$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: 8LZijSc0hlW4AqpcfcuZ4MWFMlvIQ2HUZHdI29Yqwzg= Subject key identifier: EA:8F:77:C8:2B:DC:43:46:D9:9C:70:A5:0E:75:1F:85:5E:11:FA:D9 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 08BE Signing time: Wed 20 Nov 2024 20:13:50 +0000 Manifest this update: Wed 20 Nov 2024 20:13:49 +0000 Manifest next update: Wed 27 Nov 2024 20:13:49 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: PRqzfgL89yNljYZsyO+R21ihUvU9mHvE5RsIJylVIb8=) 2: C87A727C2F8411EBA83F6F6DC4F9AE02.roa (hash: MsppnoKs5sY8vwtLpvFUKRCYQilabrALIyzrhW0Z5hw=) 3: 5C0A4894F60D11EEADD2752BC4F9AE02.roa (hash: H/NoPQuzUHx4Pz2NsHS1IxKvOouKPbRBspJCW/d+jBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Nov 20 20:13:49 2024 GMT Not After : Nov 27 20:13:49 2024 GMT Subject: CN=673e42fe-dfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:5d:36:5c:ea:e3:9d:fe:92:84:e2:31:62: 53:9e:a4:35:66:dd:28:3f:61:6d:17:38:9c:b1:e9: 4c:f5:01:43:5f:ba:23:33:6a:25:33:2a:b6:72:f5: 4c:94:7e:28:32:79:28:10:cb:7a:c1:fa:79:93:3b: ea:21:e7:b7:c8:47:9c:39:d0:95:a3:94:43:6b:ed: 27:2c:fc:0e:1b:74:47:34:36:09:56:bd:fb:a0:27: 16:5c:77:b9:0a:a9:45:48:b4:23:38:17:7d:7c:02: 1e:3f:d6:35:70:bd:8f:f9:1d:ad:52:4a:13:97:32: d0:c6:df:12:87:55:d9:b0:d8:9d:d8:ed:76:ec:2d: ab:29:44:dd:2a:36:01:4e:52:b1:8b:fe:c3:bd:08: ef:35:0d:51:4b:5c:17:a6:ae:6f:a0:fb:5f:a7:fb: a1:1d:e7:ae:5d:1e:e2:76:75:c1:9e:1e:79:2b:21: 82:d0:ef:d3:bd:c2:74:69:f3:09:fa:fb:41:8d:6e: 1a:ef:53:e6:df:74:98:18:3e:05:60:0f:38:66:68: 66:0b:f5:59:bc:a8:3f:5f:d5:44:92:23:78:f0:c4: 63:70:5a:09:86:77:14:8a:4a:f8:6c:79:c5:bd:59: 09:4e:84:7c:4a:50:d1:af:85:1c:33:83:0b:e4:aa: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8F:77:C8:2B:DC:43:46:D9:9C:70:A5:0E:75:1F:85:5E:11:FA:D9 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a2:dc:97:08:3a:36:6f:74:c7:5d:10:7a:d6:27:6f:f4:46: 04:e0:3a:ce:a3:cc:a8:0e:b0:68:62:e1:d8:24:09:0e:d3:21: e3:fc:29:6a:48:00:d9:cf:1c:8b:78:d6:d4:d0:bb:6d:93:16: 0d:8b:ef:31:90:2f:8b:0e:c3:dd:b7:87:02:a2:37:13:bd:5d: 72:38:18:33:00:f8:8c:76:58:db:99:d6:c0:a6:b5:92:42:05: cf:f1:33:4d:26:dd:dc:a4:71:27:e4:8b:03:55:1e:eb:a4:9a: 3e:a5:2a:83:94:74:bd:c3:62:d5:7f:d3:30:5b:3b:04:eb:3e: fe:a4:35:13:1b:07:45:d4:b4:28:49:7b:c0:cc:5c:3e:84:18: 9f:cb:8e:6f:5a:ef:de:52:c8:d9:1b:b3:01:51:02:2e:53:dc: 5f:e3:47:9d:6a:28:ec:35:1a:ff:db:dc:fe:fe:2e:a0:ed:fa: a7:a7:b1:23:4d:0b:7a:ec:cf:77:67:72:73:c6:5f:46:04:2c: 4d:46:05:6a:b8:d0:5f:17:59:fe:cc:79:74:76:58:96:ef:08: 79:e7:b9:c1:cd:97:ea:78:63:dc:4d:0f:e8:70:e6:dc:a0:9a: 36:c2:e8:de:78:40:95:a9:ed:70:05:9e:ee:bf:37:ec:2e:d2: 76:48:3c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjQxMTIwMjAxMzQ5WhcNMjQxMTI3MjAxMzQ5WjAYMRYwFAYD VQQDEw02NzNlNDJmZS1kZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0BdNlzq453+koTiMWJTnqQ1Zt0oP2FtFzicselM9QFDX7ojM2olMyq2cvVM lH4oMnkoEMt6wfp5kzvqIee3yEecOdCVo5RDa+0nLPwOG3RHNDYJVr37oCcWXHe5 CqlFSLQjOBd9fAIeP9Y1cL2P+R2tUkoTlzLQxt8Sh1XZsNid2O127C2rKUTdKjYB TlKxi/7DvQjvNQ1RS1wXpq5voPtfp/uhHeeuXR7idnXBnh55KyGC0O/TvcJ0afMJ +vtBjW4a71Pm33SYGD4FYA84ZmhmC/VZvKg/X9VEkiN48MRjcFoJhncUikr4bHnF vVkJToR8SlDRr4UcM4ML5Kp+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqPd8gr 3ENG2ZxwpQ51H4VeEfrZMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCotyXCDo2b3THXRB61idv9EYE4DrOo8yoDrBoYuHYJAkO0yHj/Clq SADZzxyLeNbU0LttkxYNi+8xkC+LDsPdt4cCojcTvV1yOBgzAPiMdljbmdbAprWS QgXP8TNNJt3cpHEn5IsDVR7rpJo+pSqDlHS9w2LVf9MwWzsE6z7+pDUTGwdF1LQo SXvAzFw+hBify45vWu/eUsjZG7MBUQIuU9xf40edaijsNRr/29z+/i6g7fqnp7Ej TQt67M93Z3Jzxl9GBCxNRgVquNBfF1n+zHl0dliW7wh557nBzZfqeGPcTQ/ocObc oJo2wujeeECVqe1wBZ7uvzfsLtJ2SDxm -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:45 2024 by rpki-client on console-fra.rpki-client.org