$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft File: lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json) Hash identifier: SNP4BXzIdgovAuoQhLRq1b54zpgrZtUXFlyM6u8WMZk= Subject key identifier: 66:35:9D:E4:94:2F:50:74:2A:AA:9D:3E:D4:05:8A:8F:3A:E7:03:37 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft Manifest number: 0649 Signing time: Wed 20 Nov 2024 22:09:24 +0000 Manifest this update: Wed 20 Nov 2024 22:09:23 +0000 Manifest next update: Wed 27 Nov 2024 22:09:23 +0000 Files and hashes: 1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: EuMBhNc6RJ2Z3OJEx3nx0x97TIWnuodhhknuKkSr/T4=) 2: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: Q72iVEgncsp2lLSVgYTmWchv3C8JihagPip5Niim/gg=) 3: 15434774090211EEA1C06509C4F9AE02.roa (hash: zYMvH0bozAXHYXp1gy3dgag6JI6cAqoQfJxD1+5vnXk=) 4: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hCvW/bIIT6VEr19d5xgLwhdssdkrsXh540frjC0/Ghg=) 5: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: pPxZKn2y1CbPcH9j/w8gLWF2hGu76QpyepgvN98sxQo=) 6: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: 46VM8I2pWnR3hV2SSnJ5PNhoRgQQwmH+XQIgWQ1aJ7U=) 7: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: qKiV0IifWKZY1JQ44Petgk24Yce0GGlR2IjNCc8NQlg=) 8: 168FD534090211EEA1C06509C4F9AE02.roa (hash: DiDcYvq7OTLPfptklNaitiQoU1f3iwa59I66Hcfla2Y=) 9: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: DKJpMcXJHs6ZKkb3zreaYt9LvCsKbBWSI6cQ9HPP9sc=) 10: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: hlWFyRUgGW1LDPVT2fvGX7ZTjObEtG9lX8JYZedFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Nov 20 22:09:23 2024 GMT Not After : Nov 27 22:09:23 2024 GMT Subject: CN=673e5e13-cfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:32:95:0a:2f:b4:c0:52:34:f9:7e:a3:12: 1f:3f:d9:a8:76:aa:2e:78:9d:ce:6f:2c:6a:e0:70: af:4e:41:5a:1b:a0:d3:fa:67:56:1d:42:c3:38:f4: a4:65:e3:9e:a6:94:28:43:c4:ea:20:a7:e4:b3:4d: af:a0:65:e1:76:55:81:08:e4:9b:4f:21:ee:14:20: 8a:ac:5a:fd:42:d9:f9:dd:ca:f3:04:ae:83:40:67: 7a:0b:8a:e9:d5:55:01:bd:f7:d2:cb:6d:80:12:56: 7c:73:c8:cd:ac:2a:cf:50:f4:19:e1:0d:36:96:fc: e1:c3:14:5c:1e:0a:df:8e:3c:74:63:d9:a0:6a:0f: 0b:c5:b5:37:4b:05:e8:2b:f7:8f:4a:6d:e6:52:f1: f9:c4:70:eb:a3:54:ec:7b:97:eb:a8:c5:6d:19:ab: bb:29:f2:32:ab:b7:40:40:ed:fb:ae:3e:ed:f1:f2: 64:35:4d:d9:55:c9:7e:41:7e:66:19:ff:05:18:a9: 44:a5:3d:27:be:01:d8:1d:d6:49:10:79:0b:9f:a3: e8:69:4b:28:b0:07:e1:49:53:7d:6c:bc:6f:a3:9a: b1:e7:84:1a:90:61:57:76:bc:c5:28:46:12:83:cd: 06:8d:a5:18:50:36:fb:bb:7c:95:7e:2f:64:ec:84: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:35:9D:E4:94:2F:50:74:2A:AA:9D:3E:D4:05:8A:8F:3A:E7:03:37 X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fa:f7:fd:09:4f:92:6f:5d:11:0d:fb:af:4c:27:e0:1f:89: 93:31:96:29:01:f7:05:91:63:c7:bc:8e:81:7e:68:c4:10:05: ea:e0:73:00:bb:26:07:92:4d:5b:02:bc:0f:90:5c:86:11:69: f3:6f:a4:37:a8:ef:a0:dc:2e:70:fc:13:1f:0a:24:4e:d6:60: a0:80:55:c2:81:6b:f9:c2:0b:d4:63:58:7e:04:b1:a2:0b:74: 6d:e2:1b:0e:12:4e:43:34:04:2d:7f:b7:87:fe:75:a6:44:87: 64:a0:cb:9b:7f:60:24:1c:b5:ac:57:db:b7:3c:e3:dc:07:1a: da:bf:89:ff:0b:84:5b:4f:bd:04:74:2a:e8:1c:4c:34:f0:a4: e3:05:f8:c2:8a:b2:8c:18:a7:75:b7:c1:43:31:12:c6:2f:39: f0:18:a3:8a:fd:b0:9b:d2:0a:6b:9c:23:83:91:b5:39:f0:b6: dc:f6:23:6c:e3:8f:ac:92:45:54:dc:91:bf:49:74:45:bc:b8: 12:0d:ef:f0:f0:5f:96:dc:43:2d:36:52:12:74:e3:cf:60:4c: a8:29:38:62:46:48:43:c9:b6:83:ad:3f:86:9d:8a:36:f0:da: 59:32:e7:6d:32:8a:16:75:d9:a0:0e:a1:9c:d5:52:c9:3c:a4: b6:d6:f6:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjQxMTIwMjIwOTIzWhcNMjQxMTI3MjIwOTIzWjAYMRYwFAYD VQQDEw02NzNlNWUxMy1jZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKsylQovtMBSNPl+oxIfP9modqoueJ3Obyxq4HCvTkFaG6DT+mdWHULDOPSk ZeOeppQoQ8TqIKfks02voGXhdlWBCOSbTyHuFCCKrFr9Qtn53crzBK6DQGd6C4rp 1VUBvffSy22AElZ8c8jNrCrPUPQZ4Q02lvzhwxRcHgrfjjx0Y9mgag8LxbU3SwXo K/ePSm3mUvH5xHDro1Tse5frqMVtGau7KfIyq7dAQO37rj7t8fJkNU3ZVcl+QX5m Gf8FGKlEpT0nvgHYHdZJEHkLn6PoaUsosAfhSVN9bLxvo5qx54QakGFXdrzFKEYS g80GjaUYUDb7u3yVfi9k7IRIIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGY1neSU L1B0KqqdPtQFio865wM3MB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01 UzlIMkRjdTkyNV9lQnl0X00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr+vf9CU+Sb10RDfuvTCfgH4mTMZYpAfcFkWPHvI6BfmjEEAXq4HMA uyYHkk1bArwPkFyGEWnzb6Q3qO+g3C5w/BMfCiRO1mCggFXCgWv5wgvUY1h+BLGi C3Rt4hsOEk5DNAQtf7eH/nWmRIdkoMubf2AkHLWsV9u3POPcBxrav4n/C4RbT70E dCroHEw08KTjBfjCirKMGKd1t8FDMRLGLznwGKOK/bCb0gprnCODkbU58Lbc9iNs 44+skkVU3JG/SXRFvLgSDe/w8F+W3EMtNlISdOPPYEyoKThiRkhDybaDrT+GnYo2 8NpZMudtMooWddmgDqGc1VLJPKS21vbI -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org