$ rpki-client -vvf rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft File: LV39FidW7eBIu98_mMTBWrxfvZg.mft (raw, json) Hash identifier: rKftEr6UN5JGHWxAg3fW+JXdYGHTJQi+hD1q/Z2RIHI= Subject key identifier: 15:89:DA:34:D6:AB:29:69:C8:70:1A:C7:CC:FD:4A:8E:C6:9B:C9:37 Authority key identifier: 2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98 Certificate issuer: /CN=A918A626/serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft Manifest number: E1 Signing time: Sun 19 May 2024 05:56:07 +0000 Manifest this update: Sun 19 May 2024 05:56:07 +0000 Manifest next update: Sun 26 May 2024 05:56:07 +0000 Files and hashes: 1: LV39FidW7eBIu98_mMTBWrxfvZg.crl (hash: C8x5DFCLfTQKaVSFJBfAlR+HezE+1WNGTD8Cp4IQKNI=) 2: 9554A1DABC9311ED9A95EC18C4F9AE02.roa (hash: 8nMRaFEX6TsCEcbawASH2M8QGVcHFfBJwV7gXN5ivy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.crl rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A626/serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98 Validity Not Before: May 19 05:56:07 2024 GMT Not After : May 26 05:56:07 2024 GMT Subject: CN=66499477-7a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:28:37:60:12:7f:ba:70:b2:a4:ee:86:c9: 78:91:36:26:60:6f:36:bf:f4:2d:5c:8b:dc:de:40: 28:9a:4f:d3:bd:30:1b:b2:c8:6b:87:26:e8:b1:3c: 88:aa:b9:8b:ec:7b:fc:b0:d8:23:67:72:ef:62:e2: b3:f8:9a:3f:20:41:ad:05:37:90:5b:c0:07:99:c9: 7d:44:e7:60:e5:d3:5c:9a:7b:10:86:df:68:65:79: 96:7b:9f:21:f8:31:c6:a2:e9:f1:6a:8a:f7:96:8f: ac:e7:20:84:ad:30:b5:51:af:07:cb:02:3e:bb:c4: e0:56:58:de:17:81:9a:2f:3a:df:4e:ff:b9:6b:19: 61:df:1e:bb:61:34:90:23:be:08:72:74:da:f0:08: 99:fe:72:81:a2:b6:9c:b9:3c:75:69:f9:1b:57:cd: 65:bd:b1:20:03:5f:a1:7d:d1:cf:2d:01:9e:b3:2a: 64:60:84:25:2e:44:14:37:a4:b4:1e:0d:a0:40:e6: 90:25:57:3f:98:26:41:66:a8:d9:f6:14:ac:e5:b1: 7c:1f:29:2d:a0:74:39:03:38:a0:47:e1:bf:3a:1d: c8:35:6b:45:c7:d4:cf:d9:f3:81:3c:54:76:d7:af: 6b:e3:99:b6:9e:e8:01:55:21:d4:69:d8:b5:09:4b: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:DA:34:D6:AB:29:69:C8:70:1A:C7:CC:FD:4A:8E:C6:9B:C9:37 X509v3 Authority Key Identifier: keyid:2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f9:fc:18:c3:4c:cd:13:aa:01:97:a3:0f:ef:de:6e:09:e2: b3:13:6e:19:db:b0:1f:aa:4e:2d:5a:a3:2c:54:53:50:90:17: 17:8f:48:54:cb:8a:a3:15:0a:8a:9c:2c:06:94:d3:d9:24:84: 9e:2e:14:28:ee:94:3b:e8:d1:dc:f5:19:c9:21:50:92:97:78: bd:06:d5:57:f1:00:3a:13:84:2a:11:ec:5f:7b:cf:a4:0c:10: bf:42:1b:71:e2:dd:ad:26:2d:6d:26:e2:d1:e9:1e:7c:ff:21: 31:21:21:56:ed:4e:78:e9:ec:3c:f1:49:00:44:46:aa:f1:8b: eb:ab:b1:0e:68:3d:36:00:18:cd:fc:d3:37:21:b8:fe:ae:62: ea:e5:ee:66:63:4e:32:07:b6:31:22:9f:ba:94:e4:2f:c7:10: c4:de:0b:29:1c:8d:4d:d4:4a:86:e6:cb:ca:e8:98:41:ed:12: 21:e2:45:10:70:c7:eb:58:c7:c3:3e:d0:7a:d3:1c:6d:56:dd: b2:17:4f:0e:d1:fe:37:3b:34:83:5c:37:72:a3:73:35:70:bb: 48:5a:0e:3a:60:82:3f:d9:75:db:7a:28:d0:8f:2c:22:94:ad: 73:bf:50:df:3d:d8:7f:b4:16:e1:85:28:87:81:17:80:57:77: 60:d6:e0:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MjYxMTAvBgNVBAUTKDJENURGRDE2Mjc1NkVERTA0OEJCREYzRjk4QzRDMTVB QkM1RkJEOTgwHhcNMjQwNTE5MDU1NjA3WhcNMjQwNTI2MDU1NjA3WjAYMRYwFAYD VQQDEw02NjQ5OTQ3Ny03YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxMoN2ASf7pwsqTuhsl4kTYmYG82v/QtXIvc3kAomk/TvTAbsshrhybosTyI qrmL7Hv8sNgjZ3LvYuKz+Jo/IEGtBTeQW8AHmcl9ROdg5dNcmnsQht9oZXmWe58h +DHGounxaor3lo+s5yCErTC1Ua8HywI+u8TgVljeF4GaLzrfTv+5axlh3x67YTSQ I74IcnTa8AiZ/nKBoracuTx1afkbV81lvbEgA1+hfdHPLQGesypkYIQlLkQUN6S0 Hg2gQOaQJVc/mCZBZqjZ9hSs5bF8HyktoHQ5AzigR+G/Oh3INWtFx9TP2fOBPFR2 169r45m2nugBVSHUadi1CUt4tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWJ2jTW qylpyHAax8z9So7Gm8k3MB8GA1UdIwQYMBaAFC1d/RYnVu3gSLvfP5jEwVq8X72Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyNi8wQkY0QTFGRUJD OTAxMUVEOTZGQUM2ODBDNEY5QUUwMi9MVjM5RmlkVzdlQkl1OThfbU1UQldyeGZ2 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWMzlGaWRXN2VCSXU5OF9tTVRCV3J4ZnZaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyNi8wQkY0QTFGRUJDOTAxMUVEOTZGQUM2ODBDNEY5QUUwMi9MVjM5RmlkVzdl Qkl1OThfbU1UQldyeGZ2WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+fwYw0zNE6oBl6MP795uCeKzE24Z27Afqk4tWqMsVFNQkBcXj0hU y4qjFQqKnCwGlNPZJISeLhQo7pQ76NHc9RnJIVCSl3i9BtVX8QA6E4QqEexfe8+k DBC/Qhtx4t2tJi1tJuLR6R58/yExISFW7U546ew88UkAREaq8Yvrq7EOaD02ABjN /NM3Ibj+rmLq5e5mY04yB7YxIp+6lOQvxxDE3gspHI1N1EqG5svK6JhB7RIh4kUQ cMfrWMfDPtB60xxtVt2yF08O0f43OzSDXDdyo3M1cLtIWg46YII/2XXbeijQjywi lK1zv1DfPdh/tBbhhSiHgReAV3dg1uB8 -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org