$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: 6+pXg9Y7PWRWcO3fah+jH6aZJU+4w6VA7pJkYEMGcLs= Subject key identifier: 86:0A:9D:EB:3B:8E:A1:90:C8:C4:2F:52:D8:B3:76:E6:56:CE:EE:9A Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 0940 Signing time: Fri 22 Nov 2024 20:02:35 +0000 Manifest this update: Fri 22 Nov 2024 20:02:35 +0000 Manifest next update: Fri 29 Nov 2024 20:02:35 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: pRTJl0IkwfGkiwvztiJJSCQctuyRIn5EJAkbzpKRKhc=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: p8tYT8YIzrMYfS8FEgPfOhyzQ3A1i1G+CgkjUdJPswc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Nov 22 20:02:35 2024 GMT Not After : Nov 29 20:02:35 2024 GMT Subject: CN=6740e35b-4452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:97:9a:9d:8d:25:fa:a3:dd:b6:3c:03:22: 72:5d:eb:60:35:df:df:98:49:a5:80:74:27:ec:f1: 8d:b7:cb:75:31:8c:8d:a3:8d:79:17:6d:93:8d:9c: de:5c:08:0c:c6:e7:ec:cc:a7:14:75:6f:8b:20:6c: 91:48:b1:b5:24:83:54:cc:ea:cc:d5:a3:28:ec:a9: 4e:d0:93:56:48:6a:4f:87:bd:a4:6a:06:b9:34:77: f9:6a:f4:dd:8a:9b:20:c7:5a:21:14:4f:51:00:9d: e9:f0:23:e1:ba:a2:34:55:d1:75:64:89:48:52:84: e5:d6:5b:b0:18:76:0c:ca:65:f8:19:ff:09:b9:c8: 68:22:f9:96:29:1e:0a:d8:52:8e:26:15:51:ac:38: 0e:36:33:09:4b:d2:b4:99:d8:8b:38:99:3e:24:09: 09:ef:c3:f6:cf:90:74:49:63:b8:1e:80:8d:8c:c5: 2d:57:ec:c0:6a:9d:74:83:d9:22:3f:83:dc:a4:c6: 3d:e5:58:29:bd:fc:53:7a:c0:2f:f2:60:a7:56:ef: 31:ad:33:5c:d6:12:dd:a1:81:37:2b:3e:9e:59:48: 45:6d:89:69:9f:f0:3a:6a:20:f1:26:6a:e3:d6:2e: 6a:9e:76:a0:0b:44:12:24:be:28:2f:80:5c:c0:33: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:9D:EB:3B:8E:A1:90:C8:C4:2F:52:D8:B3:76:E6:56:CE:EE:9A X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:17:57:5e:74:90:c8:95:bb:cb:9f:6a:64:ca:6b:19:d2:e2: 7b:ba:dd:c9:61:00:42:a8:73:0b:24:64:82:0b:7a:15:c6:f2: de:c1:34:a8:a2:e3:4c:4a:62:94:22:e5:d9:e8:26:43:e3:79: df:5c:19:d7:b6:a6:a1:ed:78:f1:c1:c6:ab:be:29:67:f0:95: 8c:61:ac:7c:54:e1:9b:cd:17:f2:25:37:ab:73:c0:c3:5d:ff: 94:da:0f:19:fb:cb:55:59:bd:b6:e3:cb:d2:45:fb:ea:58:14: a9:2d:7c:79:51:0e:76:78:c2:fb:0b:ea:58:64:18:f8:be:50: e6:d5:01:df:64:f5:bb:25:18:bc:a0:49:c1:35:6f:52:5f:21: 5b:20:8a:31:f2:2b:ac:c6:ae:ae:f2:90:cb:29:e4:a2:40:8e: 76:2a:f8:03:1d:07:66:da:37:92:e1:d0:9a:04:2a:ce:d6:ac: 97:9f:f4:43:2d:4d:ef:af:d4:65:dc:4a:b3:a3:c0:ab:52:7c: 6d:3b:9f:11:e2:67:a8:12:a8:1d:35:e3:4f:0e:75:92:b4:1e: 16:81:41:78:b3:5b:3a:f1:54:59:31:85:8d:ce:08:95:73:ba: b7:a6:3d:9b:61:b6:c3:85:99:bb:7d:7c:e6:64:f3:e2:27:d3: 3e:9b:2d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjQxMTIyMjAwMjM1WhcNMjQxMTI5MjAwMjM1WjAYMRYwFAYD VQQDEw02NzQwZTM1Yi00NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy56Xmp2NJfqj3bY8AyJyXetgNd/fmEmlgHQn7PGNt8t1MYyNo415F22TjZze XAgMxufszKcUdW+LIGyRSLG1JINUzOrM1aMo7KlO0JNWSGpPh72kaga5NHf5avTd ipsgx1ohFE9RAJ3p8CPhuqI0VdF1ZIlIUoTl1luwGHYMymX4Gf8JuchoIvmWKR4K 2FKOJhVRrDgONjMJS9K0mdiLOJk+JAkJ78P2z5B0SWO4HoCNjMUtV+zAap10g9ki P4PcpMY95VgpvfxTesAv8mCnVu8xrTNc1hLdoYE3Kz6eWUhFbYlpn/A6aiDxJmrj 1i5qnnagC0QSJL4oL4BcwDOFNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYKnes7 jqGQyMQvUtizduZWzu6aMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEF1dedJDIlbvLn2pkymsZ0uJ7ut3JYQBCqHMLJGSCC3oVxvLewTSo ouNMSmKUIuXZ6CZD43nfXBnXtqah7Xjxwcarviln8JWMYax8VOGbzRfyJTerc8DD Xf+U2g8Z+8tVWb2248vSRfvqWBSpLXx5UQ52eML7C+pYZBj4vlDm1QHfZPW7JRi8 oEnBNW9SXyFbIIox8iusxq6u8pDLKeSiQI52KvgDHQdm2jeS4dCaBCrO1qyXn/RD LU3vr9Rl3Eqzo8CrUnxtO58R4meoEqgdNeNPDnWStB4WgUF4s1s68VRZMYWNzgiV c7q3pj2bYbbDhZm7fXzmZPPiJ9M+my15 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org