$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: fEj4ooVhJu4Hh4gP2o0OmgQpNlqm8K9vd1moK7o5spI= Subject key identifier: E6:5B:2A:AB:05:B6:B1:31:11:0A:4F:5E:44:EF:B4:A1:48:D0:09:A6 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 0499 Signing time: Sun 24 Nov 2024 23:29:46 +0000 Manifest this update: Sun 24 Nov 2024 23:29:45 +0000 Manifest next update: Sun 01 Dec 2024 23:29:45 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: L7Ri9pmAG+NURVV9C8pmy7SZo+5T8rq3jqC0HaJUjTk=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: sNWMaE6Kxk7U7IVJoIVHc26Epr9NZPx+NxSKpYd0Rl0=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: p4TNgo9wMcdad9TW6jRHKAurVuODUEQBPpYKh3qruTY=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: AsBmvifqi5kf8Uva/ra6MediB6kZeyoXPryhmUwcMIo=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: hEnaLHRK3RhsZxVdnfBYMx2CZiUO3Zyp76r2D0ywcK4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: aqlNHvLsowrNCshV5huaECQwhT+7ps3G55fqOA8lWJY=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: EaL7saPML0jId9rtbBr/qVnmKgWaUc9g52nwg+Gepss=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: wiIyYyxWUkr+Ordrgxj8/xP4tlK+/DrPM/peLpho1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Nov 24 23:29:45 2024 GMT Not After : Dec 1 23:29:45 2024 GMT Subject: CN=6743b6ea-5dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:8f:03:9c:53:58:98:de:66:06:52:38:18: a5:a2:89:6e:b7:8c:00:6a:42:d5:e6:04:4e:f9:25: 48:2f:3b:e2:44:bd:4a:24:fc:03:0c:b8:e9:cf:e7: a5:e1:01:d7:73:9b:d7:87:32:fe:7d:33:bc:c0:4f: fe:39:fd:37:1c:03:82:28:5d:78:c7:d5:b6:a7:5f: 8f:58:c0:3d:90:a3:a1:37:f6:57:9a:e8:d2:89:d3: 1e:f4:37:5a:dc:b7:6c:79:44:3f:05:b0:57:af:78: 9b:7d:e2:8f:62:0d:8d:d8:f5:51:bd:b7:f7:00:0d: 91:d5:f7:25:f9:fc:d9:0e:61:4f:2e:b0:ce:08:60: 40:57:73:ef:3f:3d:ad:08:91:e9:b9:f8:6d:b4:32: 35:d6:c8:66:2a:58:e2:c5:cc:6e:10:aa:25:e4:b9: 65:97:dc:e8:37:5e:0b:75:34:2a:c1:b2:12:36:fc: ac:ba:98:b4:45:ee:e8:7e:59:64:75:e6:fc:de:64: f5:5a:3b:74:38:69:71:a8:51:1a:32:92:b0:60:8f: 34:c9:17:cd:9f:24:91:8c:cd:f8:eb:23:1e:37:b2: 54:37:c1:cf:e1:59:e7:dd:d0:d6:12:aa:c4:77:41: 2c:53:d2:fe:4d:ca:ad:51:fa:4a:47:ab:be:9f:f2: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5B:2A:AB:05:B6:B1:31:11:0A:4F:5E:44:EF:B4:A1:48:D0:09:A6 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:07:3c:c6:4b:ec:c1:d7:0d:1c:fd:a4:ba:74:f2:78:c7:9d: a7:f7:0c:85:cf:6a:57:ff:78:30:a2:3c:3a:75:ff:2e:50:0c: a9:28:30:15:a2:0c:6d:eb:03:fc:bd:22:aa:fe:66:a1:4f:27: 7c:68:2b:db:94:6e:7e:38:f3:2e:9a:94:09:4a:0e:52:d1:43: 09:5d:e2:f3:3f:48:4c:40:e0:ad:77:ed:14:60:46:75:a8:ac: da:b2:c6:81:bd:8a:c0:89:72:18:d9:65:dd:82:ae:3e:c3:ec: 44:52:7a:36:4b:b4:63:85:34:d2:de:ea:a6:80:e8:85:95:cc: c5:2b:9a:45:53:30:55:ab:da:05:26:42:3d:21:e7:2f:6e:b5: 29:0d:3f:91:f1:55:a4:dd:07:19:5d:5c:5a:0d:d7:01:0d:c0: 9c:8f:38:05:5a:01:1b:91:4a:a9:a5:25:bb:7a:e6:00:26:0e: dc:14:49:30:8b:c9:e8:c5:f2:23:7e:41:e8:f8:af:06:ad:2d: a0:9b:56:2b:83:d3:57:5c:71:0d:10:70:41:35:5b:74:99:3f: 0a:11:68:e8:bf:d9:8d:5f:ab:a5:c7:67:8b:5e:64:34:51:cd: 90:a9:13:cf:2b:e9:f0:87:c5:18:07:a7:ae:89:a3:4b:c4:49: d8:7d:aa:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjQxMTI0MjMyOTQ1WhcNMjQxMjAxMjMyOTQ1WjAYMRYwFAYD VQQDEw02NzQzYjZlYS01ZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2X+PA5xTWJjeZgZSOBiloolut4wAakLV5gRO+SVILzviRL1KJPwDDLjpz+el 4QHXc5vXhzL+fTO8wE/+Of03HAOCKF14x9W2p1+PWMA9kKOhN/ZXmujSidMe9Dda 3LdseUQ/BbBXr3ibfeKPYg2N2PVRvbf3AA2R1fcl+fzZDmFPLrDOCGBAV3PvPz2t CJHpufhttDI11shmKljixcxuEKol5Llll9zoN14LdTQqwbISNvysupi0Re7ofllk deb83mT1Wjt0OGlxqFEaMpKwYI80yRfNnySRjM346yMeN7JUN8HP4Vnn3dDWEqrE d0EsU9L+TcqtUfpKR6u+n/LjZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZbKqsF trExEQpPXkTvtKFI0AmmMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7BzzGS+zB1w0c/aS6dPJ4x52n9wyFz2pX/3gwojw6df8uUAypKDAV ogxt6wP8vSKq/mahTyd8aCvblG5+OPMumpQJSg5S0UMJXeLzP0hMQOCtd+0UYEZ1 qKzassaBvYrAiXIY2WXdgq4+w+xEUno2S7RjhTTS3uqmgOiFlczFK5pFUzBVq9oF JkI9IecvbrUpDT+R8VWk3QcZXVxaDdcBDcCcjzgFWgEbkUqppSW7euYAJg7cFEkw i8noxfIjfkHo+K8GrS2gm1Yrg9NXXHENEHBBNVt0mT8KEWjov9mNX6ulx2eLXmQ0 Uc2QqRPPK+nwh8UYB6euiaNLxEnYfark -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:31 2024 by rpki-client on console-fra.rpki-client.org