$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: aO8Wg1Cr2xuKpzszO+mLROOnhwM5Bzde+PTMRkqp/u0= Subject key identifier: 0D:99:14:6C:98:65:A7:8B:63:BA:6F:0B:B6:01:01:F3:DD:42:E6:33 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 08D1 Signing time: Sat 18 May 2024 21:23:43 +0000 Manifest this update: Sat 18 May 2024 21:23:43 +0000 Manifest next update: Sat 25 May 2024 21:23:43 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: 4Nmod3MZlCfI478SH60LNxV8WNyIE1nglJX3nfXMO3g=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: N+jthyTGVjfvL/quxUMUol5Q7xnLJ/R/6L1JWE7fVrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: May 18 21:23:43 2024 GMT Not After : May 25 21:23:43 2024 GMT Subject: CN=66491c5f-affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:62:7c:38:9f:e6:1a:7e:86:15:99:42:51: 2c:e5:0f:ca:3f:c8:e5:f3:e5:0d:38:dc:14:2b:c6: 70:92:60:a4:60:8a:38:74:61:19:db:3e:82:6a:10: ce:fe:b0:76:09:09:76:d6:fa:51:63:8f:4a:4c:ef: b3:c6:8a:78:27:68:20:ee:3e:41:fa:49:78:84:83: e0:6c:06:ac:05:e1:0c:5f:1c:b9:eb:99:26:bd:bb: 64:f4:df:dc:33:82:43:fa:5d:dd:55:8a:0a:a8:86: 4a:22:09:79:ce:07:11:1f:cf:db:5b:e8:4f:4e:fc: 06:23:94:fe:dd:4a:a0:04:88:ee:28:69:01:45:fb: 2d:e9:c6:2f:24:51:1d:97:24:ec:ca:70:19:f7:68: 5d:18:10:bf:ad:73:ee:f5:e5:d1:7e:19:b4:0e:76: bf:1d:b0:2b:a2:93:16:0f:1f:e6:c1:6d:e0:ad:b4: ab:7b:50:7d:eb:ee:e4:99:59:02:40:1d:e9:a6:9f: 61:53:c6:d8:53:19:d8:fb:23:0b:67:54:6d:45:88: 9e:3b:b9:75:a3:8d:68:db:f5:35:84:26:d1:bf:44: f1:88:b2:d1:a4:68:a3:98:52:f4:5d:c2:8b:73:d9: fb:ca:44:16:b1:06:62:d5:91:01:06:2a:55:87:d8: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:99:14:6C:98:65:A7:8B:63:BA:6F:0B:B6:01:01:F3:DD:42:E6:33 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:af:e3:30:e7:35:6b:b5:0d:43:14:a1:25:7f:fb:df:2e: f1:56:5f:e1:f7:d5:db:ce:1f:0c:c0:12:08:46:f2:ec:38:c4: fe:65:b9:13:d0:7a:86:7c:2d:5c:5d:25:bd:78:d0:2c:75:ef: 97:f9:fa:af:aa:01:ac:83:c3:85:1b:30:8b:a2:e2:78:1c:29: 1c:9d:7a:0e:3b:25:8f:c8:4a:cd:29:6c:56:45:a4:c0:51:fb: 9c:f6:0f:f6:25:67:dc:e0:8d:35:b5:5b:e4:cf:5d:65:df:44: 6e:9c:40:0b:b9:8c:3c:ee:c7:8b:20:37:54:6e:fe:c6:82:43: 3d:f1:61:66:da:49:fb:a4:87:35:f8:ca:1e:51:ec:c2:89:2f: fa:82:3e:a1:d7:82:47:02:eb:0a:b5:c0:db:40:6c:36:28:72: d6:6d:35:9a:e5:cb:a2:9a:91:e6:9e:a5:18:2e:cf:3c:68:44: 85:23:92:c1:29:e9:75:b3:56:12:15:41:dc:d1:30:e8:e2:e6: 8e:b0:f8:06:5c:ee:c5:30:63:6c:ab:ed:5a:56:03:2c:b7:4e: 9c:ee:79:11:5e:0f:25:8f:f4:0c:33:13:f6:de:2a:e3:a9:68: 06:1a:cd:04:f7:18:40:5e:4a:8a:ea:13:68:3d:a9:0c:71:94: 18:5d:e4:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjQwNTE4MjEyMzQzWhcNMjQwNTI1MjEyMzQzWjAYMRYwFAYD VQQDEw02NjQ5MWM1Zi1hZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1xifDif5hp+hhWZQlEs5Q/KP8jl8+UNONwUK8ZwkmCkYIo4dGEZ2z6CahDO /rB2CQl21vpRY49KTO+zxop4J2gg7j5B+kl4hIPgbAasBeEMXxy565kmvbtk9N/c M4JD+l3dVYoKqIZKIgl5zgcRH8/bW+hPTvwGI5T+3UqgBIjuKGkBRfst6cYvJFEd lyTsynAZ92hdGBC/rXPu9eXRfhm0Dna/HbAropMWDx/mwW3grbSre1B96+7kmVkC QB3ppp9hU8bYUxnY+yMLZ1RtRYieO7l1o41o2/U1hCbRv0TxiLLRpGijmFL0XcKL c9n7ykQWsQZi1ZEBBipVh9hX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2ZFGyY ZaeLY7pvC7YBAfPdQuYzMB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDsa/jMOc1a7UNQxShJX/73y7xVl/h99Xbzh8MwBIIRvLsOMT+ZbkT 0HqGfC1cXSW9eNAsde+X+fqvqgGsg8OFGzCLouJ4HCkcnXoOOyWPyErNKWxWRaTA Ufuc9g/2JWfc4I01tVvkz11l30RunEALuYw87seLIDdUbv7GgkM98WFm2kn7pIc1 +MoeUezCiS/6gj6h14JHAusKtcDbQGw2KHLWbTWa5cuimpHmnqUYLs88aESFI5LB Kel1s1YSFUHc0TDo4uaOsPgGXO7FMGNsq+1aVgMst06c7nkRXg8lj/QMMxP23irj qWgGGs0E9xhAXkqK6hNoPakMcZQYXeSP -----END CERTIFICATE-----Generated at Sat May 18 22:27:55 2024 by rpki-client on console-ams.rpki-client.org