY5QUUwMi8tTEdXbm5vZ21BLUk2eENGYjVvcVdoa1Qz VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MR1dubm9nbUEtSTZ4Q0ZiNW9xV2hrVDNWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzhCRC85MzVDMDhFNDE5QzExMUVDOEI3REEzNzJDNEY5QUUwMi8tTEdXbm5vZ21B LUk2eENGYjVvcVdoa1QzVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU3JOIOxYGAgfxwBUDc/toZU0rASUu53xO+kGaDaAJd3h/mwplIqet HAj2gzi/x2o/zqT82g5Cylh8R9jmPlJvfhiUDu7oaXS1oDTIadGqnSe28gbiTp3X rcSau4v3n1SOicY01pS66gKeLIBV1D26f3errQD/jBzd3VufL2zX8ffvVNAVzNNa wySkMmj+jU7rsLSKjhhgtguy/M62czf9i/O09jUzgufots9SrPFhPTJ+sWxeXm1l QIZUv4ksaZINFMuWztyZ6jxSfDb5jBdpJc4fOJC13sc/tlNuKmrEX/XnTZlg+gYc WGvdXXigMkBPSbuVDnfIhYCufgrVXJFI -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org