$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: NNX8qeaPSuObmH86m6n5NEmLutBWqvwFfShWjV9r5vc= Subject key identifier: 35:03:F2:E5:1C:1D:84:E9:DD:2F:77:E2:D0:BD:1C:12:81:9A:2B:C5 Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: 82 Signing time: Sun 19 May 2024 07:11:03 +0000 Manifest this update: Sun 19 May 2024 07:11:02 +0000 Manifest next update: Sun 26 May 2024 07:11:02 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: gkrti4uINbSn4vjfpiUH72tTgHmc91csEHAFFOCkRI0=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: 6GcmHk0R17BhotdAl/CVR2iptIEyT5WrpQF0R+iy09k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: May 19 07:11:02 2024 GMT Not After : May 26 07:11:02 2024 GMT Subject: CN=6649a607-b81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:7d:43:ed:e2:94:fe:5b:e3:84:4a:cd:a5: fd:7d:ed:dc:ba:72:c9:a8:9e:1b:df:d5:91:9f:87: 26:e6:e1:0f:6b:fd:95:eb:ce:35:e1:20:0d:0c:20: fe:c9:23:ad:91:64:77:96:37:e6:d7:b1:95:78:8b: 5b:6c:66:ff:23:a6:53:cb:9a:0b:a2:98:8b:92:c6: bc:fc:dd:5f:d8:bd:4c:e5:a0:2b:d2:a1:f5:ff:01: db:26:d4:65:18:80:9d:de:94:ef:48:52:b0:ab:41: 66:c2:91:59:e1:fb:af:85:43:ec:64:0a:c0:fb:70: 5a:b1:a0:f2:f3:59:06:6c:8e:70:91:ac:a0:fb:38: b9:6a:ec:de:48:92:65:4f:11:6a:39:23:e0:ea:d3: 4a:40:d1:c1:28:8c:22:a2:c0:8d:f0:ea:93:9b:d7: b1:39:bd:71:a7:29:ad:9d:ac:1b:d4:f5:5f:f1:3e: 2e:b3:6e:61:0d:f8:b6:5c:4c:45:b8:d6:15:ed:fb: 42:7e:76:1e:bd:8e:9e:ba:99:89:f2:07:8d:47:be: 42:64:03:ef:ad:ce:fc:c8:db:e1:f5:8f:8a:b2:48: 99:b6:89:e7:50:86:88:da:e6:1a:3d:b7:ef:a0:cc: a5:e5:25:4e:43:af:d1:e1:07:d4:b0:25:1c:47:30: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:03:F2:E5:1C:1D:84:E9:DD:2F:77:E2:D0:BD:1C:12:81:9A:2B:C5 X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3d:dd:80:c3:d0:7d:d2:5f:0b:60:05:1b:16:14:8d:24:41: 54:75:9c:58:da:40:50:29:b2:15:08:55:0a:a9:e0:5e:3b:99: f6:23:bf:b2:90:a8:31:c8:ae:56:56:71:ae:08:b2:50:19:be: 9f:df:39:63:bf:20:29:54:98:1c:25:07:ce:9c:14:f8:26:02: 17:d7:67:8b:2b:04:77:0e:e0:e6:3a:98:cd:d2:26:f2:ff:7b: 3a:0b:c1:78:d0:bb:69:fa:0f:64:a4:17:ba:28:a2:97:6a:0f: 20:3f:a8:c1:44:c8:3b:8d:1b:ed:92:7f:99:7e:6e:5c:6f:d9: 5a:bd:54:a1:14:1c:7e:05:c0:6b:53:96:f3:0a:53:21:3d:df: e1:07:a4:1a:05:a3:5a:2a:04:71:cf:1e:41:6c:6e:67:d8:45: bb:7c:ba:55:2b:e7:53:cc:95:43:24:95:df:61:c3:88:5c:6c: a7:ff:cd:65:bd:7a:ce:89:ae:42:ef:66:34:e5:d6:7d:2a:43: a1:32:45:b4:6f:e8:fc:9c:d5:b2:f9:81:19:b3:6e:30:e3:3b: 37:8b:24:2d:2f:78:01:28:42:be:50:7e:66:44:8a:3d:4a:be: 21:6e:2d:96:2b:cd:86:05:7a:e0:70:2f:1e:1c:30:f6:2b:d0: 34:30:b3:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjQwNTE5MDcxMTAyWhcNMjQwNTI2MDcxMTAyWjAYMRYwFAYD VQQDEw02NjQ5YTYwNy1iODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhB9Q+3ilP5b44RKzaX9fe3cunLJqJ4b39WRn4cm5uEPa/2V68414SANDCD+ ySOtkWR3ljfm17GVeItbbGb/I6ZTy5oLopiLksa8/N1f2L1M5aAr0qH1/wHbJtRl GICd3pTvSFKwq0FmwpFZ4fuvhUPsZArA+3BasaDy81kGbI5wkayg+zi5auzeSJJl TxFqOSPg6tNKQNHBKIwiosCN8OqTm9exOb1xpymtnawb1PVf8T4us25hDfi2XExF uNYV7ftCfnYevY6eupmJ8geNR75CZAPvrc78yNvh9Y+KskiZtonnUIaI2uYaPbfv oMyl5SVOQ6/R4QfUsCUcRzAczwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUD8uUc HYTp3S934tC9HBKBmivFMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPd2Aw9B90l8LYAUbFhSNJEFUdZxY2kBQKbIVCFUKqeBeO5n2I7+y kKgxyK5WVnGuCLJQGb6f3zljvyApVJgcJQfOnBT4JgIX12eLKwR3DuDmOpjN0iby /3s6C8F40Ltp+g9kpBe6KKKXag8gP6jBRMg7jRvtkn+Zfm5cb9lavVShFBx+BcBr U5bzClMhPd/hB6QaBaNaKgRxzx5BbG5n2EW7fLpVK+dTzJVDJJXfYcOIXGyn/81l vXrOia5C72Y05dZ9KkOhMkW0b+j8nNWy+YEZs24w4zs3iyQtL3gBKEK+UH5mRIo9 Sr4hbi2WK82GBXrgcC8eHDD2K9A0MLOW -----END CERTIFICATE-----Generated at Sun May 19 08:24:56 2024 by rpki-client on console-ams.rpki-client.org