$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json) Hash identifier: ADfTUP9ai7RNh8al/+GHt5blNbaT7QeCRNiLAhjUsYQ= Subject key identifier: 6E:AA:A4:84:99:04:94:DB:C0:C7:FE:90:1F:18:DB:0A:C2:08:4F:36 Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft Manifest number: 0A4F Signing time: Thu 02 May 2024 20:36:35 +0000 Manifest this update: Thu 02 May 2024 20:36:35 +0000 Manifest next update: Thu 09 May 2024 20:36:35 +0000 Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: PtGwvNWZkxgkEmER0W0OLoedLBFgqatThaP1qNQZquc=) 2: 155B355E414311EE8E969116C4F9AE02.roa (hash: sOuG1mKnDdJPgZHVhtZK3E39Zwkf1eMZS3Khfg4y11Y=) 3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: 9ledy2dve/mr+pwVipRe4cF3icBu7oY4zySNaCiPWEQ=) 4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: i2fz4ifaqk2e1CweEVoIilHkWS2XNDLWW2DdE/mtQqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: May 2 20:36:35 2024 GMT Not After : May 9 20:36:35 2024 GMT Subject: CN=6633f953-535c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:60:82:18:86:82:ba:e6:98:3d:a0:a1:46: 09:8f:88:06:d4:30:97:d0:ea:14:25:5b:4e:6b:fd: 48:c6:70:f4:99:ac:38:71:ae:2b:cd:1b:ee:41:5b: e1:90:cf:53:bf:f2:50:0f:cb:2e:ea:eb:c7:2c:81: 29:ef:86:26:f5:1e:22:73:aa:a4:da:c0:cc:c7:50: 38:d9:2f:e8:d4:f9:5c:9a:e5:01:77:72:0d:16:08: 7f:28:61:c9:a1:a6:13:14:73:2c:a6:71:ab:93:6d: 46:ae:e1:e9:72:66:55:b6:50:75:f4:d1:46:fb:05: 71:ef:0e:51:a9:49:2e:a1:a9:a8:66:f3:19:6b:37: 5a:e7:e2:01:f2:af:45:19:cd:94:55:35:e2:92:b5: 8e:d4:d6:73:fb:3d:c2:68:c6:38:63:65:fd:83:c0: 89:0d:58:83:c7:e4:b6:a5:ce:22:4a:63:70:49:3d: 06:e0:9f:0c:10:c0:cb:99:0a:a3:68:0b:92:ff:9d: 25:7c:be:36:9f:ba:5d:d6:0b:83:ce:27:b1:5f:72: 6d:6a:5b:af:3f:42:0b:a2:fc:3a:05:03:4f:11:e3: 85:90:80:08:5a:9f:0e:fe:16:46:a8:55:22:4e:77: ed:39:41:1e:4f:5d:ad:0c:24:e4:78:19:43:44:30: e8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AA:A4:84:99:04:94:DB:C0:C7:FE:90:1F:18:DB:0A:C2:08:4F:36 X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fb:b1:7e:64:19:6a:f8:07:79:49:d9:18:46:13:ca:70:4d: cf:09:22:ad:93:b2:9f:0f:85:e4:13:68:31:d3:6e:7f:44:96: ad:c9:ee:12:e5:67:4b:f7:1f:30:6b:7a:6b:5b:44:b9:ef:b9: c6:37:1f:e4:1f:b9:67:c0:b4:d5:1d:7e:83:e3:b3:59:43:51: 45:e4:54:b8:37:77:06:2c:af:44:e1:89:7d:bb:ba:88:6b:3a: 78:f0:0d:e8:e8:fc:e7:da:16:f9:53:51:8e:0b:a6:0e:ca:af: e1:de:fd:91:67:65:67:05:c9:36:90:49:b5:ae:9b:ef:30:c2: ec:13:fe:23:f6:1d:cb:8f:f7:20:ee:51:00:2e:3f:20:db:b8: c9:4d:4f:0c:89:ed:bc:6e:8b:2a:c4:90:dd:60:9e:f9:e1:de: e4:e5:51:bc:21:8d:b7:dc:c9:3c:a7:92:fc:31:a6:cd:c9:00: 32:5a:5b:b7:9d:e2:35:dc:51:c6:f0:97:bc:5b:28:f5:e1:59: 7b:1d:18:f5:12:cb:15:57:d8:52:ec:00:a0:24:9e:e7:c0:0d: e3:37:5e:d9:6b:3d:a1:e2:8f:4e:4f:15:d2:ee:cc:8c:0d:b4: f1:bc:7e:38:94:92:1d:11:4a:c4:f6:52:6f:58:3f:cf:e0:86: 3e:3e:7e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjQwNTAyMjAzNjM1WhcNMjQwNTA5MjAzNjM1WjAYMRYwFAYD VQQDEw02NjMzZjk1My01MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv5gghiGgrrmmD2goUYJj4gG1DCX0OoUJVtOa/1IxnD0maw4ca4rzRvuQVvh kM9Tv/JQD8su6uvHLIEp74Ym9R4ic6qk2sDMx1A42S/o1PlcmuUBd3INFgh/KGHJ oaYTFHMspnGrk21GruHpcmZVtlB19NFG+wVx7w5RqUkuoamoZvMZazda5+IB8q9F Gc2UVTXikrWO1NZz+z3CaMY4Y2X9g8CJDViDx+S2pc4iSmNwST0G4J8MEMDLmQqj aAuS/50lfL42n7pd1guDziexX3JtaluvP0ILovw6BQNPEeOFkIAIWp8O/hZGqFUi TnftOUEeT12tDCTkeBlDRDDoowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6qpISZ BJTbwMf+kB8Y2wrCCE82MB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTE5QS8wNDkwOTA5QTQzMUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1Hdjhm N1Zpd18wdFlQYzlld2FOMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt+7F+ZBlq+Ad5SdkYRhPKcE3PCSKtk7KfD4XkE2gx025/RJatye4S 5WdL9x8wa3prW0S577nGNx/kH7lnwLTVHX6D47NZQ1FF5FS4N3cGLK9E4Yl9u7qI azp48A3o6Pzn2hb5U1GOC6YOyq/h3v2RZ2VnBck2kEm1rpvvMMLsE/4j9h3Lj/cg 7lEALj8g27jJTU8Mie28bosqxJDdYJ754d7k5VG8IY233Mk8p5L8MabNyQAyWlu3 neI13FHG8Je8Wyj14Vl7HRj1EssVV9hS7ACgJJ7nwA3jN17Zaz2h4o9OTxXS7syM DbTxvH44lJIdEUrE9lJvWD/P4IY+Pn55 -----END CERTIFICATE-----Generated at Thu May 2 22:28:52 2024 by rpki-client on console-ams.rpki-client.org