$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: 2X3GzLK3Y1i+0ZHsS00V0TkrbH2ruT6rjrJBMIJfb88= Subject key identifier: 3E:94:A3:EF:0C:84:4B:10:E3:1B:4C:9C:F0:FA:06:2E:9A:52:10:BB Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 29 Signing time: Thu 19 Sep 2024 05:59:46 +0000 Manifest this update: Thu 19 Sep 2024 05:59:46 +0000 Manifest next update: Thu 26 Sep 2024 05:59:46 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: CsxCCLbWm6KO18XPpcHgxsjTkiRpbHTZbow8Urp2ilI=) 2: ACCFC92C38E111EF99DA0575C4F9AE02.roa (hash: IQkb9vrLkHbIT0l31y7TiaLX4Y+rsb5o734kaa0aCok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Sep 19 05:59:46 2024 GMT Not After : Sep 26 05:59:46 2024 GMT Subject: CN=66ebbdd2-45f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:d7:65:83:e2:b2:9b:80:f4:51:e8:86:2b: eb:73:c4:9f:e0:78:0a:fe:06:5d:22:94:31:1b:85: 13:20:a7:65:be:21:de:10:49:41:c9:31:51:11:1e: 6f:7f:7e:06:b4:f9:e2:5c:f7:3b:29:7a:7c:6d:e3: 18:f3:fc:f9:63:a2:c4:50:54:66:b8:1c:55:4b:3b: 05:ef:7d:0d:40:e8:af:16:d1:6a:24:09:34:fc:19: 0c:c7:86:b2:90:a7:3e:ae:b0:77:b5:4f:74:31:02: 82:23:2e:01:df:ea:b9:7f:ee:51:b8:50:4a:b3:dd: c4:b0:ed:1d:3c:e9:9e:07:fa:6b:7a:0f:f4:fa:62: 25:9f:38:d6:d7:6a:1c:95:99:3f:02:2b:f2:7c:ea: b4:bc:ee:a9:7b:06:b0:9f:24:c0:ac:a3:e9:01:68: 3c:4a:c8:ec:17:91:e5:19:f2:4d:f9:7d:58:47:cf: 8b:fe:18:69:c4:d6:0e:f5:2a:61:37:cb:b2:ab:5c: cc:40:16:f9:80:07:58:b6:b8:2f:a0:5e:ce:57:5d: fb:03:01:2e:ee:bf:d8:86:d1:00:4e:76:1f:c3:8f: 05:be:79:99:b6:f4:98:c6:1b:08:05:f7:4d:c6:b6: fc:92:d9:e3:67:2a:4d:2b:d4:7f:c3:f2:d1:55:45: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:94:A3:EF:0C:84:4B:10:E3:1B:4C:9C:F0:FA:06:2E:9A:52:10:BB X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:28:32:9a:59:92:05:9b:a4:cf:73:89:a1:70:9e:1b:86:3c: a9:a1:be:6c:9e:ed:1c:bb:0d:f4:1b:7a:1b:92:ef:1f:27:0c: 53:69:a6:ba:d1:bb:5e:c3:45:b0:86:3c:b2:4a:76:3a:e0:80: 7e:f5:cf:2e:6d:ec:d6:25:3a:93:29:07:3c:4d:90:36:44:f7: bb:6d:50:f7:03:e3:42:4c:92:47:3c:cb:eb:a9:a1:76:35:ab: 9d:da:9d:4a:bc:7b:67:0b:57:8a:88:e3:d2:a8:93:30:df:5a: 33:27:4a:82:1e:a6:5c:50:a0:fe:87:c2:7e:6a:e9:df:87:19: 7e:f2:47:0c:23:c4:a6:3d:03:4d:15:4f:c3:38:ad:d2:c8:12: cd:43:ad:2f:f1:b4:6a:1b:f0:f8:3f:30:4c:41:7b:81:30:49: e3:a5:9c:55:b6:29:b0:e7:7d:31:ef:24:7a:6a:bd:69:e5:3c: 34:ce:d3:d4:06:f2:f9:9f:62:d7:e4:1a:34:71:ad:14:02:20: 5c:cf:4f:08:fb:8b:71:63:10:c7:fc:68:b1:99:2e:a3:bd:9d: 50:6e:e3:51:33:f9:a7:a3:01:4e:a8:60:97:ad:fa:c5:4b:91: cd:96:fd:6e:8b:85:b3:40:91:6a:45:8c:af:50:87:c7:fa:3b: e6:9a:45:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI0MDExMC8GA1UEBRMoMkQ3NDg0QTE3RjRFOUU2OTQxMDA1MUVGNTNCN0JFNzE5 MzdGOUY5QzAeFw0yNDA5MTkwNTU5NDZaFw0yNDA5MjYwNTU5NDZaMBgxFjAUBgNV BAMTDTY2ZWJiZGQyLTQ1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNCtdlg+Kym4D0UeiGK+tzxJ/geAr+Bl0ilDEbhRMgp2W+Id4QSUHJMVERHm9/ fga0+eJc9zspenxt4xjz/PljosRQVGa4HFVLOwXvfQ1A6K8W0WokCTT8GQzHhrKQ pz6usHe1T3QxAoIjLgHf6rl/7lG4UEqz3cSw7R086Z4H+mt6D/T6YiWfONbXahyV mT8CK/J86rS87ql7BrCfJMCso+kBaDxKyOwXkeUZ8k35fVhHz4v+GGnE1g71KmE3 y7KrXMxAFvmAB1i2uC+gXs5XXfsDAS7uv9iG0QBOdh/DjwW+eZm29JjGGwgF903G tvyS2eNnKk0r1H/D8tFVRZkXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPpSj7wyE SxDjG0yc8PoGLppSELswHwYDVR0jBBgwFoAULXSEoX9OnmlBAFHvU7e+cZN/n5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjQwLzFGQTAyMjUwMzhF MDExRUY5NEI4NEQ3RkM0RjlBRTAyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFhTRW9YOU9ubWxCQUZIdlU3ZS1jWk5fbjV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjQwLzFGQTAyMjUwMzhFMDExRUY5NEI4NEQ3RkM0RjlBRTAyL0xYU0VvWDlPbm1s QkFGSHZVN2UtY1pOX241dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0oMppZkgWbpM9ziaFwnhuGPKmhvmye7Ry7DfQbehuS7x8nDFNpprrR u17DRbCGPLJKdjrggH71zy5t7NYlOpMpBzxNkDZE97ttUPcD40JMkkc8y+upoXY1 q53anUq8e2cLV4qI49KokzDfWjMnSoIeplxQoP6Hwn5q6d+HGX7yRwwjxKY9A00V T8M4rdLIEs1DrS/xtGob8Pg/MExBe4EwSeOlnFW2KbDnfTHvJHpqvWnlPDTO09QG 8vmfYtfkGjRxrRQCIFzPTwj7i3FjEMf8aLGZLqO9nVBu41Ez+aejAU6oYJet+sVL kc2W/W6LhbNAkWpFjK9Qh8f6O+aaRTY= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:54 2024 by rpki-client on console-ams.rpki-client.org