$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft File: LPsM720W1mdu6iEWQ-yOhcJc8v8.mft (raw, json) Hash identifier: BhIi7WWDhd1oUQaDL3p3OVAn/l7l43bNmN8V5jaGhEI= Subject key identifier: 95:AD:4B:C9:77:CA:B0:26:E3:A8:E6:1E:1B:7B:FC:F8:99:35:D2:C8 Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft Manifest number: 0E Signing time: Thu 21 Nov 2024 06:10:46 +0000 Manifest this update: Thu 21 Nov 2024 06:10:45 +0000 Manifest next update: Thu 28 Nov 2024 06:10:45 +0000 Files and hashes: 1: LPsM720W1mdu6iEWQ-yOhcJc8v8.crl (hash: 4gHZuiUmkjSQ/qZeFGZJoozzN/VsPjFcTzFH3hP15MY=) 2: 9549EE609A7311EF8A9F432EC4F9AE02.roa (hash: IgBHq82Rbjux5h+sEkd6TyJp0e2koPRitGAA/hC55vc=) 3: 6E491F58A79211EFABD45B2BC4F9AE02.roa (hash: Ro/P4O73D4CrHjoYuZrr/Ewq3mf9Tkt210TUWqP66yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Validity Not Before: Nov 21 06:10:45 2024 GMT Not After : Nov 28 06:10:45 2024 GMT Subject: CN=673ecee6-cf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:96:15:91:45:04:51:83:3e:a1:36:e7:b3: b3:8f:a7:c9:10:9d:a2:31:c9:6d:d3:4e:74:6c:be: 20:ed:7f:91:0d:59:10:b5:f3:ea:f9:af:3b:4b:59: 88:b5:ec:4f:ea:60:9d:f0:07:91:8d:ed:ad:35:4a: d7:4a:62:96:81:15:a7:9e:9b:43:ae:93:1b:80:07: 36:15:75:61:3b:89:ad:02:7e:60:36:5f:de:40:3f: 38:74:8d:16:92:be:0b:b8:4b:9e:02:e9:1d:fc:89: 0d:38:48:87:a4:d6:ec:eb:4d:9d:90:cd:40:25:c7: 24:13:0f:ee:aa:97:7c:62:3d:5c:ec:30:d7:88:5c: 5a:9e:64:ba:14:6c:3f:32:0f:ce:f9:f3:26:af:9e: a5:ae:a2:fe:57:71:f8:0e:7a:87:65:be:cd:1d:c6: 28:ec:7e:2d:39:76:d1:ef:d4:42:ce:e7:32:58:fb: ca:a7:62:63:05:c4:51:28:7a:3e:71:cf:56:9a:be: f5:3e:a1:4a:e7:c6:78:42:51:f3:06:a2:16:50:95: 42:35:50:54:45:dd:f5:65:de:19:55:8e:05:4e:1d: 31:52:6f:f2:e1:e3:62:a5:f0:37:57:1f:56:9e:cc: 40:ee:02:ab:99:04:12:b0:6a:6b:45:21:71:cd:07: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:4B:C9:77:CA:B0:26:E3:A8:E6:1E:1B:7B:FC:F8:99:35:D2:C8 X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:28:2e:ec:a6:0f:ee:18:87:3a:df:72:18:73:c8:dc:86:ea: e5:51:9c:f0:bc:d2:01:0a:37:96:3b:ad:77:48:31:35:7c:2b: 9a:eb:6a:25:14:c5:56:62:b6:f5:a2:65:cf:bc:08:61:74:02: 66:41:71:ea:93:55:94:3f:ea:e6:3d:65:5a:4d:e3:64:a9:c2: c8:af:29:6a:e5:ba:c4:11:17:d4:ac:c1:67:f2:4f:1d:9c:aa: fc:cf:05:13:dd:29:6f:e1:7f:9b:55:ec:15:ba:b8:93:b0:6c: 8d:c1:0f:bb:1c:53:0e:f4:08:c7:49:d6:c7:ff:4c:d6:3d:28: 58:d3:c9:00:56:86:a9:af:85:e3:a9:de:18:ac:52:86:ad:ea: ee:d2:16:b5:b9:15:e6:2e:97:e7:68:fd:56:74:e5:e5:f0:12: 3a:ce:d7:c8:65:11:14:bc:9d:68:a5:1b:05:b0:d5:38:e3:65: 91:16:56:ae:2c:9d:ed:0d:67:d5:f4:2d:c7:c7:ed:49:57:ca: 45:e4:b9:45:c3:73:4b:b0:62:48:9e:c3:57:aa:87:1c:dc:5c: 2d:db:69:e5:be:a9:9e:91:3c:0d:c5:22:77:e4:36:8b:9c:d5: ee:bf:94:b3:dc:3f:68:01:8f:d1:4f:5a:46:20:d4:56:dd:88: 93:7c:20:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMxQjExMC8GA1UEBRMoMkNGQjBDRUY2RDE2RDY2NzZFRUEyMTE2NDNFQzhFODVD MjVDRjJGRjAeFw0yNDExMjEwNjEwNDVaFw0yNDExMjgwNjEwNDVaMBgxFjAUBgNV BAMTDTY3M2VjZWU2LWNmOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1eZYVkUUEUYM+oTbns7OPp8kQnaIxyW3TTnRsviDtf5ENWRC18+r5rztLWYi1 7E/qYJ3wB5GN7a01StdKYpaBFaeem0OukxuABzYVdWE7ia0CfmA2X95APzh0jRaS vgu4S54C6R38iQ04SIek1uzrTZ2QzUAlxyQTD+6ql3xiPVzsMNeIXFqeZLoUbD8y D8758yavnqWuov5XcfgOeodlvs0dxijsfi05dtHv1ELO5zJY+8qnYmMFxFEoej5x z1aavvU+oUrnxnhCUfMGohZQlUI1UFRF3fVl3hlVjgVOHTFSb/Lh42Kl8DdXH1ae zEDuAquZBBKwamtFIXHNB1zLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUla1LyXfK sCbjqOYeG3v8+Jk10sgwHwYDVR0jBBgwFoAULPsM720W1mdu6iEWQ+yOhcJc8v8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzFCL0U1NzMwNkNBOUE3 MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBzTTcyMFcxbWR1NmlFV1EteU9oY0pjOHY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzFCL0U1NzMwNkNBOUE3MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1k dTZpRVdRLXlPaGNKYzh2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4oLuymD+4YhzrfchhzyNyG6uVRnPC80gEKN5Y7rXdIMTV8K5rraiUU xVZitvWiZc+8CGF0AmZBceqTVZQ/6uY9ZVpN42SpwsivKWrlusQRF9SswWfyTx2c qvzPBRPdKW/hf5tV7BW6uJOwbI3BD7scUw70CMdJ1sf/TNY9KFjTyQBWhqmvheOp 3hisUoat6u7SFrW5FeYul+do/VZ05eXwEjrO18hlERS8nWilGwWw1TjjZZEWVq4s ne0NZ9X0LcfH7UlXykXkuUXDc0uwYkiew1eqhxzcXC3baeW+qZ6RPA3FInfkNouc 1e6/lLPcP2gBj9FPWkYg1FbdiJN8IMo= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:51 2024 by rpki-client on console-fra.rpki-client.org