$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: jZ8mBQIDb5sUrh9j1oHcNMeekYqvR2QpEmyaDvdBfSw= Subject key identifier: BF:ED:FB:96:20:4D:C4:EB:43:FD:E8:7D:93:F6:34:A1:F0:F0:9E:2B Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 026A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 0265 Signing time: Mon 25 Nov 2024 01:05:58 +0000 Manifest this update: Mon 25 Nov 2024 01:05:57 +0000 Manifest next update: Mon 02 Dec 2024 01:05:57 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: P3lnFBSfrjuxxkYHCZSg8kT4vHN/lttfNV9DKHdx2dk=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: lNppuM2/IdxAAhctCe7rRBT4xZtGXRvN8aRrKBnWfmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Nov 25 01:05:57 2024 GMT Not After : Dec 2 01:05:57 2024 GMT Subject: CN=6743cd76-4861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:39:8c:73:92:c6:1f:be:5f:95:c4:a5:b4: 5f:52:ed:c3:ad:27:b2:31:14:ea:1b:f3:31:45:57: 9d:49:84:9c:af:b7:91:4b:b2:0b:39:7d:2e:f8:7f: 7c:38:81:8e:c4:19:e5:3b:5d:79:3d:70:01:fe:dd: df:d8:fe:50:98:bd:81:5a:c2:d2:33:6e:4f:96:af: fd:2d:9e:ae:af:52:24:38:6f:7c:c8:b5:76:00:92: 07:ee:ba:91:e2:53:ab:de:23:e8:91:44:3f:18:d3: c5:91:e7:40:ba:6b:94:62:c4:8a:92:b9:fa:54:db: 97:c2:47:c6:72:90:03:8a:10:fc:ac:20:a2:f7:76: d0:85:d5:50:23:69:7c:eb:84:95:a3:f9:0d:bf:89: 82:f4:a9:fb:f8:f0:47:2f:73:a6:45:03:bf:d9:4a: 82:f5:87:99:8b:28:db:08:05:88:76:78:77:9a:41: 50:ba:8c:a7:8f:37:b1:27:56:3c:fd:02:92:46:33: 32:a0:17:ef:ec:8c:66:8c:08:82:d3:24:e3:1e:9b: f9:50:2f:7a:6c:23:43:b0:99:a4:4a:3a:c4:90:69: 52:2e:d8:7a:46:74:bb:88:2d:6c:7b:65:c1:56:93: 50:7d:2a:1a:22:c6:23:a2:6b:37:c8:42:6a:ac:77: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:FB:96:20:4D:C4:EB:43:FD:E8:7D:93:F6:34:A1:F0:F0:9E:2B X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9e:81:bb:40:11:e7:a8:8c:cd:51:4a:90:ef:d8:6e:32:aa: 1e:e6:64:3e:7f:f1:21:1f:3f:59:d0:6d:13:87:14:de:b3:30: cd:db:2a:30:dc:00:a8:19:65:44:ca:af:23:15:91:5c:59:c3: 60:27:db:da:cd:23:0c:e4:e7:42:76:80:dc:f1:e9:13:de:ed: f9:6d:b8:fd:be:2f:32:2e:6a:b7:cd:76:f5:25:d1:c1:4c:83: 8c:f0:ea:7e:07:95:85:a8:d0:42:00:4a:c9:b2:67:f2:5c:77: 9a:dd:64:47:c3:ef:52:3d:23:8b:c1:28:49:95:66:9c:80:fb: 93:94:63:ec:64:81:29:6d:d3:0c:b5:aa:d4:99:a6:c6:97:0e: ad:c7:8e:1f:89:a6:a3:c3:13:cf:ed:c7:ed:e5:52:00:e8:52: 14:94:87:0b:f6:5c:8d:6f:8e:49:be:fd:17:36:81:c5:95:d4: 9f:5a:b2:44:01:78:99:87:88:0d:ce:08:1c:fb:f6:65:e9:77: d2:6b:46:01:87:07:db:ab:03:8a:18:63:30:8b:09:52:fe:0c: 9d:23:16:b1:c6:ba:cf:9f:9c:e1:d0:c8:35:ff:91:46:a9:47: e2:b5:75:61:1d:d6:31:b5:90:bd:96:22:25:ac:c0:5c:27:35: e9:2e:cd:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjQxMTI1MDEwNTU3WhcNMjQxMjAyMDEwNTU3WjAYMRYwFAYD VQQDEw02NzQzY2Q3Ni00ODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ85jHOSxh++X5XEpbRfUu3DrSeyMRTqG/MxRVedSYScr7eRS7ILOX0u+H98 OIGOxBnlO115PXAB/t3f2P5QmL2BWsLSM25Plq/9LZ6ur1IkOG98yLV2AJIH7rqR 4lOr3iPokUQ/GNPFkedAumuUYsSKkrn6VNuXwkfGcpADihD8rCCi93bQhdVQI2l8 64SVo/kNv4mC9Kn7+PBHL3OmRQO/2UqC9YeZiyjbCAWIdnh3mkFQuoynjzexJ1Y8 /QKSRjMyoBfv7IxmjAiC0yTjHpv5UC96bCNDsJmkSjrEkGlSLth6RnS7iC1se2XB VpNQfSoaIsYjoms3yEJqrHet6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/t+5Yg TcTrQ/3ofZP2NKHw8J4rMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOnoG7QBHnqIzNUUqQ79huMqoe5mQ+f/EhHz9Z0G0ThxTeszDN2yow 3ACoGWVEyq8jFZFcWcNgJ9vazSMM5OdCdoDc8ekT3u35bbj9vi8yLmq3zXb1JdHB TIOM8Op+B5WFqNBCAErJsmfyXHea3WRHw+9SPSOLwShJlWacgPuTlGPsZIEpbdMM tarUmabGlw6tx44fiaajwxPP7cft5VIA6FIUlIcL9lyNb45Jvv0XNoHFldSfWrJE AXiZh4gNzggc+/Zl6XfSa0YBhwfbqwOKGGMwiwlS/gydIxaxxrrPn5zh0Mg1/5FG qUfitXVhHdYxtZC9liIlrMBcJzXpLs0D -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:27 2024 by rpki-client on console-fra.rpki-client.org