$ rpki-client -vvf rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft File: -LGWnnogmA-I6xCFb5oqWhkT3VE.mft (raw, json) Hash identifier: FA0F1UGVzN3oTBCFyyCQApXszT01Gv2IXLTx3tYnh/c= Subject key identifier: 63:DF:97:B6:6A:50:DE:1F:28:AF:57:17:DD:CC:77:C5:5F:0C:13:66 Authority key identifier: F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51 Certificate issuer: /CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51 Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft Manifest number: 041C Signing time: Sun 19 May 2024 02:02:11 +0000 Manifest this update: Sun 19 May 2024 02:02:11 +0000 Manifest next update: Sun 26 May 2024 02:02:10 +0000 Files and hashes: 1: -LGWnnogmA-I6xCFb5oqWhkT3VE.crl (hash: VZsnKYO25OyPKgTn/vL21uCxilTh5ZSgkrHBrp5ePEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.crl rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51 Validity Not Before: May 19 02:02:11 2024 GMT Not After : May 26 02:02:10 2024 GMT Subject: CN=66495da3-34bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:93:ce:0d:56:99:03:a7:08:f3:20:a0:4e:a5: da:ab:f0:68:3f:c8:14:cd:8b:72:54:ad:68:21:ab: 1e:43:c8:ec:06:f0:46:11:ad:64:45:ad:02:bc:83: b7:44:2d:22:45:94:b5:b8:34:25:33:fb:ef:20:ea: 4b:9d:46:71:a0:1f:a1:c8:51:1c:de:d3:05:be:49: 9c:53:9a:07:0e:05:37:58:6c:93:eb:78:ae:89:60: 2e:5d:9d:9f:e3:90:3b:1d:21:6c:ba:1f:9f:31:98: 1c:0e:26:96:1a:7d:e6:f5:31:a4:74:3d:62:66:4c: c9:90:f5:d3:45:3b:6f:0d:be:ae:42:08:31:06:fc: 43:19:53:98:e9:0f:bc:c8:b1:29:30:ee:75:a8:e9: 4d:58:ad:06:0f:93:ee:bc:2d:60:4c:d1:e5:1e:10: 52:27:a5:d9:99:8e:71:c7:f4:60:31:e6:55:8d:92: 2a:52:37:da:cc:d7:8c:05:3e:0d:b5:18:ec:9d:24: 3b:4a:4b:70:6f:14:5c:fb:df:22:e4:f7:5c:f6:e6: 0e:5f:a8:fb:9f:31:c3:17:9c:9b:94:b2:72:ac:6b: 19:6c:47:dc:88:58:c1:3a:b7:f3:ab:78:49:06:92: d9:a4:77:e2:bb:ff:1d:b9:59:fa:82:93:b1:ec:8a: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DF:97:B6:6A:50:DE:1F:28:AF:57:17:DD:CC:77:C5:5F:0C:13:66 X509v3 Authority Key Identifier: keyid:F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:78:a8:ef:ce:f4:3b:ab:cd:91:e7:2b:78:88:b5:87:dc: ca:4f:4f:4d:32:6f:29:78:1a:33:5f:db:ee:68:b1:e7:57:6c: ef:95:96:b1:a1:84:90:d1:f9:fa:5e:c2:ab:17:13:14:48:28: c6:ca:de:81:4c:5d:c0:c7:d2:58:52:4b:1b:e3:db:ac:cd:f1: bd:68:9c:a2:5e:2f:12:cc:ba:9c:e4:8b:e8:9f:97:cc:63:d2: 06:fb:c7:81:1f:03:18:6c:bf:6c:5a:d4:90:68:9e:b7:fb:42: a5:ce:70:39:c3:c4:db:5c:66:8f:1b:1c:86:a2:4d:a4:de:0c: 53:45:a9:7a:ba:c8:68:d9:b2:f1:16:00:29:81:1b:6f:7a:19: 29:72:81:e6:6c:05:92:58:7d:b1:96:e9:00:ae:13:28:4f:8e: f9:f0:c0:85:c4:8d:de:57:06:3c:bb:ea:18:ce:3e:56:23:22: 5c:90:2f:30:4b:df:6a:90:31:da:01:08:7e:c1:db:24:70:db: c6:ce:d8:34:19:19:18:56:d9:74:36:08:b0:3f:24:a9:de:66: b4:76:e1:89:d2:07:96:c0:07:ba:6c:1e:2c:f1:2e:96:c0:0e: 5e:63:ed:14:b6:63:19:07:af:c8:c2:eb:5b:56:14:91:96:2b: 75:e3:ad:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4QkQxMTAvBgNVBAUTKEY4QjE5NjlFN0EyMDk4MEY4OEVCMTA4NTZGOUEyQTVB MTkxM0RENTEwHhcNMjQwNTE5MDIwMjExWhcNMjQwNTI2MDIwMjEwWjAYMRYwFAYD VQQDEw02NjQ5NWRhMy0zNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pPODVaZA6cI8yCgTqXaq/BoP8gUzYtyVK1oIaseQ8jsBvBGEa1kRa0CvIO3 RC0iRZS1uDQlM/vvIOpLnUZxoB+hyFEc3tMFvkmcU5oHDgU3WGyT63iuiWAuXZ2f 45A7HSFsuh+fMZgcDiaWGn3m9TGkdD1iZkzJkPXTRTtvDb6uQggxBvxDGVOY6Q+8 yLEpMO51qOlNWK0GD5PuvC1gTNHlHhBSJ6XZmY5xx/RgMeZVjZIqUjfazNeMBT4N tRjsnSQ7SktwbxRc+98i5Pdc9uYOX6j7nzHDF5yblLJyrGsZbEfciFjBOrfzq3hJ BpLZpHfiu/8duVn6gpOx7IrS+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPfl7Zq UN4fKK9XF93Md8VfDBNmMB8GA1UdIwQYMBaAFPixlp56IJgPiOsQhW+aKloZE91R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzhCRC85MzVDMDhFNDE5 QzExMUVDOEI3REEzNzJDNEY5QUUwMi8tTEdXbm5vZ21BLUk2eENGYjVvcVdoa1Qz VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MR1dubm9nbUEtSTZ4Q0ZiNW9xV2hrVDNWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzhCRC85MzVDMDhFNDE5QzExMUVDOEI3REEzNzJDNEY5QUUwMi8tTEdXbm5vZ21B LUk2eENGYjVvcVdoa1QzVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFXio7870O6vNkecreIi1h9zKT09NMm8peBozX9vuaLHnV2zvlZax oYSQ0fn6XsKrFxMUSCjGyt6BTF3Ax9JYUksb49uszfG9aJyiXi8SzLqc5Ivon5fM Y9IG+8eBHwMYbL9sWtSQaJ63+0KlznA5w8TbXGaPGxyGok2k3gxTRal6usho2bLx FgApgRtvehkpcoHmbAWSWH2xlukArhMoT4758MCFxI3eVwY8u+oYzj5WIyJckC8w S99qkDHaAQh+wdskcNvGztg0GRkYVtl0NgiwPySp3ma0duGJ0geWwAe6bB4s8S6W wA5eY+0UtmMZB6/IwutbVhSRlit1460J -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org