$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: bBtsP0a1P1hYuFwnZYuBL9SWJgvV2zsX9zwztUPmceY= Subject key identifier: 2F:8A:A2:D6:19:4F:F3:49:24:9E:11:1C:36:BA:A2:0A:E9:60:E4:2D Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 7E Signing time: Sun 19 May 2024 07:15:47 +0000 Manifest this update: Sun 19 May 2024 07:15:47 +0000 Manifest next update: Sun 26 May 2024 07:15:47 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: +MFxxOH+xx3hwt8Pm4Lx2LY4CFY1zFS34N3kSBl00Lk=) 2: 322FAB6057B911EEB3EFC969C4F9AE02.roa (hash: i5vtLwQfH9vXuFGWq01zMKqNkT2TrL831iWEv/+GmBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: May 19 07:15:47 2024 GMT Not After : May 26 07:15:47 2024 GMT Subject: CN=6649a723-37e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:6b:e2:2b:5d:cf:81:bb:f3:14:e8:2c:6a: 30:0b:29:9c:9b:65:82:d5:97:14:fd:9e:52:a9:31: 16:3a:35:9c:57:e0:46:98:37:37:70:7e:27:34:f3: 38:2f:09:a8:88:f5:56:1e:36:30:8b:a0:85:e4:90: e9:6a:8c:78:fd:1d:be:58:1f:f9:e8:d7:35:4f:46: 04:f0:c3:4a:5c:0a:7d:c4:bb:59:f0:3b:4a:fb:61: 42:dc:b4:e8:56:ad:78:9c:4f:53:19:3d:0c:8e:32: 9f:4d:66:07:43:42:16:fe:f0:72:20:42:15:c1:aa: 74:a5:8e:e5:51:9f:b3:6f:7d:69:da:ae:e9:24:05: ca:35:91:5c:47:47:22:ca:d2:02:d1:cc:78:87:3a: 31:31:69:e7:5e:4f:aa:43:b4:b1:c2:73:17:1f:a7: 39:d4:19:76:a6:3f:ca:94:aa:32:6f:f4:ea:6f:2f: 88:5a:fa:2e:74:d7:c8:3d:76:f0:0b:da:64:72:15: 7f:2c:c1:19:7f:91:cb:b4:cc:f5:39:40:14:6b:11: 16:c7:9d:63:bd:86:1c:31:7f:7c:b1:03:78:67:d1: f1:44:45:25:af:19:68:6d:cc:8f:af:92:60:93:e6: ae:fe:74:d6:0f:3e:f0:2a:12:62:5d:f4:58:57:a6: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8A:A2:D6:19:4F:F3:49:24:9E:11:1C:36:BA:A2:0A:E9:60:E4:2D X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:10:e3:e9:36:a0:b9:e0:94:15:b8:49:0d:75:5c:53:4f:12: 5b:e7:41:31:be:23:a1:29:4c:90:ef:61:ee:c9:44:12:e6:d8: a6:cf:6d:d2:cd:e1:35:d6:b4:52:9c:73:84:b0:9d:8c:e1:b9: 49:a9:eb:77:2e:fd:b5:00:f9:1a:14:6f:41:2e:c2:f2:8d:61: c6:3d:7c:6d:39:5f:09:ac:4c:98:ec:89:80:99:4b:97:32:7a: c9:81:bf:7e:7c:2e:22:0e:41:95:b5:01:ea:bf:31:1b:18:82: 9b:c3:d1:8d:08:ea:4e:a0:53:20:ca:48:4b:ed:ac:69:83:35: 0a:c8:cb:98:22:f2:a3:59:41:bc:1d:47:c6:59:99:a0:28:d7: 8a:09:73:fc:6a:93:81:f0:3b:fa:bb:0d:fc:7d:93:60:d9:f8: 95:f1:aa:84:b0:4a:fe:0c:6d:b8:d8:1a:fd:eb:6a:9e:28:a6: 58:8a:6f:a7:39:dc:e2:65:77:ed:d5:c4:3f:a2:76:f5:45:94: 87:95:dc:f4:f5:76:9b:3b:2b:79:b4:8e:bb:c8:43:f8:fa:e9: 53:6b:47:6e:6e:31:c1:58:bf:55:80:d1:3a:e0:22:10:6e:57: 0c:72:e3:df:2b:0b:7e:20:4b:8f:ce:ab:80:15:c8:72:9f:c4: e0:41:13:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx NkVENjI0OUEwHhcNMjQwNTE5MDcxNTQ3WhcNMjQwNTI2MDcxNTQ3WjAYMRYwFAYD VQQDEw02NjQ5YTcyMy0zN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX5r4itdz4G78xToLGowCymcm2WC1ZcU/Z5SqTEWOjWcV+BGmDc3cH4nNPM4 LwmoiPVWHjYwi6CF5JDpaox4/R2+WB/56Nc1T0YE8MNKXAp9xLtZ8DtK+2FC3LTo Vq14nE9TGT0MjjKfTWYHQ0IW/vByIEIVwap0pY7lUZ+zb31p2q7pJAXKNZFcR0ci ytIC0cx4hzoxMWnnXk+qQ7SxwnMXH6c51Bl2pj/KlKoyb/Tqby+IWvoudNfIPXbw C9pkchV/LMEZf5HLtMz1OUAUaxEWx51jvYYcMX98sQN4Z9HxREUlrxlobcyPr5Jg k+au/nTWDz7wKhJiXfRYV6a48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+KotYZ T/NJJJ4RHDa6ogrpYOQtMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3 QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42 ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOEOPpNqC54JQVuEkNdVxTTxJb50ExviOhKUyQ72HuyUQS5timz23S zeE11rRSnHOEsJ2M4blJqet3Lv21APkaFG9BLsLyjWHGPXxtOV8JrEyY7ImAmUuX MnrJgb9+fC4iDkGVtQHqvzEbGIKbw9GNCOpOoFMgykhL7axpgzUKyMuYIvKjWUG8 HUfGWZmgKNeKCXP8apOB8Dv6uw38fZNg2fiV8aqEsEr+DG242Br962qeKKZYim+n OdziZXft1cQ/onb1RZSHldz09XabOyt5tI67yEP4+ulTa0dubjHBWL9VgNE64CIQ blcMcuPfKwt+IEuPzquAFchyn8TgQRPg -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org