$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: aA0rsGWSc/ynTphNhqW4EWf9enFCwNexlvzdD4Pf71U= Subject key identifier: D8:93:DD:56:0D:E5:D1:9E:31:16:09:04:54:AE:B7:53:74:C2:99:37 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0BC3 Signing time: Fri 22 Nov 2024 18:35:30 +0000 Manifest this update: Fri 22 Nov 2024 18:35:30 +0000 Manifest next update: Fri 29 Nov 2024 18:35:30 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: pZ3AwNLUTXp6pnVGcB/KYNGhHQIW9ybD/NlHwK+h/ow=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: xVTFBNmOi1HL5rDX7+M+vUXncg1h8s61EzgOhvnvgE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: Nov 22 18:35:30 2024 GMT Not After : Nov 29 18:35:30 2024 GMT Subject: CN=6740cef2-33a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4b:c2:86:1b:9e:fb:0b:49:e7:93:79:72:54: d4:38:14:15:4b:35:fe:85:07:7e:31:2b:7b:a2:aa: c9:ca:f0:42:bf:3c:40:b8:4d:14:cc:35:0f:9c:f7: 86:4f:96:8e:5f:d2:9a:a1:be:4c:14:7d:84:ac:df: 52:9c:c3:7c:93:54:32:ef:ac:55:49:60:81:76:5e: 5f:4c:02:22:4f:67:5c:79:71:50:dc:de:de:df:d3: 2b:55:e6:1f:18:77:69:c9:49:7c:c4:0b:91:44:d9: e4:c0:ba:04:f0:96:01:8a:b0:f2:0d:65:3a:47:5a: f7:ad:93:9b:75:38:63:db:46:5b:7e:ef:56:18:63: c9:a9:34:29:85:07:0e:5a:ef:fc:7b:4e:ce:60:18: 29:72:e6:11:23:87:df:46:9c:6f:d6:19:bd:a1:ee: 59:0d:45:ea:c5:24:f5:02:b9:1a:ed:b6:2d:05:77: b4:96:63:0f:1e:da:4f:70:74:30:e4:cf:f4:0d:7c: c1:19:75:7f:7b:65:de:c5:bf:d0:1b:d8:23:b3:8b: e7:02:57:91:e5:ee:16:c8:f7:a0:b7:97:36:37:c2: dc:ef:f2:ce:1f:ab:6f:82:d7:38:f8:9f:89:31:89: 30:60:eb:68:46:98:43:a3:a8:21:75:83:e9:2e:8b: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:93:DD:56:0D:E5:D1:9E:31:16:09:04:54:AE:B7:53:74:C2:99:37 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6e:9c:4d:93:fd:2f:39:28:3f:1d:19:24:f2:ef:0c:98:54: 6e:09:23:f7:2d:5b:be:84:a6:23:ce:3b:b2:f5:5d:49:b4:3b: cc:b9:3c:f5:16:eb:71:c8:51:8a:fe:f2:35:e9:f6:59:3b:3c: e5:e2:7f:22:f9:cf:4b:25:f9:80:03:ce:fc:cb:0b:2b:d9:31: 02:55:cb:98:f1:cd:46:b8:33:71:82:88:8a:1c:c9:8c:31:fb: 5f:2b:33:16:3f:b1:a1:6a:75:ff:d7:88:e7:ef:60:3b:5c:f8: e7:94:fa:e5:ee:bc:20:c0:d1:e9:1b:31:b6:20:f6:b9:b4:23: 20:aa:78:b4:42:3f:04:3f:31:b6:d2:76:0d:5b:3a:ea:ab:3e: e5:ba:de:7d:58:39:71:1e:c9:10:16:49:8e:3c:0b:f8:ee:cb: 97:bd:bf:9a:25:c9:32:77:35:15:7f:e2:4d:58:38:22:38:19: 5d:16:30:2e:f7:8f:7a:3b:57:7c:07:6b:e0:c1:47:4a:df:70: 6f:15:d5:7d:e5:20:f7:30:e5:d7:d9:24:73:37:a6:d8:ac:ae: 5e:0a:dd:eb:39:2f:29:ab:a0:47:b3:e5:03:8c:53:a5:c2:da: 06:83:97:54:1f:18:5f:a4:55:af:1f:84:05:8a:79:32:84:9e: 94:40:f2:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjQxMTIyMTgzNTMwWhcNMjQxMTI5MTgzNTMwWjAYMRYwFAYD VQQDEw02NzQwY2VmMi0zM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kvChhue+wtJ55N5clTUOBQVSzX+hQd+MSt7oqrJyvBCvzxAuE0UzDUPnPeG T5aOX9Kaob5MFH2ErN9SnMN8k1Qy76xVSWCBdl5fTAIiT2dceXFQ3N7e39MrVeYf GHdpyUl8xAuRRNnkwLoE8JYBirDyDWU6R1r3rZObdThj20Zbfu9WGGPJqTQphQcO Wu/8e07OYBgpcuYRI4ffRpxv1hm9oe5ZDUXqxST1Arka7bYtBXe0lmMPHtpPcHQw 5M/0DXzBGXV/e2Xexb/QG9gjs4vnAleR5e4WyPegt5c2N8Lc7/LOH6tvgtc4+J+J MYkwYOtoRphDo6ghdYPpLovFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiT3VYN 5dGeMRYJBFSut1N0wpk3MB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNbpxNk/0vOSg/HRkk8u8MmFRuCSP3LVu+hKYjzjuy9V1JtDvMuTz1 FutxyFGK/vI16fZZOzzl4n8i+c9LJfmAA878ywsr2TECVcuY8c1GuDNxgoiKHMmM MftfKzMWP7GhanX/14jn72A7XPjnlPrl7rwgwNHpGzG2IPa5tCMgqni0Qj8EPzG2 0nYNWzrqqz7lut59WDlxHskQFkmOPAv47suXvb+aJckydzUVf+JNWDgiOBldFjAu 9496O1d8B2vgwUdK33BvFdV95SD3MOXX2SRzN6bYrK5eCt3rOS8pq6BHs+UDjFOl wtoGg5dUHxhfpFWvH4QFinkyhJ6UQPIk -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org