$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: IAfqoPcb5BpM1vYSelwfXCDBARlz9GNTDB5qLZcrut4= Subject key identifier: 22:E0:87:73:03:EF:55:0C:97:D3:F2:70:FD:BE:95:12:26:80:63:30 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0ABA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0AAB Signing time: Wed 20 Nov 2024 19:12:41 +0000 Manifest this update: Wed 20 Nov 2024 19:12:40 +0000 Manifest next update: Wed 27 Nov 2024 19:12:40 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: FMh8NdAzt3WZdoC3uhd4PD4pLKI0BLz8dSm9qsnrJ34=) 2: F8BCA17670C611EFBF64266FC4F9AE02.roa (hash: 0Xx+rkEjjbktgMFiX+FcjqqR+mXuZTeDGa2pOpO6Mfs=) 3: F7BA1FCE70C611EFBF64266FC4F9AE02.roa (hash: dfP5faa/Yw/V2aLs80Ju1Tmgf9Tm0S0758+0J53NO7M=) 4: 0C2E16A470C711EFBFC3326FC4F9AE02.roa (hash: DZwm66T5S6HqaQoftbBkQEQnSPQUH86bvRpL2sS6VKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Nov 20 19:12:40 2024 GMT Not After : Nov 27 19:12:40 2024 GMT Subject: CN=673e34a8-1a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:35:b7:75:93:4c:ad:56:e3:c9:e5:cd:08: 66:a3:e7:66:fa:c7:aa:4d:47:f1:98:c9:cb:76:ec: bc:7b:49:88:17:1f:ce:47:25:5f:af:cd:da:88:4f: 7a:be:5f:f8:a5:ab:41:04:7b:34:02:26:2f:b5:7d: c2:f4:bc:2b:fd:af:9d:d0:a6:10:f8:9b:da:48:73: d0:d3:af:ec:50:02:ff:6b:79:94:52:5d:47:87:84: e4:18:0b:fe:8e:fd:16:4b:06:b6:0c:e3:13:92:05: 13:eb:37:ce:9d:c1:23:56:fe:9e:5d:57:c2:46:f6: 6f:0b:28:e5:9c:52:d9:e0:58:a5:51:0a:cf:ae:94: e2:00:8f:db:da:92:7e:b3:61:00:33:19:5b:fa:dd: 61:73:c5:38:b9:10:81:d7:22:dd:1f:0e:8c:a2:10: 90:42:b3:3f:51:5f:6f:48:ee:e6:f8:b7:90:18:a3: 42:aa:68:ab:71:27:fe:a6:15:34:c3:bc:bc:02:15: 3a:0d:e4:2b:69:c8:37:30:66:e6:3a:1e:74:9e:ba: 6f:77:de:b4:33:bf:e9:f1:54:20:dd:f5:3c:cf:b1: c5:b8:e7:9b:b2:d3:79:bb:bb:05:45:75:80:d4:a2: d2:74:5a:b9:0d:e6:fa:89:f0:7b:88:71:35:a4:1a: 1d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:87:73:03:EF:55:0C:97:D3:F2:70:FD:BE:95:12:26:80:63:30 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:d7:1a:88:9c:0d:63:e1:28:0e:6e:da:9e:f6:43:46:39: 63:80:fe:7a:58:11:40:cf:9e:f4:af:32:d7:0f:78:ec:d0:09: 97:4c:c5:f2:8d:09:34:e0:4d:9a:32:30:84:b7:1c:0c:80:6c: db:da:64:d4:7d:78:9f:78:95:32:53:e2:16:fe:d4:f3:2b:b9: 3b:ae:16:37:bd:48:cc:5d:47:5f:42:df:df:e2:5c:4d:6a:94: d7:3c:a8:df:15:93:f1:91:c9:d0:bd:70:9a:04:6d:f3:71:e4: c5:9a:8f:ab:39:d3:eb:4d:13:36:0a:70:bc:53:9b:65:5d:c4: 4e:b2:0d:e0:93:93:e2:77:c3:ee:f0:57:51:11:db:ee:24:3f: 47:f2:8a:94:16:d9:11:7a:d0:c7:d2:80:20:07:33:9b:36:df: fa:0c:d9:e3:03:09:57:eb:6c:fb:85:e1:74:e8:7b:1c:90:d7: 12:96:3e:e8:6d:9f:55:71:3e:4c:3f:64:e1:9a:1d:71:cf:a1: f9:69:a8:42:d8:a2:2a:a9:85:99:4f:17:76:84:2a:4c:c1:3a: 4b:13:f1:36:aa:1d:25:4b:fd:6a:a6:50:a5:eb:51:71:d4:24: f3:77:bc:75:35:07:75:5b:09:80:c8:2a:a5:1e:f3:ab:bb:6f: 61:4d:65:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjQxMTIwMTkxMjQwWhcNMjQxMTI3MTkxMjQwWjAYMRYwFAYD VQQDEw02NzNlMzRhOC0xYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwds1t3WTTK1W48nlzQhmo+dm+seqTUfxmMnLduy8e0mIFx/ORyVfr83aiE96 vl/4patBBHs0AiYvtX3C9Lwr/a+d0KYQ+JvaSHPQ06/sUAL/a3mUUl1Hh4TkGAv+ jv0WSwa2DOMTkgUT6zfOncEjVv6eXVfCRvZvCyjlnFLZ4FilUQrPrpTiAI/b2pJ+ s2EAMxlb+t1hc8U4uRCB1yLdHw6MohCQQrM/UV9vSO7m+LeQGKNCqmircSf+phU0 w7y8AhU6DeQracg3MGbmOh50nrpvd960M7/p8VQg3fU8z7HFuOebstN5u7sFRXWA 1KLSdFq5Deb6ifB7iHE1pBodNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLgh3MD 71UMl9PycP2+lRImgGMwMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClhtcaiJwNY+EoDm7anvZDRjljgP56WBFAz570rzLXD3js0AmXTMXy jQk04E2aMjCEtxwMgGzb2mTUfXifeJUyU+IW/tTzK7k7rhY3vUjMXUdfQt/f4lxN apTXPKjfFZPxkcnQvXCaBG3zceTFmo+rOdPrTRM2CnC8U5tlXcROsg3gk5Pid8Pu 8FdREdvuJD9H8oqUFtkRetDH0oAgBzObNt/6DNnjAwlX62z7heF06HsckNcSlj7o bZ9VcT5MP2Thmh1xz6H5aahC2KIqqYWZTxd2hCpMwTpLE/E2qh0lS/1qplCl61Fx 1CTzd7x1NQd1WwmAyCqlHvOru29hTWVL -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:29 2024 by rpki-client on console-fra.rpki-client.org