$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: JRvSrl7GuvV3fZRCK+bs9yOdfj7e2EgXo5gzuOghQ18= Subject key identifier: 62:9C:41:D6:3F:DD:9F:99:CF:D7:D7:29:10:A8:06:3E:DE:21:1E:A5 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 043B Signing time: Sat 25 May 2024 02:16:50 +0000 Manifest this update: Sat 25 May 2024 02:16:50 +0000 Manifest next update: Sat 01 Jun 2024 02:16:50 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: aioACrIBcmjG1ngXlanF8OyVNGohlBUtgLIupkrjs9Y=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: sNWMaE6Kxk7U7IVJoIVHc26Epr9NZPx+NxSKpYd0Rl0=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: p4TNgo9wMcdad9TW6jRHKAurVuODUEQBPpYKh3qruTY=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: AsBmvifqi5kf8Uva/ra6MediB6kZeyoXPryhmUwcMIo=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: hEnaLHRK3RhsZxVdnfBYMx2CZiUO3Zyp76r2D0ywcK4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: aqlNHvLsowrNCshV5huaECQwhT+7ps3G55fqOA8lWJY=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: EaL7saPML0jId9rtbBr/qVnmKgWaUc9g52nwg+Gepss=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: wiIyYyxWUkr+Ordrgxj8/xP4tlK+/DrPM/peLpho1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 00:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: May 25 02:16:50 2024 GMT Not After : Jun 1 02:16:50 2024 GMT Subject: CN=66514a12-a166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:1f:d4:90:4f:7a:bd:ab:4a:0b:e0:5d:6d: 1f:f4:9f:22:74:a4:93:1f:3a:0f:3f:67:21:0e:79: 93:44:6a:fb:25:6e:22:0a:da:fa:d6:8d:ca:84:1d: 5e:19:ab:ba:63:38:6f:85:c2:3a:87:0e:19:bc:d4: a0:6b:e8:57:06:7e:a5:57:11:31:05:f0:ee:e5:97: 82:a1:c7:17:00:6a:21:1b:48:6a:76:b9:01:68:b6: bb:71:8f:d2:2b:3d:c2:88:f2:65:48:ba:d4:e6:6e: c6:96:be:0a:cd:f8:19:a8:bd:b9:aa:8c:b7:21:9e: 79:8c:c2:f1:c8:2d:6e:80:8b:da:35:97:77:c3:1c: 67:59:2f:25:c4:8f:ef:d6:14:94:cb:73:cb:ff:d4: 6c:c8:1c:a5:89:c7:ae:06:2e:2f:c0:a9:d9:5c:04: 7c:67:75:6f:b4:b8:a6:06:2c:23:82:73:16:46:26: 3f:5f:f8:05:9c:7e:32:9c:f5:2a:cf:19:0c:2e:51: e5:3c:ff:ad:c7:9c:bd:97:c5:28:8e:7f:e6:cd:00: 2d:72:24:3d:f3:59:b7:14:90:7d:a3:aa:2d:e9:ba: 4e:03:c1:1c:74:02:e8:4b:15:d0:d6:6f:fe:51:ea: 53:95:94:38:fc:de:6d:27:90:e1:34:c9:48:dd:54: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9C:41:D6:3F:DD:9F:99:CF:D7:D7:29:10:A8:06:3E:DE:21:1E:A5 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bd:68:79:d7:de:e7:37:d2:00:ae:f0:2c:ab:7b:cf:7d:1e: c8:d9:fe:79:28:28:b9:79:75:b7:b8:aa:53:70:c6:40:f0:d1: b2:9d:8a:b1:fb:b2:5c:4c:0e:9c:ed:06:e6:80:ab:de:e0:43: 31:dc:d2:8f:63:ee:02:16:4f:ae:7a:d1:21:2b:6b:21:77:7f: 27:dc:c8:8d:1c:3f:bb:4f:ea:c0:42:e8:c0:ca:19:00:d7:9c: e3:c1:7f:59:fb:fe:96:64:fe:be:5a:8e:4c:12:67:52:31:3c: 60:3d:be:bb:02:5e:4a:cd:46:dd:d8:f4:1f:81:70:d8:88:86: 23:e2:c9:96:29:f4:de:a9:f6:8a:1a:7f:23:67:cb:e5:3c:a4: 65:92:a0:09:e6:bc:4c:04:19:52:bd:af:54:89:57:10:da:29: 1c:80:58:e0:69:5f:10:52:48:b2:cc:51:f9:19:7f:0a:74:48: 80:9d:c0:75:25:4e:a7:37:3b:ff:4f:64:07:1d:42:85:45:96: 44:fe:20:fe:40:28:7c:e0:dc:1a:4a:bb:88:4a:7b:9f:ed:da: d4:c9:46:c4:e4:dd:91:e4:8f:1e:51:9a:aa:70:61:5a:b8:07: f5:94:56:5c:51:e0:12:8a:5a:b8:36:86:70:59:fa:b2:4a:d4: 5d:12:44:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjQwNTI1MDIxNjUwWhcNMjQwNjAxMDIxNjUwWjAYMRYwFAYD VQQDEw02NjUxNGExMi1hMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZMf1JBPer2rSgvgXW0f9J8idKSTHzoPP2chDnmTRGr7JW4iCtr61o3KhB1e Gau6YzhvhcI6hw4ZvNSga+hXBn6lVxExBfDu5ZeCoccXAGohG0hqdrkBaLa7cY/S Kz3CiPJlSLrU5m7Glr4KzfgZqL25qoy3IZ55jMLxyC1ugIvaNZd3wxxnWS8lxI/v 1hSUy3PL/9RsyByliceuBi4vwKnZXAR8Z3VvtLimBiwjgnMWRiY/X/gFnH4ynPUq zxkMLlHlPP+tx5y9l8Uojn/mzQAtciQ981m3FJB9o6ot6bpOA8EcdALoSxXQ1m/+ UepTlZQ4/N5tJ5DhNMlI3VS4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKcQdY/ 3Z+Zz9fXKRCoBj7eIR6lMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbvWh5197nN9IArvAsq3vPfR7I2f55KCi5eXW3uKpTcMZA8NGynYqx +7JcTA6c7QbmgKve4EMx3NKPY+4CFk+uetEhK2shd38n3MiNHD+7T+rAQujAyhkA 15zjwX9Z+/6WZP6+Wo5MEmdSMTxgPb67Al5KzUbd2PQfgXDYiIYj4smWKfTeqfaK Gn8jZ8vlPKRlkqAJ5rxMBBlSva9UiVcQ2ikcgFjgaV8QUkiyzFH5GX8KdEiAncB1 JU6nNzv/T2QHHUKFRZZE/iD+QCh84NwaSruISnuf7drUyUbE5N2R5I8eUZqqcGFa uAf1lFZcUeASilq4NoZwWfqyStRdEkQQ -----END CERTIFICATE-----Generated at Sat May 25 03:05:59 2024 by rpki-client on console-fra.rpki-client.org