$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: jBtsfQ+OWHaLwxj3zoMw/9vsx08uo9wUwYxzLhTdcV0= Subject key identifier: F2:AA:69:DE:0A:B1:70:38:27:B0:68:B8:E2:A0:68:1A:2C:24:9C:9C Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B02 Signing time: Wed 20 Nov 2024 19:02:16 +0000 Manifest this update: Wed 20 Nov 2024 19:02:16 +0000 Manifest next update: Wed 27 Nov 2024 19:02:16 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: 6kjCnDH5nPBaLWtKXaQptO3BGdZnngU32XHxUOirc8Q=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Nov 20 19:02:16 2024 GMT Not After : Nov 27 19:02:16 2024 GMT Subject: CN=673e3238-8b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:af:70:d3:4b:9e:b9:4d:cf:3e:fa:61:2e: 48:59:0b:06:af:95:4f:69:cb:3a:4b:77:96:e2:36: e6:73:3c:a0:56:c8:7e:91:ee:85:6f:23:79:25:d1: 52:d8:ae:17:67:00:1f:c5:d6:99:94:10:e9:52:85: 45:91:bc:b4:61:95:80:65:cd:47:2c:78:54:fe:4f: 52:85:15:f0:a9:d0:0e:7d:43:c1:f8:ff:e9:81:b4: 77:aa:f5:50:f5:42:2f:59:59:75:4e:9e:ef:a4:bf: 6c:52:58:b5:58:c4:f2:0f:c9:ad:8e:1b:14:f7:0a: 6d:74:59:ae:05:26:37:5a:e9:1c:49:ab:3a:55:f3: dc:55:43:db:15:8d:97:fc:74:e2:a3:21:92:b2:ce: bc:31:66:2f:a8:83:be:08:4e:18:74:78:0d:de:3f: 28:8d:de:67:19:0e:fc:12:59:8f:2b:97:57:45:f7: 64:51:5a:02:f8:dd:07:aa:13:66:a4:6b:f8:64:a0: 2f:25:b2:37:c5:f9:49:89:c4:2c:85:a9:ad:38:0b: 4d:8c:5a:17:17:a6:bc:bf:ca:9d:84:a8:8f:88:94: fc:a1:28:9a:5c:6b:f3:4f:a5:bb:72:05:69:e7:72: 7d:ff:3e:06:10:a2:a7:66:87:f1:b6:15:74:f7:46: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:69:DE:0A:B1:70:38:27:B0:68:B8:E2:A0:68:1A:2C:24:9C:9C X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8d:6b:3c:c7:b7:81:3b:13:f2:ff:46:89:79:f9:58:12:be: 95:b2:0e:1f:ae:ba:78:70:6c:01:76:ac:b3:f3:20:bf:62:16: 36:9a:ac:62:fa:a3:d7:30:15:b2:2d:ff:20:c1:99:51:6b:57: ae:29:96:d7:d1:55:6b:c5:08:09:b1:56:59:74:a3:90:08:ee: 34:4a:8f:8e:d2:f6:87:1c:38:c6:11:17:ea:60:db:19:ee:af: 3b:28:c8:b4:46:4f:c6:09:c1:28:fe:06:12:18:5a:b5:05:f2: 67:83:8e:55:c6:2b:b7:e4:3e:b6:75:d8:ef:bb:f8:e3:4e:bd: 64:c2:5a:e6:71:24:58:a3:7c:81:3c:08:9f:e1:db:4e:09:f4: 7f:5e:aa:50:87:75:b5:e0:68:d7:af:c8:f4:ae:4c:06:f6:56: 02:1b:80:7c:82:b6:88:49:9c:ea:21:66:5b:f7:e4:9f:64:5b: 46:70:bb:c0:7e:1e:81:79:97:3d:7c:af:0e:0b:3d:0f:41:7d: 36:64:d5:8e:72:3a:89:ab:d3:0d:af:51:c7:e8:48:03:cd:e1: 1c:96:e9:ae:ab:a8:a1:0b:9d:b6:b8:ba:0e:fc:ab:0c:4c:e6: 31:71:4a:01:02:e9:08:71:9d:c0:26:1e:53:99:83:46:a2:7b: 7e:aa:39:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjQxMTIwMTkwMjE2WhcNMjQxMTI3MTkwMjE2WjAYMRYwFAYD VQQDEw02NzNlMzIzOC04YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kmvcNNLnrlNzz76YS5IWQsGr5VPacs6S3eW4jbmczygVsh+ke6FbyN5JdFS 2K4XZwAfxdaZlBDpUoVFkby0YZWAZc1HLHhU/k9ShRXwqdAOfUPB+P/pgbR3qvVQ 9UIvWVl1Tp7vpL9sUli1WMTyD8mtjhsU9wptdFmuBSY3WukcSas6VfPcVUPbFY2X /HTioyGSss68MWYvqIO+CE4YdHgN3j8ojd5nGQ78ElmPK5dXRfdkUVoC+N0HqhNm pGv4ZKAvJbI3xflJicQshamtOAtNjFoXF6a8v8qdhKiPiJT8oSiaXGvzT6W7cgVp 53J9/z4GEKKnZofxthV090YfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKqad4K sXA4J7BouOKgaBosJJycMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8jWs8x7eBOxPy/0aJeflYEr6Vsg4frrp4cGwBdqyz8yC/YhY2mqxi +qPXMBWyLf8gwZlRa1euKZbX0VVrxQgJsVZZdKOQCO40So+O0vaHHDjGERfqYNsZ 7q87KMi0Rk/GCcEo/gYSGFq1BfJng45Vxiu35D62ddjvu/jjTr1kwlrmcSRYo3yB PAif4dtOCfR/XqpQh3W14GjXr8j0rkwG9lYCG4B8graISZzqIWZb9+SfZFtGcLvA fh6BeZc9fK8OCz0PQX02ZNWOcjqJq9MNr1HH6EgDzeEclumuq6ihC522uLoO/KsM TOYxcUoBAukIcZ3AJh5TmYNGont+qjkh -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:27 2024 by rpki-client on console-fra.rpki-client.org