$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json) Hash identifier: x4bxyOR5ZG+zYAyOKdKFzkpInQZiUI0NPREziauaApc= Subject key identifier: EE:76:4D:61:6C:32:0C:08:D4:41:A3:68:F4:A3:FD:D5:F8:C7:AB:EC Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft Manifest number: E5 Signing time: Sun 19 May 2024 05:53:17 +0000 Manifest this update: Sun 19 May 2024 05:53:17 +0000 Manifest next update: Sun 26 May 2024 05:53:17 +0000 Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: Vw7Jo/0yttovp2qcjXmgvGAg9SVTKd9J3+u3pMsR1Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Validity Not Before: May 19 05:53:17 2024 GMT Not After : May 26 05:53:17 2024 GMT Subject: CN=664993cd-6851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:c7:a5:ae:28:05:8c:92:7a:84:c0:fb:4f: ac:1a:85:50:67:84:31:5b:b9:76:db:81:47:ce:e6: 91:a1:21:f8:d6:a3:8f:50:40:6b:95:e2:89:a3:cd: 43:6f:78:16:3f:a8:7e:43:ab:7b:cb:68:54:1b:b8: e1:ed:be:98:84:6c:2d:b6:3e:91:fc:67:70:83:8e: 20:0a:2a:8a:80:9e:2c:8e:30:5a:cb:63:8f:13:a1: 16:5f:b1:92:af:ba:c9:a8:8b:a0:28:62:fe:d6:17: f5:f2:18:6c:2c:61:d4:83:fc:b9:c9:37:fa:3e:3b: 0d:06:bc:f7:4b:4a:cd:1a:3c:c0:38:89:c7:4f:7a: 33:d7:3f:13:93:cc:b1:58:c2:f7:be:4c:98:44:d0: c6:65:03:fe:bb:59:e5:d8:bb:e8:76:9d:e3:af:d0: 95:a6:14:9e:35:02:30:95:54:b2:5c:c7:17:c0:69: 7b:98:7a:0c:71:7b:a0:4f:e2:75:33:4f:7b:ec:05: 5e:72:34:8f:6f:48:ed:40:1c:66:87:75:59:1e:45: 89:29:ba:b6:2e:fa:27:e4:b8:8c:d8:64:14:e6:61: f9:46:ff:af:d3:df:89:64:81:b9:e6:bf:ea:40:a7: 85:aa:20:9e:fd:80:c4:ea:ba:94:b9:22:e1:30:bd: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:76:4D:61:6C:32:0C:08:D4:41:A3:68:F4:A3:FD:D5:F8:C7:AB:EC X509v3 Authority Key Identifier: keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ff:bc:90:f2:d6:2c:f3:6a:96:bf:12:a1:b6:69:6b:02:a8: fe:17:8c:8c:74:c4:a7:e0:5e:38:14:78:56:80:ee:cf:7b:f8: c4:e6:d7:50:15:e1:a2:4e:51:71:b6:e0:48:09:66:83:ac:f1: 87:ba:9f:b8:2b:01:91:73:a6:aa:2f:d2:f6:5a:32:44:72:09: bc:87:16:7b:82:8b:fd:08:b1:0f:20:87:1b:34:43:81:6d:d9: 0d:a3:84:08:0f:f9:06:10:e6:89:cb:8a:63:8e:27:f6:52:b6: d8:4c:af:85:89:0c:39:37:a8:54:d4:1d:05:81:5f:72:6a:af: 50:9c:bb:c0:16:10:9b:0a:69:8d:eb:a3:21:24:c8:ca:09:6c: 68:d6:97:e8:be:f7:7e:8f:7d:dd:73:ce:e1:3f:8d:6b:c3:db: 0f:ee:2a:cc:3b:39:07:9b:d6:39:47:34:1a:cd:be:bd:45:0e: 59:80:69:cf:51:df:e9:16:95:4e:00:69:72:90:a7:bf:b4:d7: 9f:86:1a:ec:3f:f2:9e:09:29:4d:13:43:4a:50:c6:a4:a1:85: d7:52:31:ff:1e:6d:e3:9c:df:50:ff:1f:00:ea:fc:af:6b:a2: 2e:f5:75:66:17:69:df:c3:cc:4f:92:03:80:4a:6a:61:98:3b: 1a:59:05:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE RTEyMjJDRUUwHhcNMjQwNTE5MDU1MzE3WhcNMjQwNTI2MDU1MzE3WjAYMRYwFAYD VQQDEw02NjQ5OTNjZC02ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOPHpa4oBYySeoTA+0+sGoVQZ4QxW7l224FHzuaRoSH41qOPUEBrleKJo81D b3gWP6h+Q6t7y2hUG7jh7b6YhGwttj6R/Gdwg44gCiqKgJ4sjjBay2OPE6EWX7GS r7rJqIugKGL+1hf18hhsLGHUg/y5yTf6PjsNBrz3S0rNGjzAOInHT3oz1z8Tk8yx WML3vkyYRNDGZQP+u1nl2Lvodp3jr9CVphSeNQIwlVSyXMcXwGl7mHoMcXugT+J1 M0977AVecjSPb0jtQBxmh3VZHkWJKbq2Lvon5LiM2GQU5mH5Rv+v09+JZIG55r/q QKeFqiCe/YDE6rqUuSLhML2S/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO52TWFs MgwI1EGjaPSj/dX4x6vsMB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2 ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR/7yQ8tYs82qWvxKhtmlrAqj+F4yMdMSn4F44FHhWgO7Pe/jE5tdQ FeGiTlFxtuBICWaDrPGHup+4KwGRc6aqL9L2WjJEcgm8hxZ7gov9CLEPIIcbNEOB bdkNo4QID/kGEOaJy4pjjif2UrbYTK+FiQw5N6hU1B0FgV9yaq9QnLvAFhCbCmmN 66MhJMjKCWxo1pfovvd+j33dc87hP41rw9sP7irMOzkHm9Y5RzQazb69RQ5ZgGnP Ud/pFpVOAGlykKe/tNefhhrsP/KeCSlNE0NKUMakoYXXUjH/Hm3jnN9Q/x8A6vyv a6Iu9XVmF2nfw8xPkgOASmphmDsaWQVO -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org