$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: LtJPLzFdSgYr67oLswxjXCIfTZLr69N89avRmFEppJE= Subject key identifier: 37:FB:E8:3A:AB:6D:B3:1F:39:80:91:93:6F:24:2F:70:A4:CB:25:BF Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0AC6 Signing time: Sat 18 May 2024 20:07:44 +0000 Manifest this update: Sat 18 May 2024 20:07:43 +0000 Manifest next update: Sat 25 May 2024 20:07:43 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: 3xsgj7smieEA/jk9u7Ja90OTNAiowQ5Vm2UjxFv6wOY=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: RFkdvM0yvnWg1PPxc+28GrSpqbXtHdiWn1AY6Pg66BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: May 18 20:07:43 2024 GMT Not After : May 25 20:07:43 2024 GMT Subject: CN=66490a8f-e634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:fd:65:b8:a3:e2:61:a0:82:25:ca:a8:12: 27:83:84:04:b0:da:a4:7f:ec:ff:6e:5d:44:38:31: 8d:d6:69:c2:99:f0:08:3d:07:16:10:4b:32:34:79: da:1d:a1:68:fc:22:cd:a9:93:cb:03:93:a0:25:f5: c9:e0:08:f8:32:33:0d:f1:ee:fe:bd:f3:b4:af:29: a2:52:be:ce:56:a4:85:3a:ea:fa:a1:10:ed:1c:f0: 80:b9:bc:9a:f1:8a:81:3e:28:d3:50:30:eb:ce:09: bb:88:b4:94:95:40:78:b7:49:ab:44:fb:cd:88:c3: b7:91:d2:2a:d6:ed:e4:3d:58:6f:c7:af:08:59:68: 6d:5b:20:45:6b:7b:00:2c:01:bf:5d:2b:e3:68:b6: 36:61:43:19:06:c7:2c:20:c1:6c:08:15:fb:6e:8e: 80:df:d3:88:e3:65:70:be:85:9e:07:22:4a:cb:76: a6:f9:c3:e3:e3:04:b2:ff:ee:88:43:58:bf:70:20: ec:77:64:9f:a2:fa:ca:58:5c:1f:b1:f3:08:c6:9e: 27:57:ef:4d:07:0e:0e:7e:c0:ba:81:ce:01:fa:e6: be:2d:0f:7a:34:9a:b9:86:1c:a2:be:91:f0:07:c8: 9a:06:bf:c1:06:d6:9f:be:50:9b:3e:7a:bc:b0:db: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:E8:3A:AB:6D:B3:1F:39:80:91:93:6F:24:2F:70:A4:CB:25:BF X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:db:a9:66:e4:02:fd:6a:06:11:2b:7b:d9:aa:f5:a8:f1:19: e4:8f:0f:17:2e:d3:47:f1:82:cd:77:f1:2d:88:c8:ef:0d:41: 2d:a9:1b:3c:ca:0c:af:c1:3a:42:8d:a4:26:7d:93:92:bf:14: 4f:fd:43:af:8f:9a:ed:47:dd:8a:7c:32:ab:96:63:f4:04:69: 14:74:6c:a0:ea:7f:3f:b5:c8:6b:2a:16:21:24:4a:12:39:1e: d8:31:9c:0f:b9:50:06:3e:b5:61:28:05:39:21:42:a4:17:b3: ef:95:1c:e0:10:e9:4f:ba:57:97:4d:06:8e:87:83:9b:68:a8: 2d:be:cd:34:ad:46:94:72:e0:f7:c0:b1:c5:0b:02:43:00:b3: d8:62:1b:73:88:c0:a4:21:23:16:f2:07:3b:92:ef:d8:83:b1: bc:b2:71:05:a5:69:90:61:d6:40:ee:e7:da:b3:9e:8a:fd:1d: 6c:b9:63:08:37:d9:a6:1d:38:a2:94:e7:12:54:5a:d6:20:41: 1e:fc:aa:fb:8b:ea:a9:0d:14:6a:25:7b:fe:91:45:65:1f:26: ed:3b:da:3b:dc:3c:aa:b8:7c:7c:e8:03:f1:55:6a:bc:fb:af: 81:12:08:49:04:4d:fe:0e:6c:ce:19:5b:da:61:8f:9d:a8:50: 64:bc:4a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjQwNTE4MjAwNzQzWhcNMjQwNTI1MjAwNzQzWjAYMRYwFAYD VQQDEw02NjQ5MGE4Zi1lNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8X9Zbij4mGggiXKqBIng4QEsNqkf+z/bl1EODGN1mnCmfAIPQcWEEsyNHna HaFo/CLNqZPLA5OgJfXJ4Aj4MjMN8e7+vfO0rymiUr7OVqSFOur6oRDtHPCAubya 8YqBPijTUDDrzgm7iLSUlUB4t0mrRPvNiMO3kdIq1u3kPVhvx68IWWhtWyBFa3sA LAG/XSvjaLY2YUMZBscsIMFsCBX7bo6A39OI42VwvoWeByJKy3am+cPj4wSy/+6I Q1i/cCDsd2SfovrKWFwfsfMIxp4nV+9NBw4OfsC6gc4B+ua+LQ96NJq5hhyivpHw B8iaBr/BBtafvlCbPnq8sNtncwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf76Dqr bbMfOYCRk28kL3CkyyW/MB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl26lm5AL9agYRK3vZqvWo8Rnkjw8XLtNH8YLNd/EtiMjvDUEtqRs8 ygyvwTpCjaQmfZOSvxRP/UOvj5rtR92KfDKrlmP0BGkUdGyg6n8/tchrKhYhJEoS OR7YMZwPuVAGPrVhKAU5IUKkF7PvlRzgEOlPuleXTQaOh4ObaKgtvs00rUaUcuD3 wLHFCwJDALPYYhtziMCkISMW8gc7ku/Yg7G8snEFpWmQYdZA7ufas56K/R1suWMI N9mmHTiilOcSVFrWIEEe/Kr7i+qpDRRqJXv+kUVlHybtO9o73DyquHx86APxVWq8 +6+BEghJBE3+DmzOGVvaYY+dqFBkvEqH -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org