$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json) Hash identifier: ipH4QXjHoUkxu6t3bQGEXnyKiGGudtGeLn38/ETzIiQ= Subject key identifier: 5F:47:3A:CD:C3:5B:EB:1D:BF:A9:86:9C:C2:34:87:A7:15:DE:D8:55 Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft Manifest number: 92 Signing time: Sun 19 May 2024 06:56:58 +0000 Manifest this update: Sun 19 May 2024 06:56:58 +0000 Manifest next update: Sun 26 May 2024 06:56:58 +0000 Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: FaF7JjwrHPkUMnAgqcNrZtIiqbcMD3lLPn2aY/Ls0l4=) 2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: bpZ6TrvHmWk1Z5e90iDIkECXOJCmqPQsoPLq8mFn9rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Validity Not Before: May 19 06:56:58 2024 GMT Not After : May 26 06:56:58 2024 GMT Subject: CN=6649a2ba-12f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:5e:26:61:20:8b:a0:4f:8c:e7:1d:eb:03: f5:e3:4c:b6:e4:31:fd:8b:24:2e:9c:95:29:4b:bd: ac:1a:af:86:11:06:4a:15:af:40:81:f5:49:20:09: f5:6a:a3:6f:cd:9f:67:39:e3:d6:a1:cb:44:b2:d1: f5:8c:36:2b:7e:bd:d1:12:3c:b9:a8:9c:c9:d1:d9: cd:22:ee:5e:cc:87:f4:db:be:ea:34:b8:71:bc:88: 83:26:da:9d:18:0f:a3:ae:a2:45:10:fe:c8:e8:6f: ba:4b:b3:e9:30:bf:ff:3b:a2:73:69:2f:43:96:80: b6:6c:e0:5b:df:c4:48:36:d4:71:c3:9b:c5:c3:7a: 3a:b5:5d:da:19:ab:b3:73:6a:a6:c8:10:f0:62:5a: 5c:f2:ae:23:30:85:0a:1e:7d:04:25:94:3a:37:e9: 3d:3f:76:5a:24:72:ad:1f:fd:c2:f7:fe:a0:f1:94: 39:22:13:a9:d0:39:40:2e:bc:17:1b:21:c9:53:bd: 20:1b:75:be:1d:78:5b:04:02:19:42:de:1b:cc:4a: ee:e0:96:6a:ad:df:79:26:2b:95:17:0d:df:da:dc: a4:20:bf:d2:fb:68:d6:6c:11:b5:20:d8:a1:f4:86: e4:30:f5:fa:9f:6e:9d:6b:e6:73:b0:bb:30:4a:87: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:47:3A:CD:C3:5B:EB:1D:BF:A9:86:9C:C2:34:87:A7:15:DE:D8:55 X509v3 Authority Key Identifier: keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e4:05:85:09:94:b7:e9:fb:fd:44:c3:36:d6:c7:92:b5:a6: 9f:17:2c:85:58:fe:02:65:11:dd:68:0f:5b:92:35:2f:b3:92: f4:1f:39:d8:e8:72:af:c5:87:31:11:b2:a9:84:18:00:a4:7b: ed:15:45:e5:a5:53:4c:a6:8a:14:03:de:99:c7:82:fa:e6:c8: 9d:80:c5:8b:82:d9:43:f4:09:81:6a:ea:ba:63:49:c1:85:64: 9c:58:4f:bc:5d:20:63:27:31:e6:e2:be:73:c2:17:e3:63:c8: 22:1f:ca:4e:b5:0b:cd:05:14:94:d9:c5:c0:ba:75:32:ca:8a: 09:4d:8d:b9:71:23:ec:35:78:dc:5d:0b:cd:66:58:26:d1:6b: a5:8e:da:03:37:b0:63:99:fe:81:e6:df:d4:f9:5c:b9:ec:56: aa:fc:9e:6b:0f:75:27:b4:a8:82:d3:bd:b1:f1:07:d8:17:bd: 8d:d1:14:00:d3:1f:f7:04:16:da:a4:ff:23:63:99:f3:84:e0: d5:8f:55:eb:44:07:47:30:12:c3:33:61:fe:db:9e:a5:f4:bf: e0:1d:dc:86:68:70:33:ef:3c:25:a1:db:47:f0:83:de:4f:53: e5:62:11:79:f5:f4:01:e9:fd:af:c7:98:c5:b0:9e:44:f2:ac: 5e:9a:2c:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAxNUQxMTAvBgNVBAUTKDJDQjhDMUY5RUEwQzdCNUE4MDM2ODkzODg0MDBDQzZG RDhCMDQ5RDIwHhcNMjQwNTE5MDY1NjU4WhcNMjQwNTI2MDY1NjU4WjAYMRYwFAYD VQQDEw02NjQ5YTJiYS0xMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw31eJmEgi6BPjOcd6wP140y25DH9iyQunJUpS72sGq+GEQZKFa9AgfVJIAn1 aqNvzZ9nOePWoctEstH1jDYrfr3REjy5qJzJ0dnNIu5ezIf0277qNLhxvIiDJtqd GA+jrqJFEP7I6G+6S7PpML//O6JzaS9DloC2bOBb38RINtRxw5vFw3o6tV3aGauz c2qmyBDwYlpc8q4jMIUKHn0EJZQ6N+k9P3ZaJHKtH/3C9/6g8ZQ5IhOp0DlALrwX GyHJU70gG3W+HXhbBAIZQt4bzEru4JZqrd95JiuVFw3f2tykIL/S+2jWbBG1INih 9IbkMPX6n26da+ZzsLswSods1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9HOs3D W+sdv6mGnMI0h6cV3thVMB8GA1UdIwQYMBaAFCy4wfnqDHtagDaJOIQAzG/YsEnS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE1RC80MTRBRUQ2QTM0 RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUxcUFOb2s0aEFETWI5aXdT ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xMakItZW9NZTFxQU5vazRoQURNYjlpd1NkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDE1RC80MTRBRUQ2QTM0RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUx cUFOb2s0aEFETWI5aXdTZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw5AWFCZS36fv9RMM21seStaafFyyFWP4CZRHdaA9bkjUvs5L0HznY 6HKvxYcxEbKphBgApHvtFUXlpVNMpooUA96Zx4L65sidgMWLgtlD9AmBauq6Y0nB hWScWE+8XSBjJzHm4r5zwhfjY8giH8pOtQvNBRSU2cXAunUyyooJTY25cSPsNXjc XQvNZlgm0WuljtoDN7Bjmf6B5t/U+Vy57Faq/J5rD3UntKiC072x8QfYF72N0RQA 0x/3BBbapP8jY5nzhODVj1XrRAdHMBLDM2H+256l9L/gHdyGaHAz7zwlodtH8IPe T1PlYhF59fQB6f2vx5jFsJ5E8qxemiz4 -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org