$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json) Hash identifier: Z3emQRJjNQEXQZldXKmqTnJhRp8dMpPEXEaGuzwS8TA= Subject key identifier: B8:8C:A8:0A:C5:F6:61:DC:06:DB:B2:00:95:1C:5D:C7:5B:94:A6:AB Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft Manifest number: 0591 Signing time: Sun 19 May 2024 00:26:10 +0000 Manifest this update: Sun 19 May 2024 00:26:09 +0000 Manifest next update: Sun 26 May 2024 00:26:09 +0000 Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: JNougvI/zLb8RVa2LRM07Vn08vSxQOZNJwY+j6GmwXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Validity Not Before: May 19 00:26:09 2024 GMT Not After : May 26 00:26:09 2024 GMT Subject: CN=66494721-a5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7d:d9:34:d1:3b:46:ff:ba:e1:4e:1d:a6:fc: 98:f8:ed:93:dd:04:51:39:73:81:80:54:d4:5b:55: e7:ab:f4:07:02:08:68:83:15:1b:24:77:17:2b:bb: a7:a2:24:a1:84:88:1b:a8:44:d7:20:f4:fb:73:44: af:f3:67:48:0d:6e:f8:3c:63:5a:41:a6:09:91:fd: ea:4f:38:15:28:27:a6:44:f2:85:bf:70:6d:4d:96: 0f:86:b0:21:62:e7:c5:38:35:c0:68:1f:8c:7e:dc: 16:05:7b:28:be:70:d5:63:ce:87:e5:1d:14:40:6d: 84:fb:0c:d6:c0:a2:0c:f1:e5:52:50:8a:40:3c:a6: d4:17:a7:2a:87:1a:a7:d7:d1:84:b2:69:44:29:47: f0:14:63:85:16:a6:f0:e3:84:b9:b4:9b:55:79:d1: 74:f8:44:26:23:f0:2e:d4:6d:b9:98:4a:41:b0:5d: 63:21:72:ef:77:2f:8e:5d:ba:e0:9f:21:f4:ea:dc: a6:fe:28:2a:1e:02:52:ab:4d:d7:22:57:2b:76:6c: a5:ca:eb:ad:22:66:b3:af:c2:8d:b6:33:b0:26:e5: 01:07:bb:3f:93:7a:98:83:f2:3f:06:d4:12:02:3c: ba:be:fa:25:64:7a:43:e7:d8:19:72:7b:22:57:9c: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:A8:0A:C5:F6:61:DC:06:DB:B2:00:95:1C:5D:C7:5B:94:A6:AB X509v3 Authority Key Identifier: keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a8:85:e6:58:99:45:07:2f:a0:ba:ff:80:7a:44:4a:3c:1c: f5:3d:b6:5c:b8:05:eb:24:f6:f7:c9:e5:10:c6:f7:e8:2d:c6: c8:e4:05:be:3c:07:71:52:d4:d8:45:9a:aa:de:82:79:24:16: d5:ed:39:6b:7f:11:69:f3:1f:e9:26:67:8a:14:cd:bc:72:39: 91:d4:a2:c8:ec:4e:58:0c:c1:65:7f:23:aa:01:eb:65:d0:5f: be:9d:13:ac:be:fb:d5:96:aa:54:6c:7e:08:cd:8b:72:46:0e: 2f:dd:d1:01:bd:40:18:e7:06:32:8c:1e:26:da:bc:33:97:90: 1e:6d:fe:a7:16:75:91:b1:d4:75:2b:8a:1d:de:33:5b:ad:38: 7f:ba:08:d8:b8:f9:66:54:26:03:b1:b5:e9:38:54:b8:36:0f: 4d:17:29:fe:fa:2b:b2:a5:f0:66:f7:a8:81:f5:6a:4f:df:f8: 0c:be:fe:64:4c:56:83:e2:2b:9d:b4:78:7f:22:6c:3b:91:9c: fd:46:99:5e:3c:85:e0:a8:ba:97:c5:e9:ac:3c:4b:09:e6:7a: 2b:86:2f:1e:92:e1:d6:3e:dd:5c:0a:e5:c8:15:ed:6f:30:cd: 43:f9:d3:23:78:5a:40:e3:0a:9c:44:59:f2:24:59:8e:a1:0e: e6:12:81:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMTMxMTAvBgNVBAUTKDJFMTU5NjM4Q0I3OTBGNzk0NTE3MjJFNTJBQ0VCNERB ODA1RjhCOTcwHhcNMjQwNTE5MDAyNjA5WhcNMjQwNTI2MDAyNjA5WjAYMRYwFAYD VQQDEw02NjQ5NDcyMS1hNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA533ZNNE7Rv+64U4dpvyY+O2T3QRROXOBgFTUW1Xnq/QHAghogxUbJHcXK7un oiShhIgbqETXIPT7c0Sv82dIDW74PGNaQaYJkf3qTzgVKCemRPKFv3BtTZYPhrAh YufFODXAaB+MftwWBXsovnDVY86H5R0UQG2E+wzWwKIM8eVSUIpAPKbUF6cqhxqn 19GEsmlEKUfwFGOFFqbw44S5tJtVedF0+EQmI/Au1G25mEpBsF1jIXLvdy+OXbrg nyH06tym/igqHgJSq03XIlcrdmylyuutImazr8KNtjOwJuUBB7s/k3qYg/I/BtQS Ajy6vvolZHpD59gZcnsiV5xmUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiMqArF 9mHcBtuyAJUcXcdblKarMB8GA1UdIwQYMBaAFC4VljjLeQ95RRci5SrOtNqAX4uX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxMy8wRkE1RjBEMDg2 NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQzbEZGeUxsS3M2MDJvQmZp NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xoV1dPTXQ1RDNsRkZ5TGxLczYwMm9CZmk1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxMy8wRkE1RjBEMDg2NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQz bEZGeUxsS3M2MDJvQmZpNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3qIXmWJlFBy+guv+AekRKPBz1PbZcuAXrJPb3yeUQxvfoLcbI5AW+ PAdxUtTYRZqq3oJ5JBbV7TlrfxFp8x/pJmeKFM28cjmR1KLI7E5YDMFlfyOqAetl 0F++nROsvvvVlqpUbH4IzYtyRg4v3dEBvUAY5wYyjB4m2rwzl5Aebf6nFnWRsdR1 K4od3jNbrTh/ugjYuPlmVCYDsbXpOFS4Ng9NFyn++iuypfBm96iB9WpP3/gMvv5k TFaD4iudtHh/Imw7kZz9RplePIXgqLqXxemsPEsJ5norhi8ekuHWPt1cCuXIFe1v MM1D+dMjeFpA4wqcRFnyJFmOoQ7mEoFn -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org