$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: fjDLP68170nKyPfaujGIWbA0cE1+rxqafuHFclWGsoo= Subject key identifier: 14:61:BB:E5:8A:C5:04:3E:C7:6D:4C:0F:39:E1:79:7F:AA:39:A0:0B Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 07DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 07D1 Signing time: Sat 18 May 2024 22:01:15 +0000 Manifest this update: Sat 18 May 2024 22:01:15 +0000 Manifest next update: Sat 25 May 2024 22:01:15 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: otc/l31NaAHzJlQMlqctUoyq5uK7IyA8WIP9UTFV34o=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: lB8jvJ5bEzn+S/BaX3fSwOG1B3sAsvq+F5z/Unmp2x0=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: LstT+eSPsxOVFpV2OMu8Jy/4bTbA0FS/hFEXozEyEvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: May 18 22:01:15 2024 GMT Not After : May 25 22:01:15 2024 GMT Subject: CN=6649252b-e6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:c7:5f:2c:22:8e:7a:61:91:45:07:10:79: 23:77:47:51:fe:3c:74:df:75:76:84:3f:16:e1:68: 92:c0:b6:1f:64:bb:09:ac:d9:86:a9:fa:39:ac:e9: 60:6b:c0:17:eb:67:41:87:c2:57:cb:2d:bd:41:39: 3b:6e:2e:cd:60:8f:f4:ad:f8:5f:54:1f:e1:d2:33: 11:49:78:81:8e:f0:05:45:9c:e0:e0:52:40:b4:c1: 6b:eb:8c:e0:5c:45:db:47:04:80:4e:21:45:45:05: 91:32:03:c8:d2:d5:9c:ff:48:37:02:5f:d0:04:d2: 9e:49:bc:c2:fe:8e:57:29:13:9a:b1:ea:93:b9:99: 34:4b:e5:7f:d1:d9:22:c8:36:34:fe:64:26:14:ff: 88:ce:64:c4:58:b5:45:f0:98:b4:7d:5a:2e:47:c2: 0d:fb:5b:52:eb:04:5e:07:74:27:3b:90:c2:f1:ec: 81:c5:19:61:3e:1f:ed:c7:db:4b:b3:b5:ff:be:63: cf:2c:52:5a:c2:84:0b:5e:c4:48:ee:37:9e:81:8d: 43:68:97:5e:94:6d:6c:ce:08:dd:cf:95:1f:28:c7: 90:d5:7d:38:3d:ab:19:91:ef:67:27:82:4e:1f:d5: 54:f7:23:0c:3e:e6:b1:50:ef:fa:e1:41:8b:7a:07: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:61:BB:E5:8A:C5:04:3E:C7:6D:4C:0F:39:E1:79:7F:AA:39:A0:0B X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:97:cf:10:96:b9:92:36:5f:ce:83:3e:a8:d6:45:7f:6e:5b: ce:df:6a:0c:15:28:1c:61:22:90:6a:37:89:19:5d:39:67:f7: f0:45:77:44:db:ea:76:32:34:49:99:1e:a0:31:80:0b:ff:4e: 62:d9:f0:1d:3b:44:ab:18:83:fa:e1:f4:af:16:78:cb:15:a4: 94:4f:ac:51:50:b2:24:c8:60:30:45:74:68:e6:55:2c:bb:70: 9a:46:4b:06:1f:79:1a:fd:08:0d:c9:37:8f:40:8b:1e:d1:ae: 3c:7f:47:58:30:54:be:d5:d4:ee:c4:a3:12:52:28:49:f7:82: 9e:a7:49:13:6d:b0:dc:77:ad:ca:58:4a:9b:13:41:ba:19:04: 8b:46:db:62:9f:e4:0d:7c:fd:2f:5a:7b:9d:c7:01:45:d9:6a: bf:31:03:4c:e0:12:da:82:e8:b8:61:e6:e0:a8:79:91:37:2f: f9:e8:86:b9:d7:9c:8c:68:04:fb:c8:6b:74:32:31:b4:76:96: b7:a8:97:9b:d5:2b:d4:a2:b0:eb:56:bc:8d:eb:6e:d9:70:0b: c9:04:38:ae:d8:85:df:0b:da:b3:bd:bf:8c:64:6b:5d:51:a0: 37:d5:42:50:fb:4d:f9:61:0c:ac:4e:8a:6b:9d:18:e4:2d:52: 40:6a:2f:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjQwNTE4MjIwMTE1WhcNMjQwNTI1MjIwMTE1WjAYMRYwFAYD VQQDEw02NjQ5MjUyYi1lNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLPHXywijnphkUUHEHkjd0dR/jx033V2hD8W4WiSwLYfZLsJrNmGqfo5rOlg a8AX62dBh8JXyy29QTk7bi7NYI/0rfhfVB/h0jMRSXiBjvAFRZzg4FJAtMFr64zg XEXbRwSATiFFRQWRMgPI0tWc/0g3Al/QBNKeSbzC/o5XKROaseqTuZk0S+V/0dki yDY0/mQmFP+IzmTEWLVF8Ji0fVouR8IN+1tS6wReB3QnO5DC8eyBxRlhPh/tx9tL s7X/vmPPLFJawoQLXsRI7jeegY1DaJdelG1szgjdz5UfKMeQ1X04PasZke9nJ4JO H9VU9yMMPuaxUO/64UGLegfpiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRhu+WK xQQ+x21MDznheX+qOaALMB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOl88QlrmSNl/Ogz6o1kV/blvO32oMFSgcYSKQajeJGV05Z/fwRXdE 2+p2MjRJmR6gMYAL/05i2fAdO0SrGIP64fSvFnjLFaSUT6xRULIkyGAwRXRo5lUs u3CaRksGH3ka/QgNyTePQIse0a48f0dYMFS+1dTuxKMSUihJ94Kep0kTbbDcd63K WEqbE0G6GQSLRttin+QNfP0vWnudxwFF2Wq/MQNM4BLagui4YebgqHmRNy/56Ia5 15yMaAT7yGt0MjG0dpa3qJeb1SvUorDrVryN627ZcAvJBDiu2IXfC9qzvb+MZGtd UaA31UJQ+035YQysToprnRjkLVJAai9X -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org