$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: s+e6ngk1LK08mC3QdpoYprJE0gKBDIEEIIN+GyuM5oQ= Subject key identifier: EF:69:7D:27:B9:8A:F4:9B:5A:2C:20:49:15:35:87:5C:0D:CC:FD:BC Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 03BD Signing time: Thu 21 Nov 2024 00:15:26 +0000 Manifest this update: Thu 21 Nov 2024 00:15:25 +0000 Manifest next update: Thu 28 Nov 2024 00:15:25 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: dI9mkIZxr2Im8OCfHn73NYUfk/L8/WtHMulwTR7m0v4=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: jvk96CEDll1/qLiM4Of9YUMKuZHTCq+mSdJsfvPCWmQ=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: 3to0kmpKm4kD9eXIyJENq46vq98MggdA6Yvgp0l4ahU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Nov 21 00:15:25 2024 GMT Not After : Nov 28 00:15:25 2024 GMT Subject: CN=673e7b9e-3237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:c0:d9:3a:7f:f2:f3:4a:0a:54:f1:94:63: 3a:f7:90:a8:4a:15:5b:db:fa:4a:c0:e1:39:3c:e0: d2:48:1e:ee:be:8c:8d:26:ff:bf:08:e0:af:8e:cc: ff:1a:28:db:5d:47:74:5c:d0:66:fc:0b:64:18:3c: c8:88:8c:06:bf:17:7f:f7:c6:fc:72:13:f7:59:ba: 34:3b:4c:ea:df:d9:7f:75:f7:32:9a:e1:39:40:f5: 9a:ed:32:70:7b:b3:d1:2c:b0:8a:03:55:66:16:69: fc:4e:80:e1:e5:ec:4e:53:c4:7c:bb:f9:11:e4:de: b5:5b:fe:54:81:42:77:0d:09:f1:2c:c9:41:ab:2c: fc:2f:f6:e0:c8:95:26:86:99:eb:51:83:ff:29:d4: 98:36:b3:15:1c:fd:e5:c1:93:53:43:1f:35:91:f9: 3a:35:71:5c:c8:f2:14:7e:75:e7:89:18:a2:e0:15: 24:46:d5:4b:28:69:ba:47:9f:38:1a:87:9f:71:41: fa:c6:c6:d2:a7:0a:c4:e2:ef:7f:74:ac:3f:2d:2e: f0:45:b2:c6:70:2c:83:a4:94:03:f3:e0:94:2b:52: c5:8d:ae:fe:3c:78:24:c9:e5:ff:9b:36:44:21:c5: 17:8a:ef:05:dc:21:81:98:bd:0f:9a:6e:e8:5f:eb: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:69:7D:27:B9:8A:F4:9B:5A:2C:20:49:15:35:87:5C:0D:CC:FD:BC X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:44:ba:07:12:07:58:e0:cc:f3:9f:12:14:1f:a0:ec:bf:43: 2c:2b:ca:82:9e:3c:20:64:ee:1a:ca:d3:ab:47:86:a0:3f:45: ff:db:83:8e:95:5b:32:55:33:08:e8:80:63:1a:a6:6d:ab:ca: a3:68:12:03:28:49:c3:7e:8a:66:1a:bd:ee:21:58:ed:7b:76: 5a:36:36:c9:ca:cd:0f:e0:aa:85:e3:63:2f:61:56:cf:3e:7e: fa:3f:d0:b2:99:d0:00:ff:22:6e:02:8e:12:7a:76:85:b1:1b: cd:5b:be:f5:f8:20:55:cb:7b:52:bb:03:e3:c0:fb:cf:3e:03: c9:cf:70:fb:d6:f1:be:c5:56:ca:ca:fa:5d:f2:f6:74:f9:a7: 13:dd:cf:ed:d0:6e:a1:39:ec:3f:3f:de:32:1e:36:a3:1a:a2: 6e:78:b7:c3:c2:aa:f2:f0:5d:26:90:71:9f:95:a0:d4:df:ad: f6:b1:f5:45:b2:ff:ab:f0:9a:00:97:e3:8a:d2:8d:36:06:22: 86:0e:79:36:43:48:45:ab:73:95:3e:23:56:b8:d7:e1:7f:45: c0:33:c8:bc:f4:a5:6e:20:30:91:9e:f7:fd:87:90:d3:ea:82: 76:14:d5:9c:d0:73:83:89:68:1e:5c:cf:22:03:ff:7f:7e:46: 51:ed:2f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjQxMTIxMDAxNTI1WhcNMjQxMTI4MDAxNTI1WjAYMRYwFAYD VQQDEw02NzNlN2I5ZS0zMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+PA2Tp/8vNKClTxlGM695CoShVb2/pKwOE5PODSSB7uvoyNJv+/COCvjsz/ GijbXUd0XNBm/AtkGDzIiIwGvxd/98b8chP3Wbo0O0zq39l/dfcymuE5QPWa7TJw e7PRLLCKA1VmFmn8ToDh5exOU8R8u/kR5N61W/5UgUJ3DQnxLMlBqyz8L/bgyJUm hpnrUYP/KdSYNrMVHP3lwZNTQx81kfk6NXFcyPIUfnXniRii4BUkRtVLKGm6R584 GoefcUH6xsbSpwrE4u9/dKw/LS7wRbLGcCyDpJQD8+CUK1LFja7+PHgkyeX/mzZE IcUXiu8F3CGBmL0Pmm7oX+vFfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9pfSe5 ivSbWiwgSRU1h1wNzP28MB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDRLoHEgdY4MzznxIUH6Dsv0MsK8qCnjwgZO4aytOrR4agP0X/24OO lVsyVTMI6IBjGqZtq8qjaBIDKEnDfopmGr3uIVjte3ZaNjbJys0P4KqF42MvYVbP Pn76P9CymdAA/yJuAo4SenaFsRvNW771+CBVy3tSuwPjwPvPPgPJz3D71vG+xVbK yvpd8vZ0+acT3c/t0G6hOew/P94yHjajGqJueLfDwqry8F0mkHGflaDU3632sfVF sv+r8JoAl+OK0o02BiKGDnk2Q0hFq3OVPiNWuNfhf0XAM8i89KVuIDCRnvf9h5DT 6oJ2FNWc0HODiWgeXM8iA/9/fkZR7S9t -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org