$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: PfyQtso0ktwo+DWU+uuE88vk4zG9lAKsQPEPp2uIhiA= Subject key identifier: 6E:94:5F:6B:35:2B:CA:25:B3:3D:63:95:CD:DC:EC:49:AD:F0:4C:EE Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0CE5 Signing time: Fri 22 Nov 2024 18:01:43 +0000 Manifest this update: Fri 22 Nov 2024 18:01:43 +0000 Manifest next update: Fri 29 Nov 2024 18:01:43 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: S/Rl/A01gn+yp8vq0JxIwCvrn+fXJYEnFDemKJmZ6Dw=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 2//beVUEUtWDd/tf9scv/4G9JclsWxR4JDywFndSmnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Nov 22 18:01:43 2024 GMT Not After : Nov 29 18:01:43 2024 GMT Subject: CN=6740c707-531d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e7:08:8b:5d:90:2b:53:b4:26:a5:eb:2d:f3: af:96:50:51:cd:d1:c0:b5:e9:bc:de:9d:8d:74:85: 68:ab:50:8c:e2:a8:1a:67:c8:40:b5:7a:0c:3f:2c: 57:39:9d:00:29:6e:5a:22:d9:76:f8:20:ae:7a:70: cf:e9:4c:90:ae:0e:af:66:8f:94:cd:39:9c:48:70: 30:3f:01:a0:0d:fa:b5:d6:1c:22:3e:db:4d:f4:e7: e0:40:ee:7a:67:ed:f7:f7:44:d3:12:a9:32:0f:ec: 52:dc:3d:31:5e:b6:97:99:d1:79:35:0d:35:91:48: 02:b1:06:f5:0f:45:48:8f:8f:67:4c:b4:e7:03:a1: b6:e2:9d:12:21:2c:c4:f5:f7:08:83:4a:ad:67:a7: 62:bf:02:b3:11:3e:af:2f:0f:3c:29:e2:9e:2d:83: 0c:39:ad:06:9f:cd:ef:e6:4c:e4:89:87:e0:97:7d: d3:29:88:e2:91:c0:6d:35:44:bf:1e:6f:61:a9:56: 5f:fc:52:4b:15:0b:02:2e:b4:39:39:5d:12:6f:8c: 01:2a:ee:22:44:f7:69:00:70:af:59:8a:07:0a:1e: 9c:d8:22:c0:c7:fb:26:94:e2:a7:0d:02:c0:88:70: e7:46:d8:20:6a:97:fe:ac:7e:5b:2b:91:91:6c:9a: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:94:5F:6B:35:2B:CA:25:B3:3D:63:95:CD:DC:EC:49:AD:F0:4C:EE X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:91:cc:d2:10:98:21:88:5b:ef:19:5e:1b:81:78:8f:fa:25: f2:be:b4:50:42:cf:d7:48:57:7c:f3:be:3b:b0:c9:f8:8a:69: de:5d:66:e0:88:e6:93:b3:d3:ae:ce:9c:97:87:f1:8b:3e:c4: c8:3c:ed:77:5b:a4:0e:fc:a1:40:c1:5d:e0:16:5e:c0:eb:af: fa:1d:92:84:93:de:fc:57:59:d0:78:4e:55:20:e1:12:6a:73: 47:4d:20:1b:07:89:6f:11:d9:ce:5f:68:17:1f:f8:7f:2b:68: a9:ad:19:cf:27:20:cb:60:4e:4f:5e:9b:9d:54:b0:0e:53:43: e5:d3:c5:1b:75:e7:25:db:97:19:7d:f4:bc:f0:5e:4d:3a:b5: 68:99:48:3e:55:f2:d5:40:3f:48:d9:25:57:aa:0f:02:79:ba: 60:82:6d:72:27:93:62:fe:61:65:2d:fd:a1:3f:12:3e:bb:56: eb:c3:59:e0:0f:25:20:2c:00:64:a9:03:ef:c2:00:a2:48:6f: e2:1a:14:de:68:de:ab:b3:68:06:66:70:15:cc:54:f8:a5:53: df:a4:53:f2:b6:e6:11:ab:cf:20:2b:36:ab:e8:44:c1:22:ec: e6:fd:59:3a:b2:d4:7a:46:bf:96:14:8f:f9:87:0a:42:f8:5f: 76:2c:b3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjQxMTIyMTgwMTQzWhcNMjQxMTI5MTgwMTQzWjAYMRYwFAYD VQQDEw02NzQwYzcwNy01MzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+cIi12QK1O0JqXrLfOvllBRzdHAtem83p2NdIVoq1CM4qgaZ8hAtXoMPyxX OZ0AKW5aItl2+CCuenDP6UyQrg6vZo+UzTmcSHAwPwGgDfq11hwiPttN9OfgQO56 Z+3390TTEqkyD+xS3D0xXraXmdF5NQ01kUgCsQb1D0VIj49nTLTnA6G24p0SISzE 9fcIg0qtZ6divwKzET6vLw88KeKeLYMMOa0Gn83v5kzkiYfgl33TKYjikcBtNUS/ Hm9hqVZf/FJLFQsCLrQ5OV0Sb4wBKu4iRPdpAHCvWYoHCh6c2CLAx/smlOKnDQLA iHDnRtggapf+rH5bK5GRbJrX5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6UX2s1 K8olsz1jlc3c7Emt8EzuMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRkczSEJghiFvvGV4bgXiP+iXyvrRQQs/XSFd88747sMn4imneXWbg iOaTs9OuzpyXh/GLPsTIPO13W6QO/KFAwV3gFl7A66/6HZKEk978V1nQeE5VIOES anNHTSAbB4lvEdnOX2gXH/h/K2iprRnPJyDLYE5PXpudVLAOU0Pl08Ubdecl25cZ ffS88F5NOrVomUg+VfLVQD9I2SVXqg8Cebpggm1yJ5Ni/mFlLf2hPxI+u1brw1ng DyUgLABkqQPvwgCiSG/iGhTeaN6rs2gGZnAVzFT4pVPfpFPytuYRq88gKzar6ETB Iuzm/Vk6stR6Rr+WFI/5hwpC+F92LLMk -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org