$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: 2B7D2oJUi81K1kD1WnplUkwDTuFvBwvePVrc4exJjvk= Subject key identifier: B3:D6:5F:62:A3:94:60:80:2E:81:EB:08:86:35:81:81:76:28:D8:37 Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 07DE Signing time: Fri 22 Nov 2024 22:44:43 +0000 Manifest this update: Fri 22 Nov 2024 22:44:43 +0000 Manifest next update: Fri 29 Nov 2024 22:44:43 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: XFOj+ilV8T0iAztD+8khF4VpJD4lHnPwxqmSpZzsqvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: Nov 22 22:44:43 2024 GMT Not After : Nov 29 22:44:43 2024 GMT Subject: CN=6741095b-2247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:57:74:bd:9d:28:dd:5b:b5:e9:75:03:57: 0b:ba:f6:cc:10:4e:7e:5d:35:40:28:1f:af:9e:a0: 98:51:3f:e3:b1:4c:91:db:eb:99:fa:5b:fb:00:c1: f0:ea:c1:9c:33:16:c8:a6:63:85:0e:87:02:58:85: b8:dd:5b:13:a8:00:25:dd:a2:96:a6:9f:38:9f:bf: 14:de:19:82:8b:28:00:19:e5:b5:22:6a:3b:fb:a8: 2f:bb:d2:24:59:42:e9:7c:f4:09:b3:29:59:d5:60: 16:b5:8c:b3:10:e2:d6:cf:ff:d7:de:eb:49:d2:e5: 81:32:ed:61:d3:71:79:bb:1d:bd:13:58:c7:00:c0: ec:8e:de:44:a2:a2:0c:d2:d0:64:80:43:90:58:37: 5c:d2:8c:4a:1a:8e:3e:7a:19:6d:5e:47:d4:17:2a: 79:db:82:5b:4b:a1:fa:ee:33:20:75:9f:22:be:b2: 89:6d:33:3c:c8:7c:ce:d7:ef:a6:5a:be:4b:f4:36: 15:be:60:31:e6:42:c9:f8:f7:70:95:9c:55:14:8c: c7:fd:be:92:e2:20:b0:99:90:b1:f9:f5:a6:77:32: 4b:4e:5d:ff:38:4b:28:be:67:b6:41:47:53:0a:b4: 41:2f:0d:c9:be:89:39:8b:a4:a5:2f:30:21:9b:ac: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D6:5F:62:A3:94:60:80:2E:81:EB:08:86:35:81:81:76:28:D8:37 X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:81:8b:9a:1a:57:54:f3:a6:2e:1b:82:ee:d6:a5:ab:82:f8: e0:da:ed:3d:da:55:57:25:57:51:c4:e2:1d:95:88:fd:58:3e: 8a:ab:14:2b:d8:f4:68:e5:95:ba:06:64:92:f6:82:36:e9:69: 6d:57:c0:10:85:0b:a1:86:37:06:5a:7d:22:a4:f4:4b:5d:f3: bc:37:88:c3:a6:8c:3f:ed:ba:d6:c5:05:be:55:e4:82:38:07: 00:3b:34:3f:57:e7:59:7d:09:fd:b1:8c:42:f3:b9:56:8b:d5: c7:b3:61:3d:07:d6:0f:79:9d:74:53:02:c7:6d:4a:d8:15:66: 78:32:a4:3b:c2:4e:d4:b4:d5:8d:be:d7:df:87:8d:19:26:7d: 15:e8:0a:9c:d6:f4:4e:7a:43:2f:71:a2:33:ae:c7:fb:a0:be: 19:a8:1e:e5:d4:bb:b4:b3:d3:35:cd:85:7d:6a:be:2e:7a:a1: 07:53:ca:10:cc:6b:a8:14:fe:39:44:91:e5:6c:9a:c3:c9:84: fe:c1:f7:a8:4b:26:8a:20:4f:5a:48:73:80:a4:da:bb:56:9e: bf:8c:a0:49:38:bb:1b:e9:de:68:56:4e:49:a2:30:d9:e6:b3: 1e:89:ec:4a:1d:77:ae:bf:b5:10:1d:ee:1f:2c:5f:ca:af:1e: c1:b3:2c:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjQxMTIyMjI0NDQzWhcNMjQxMTI5MjI0NDQzWjAYMRYwFAYD VQQDEw02NzQxMDk1Yi0yMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvRXdL2dKN1btel1A1cLuvbMEE5+XTVAKB+vnqCYUT/jsUyR2+uZ+lv7AMHw 6sGcMxbIpmOFDocCWIW43VsTqAAl3aKWpp84n78U3hmCiygAGeW1Imo7+6gvu9Ik WULpfPQJsylZ1WAWtYyzEOLWz//X3utJ0uWBMu1h03F5ux29E1jHAMDsjt5EoqIM 0tBkgEOQWDdc0oxKGo4+ehltXkfUFyp524JbS6H67jMgdZ8ivrKJbTM8yHzO1++m Wr5L9DYVvmAx5kLJ+PdwlZxVFIzH/b6S4iCwmZCx+fWmdzJLTl3/OEsovme2QUdT CrRBLw3Jvok5i6SlLzAhm6ykSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPWX2Kj lGCALoHrCIY1gYF2KNg3MB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDgYuaGldU86YuG4Lu1qWrgvjg2u092lVXJVdRxOIdlYj9WD6KqxQr 2PRo5ZW6BmSS9oI26WltV8AQhQuhhjcGWn0ipPRLXfO8N4jDpow/7brWxQW+VeSC OAcAOzQ/V+dZfQn9sYxC87lWi9XHs2E9B9YPeZ10UwLHbUrYFWZ4MqQ7wk7UtNWN vtffh40ZJn0V6Aqc1vROekMvcaIzrsf7oL4ZqB7l1Lu0s9M1zYV9ar4ueqEHU8oQ zGuoFP45RJHlbJrDyYT+wfeoSyaKIE9aSHOApNq7Vp6/jKBJOLsb6d5oVk5JojDZ 5rMeiexKHXeuv7UQHe4fLF/Krx7BsyyW -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:38 2024 by rpki-client on console-fra.rpki-client.org