$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: BXJb2NgXkQirhvDUSN08CKuxPqxog8YkdRLysVw1I5M= Subject key identifier: A3:1B:04:EA:AA:77:FF:BB:A0:88:DD:7A:1F:B4:35:01:40:3B:C1:D5 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: 39 Signing time: Sun 15 Sep 2024 09:55:58 +0000 Manifest this update: Sun 15 Sep 2024 09:55:57 +0000 Manifest next update: Sun 22 Sep 2024 09:55:57 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: Ea4QWTaZBAQgbneB21IyDzF+OsJ+hpJ4P9e+bMT4VHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Sep 15 09:55:57 2024 GMT Not After : Sep 22 09:55:57 2024 GMT Subject: CN=66e6af2d-87dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:72:19:a8:8d:5b:e8:72:e3:83:db:ba:48: df:77:e1:ea:11:59:59:a4:09:ad:aa:8e:3c:c5:a0: af:55:78:5d:08:d7:a4:8b:35:86:c7:a5:c4:8d:b0: 14:72:69:65:5e:9d:15:8e:2d:46:8f:a0:e7:5b:35: 2f:2f:2e:48:d5:9d:fa:df:ff:52:57:b1:19:cb:4d: 06:38:a2:fb:2d:17:cd:d6:a4:a8:97:e8:a6:3d:19: dd:19:c9:9f:e8:95:26:cc:c2:54:df:3b:48:14:5a: 63:b2:bf:9d:66:02:3d:80:84:97:a6:4a:2b:df:05: 70:fc:b8:a3:66:cf:2f:2d:e4:6c:2e:dc:31:d4:a9: ac:62:29:71:8c:13:ec:03:9c:80:33:33:63:4d:0b: ad:80:19:c8:2f:a7:4e:a1:5e:1e:00:c7:99:e6:49: 60:4e:e0:2b:b3:53:1f:a3:c0:5a:87:94:65:40:48: 23:ad:5c:ac:d6:55:21:83:07:a3:48:21:c0:be:a5: 2e:73:cd:2a:dd:f8:cc:48:ef:c7:31:62:5c:e6:bb: ee:41:be:2a:a5:71:ef:2e:9f:bf:cd:ea:f2:34:c3: 89:20:d5:64:f9:d3:be:f4:62:b2:f8:b4:23:f8:a8: e7:7c:da:57:07:e0:31:a0:6f:c2:54:89:9f:1b:14: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1B:04:EA:AA:77:FF:BB:A0:88:DD:7A:1F:B4:35:01:40:3B:C1:D5 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:3a:be:ca:e6:9a:c0:f1:31:ca:31:aa:5f:86:16:10:00: 06:6e:ab:c9:59:64:fa:39:ca:c3:6f:f9:35:6f:2d:6e:cc:c7: 48:63:b0:ff:8e:64:b3:00:4f:c3:13:d5:2a:f1:e2:20:34:27: 4e:8e:1e:a8:3f:f5:95:4b:c6:c6:48:16:64:ec:7e:65:f0:61: 5c:82:38:64:4b:8b:c7:88:9e:60:75:10:f2:7d:60:3b:2b:71: d9:c1:83:36:99:e8:7d:ed:73:de:39:0b:f8:e3:bf:d3:91:26: 7b:ef:1a:ee:56:a1:ef:0e:2c:d1:1e:04:71:65:03:65:8f:f0: 73:ca:8f:40:2f:ad:09:64:05:f7:2e:34:8d:1e:c7:db:1b:58: f8:9f:d9:c5:f9:12:3b:be:0a:bd:35:5f:cf:3a:8c:d3:0f:99: 2e:ea:b6:16:df:62:da:f0:b8:aa:d1:e6:c2:66:7c:5e:dc:25: 7f:a0:5f:65:dd:e9:c4:f2:67:9d:8f:40:d3:dc:a0:43:86:fd: e3:18:b4:44:55:5d:82:c8:c5:30:ff:02:2e:77:a3:4d:d9:6e: 0a:5d:8b:d2:34:3c:92:27:1e:85:a4:b8:e2:cd:6c:38:09:13: 91:e3:4c:be:7a:9d:eb:2f:f5:02:79:34:d9:2d:9a:58:95:d9: c3:f8:cf:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NTg1RTExMC8GA1UEBRMoOTQyNzgwNzQ1NUQ4MDFBMUQxMTAyODdCRTU3RjNFODRG NjI5MENBMDAeFw0yNDA5MTUwOTU1NTdaFw0yNDA5MjIwOTU1NTdaMBgxFjAUBgNV BAMTDTY2ZTZhZjJkLTg3ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGHnIZqI1b6HLjg9u6SN934eoRWVmkCa2qjjzFoK9VeF0I16SLNYbHpcSNsBRy aWVenRWOLUaPoOdbNS8vLkjVnfrf/1JXsRnLTQY4ovstF83WpKiX6KY9Gd0ZyZ/o lSbMwlTfO0gUWmOyv51mAj2AhJemSivfBXD8uKNmzy8t5Gwu3DHUqaxiKXGME+wD nIAzM2NNC62AGcgvp06hXh4Ax5nmSWBO4CuzUx+jwFqHlGVASCOtXKzWVSGDB6NI IcC+pS5zzSrd+MxI78cxYlzmu+5Bviqlce8un7/N6vI0w4kg1WT50770YrL4tCP4 qOd82lcH4DGgb8JUiZ8bFJljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoxsE6qp3 /7ugiN16H7Q1AUA7wdUwHwYDVR0jBBgwFoAUlCeAdFXYAaHRECh75X8+hPYpDKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1ODVFLzRCREE3NDQ0MUU2 QzExRUY5RkU3NDg3N0M0RjlBRTAyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENlQWRGWFlBYUhSRUNoNzVYOC1oUFlwREtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1 ODVFLzRCREE3NDQ0MUU2QzExRUY5RkU3NDg3N0M0RjlBRTAyL2xDZUFkRlhZQWFI UkVDaDc1WDgtaFBZcERLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYDOr7K5prA8THKMapfhhYQAAZuq8lZZPo5ysNv+TVvLW7Mx0hjsP+O ZLMAT8MT1Srx4iA0J06OHqg/9ZVLxsZIFmTsfmXwYVyCOGRLi8eInmB1EPJ9YDsr cdnBgzaZ6H3tc945C/jjv9ORJnvvGu5Woe8OLNEeBHFlA2WP8HPKj0AvrQlkBfcu NI0ex9sbWPif2cX5Eju+Cr01X886jNMPmS7qthbfYtrwuKrR5sJmfF7cJX+gX2Xd 6cTyZ52PQNPcoEOG/eMYtERVXYLIxTD/Ai53o03Zbgpdi9I0PJInHoWkuOLNbDgJ E5HjTL56nesv9QJ5NNktmliV2cP4z2c= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:26 2024 by rpki-client on console-ams.rpki-client.org