$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json) Hash identifier: bN4lEaHS6Y0hxQ5idXoQHiIH19cVtKahcGNEVcH7SIY= Subject key identifier: 4A:09:1E:DF:7C:E0:4E:EC:12:56:A6:84:D3:A0:5B:2F:87:AA:7B:76 Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft Manifest number: 042F Signing time: Sun 19 May 2024 02:01:15 +0000 Manifest this update: Sun 19 May 2024 02:01:15 +0000 Manifest next update: Sun 26 May 2024 02:01:15 +0000 Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: Kh3DGMM+R6K0yLqbnGCSBq5WZDGAPQp/bwIY/7uLw08=) 2: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: Ttn15R/2S0g9Iwpzx7uYzM1uyUX8bVHv0/bnifX+j4M=) 3: 5BADDAF216D911EC9ACD9223C4F9AE02.roa (hash: CjV+BRwzzXLQUXy+rMWWs67nLL9n86TEOpi9l3k8Kdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: May 19 02:01:15 2024 GMT Not After : May 26 02:01:15 2024 GMT Subject: CN=66495d6b-6e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:e6:92:28:40:6c:a2:c8:49:09:ee:b8:78: 19:35:e4:61:9c:9a:6d:75:40:6f:76:ff:4e:8b:76: 1a:c5:80:11:92:b6:cb:b7:19:16:3f:89:00:1d:10: ae:37:dd:2f:eb:21:42:95:53:5a:d3:66:80:b0:45: 86:3b:d6:6c:c1:5b:51:b9:46:59:07:cd:72:48:55: 2e:85:6f:b8:89:3e:12:81:b1:cf:ce:4d:aa:d4:9a: 3d:6e:5a:72:33:c2:ee:6e:b0:09:71:62:f7:35:6b: 9a:3f:a7:9d:5f:f5:c5:ae:9e:d6:6c:81:1c:a3:81: da:c9:34:53:6a:c5:fd:d6:1a:31:3d:36:41:73:5b: c9:35:4d:5a:e4:55:ec:96:77:1c:bc:4b:26:8c:bd: 76:b1:aa:9e:e1:3d:ab:44:52:84:93:7f:0a:80:36: 1e:71:45:4a:25:1d:86:ce:02:61:71:04:47:ac:49: 87:42:c5:3f:46:20:c0:ce:54:dd:63:db:be:db:a5: 0d:87:b3:b0:c3:d5:a7:85:23:18:9c:35:29:aa:21: 0c:b0:44:67:84:a1:62:45:91:23:67:5e:ad:c9:96: ee:bd:10:07:c4:08:ed:c0:57:fe:48:56:cb:69:19: 4c:fc:2f:39:e7:34:f6:1b:52:77:fc:d7:29:9f:b9: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:09:1E:DF:7C:E0:4E:EC:12:56:A6:84:D3:A0:5B:2F:87:AA:7B:76 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:fb:ee:8d:97:96:6e:9f:e1:13:7a:47:0a:0e:23:15:da:8b: d4:aa:8a:b3:de:5f:3c:7c:8d:88:4d:b1:d3:45:52:8b:80:f0: 4d:c5:1f:4b:6c:37:51:c8:9b:dc:cc:23:a9:67:89:85:81:fd: dc:56:9d:86:8b:c6:e3:04:7d:f4:8d:d3:d9:de:90:a4:d8:49: cc:1f:5d:49:36:c9:10:bc:25:67:9a:69:b4:c5:5a:e9:2e:da: 27:84:93:44:7c:ba:a6:07:00:ac:f1:ce:77:e2:e6:68:cc:1d: d8:27:ef:27:7f:59:3b:3b:83:01:40:2d:4b:94:2b:c5:90:be: d1:88:5f:69:a0:35:ed:63:9b:e8:df:32:93:4f:e3:c4:2f:eb: 23:69:49:52:06:98:d3:90:ac:a2:90:b4:85:8a:a2:74:09:ef: 3a:38:55:ef:f7:30:49:d8:83:72:32:58:90:af:c6:22:0d:56: d0:f9:44:99:ca:2e:5e:d8:84:9a:a7:67:cd:72:94:6a:e1:50: 64:ad:fc:53:df:28:78:65:37:79:2e:e7:ee:86:de:ce:a5:3a: 37:5b:22:67:29:60:8d:99:52:d1:9b:bf:c5:9c:78:75:87:25: 47:ea:e1:0d:92:59:ab:e0:11:2e:e7:93:e7:9d:a9:17:ce:c7: 27:2c:78:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjQwNTE5MDIwMTE1WhcNMjQwNTI2MDIwMTE1WjAYMRYwFAYD VQQDEw02NjQ5NWQ2Yi02ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5TmkihAbKLISQnuuHgZNeRhnJptdUBvdv9Oi3YaxYARkrbLtxkWP4kAHRCu N90v6yFClVNa02aAsEWGO9ZswVtRuUZZB81ySFUuhW+4iT4SgbHPzk2q1Jo9blpy M8LubrAJcWL3NWuaP6edX/XFrp7WbIEco4HayTRTasX91hoxPTZBc1vJNU1a5FXs lnccvEsmjL12saqe4T2rRFKEk38KgDYecUVKJR2GzgJhcQRHrEmHQsU/RiDAzlTd Y9u+26UNh7Oww9WnhSMYnDUpqiEMsERnhKFiRZEjZ16tyZbuvRAHxAjtwFf+SFbL aRlM/C855zT2G1J3/Ncpn7mJKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoJHt98 4E7sElamhNOgWy+Hqnt2MB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81 T3lQSjN4VFpZWDJrRExKbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE++6Nl5Zun+ETekcKDiMV2ovUqoqz3l88fI2ITbHTRVKLgPBNxR9L bDdRyJvczCOpZ4mFgf3cVp2Gi8bjBH30jdPZ3pCk2EnMH11JNskQvCVnmmm0xVrp LtonhJNEfLqmBwCs8c534uZozB3YJ+8nf1k7O4MBQC1LlCvFkL7RiF9poDXtY5vo 3zKTT+PEL+sjaUlSBpjTkKyikLSFiqJ0Ce86OFXv9zBJ2INyMliQr8YiDVbQ+USZ yi5e2ISap2fNcpRq4VBkrfxT3yh4ZTd5Lufuht7OpTo3WyJnKWCNmVLRm7/FnHh1 hyVH6uENklmr4BEu55PnnakXzscnLHiQ -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org