$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: 7mZebkH7qk2GK9BSet7QDQxYP5JCN4hevKEV0gmTE+0= Subject key identifier: 70:74:8F:D0:33:1F:45:A9:AA:0D:EE:77:F0:9B:11:F1:F8:D8:B9:58 Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 127F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 122E Signing time: Sat 18 May 2024 17:44:08 +0000 Manifest this update: Sat 18 May 2024 17:44:07 +0000 Manifest next update: Sat 25 May 2024 17:44:07 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: zR1BBPEC/UJSi1kttyCHhyqmTQn4b/xZS1f6IyIDDEc=) 2: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: eR77IizgliF9p3Hk3DKn1CDdr9eC3iyjyvFgBE8PWnk=) 3: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: JOsWD0RRcxAiaRN/V07VyvY+Xrj3oBJjGQMuKS/z5Xs=) 4: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: uiXqFpe7p03t8q4amaNnILB2dP35qSvpEy2rduPSvWw=) 5: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: MZBSloCp4vIpAqSRxYYda+A/wH0ayd7dOXpKnFdSxPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4735 (0x127f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: May 18 17:44:07 2024 GMT Not After : May 25 17:44:07 2024 GMT Subject: CN=6648e8e7-d077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:7a:56:fc:30:f7:6f:b3:36:c3:9e:fb:e2: 00:d5:95:ab:e3:02:12:be:ee:b7:7b:79:0a:42:e4: 78:e0:f4:c9:2b:09:e2:fb:59:32:88:7c:7a:0e:c0: dd:8f:9d:fd:7b:5e:d8:33:e7:24:19:57:7a:d0:9e: 68:cd:f1:8a:f7:f5:8c:82:19:77:7b:b4:6e:21:62: 95:b0:4d:9d:b9:c2:cb:09:c5:ee:8c:69:16:f1:98: b1:cb:c6:bb:bf:2a:72:d6:f7:cf:e8:a6:a1:30:27: b2:f1:72:c1:aa:b4:23:f6:00:71:17:b5:9c:92:b1: 8a:d9:ea:d4:49:64:f3:fb:a8:93:9f:3c:28:bf:81: af:e3:8f:ff:af:41:8f:ba:69:eb:48:2b:c6:81:6e: bd:59:7f:70:b0:21:3d:53:34:58:e9:6d:57:4b:5f: 1a:e3:10:e5:8e:f3:7f:01:6d:56:5e:14:3f:3f:cd: bb:1f:26:ed:97:ba:93:17:0c:88:8b:37:c8:28:c8: d5:8e:e2:5b:3b:02:2c:33:e8:88:62:d2:69:84:ab: e2:b2:bf:f6:53:21:c0:9d:33:9c:1e:13:38:b4:27: 9b:d5:5e:c8:be:c5:0d:a9:7e:0a:21:64:e8:bf:8c: 14:f1:8f:2e:a9:50:d1:1f:ab:4b:d8:16:0c:fb:ba: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:8F:D0:33:1F:45:A9:AA:0D:EE:77:F0:9B:11:F1:F8:D8:B9:58 X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8a:b5:ae:eb:8f:e2:e8:35:7d:1a:e1:c2:01:cc:4b:9f:41: 30:42:d4:87:d6:8d:94:03:1d:2b:42:bb:d5:8c:3b:69:53:18: 7e:c8:28:83:b2:85:a6:d4:d2:d0:7b:f5:e9:b1:d7:0f:ac:32: ab:76:0c:74:07:12:c3:10:aa:02:43:e7:5f:09:f2:0a:ac:4b: 4b:35:1c:14:55:5c:89:50:98:45:ac:8f:24:09:25:0d:fb:ab: 8b:e1:72:69:55:00:8c:cb:63:47:8c:d6:18:ff:3e:3d:16:ca: b6:1f:c1:02:e6:e8:0c:3d:97:2b:30:9b:b0:d6:15:b4:8b:62: f0:bb:60:f0:6f:10:89:76:64:d1:2f:09:dc:a8:30:fd:5d:31: 73:7b:f6:92:bf:1e:cf:fb:56:4b:1d:e1:2c:60:c9:0d:0a:32: ad:c4:f5:ea:40:a2:48:82:7e:c3:21:44:90:43:07:b7:8d:bd: 25:cf:eb:65:de:8b:6e:36:00:1d:94:f9:53:3f:15:19:60:a0: 98:76:d0:2d:be:8a:0f:c8:c4:5a:e8:83:e1:c3:14:1f:32:07: 77:c0:68:f1:eb:30:31:e6:60:bc:4e:8b:98:3c:6a:08:7a:1f: d6:3d:a2:1c:94:b6:de:23:4c:cb:82:10:d7:69:f3:e6:9e:49: e9:fb:8d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjQwNTE4MTc0NDA3WhcNMjQwNTI1MTc0NDA3WjAYMRYwFAYD VQQDEw02NjQ4ZThlNy1kMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15V6Vvww92+zNsOe++IA1ZWr4wISvu63e3kKQuR44PTJKwni+1kyiHx6DsDd j539e17YM+ckGVd60J5ozfGK9/WMghl3e7RuIWKVsE2ducLLCcXujGkW8Zixy8a7 vypy1vfP6KahMCey8XLBqrQj9gBxF7WckrGK2erUSWTz+6iTnzwov4Gv44//r0GP umnrSCvGgW69WX9wsCE9UzRY6W1XS18a4xDljvN/AW1WXhQ/P827Hybtl7qTFwyI izfIKMjVjuJbOwIsM+iIYtJphKvisr/2UyHAnTOcHhM4tCeb1V7IvsUNqX4KIWTo v4wU8Y8uqVDRH6tL2BYM+7rvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB0j9Az H0Wpqg3ud/CbEfH42LlYMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjirWu64/i6DV9GuHCAcxLn0EwQtSH1o2UAx0rQrvVjDtpUxh+yCiD soWm1NLQe/XpsdcPrDKrdgx0BxLDEKoCQ+dfCfIKrEtLNRwUVVyJUJhFrI8kCSUN +6uL4XJpVQCMy2NHjNYY/z49Fsq2H8EC5ugMPZcrMJuw1hW0i2Lwu2DwbxCJdmTR LwncqDD9XTFze/aSvx7P+1ZLHeEsYMkNCjKtxPXqQKJIgn7DIUSQQwe3jb0lz+tl 3otuNgAdlPlTPxUZYKCYdtAtvooPyMRa6IPhwxQfMgd3wGjx6zAx5mC8TouYPGoI eh/WPaIclLbeI0zLghDXafPmnknp+43n -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org