$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: WfV6ZDAyFY2Je2ifSqljTI/ejXQiLCUP6NfELbhMCNY= Subject key identifier: 84:01:7C:74:DF:00:F1:F1:B5:93:51:3B:0F:80:42:46:25:3E:A2:8C Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0A9B Signing time: Sat 04 May 2024 20:23:45 +0000 Manifest this update: Sat 04 May 2024 20:23:44 +0000 Manifest next update: Sat 11 May 2024 20:23:44 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: n/6ZXxH4fsgP4WU8aAlur3UZE0zUxCW/jjrTlMjOE+A=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: y2XTFEwRS/mh9EHV1UnNAw7rkYKadJCDla0vE9Rf51k=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: bWYFe1lIWS7zczRMlBoQyAr9XusOTIsZiwp6nxRS3eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: May 4 20:23:44 2024 GMT Not After : May 11 20:23:44 2024 GMT Subject: CN=66369951-36f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:6f:d1:ec:86:db:18:f7:27:88:f3:fc:9f: db:45:a4:1f:91:e2:30:e6:2d:7c:24:d8:90:5b:e3: f8:44:97:e5:8e:13:35:41:56:b3:99:2e:7a:81:30: a6:c7:4a:4b:7d:98:6a:68:b3:69:00:d4:1e:3c:68: 6d:21:fc:97:e9:9f:09:59:47:79:2e:1a:cd:e6:58: 49:f9:2a:02:e3:68:4b:ee:f5:34:be:46:2c:cf:a4: 7b:36:b5:f2:e6:16:ee:76:5e:a4:f4:70:79:7c:f3: 15:1e:b7:61:7c:fd:1e:04:06:6f:c8:f3:92:4d:97: 46:f1:bd:29:45:12:5c:6a:a8:55:d8:2f:62:e2:82: 6a:15:59:dc:78:74:4c:7f:e1:d7:68:7f:72:54:4a: ee:84:54:5e:77:a0:d5:2b:2e:ac:69:73:c8:83:5c: 86:ee:95:33:c7:54:ac:44:68:8c:a9:0a:ad:18:db: da:36:12:9a:ea:71:17:bf:49:7a:56:21:8d:9d:35: 2a:fa:9c:5f:53:36:c5:2f:49:81:65:5f:53:c6:73: e9:b1:65:8c:b9:ca:9f:ba:ec:8e:90:2f:b1:d0:46: 00:23:ca:a1:83:d0:e5:f5:19:85:d4:78:35:18:56: b9:00:ec:49:84:98:d2:41:97:e8:a6:5d:31:78:3f: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:7C:74:DF:00:F1:F1:B5:93:51:3B:0F:80:42:46:25:3E:A2:8C X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e3:d0:59:b0:a0:d2:d4:52:19:90:f2:2f:ac:7e:5e:40:c7: 7f:a7:96:99:5b:1b:f5:de:bf:36:44:31:ad:ec:6b:56:c7:06: 3c:58:fb:63:a0:d7:10:ba:8f:e9:fc:10:57:7c:94:53:87:3c: cf:e7:d8:df:4f:b1:65:66:04:d5:fc:7d:c4:65:b1:e0:65:5a: 46:8f:dc:6a:7f:6e:b5:e7:d9:89:d1:54:51:07:32:c4:1d:8d: 50:61:05:fc:85:8f:e1:37:a2:a3:57:be:92:71:b8:f4:0f:c2: 5d:64:ec:dc:17:25:60:cb:9d:5b:3c:cf:43:63:95:8f:75:8a: 36:42:2a:f6:17:f0:bd:76:55:e9:6b:7b:c9:97:94:89:ab:17: 28:4e:5b:9b:20:24:2d:fd:85:24:5a:f9:10:46:dd:a5:37:d0: 0d:7c:64:22:f7:d1:58:54:d8:ee:a9:af:0f:3a:74:01:1a:3c: 47:98:99:23:73:ee:8b:de:5c:6d:65:8d:32:71:7e:46:a9:79: b6:94:0b:7b:e1:f4:43:98:77:cb:9f:91:92:71:14:c8:9a:e5: 19:e0:60:58:2e:a0:0a:e4:44:70:57:94:61:e6:83:2f:c8:2b: 66:0c:05:b6:16:4d:05:28:c4:f0:0a:f4:57:77:3a:b9:61:7c: 92:a6:ce:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjQwNTA0MjAyMzQ0WhcNMjQwNTExMjAyMzQ0WjAYMRYwFAYD VQQDEw02NjM2OTk1MS0zNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ahv0eyG2xj3J4jz/J/bRaQfkeIw5i18JNiQW+P4RJfljhM1QVazmS56gTCm x0pLfZhqaLNpANQePGhtIfyX6Z8JWUd5LhrN5lhJ+SoC42hL7vU0vkYsz6R7NrXy 5hbudl6k9HB5fPMVHrdhfP0eBAZvyPOSTZdG8b0pRRJcaqhV2C9i4oJqFVnceHRM f+HXaH9yVEruhFRed6DVKy6saXPIg1yG7pUzx1SsRGiMqQqtGNvaNhKa6nEXv0l6 ViGNnTUq+pxfUzbFL0mBZV9TxnPpsWWMucqfuuyOkC+x0EYAI8qhg9Dl9RmF1Hg1 GFa5AOxJhJjSQZfopl0xeD+wmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQBfHTf APHxtZNROw+AQkYlPqKMMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH49BZsKDS1FIZkPIvrH5eQMd/p5aZWxv13r82RDGt7GtWxwY8WPtj oNcQuo/p/BBXfJRThzzP59jfT7FlZgTV/H3EZbHgZVpGj9xqf26159mJ0VRRBzLE HY1QYQX8hY/hN6KjV76Scbj0D8JdZOzcFyVgy51bPM9DY5WPdYo2Qir2F/C9dlXp a3vJl5SJqxcoTlubICQt/YUkWvkQRt2lN9ANfGQi99FYVNjuqa8POnQBGjxHmJkj c+6L3lxtZY0ycX5GqXm2lAt74fRDmHfLn5GScRTImuUZ4GBYLqAK5ERwV5Rh5oMv yCtmDAW2Fk0FKMTwCvRXdzq5YXySps4w -----END CERTIFICATE-----Generated at Sat May 4 21:33:01 2024 by rpki-client on console-fra.rpki-client.org