$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: Uqoc59QwTBhRqQIMZPbCoyB6H0whRsMZK2h7EcRPQTg= Subject key identifier: CE:3A:E8:BF:2B:6D:A1:F1:44:B8:5D:A6:CB:BB:19:2B:EA:EB:62:F0 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 49 Signing time: Thu 21 Nov 2024 05:22:18 +0000 Manifest this update: Thu 21 Nov 2024 05:22:17 +0000 Manifest next update: Thu 28 Nov 2024 05:22:17 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: IukV4QPjwNOB1bJktYgk4v/EQv/wQKCe2aVTIiOnQhs=) 2: ACCFC92C38E111EF99DA0575C4F9AE02.roa (hash: IQkb9vrLkHbIT0l31y7TiaLX4Y+rsb5o734kaa0aCok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Nov 21 05:22:17 2024 GMT Not After : Nov 28 05:22:17 2024 GMT Subject: CN=673ec389-92ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:a5:ec:2c:6a:ff:45:02:ff:28:f9:6e:70: ba:1c:f9:b7:f8:d9:ff:96:6d:b3:08:34:ad:3b:81: d4:3a:e3:a0:c2:c4:55:b7:20:1d:bc:f3:51:ad:df: 45:b6:e8:b7:b4:d8:c6:60:1f:5e:5d:06:39:4f:2a: 62:5d:b3:21:d5:9c:f7:33:dc:f7:10:c6:8a:57:36: 39:13:aa:55:b2:6a:c4:97:71:05:10:24:8a:d0:4a: 23:0d:9e:09:53:d0:4a:1d:2a:89:49:18:24:3f:53: 17:3e:67:36:d0:62:c5:32:06:f4:50:6a:2b:88:b2: 75:a1:1e:35:a6:b8:83:f0:ba:a5:41:db:d7:98:6f: 4e:1a:00:e3:c6:8e:1e:9e:f3:16:b2:0c:be:12:2f: 5c:18:5d:ba:34:f7:7d:43:d5:b5:cc:b7:e6:e0:ce: 53:de:80:39:de:a7:a2:97:c2:7c:41:99:60:ac:17: c0:3b:74:25:2c:5a:43:de:d4:29:4b:1d:13:42:4b: c9:12:dd:f6:ef:55:7e:69:21:c2:eb:af:cf:92:36: ff:48:24:db:4b:7b:26:d1:83:3d:d7:6a:02:9d:78: 17:35:a1:40:fe:f0:fa:63:f2:26:5d:a5:49:e2:11: 22:f0:90:c8:33:3d:7e:a3:3b:ad:8c:d1:fc:f1:42: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3A:E8:BF:2B:6D:A1:F1:44:B8:5D:A6:CB:BB:19:2B:EA:EB:62:F0 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:51:58:c5:fc:95:9e:f6:98:ea:56:f0:ba:94:26:41:4b:30: cc:77:ce:2e:78:87:6f:4c:7b:84:39:5b:d5:a9:1a:5c:47:d5: 03:9c:e9:f7:d3:0a:9b:29:50:ff:35:2b:0e:3d:8b:3d:24:3c: d1:98:9e:cc:10:d8:1d:8f:ab:79:cd:3b:bd:b1:83:aa:3f:dc: 62:06:3a:74:d7:14:53:4c:05:9a:47:1e:3a:bf:72:42:bb:61: a1:43:6a:93:a3:04:b0:c3:66:30:28:e4:f8:89:d8:bc:e9:3b: ed:5c:a5:88:2d:88:ff:6c:19:66:99:dd:5e:55:a0:33:e2:97: 92:77:55:d9:17:cf:0e:48:46:82:8f:8f:b2:9c:9a:a8:05:5f: 8f:51:3e:ce:47:d0:87:35:65:bc:bb:a8:31:93:45:d5:a0:5f: 44:ad:5e:68:48:f9:de:a0:b5:f3:28:6d:45:d7:34:41:8c:e0: 94:17:f7:71:50:bd:71:e5:5a:58:1e:47:f3:74:3c:5e:c6:14: 9f:10:ea:8e:14:b3:90:48:e7:a9:12:02:a1:8c:40:86:b1:81: 91:bb:6b:bc:01:53:9e:39:86:20:51:67:fe:42:6e:b0:3d:73: 2e:dc:9e:da:29:cb:b6:dc:7c:64:50:b9:9a:93:0b:79:3e:bc: fa:ad:b6:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI0MDExMC8GA1UEBRMoMkQ3NDg0QTE3RjRFOUU2OTQxMDA1MUVGNTNCN0JFNzE5 MzdGOUY5QzAeFw0yNDExMjEwNTIyMTdaFw0yNDExMjgwNTIyMTdaMBgxFjAUBgNV BAMTDTY3M2VjMzg5LTkyYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjsqXsLGr/RQL/KPlucLoc+bf42f+WbbMINK07gdQ646DCxFW3IB2881Gt30W2 6Le02MZgH15dBjlPKmJdsyHVnPcz3PcQxopXNjkTqlWyasSXcQUQJIrQSiMNnglT 0EodKolJGCQ/Uxc+ZzbQYsUyBvRQaiuIsnWhHjWmuIPwuqVB29eYb04aAOPGjh6e 8xayDL4SL1wYXbo0931D1bXMt+bgzlPegDnep6KXwnxBmWCsF8A7dCUsWkPe1ClL HRNCS8kS3fbvVX5pIcLrr8+SNv9IJNtLeybRgz3XagKdeBc1oUD+8Ppj8iZdpUni ESLwkMgzPX6jO62M0fzxQkytAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzjrovytt ofFEuF2my7sZK+rrYvAwHwYDVR0jBBgwFoAULXSEoX9OnmlBAFHvU7e+cZN/n5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjQwLzFGQTAyMjUwMzhF MDExRUY5NEI4NEQ3RkM0RjlBRTAyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFhTRW9YOU9ubWxCQUZIdlU3ZS1jWk5fbjV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjQwLzFGQTAyMjUwMzhFMDExRUY5NEI4NEQ3RkM0RjlBRTAyL0xYU0VvWDlPbm1s QkFGSHZVN2UtY1pOX241dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1RWMX8lZ72mOpW8LqUJkFLMMx3zi54h29Me4Q5W9WpGlxH1QOc6ffT CpspUP81Kw49iz0kPNGYnswQ2B2Pq3nNO72xg6o/3GIGOnTXFFNMBZpHHjq/ckK7 YaFDapOjBLDDZjAo5PiJ2LzpO+1cpYgtiP9sGWaZ3V5VoDPil5J3VdkXzw5IRoKP j7KcmqgFX49RPs5H0Ic1Zby7qDGTRdWgX0StXmhI+d6gtfMobUXXNEGM4JQX93FQ vXHlWlgeR/N0PF7GFJ8Q6o4Us5BI56kSAqGMQIaxgZG7a7wBU545hiBRZ/5CbrA9 cy7cntopy7bcfGRQuZqTC3k+vPqttgk= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org