$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: bnNCi85AwJQkWfbT3L61x6T+hmCfxIyAj5kdSyKZw5E= Subject key identifier: ED:B7:62:29:83:C3:E6:E1:FB:BF:BE:BC:66:DA:10:D1:82:5C:A7:2C Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: AF Signing time: Sat 23 Nov 2024 04:12:52 +0000 Manifest this update: Sat 23 Nov 2024 04:12:51 +0000 Manifest next update: Sat 30 Nov 2024 04:12:51 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: CfTjDCoQ9Of35i2PbXifOSVvjPHqWHtNvbgYFl7vn3Y=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 2X+WOgpHMrKXs0CiqTEW+0YLL/pb1sWO5U1YYZhG6bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: Nov 23 04:12:51 2024 GMT Not After : Nov 30 04:12:51 2024 GMT Subject: CN=67415643-bad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:09:1b:09:de:ed:27:64:63:0f:8e:7a:29: b4:09:b3:52:82:7d:b5:aa:11:ee:ad:d6:26:0d:dc: a0:a9:2e:7f:ce:09:f3:5e:53:4c:9f:1c:e3:22:6a: 2e:a8:b4:f1:5f:9e:90:cd:69:f4:60:e7:0c:10:a2: 9b:19:40:6c:93:5d:32:b3:36:1a:d5:57:e3:a8:82: bd:37:11:de:82:a8:e7:5a:84:14:17:99:81:23:99: 27:4e:67:88:eb:f2:5f:78:67:45:e2:6d:55:3f:ef: 3e:80:ef:fb:f7:7e:18:5f:ea:15:d2:cd:ba:5c:ee: 29:84:11:fb:10:76:b9:85:7c:5c:f6:c3:27:d8:b2: b8:3b:93:af:a5:b5:fa:f3:43:1d:1d:e8:0f:bc:68: 9c:f1:39:9d:fa:24:50:33:23:40:f6:18:a2:ca:c0: a8:b9:ca:3a:ae:7a:dd:32:31:5d:71:49:3f:c9:15: 48:cf:79:e4:86:8d:1a:8c:5c:17:1e:a0:c8:82:de: 16:e6:a0:c9:83:9e:df:4c:39:60:1f:1e:d6:2b:16: 04:e5:08:98:e7:7c:86:f4:59:02:05:d6:2c:70:bf: 2f:eb:78:fe:3d:38:9d:c3:30:f5:85:54:41:a5:dd: 2b:b7:54:9b:b1:8b:04:d2:f8:f8:9d:19:6d:1a:13: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B7:62:29:83:C3:E6:E1:FB:BF:BE:BC:66:DA:10:D1:82:5C:A7:2C X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e2:3b:0c:2c:de:99:6b:02:0c:51:e0:f3:f4:2b:e1:7d:63: f6:19:aa:65:3b:c2:98:2d:0a:d0:40:7b:13:05:b5:a5:ce:5c: 01:24:6b:a2:e2:0e:25:da:37:52:9b:c7:11:69:82:ac:a9:aa: 41:dc:93:8a:ae:27:86:0c:54:ba:d8:45:01:61:cf:71:dd:07: 4e:59:01:22:01:8a:ad:5d:d8:33:25:48:90:1e:e7:4a:17:90: 54:ce:89:94:c6:44:2e:62:29:a3:91:cd:9c:84:0e:be:5f:8a: 0a:e4:9b:3b:05:bf:ae:ea:d9:a4:46:c6:3d:ba:f1:4e:c0:f4: ae:80:00:c6:31:67:0e:dc:19:8f:3b:8d:a7:79:bd:a0:d9:a3: 84:da:57:49:ac:a0:dc:87:fe:57:9d:a2:3a:cd:71:41:c3:f3: 2f:58:0a:a2:e3:d0:17:ee:9e:20:ab:23:61:05:a8:01:e5:12: 40:57:df:f6:71:04:42:e2:73:0a:5b:f4:11:6a:66:7c:95:16: 87:ad:0e:78:41:6d:f9:ff:09:bb:bc:12:60:d0:5c:fb:e3:a7: 93:d0:52:80:15:c0:81:fa:42:aa:cb:4f:a5:bd:c9:33:11:fb: 49:bd:08:c9:d5:23:47:95:65:29:95:b0:19:a8:02:23:f4:e6: be:21:eb:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMxNDBFM0E0NzE5 QjM4NkQzODMwHhcNMjQxMTIzMDQxMjUxWhcNMjQxMTMwMDQxMjUxWjAYMRYwFAYD VQQDEw02NzQxNTY0My1iYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWoJGwne7SdkYw+Oeim0CbNSgn21qhHurdYmDdygqS5/zgnzXlNMnxzjImou qLTxX56QzWn0YOcMEKKbGUBsk10yszYa1VfjqIK9NxHegqjnWoQUF5mBI5knTmeI 6/JfeGdF4m1VP+8+gO/7934YX+oV0s26XO4phBH7EHa5hXxc9sMn2LK4O5OvpbX6 80MdHegPvGic8Tmd+iRQMyNA9hiiysCouco6rnrdMjFdcUk/yRVIz3nkho0ajFwX HqDIgt4W5qDJg57fTDlgHx7WKxYE5QiY53yG9FkCBdYscL8v63j+PTidwzD1hVRB pd0rt1SbsYsE0vj4nRltGhMlwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO23YimD w+bh+7++vGbaENGCXKcsMB8GA1UdIwQYMBaAFCwsXJp4Xy6nNAecFA46RxmzhtOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFENC81NTQ1RTIxQ0E5 MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxxYzBCNXdVRGpwSEdiT0cw NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5oZkxx YzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH4jsMLN6ZawIMUeDz9CvhfWP2GaplO8KYLQrQQHsTBbWlzlwBJGui 4g4l2jdSm8cRaYKsqapB3JOKrieGDFS62EUBYc9x3QdOWQEiAYqtXdgzJUiQHudK F5BUzomUxkQuYimjkc2chA6+X4oK5Js7Bb+u6tmkRsY9uvFOwPSugADGMWcO3BmP O42neb2g2aOE2ldJrKDch/5XnaI6zXFBw/MvWAqi49AX7p4gqyNhBagB5RJAV9/2 cQRC4nMKW/QRamZ8lRaHrQ54QW35/wm7vBJg0Fz746eT0FKAFcCB+kKqy0+lvckz EftJvQjJ1SNHlWUplbAZqAIj9Oa+IetA -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org