$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: XL+h8MuRm5NJWV9dM9Sh2XnWbFnvvFLCpxLEgFDsGG4= Subject key identifier: A1:12:D9:51:DB:56:46:E2:EF:0B:95:56:D1:13:03:15:CA:68:5F:71 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0880 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 085F Signing time: Sat 18 May 2024 21:43:45 +0000 Manifest this update: Sat 18 May 2024 21:43:44 +0000 Manifest next update: Sat 25 May 2024 21:43:44 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: 2hFbEKC6b0pUwwVNmzmLm/NrAIsXp4gR2jGWcDZDDwI=) 2: C87A727C2F8411EBA83F6F6DC4F9AE02.roa (hash: MsppnoKs5sY8vwtLpvFUKRCYQilabrALIyzrhW0Z5hw=) 3: 5C0A4894F60D11EEADD2752BC4F9AE02.roa (hash: H/NoPQuzUHx4Pz2NsHS1IxKvOouKPbRBspJCW/d+jBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: May 18 21:43:44 2024 GMT Not After : May 25 21:43:44 2024 GMT Subject: CN=66492111-72dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:ce:1f:06:a3:57:c4:21:c0:ec:61:e2:26: 8f:21:7a:3e:8b:98:6a:fc:62:f0:c1:bc:7e:ea:eb: 87:7c:77:ed:8b:d3:c5:36:1f:2d:61:e1:ba:d6:1b: 18:56:63:4e:9a:74:6c:d8:c4:2f:29:1c:8d:ad:23: 78:cb:a0:35:f0:ec:ab:99:df:53:61:58:82:22:48: 22:03:ec:0d:85:72:17:37:c1:17:ba:ab:7e:bd:bb: a6:72:9b:ee:65:fe:b7:d9:43:21:0a:6b:1c:6b:a8: 39:1d:d9:d6:0f:58:e5:44:e6:88:27:52:e1:15:d9: 98:52:54:1b:36:5d:dc:bd:ca:82:da:c0:00:a1:a5: 21:e7:c2:c1:df:f2:87:96:e4:f8:06:20:74:5f:df: 6f:d2:18:c6:d9:3a:36:2c:bb:31:86:77:75:e9:72: 53:b3:51:80:e7:70:c0:d7:26:1d:c3:3b:39:6d:9a: 37:eb:0f:3e:3f:b3:a9:8a:9f:f5:7b:ed:38:df:44: b0:9f:e8:73:5c:eb:3a:ef:25:00:9e:9a:33:ab:0b: eb:51:0a:b7:88:97:2d:fb:24:d8:6e:1d:ce:67:8a: a3:75:38:90:eb:76:6c:5c:6b:82:77:a7:aa:85:04: fb:eb:e1:a6:30:08:46:2e:4f:e8:13:5f:cc:cf:62: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:12:D9:51:DB:56:46:E2:EF:0B:95:56:D1:13:03:15:CA:68:5F:71 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f9:fd:29:32:11:c7:52:18:72:a6:96:f0:0b:11:8c:ad:cc: f7:9d:1d:e3:13:fe:ae:22:33:56:fa:04:74:7b:53:e5:aa:dd: cf:64:ff:98:c7:6b:f6:2c:0d:8d:ad:1a:43:a9:a2:58:f6:d4: 3d:6b:b8:68:46:55:ad:c8:3a:23:d6:54:9e:17:ca:aa:8e:10: 9f:32:f4:93:04:bd:8c:ef:a9:44:62:f2:f4:67:97:98:1b:bd: e3:0b:55:dd:43:95:11:95:c3:e5:69:a2:e2:0b:84:d3:2d:96: 1e:51:b7:b6:93:2f:0e:09:04:91:6b:5b:ec:0b:86:2d:88:d4: af:c6:37:91:04:30:88:37:67:b5:35:ec:eb:7b:ae:a5:54:50: 5b:39:41:12:ca:3e:3d:57:e8:d3:9a:5f:3d:c9:83:9b:49:3c: aa:1b:a1:58:4f:7e:ba:af:7a:31:5f:6b:a2:10:23:45:c7:5f: 9a:16:0e:8e:e7:f3:89:4c:e2:87:f7:1f:60:4b:86:17:90:ec: d9:55:3f:30:57:6f:21:6c:27:f5:e8:76:6e:cf:36:59:0a:52: 8d:e7:c5:8e:01:79:48:1d:25:3c:fd:66:5c:89:b1:56:8b:4e: 5c:04:fa:02:0b:d3:f2:f5:4b:9c:7f:48:3c:e9:80:fe:d4:03: 55:5a:2e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjQwNTE4MjE0MzQ0WhcNMjQwNTI1MjE0MzQ0WjAYMRYwFAYD VQQDEw02NjQ5MjExMS03MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TfOHwajV8QhwOxh4iaPIXo+i5hq/GLwwbx+6uuHfHfti9PFNh8tYeG61hsY VmNOmnRs2MQvKRyNrSN4y6A18Oyrmd9TYViCIkgiA+wNhXIXN8EXuqt+vbumcpvu Zf632UMhCmsca6g5HdnWD1jlROaIJ1LhFdmYUlQbNl3cvcqC2sAAoaUh58LB3/KH luT4BiB0X99v0hjG2To2LLsxhnd16XJTs1GA53DA1yYdwzs5bZo36w8+P7Opip/1 e+0430Swn+hzXOs67yUAnpozqwvrUQq3iJct+yTYbh3OZ4qjdTiQ63ZsXGuCd6eq hQT76+GmMAhGLk/oE1/Mz2L1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKES2VHb Vkbi7wuVVtETAxXKaF9xMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8+f0pMhHHUhhyppbwCxGMrcz3nR3jE/6uIjNW+gR0e1Plqt3PZP+Y x2v2LA2NrRpDqaJY9tQ9a7hoRlWtyDoj1lSeF8qqjhCfMvSTBL2M76lEYvL0Z5eY G73jC1XdQ5URlcPlaaLiC4TTLZYeUbe2ky8OCQSRa1vsC4YtiNSvxjeRBDCIN2e1 Nezre66lVFBbOUESyj49V+jTml89yYObSTyqG6FYT366r3oxX2uiECNFx1+aFg6O 5/OJTOKH9x9gS4YXkOzZVT8wV28hbCf16HZuzzZZClKN58WOAXlIHSU8/WZcibFW i05cBPoCC9Py9Uucf0g86YD+1ANVWi7M -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org