$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: t7NrTU+IC/inifBvFvCYo461YPmQsYPD/0AhZT+Tho4= Subject key identifier: A1:5B:B9:3D:F9:B5:08:A2:B0:D6:55:4A:D4:8B:7A:A6:34:71:8B:16 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 057A Signing time: Mon 27 May 2024 00:48:14 +0000 Manifest this update: Mon 27 May 2024 00:48:13 +0000 Manifest next update: Mon 03 Jun 2024 00:48:13 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: SiF8VyYM0VyWRosNe1U8UthbYyyhIhfLq+5GPJpu8cc=) 2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: OWvKVTifRt9Iu2tVWtoXO+U1lovVBowFKNMDPAP9PZY=) 3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: 9Ald5xMfp6PS+kyx1BsQkwiBFoLKe14yvlhyEiXrANQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: May 27 00:48:13 2024 GMT Not After : Jun 3 00:48:13 2024 GMT Subject: CN=6653d84e-e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:77:13:79:3b:03:16:89:88:3b:eb:8d:c2: 08:0f:da:36:2e:42:ed:e5:70:fb:e3:70:1b:a7:ec: 6d:f7:58:88:21:f9:7b:de:ff:1f:43:91:e1:e7:e0: 8e:46:20:c5:24:bd:08:24:fe:1d:3b:db:9d:a8:b0: da:ec:1b:3f:2c:b7:8f:47:0a:3b:fc:1b:f7:77:17: 9f:66:19:ae:d6:79:30:d2:bf:55:84:07:d8:9a:a9: c0:8c:aa:eb:d3:40:80:64:3a:a5:b7:81:c3:02:4c: 07:18:93:08:06:a9:c3:b8:9f:8f:0f:37:e9:6e:89: 69:83:87:97:97:77:7e:be:45:22:8c:91:a0:2b:34: 9f:d0:83:9d:83:4f:b2:01:3c:a3:d5:1a:e4:7d:d4: 22:ff:db:6f:1a:78:2d:8d:b9:dc:ed:40:e5:09:be: ef:41:cb:c3:da:0a:5b:bd:72:f1:9e:71:b6:cf:3a: fe:14:07:30:9b:ff:26:7b:1b:41:86:e0:b9:bd:e9: 7e:8e:45:14:53:51:f2:28:a0:77:84:98:11:7d:82: 3c:34:5d:03:b5:f3:e2:b9:30:69:a4:54:b1:86:8e: c2:89:9a:94:10:66:30:72:67:b5:8c:e0:1e:8d:cf: 4e:b5:a9:59:8a:a3:78:2d:10:b4:93:63:d3:5f:59: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5B:B9:3D:F9:B5:08:A2:B0:D6:55:4A:D4:8B:7A:A6:34:71:8B:16 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d5:46:26:35:c5:99:4c:f0:d2:7e:cb:31:42:9e:52:26:28: fe:98:75:81:a4:19:eb:00:d7:6f:53:cd:8e:8e:a9:46:89:49: f2:29:ef:eb:10:36:60:62:73:37:a3:be:78:76:b8:f3:f5:9d: 30:9d:01:13:3e:ea:1a:57:45:ea:3d:53:cd:4e:56:26:5f:b5: cc:a4:4a:15:c4:a5:46:28:0f:1b:cd:65:45:d9:aa:85:6f:26: 8a:43:65:a1:d7:35:e6:6a:84:58:3e:03:27:82:71:76:01:df: 72:15:dc:f4:e6:41:13:41:d6:8d:21:31:c9:ba:ef:ef:36:18: b7:2c:f5:6f:4f:1d:84:6c:34:a2:da:65:88:fc:a0:d5:7a:39: e9:43:3a:ba:06:c9:c4:3c:1e:4c:c5:59:57:51:76:9c:77:21: 12:e5:08:92:79:82:dd:35:9a:aa:91:2a:c2:57:78:37:bd:14: f5:ed:df:f5:3f:8f:d3:41:9b:2c:40:1c:d3:ad:45:32:50:e7: 1a:0d:63:55:01:b5:91:00:0f:de:4d:30:0c:02:b1:b7:d2:73: 58:e5:e1:87:b2:79:fe:6a:87:c5:77:de:4b:c7:5b:73:fc:ac: 71:97:f5:75:03:2b:21:96:82:5d:3d:43:d3:51:1d:90:fe:9c: 96:fa:0e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjQwNTI3MDA0ODEzWhcNMjQwNjAzMDA0ODEzWjAYMRYwFAYD VQQDEw02NjUzZDg0ZS1lMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHt3E3k7AxaJiDvrjcIID9o2LkLt5XD743Abp+xt91iIIfl73v8fQ5Hh5+CO RiDFJL0IJP4dO9udqLDa7Bs/LLePRwo7/Bv3dxefZhmu1nkw0r9VhAfYmqnAjKrr 00CAZDqlt4HDAkwHGJMIBqnDuJ+PDzfpbolpg4eXl3d+vkUijJGgKzSf0IOdg0+y ATyj1RrkfdQi/9tvGngtjbnc7UDlCb7vQcvD2gpbvXLxnnG2zzr+FAcwm/8mextB huC5vel+jkUUU1HyKKB3hJgRfYI8NF0DtfPiuTBppFSxho7CiZqUEGYwcme1jOAe jc9OtalZiqN4LRC0k2PTX1lhOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFbuT35 tQiisNZVStSLeqY0cYsWMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD1UYmNcWZTPDSfssxQp5SJij+mHWBpBnrANdvU82OjqlGiUnyKe/r EDZgYnM3o754drjz9Z0wnQETPuoaV0XqPVPNTlYmX7XMpEoVxKVGKA8bzWVF2aqF byaKQ2Wh1zXmaoRYPgMngnF2Ad9yFdz05kETQdaNITHJuu/vNhi3LPVvTx2EbDSi 2mWI/KDVejnpQzq6BsnEPB5MxVlXUXacdyES5QiSeYLdNZqqkSrCV3g3vRT17d/1 P4/TQZssQBzTrUUyUOcaDWNVAbWRAA/eTTAMArG30nNY5eGHsnn+aofFd95Lx1tz /Kxxl/V1AyshloJdPUPTUR2Q/pyW+g5t -----END CERTIFICATE-----Generated at Mon May 27 02:29:34 2024 by rpki-client on console-ams.rpki-client.org