$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft File: LCxcmnhfLqc0B5wUDjpHGbOG04M.mft (raw, json) Hash identifier: n5NY70bQq1qj2/4Ked9tvYAbmyAuz2j5C6D3BU8xxcQ= Subject key identifier: C7:A2:9B:E5:B6:46:BB:A7:CD:5B:FD:99:72:07:68:2A:90:86:8B:21 Authority key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Certificate issuer: /CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft Manifest number: 50 Signing time: Sun 19 May 2024 08:00:49 +0000 Manifest this update: Sun 19 May 2024 08:00:48 +0000 Manifest next update: Sun 26 May 2024 08:00:48 +0000 Files and hashes: 1: LCxcmnhfLqc0B5wUDjpHGbOG04M.crl (hash: Xnznz42OKeD0GU1NdINidGw0m6TSDxQrO/sn2ZljnoU=) 2: 28FC424AA93711EE91871F0AC4F9AE02.roa (hash: 2X+WOgpHMrKXs0CiqTEW+0YLL/pb1sWO5U1YYZhG6bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1D4/serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Validity Not Before: May 19 08:00:48 2024 GMT Not After : May 26 08:00:48 2024 GMT Subject: CN=6649b1b0-32d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:7f:08:98:eb:79:13:cc:5f:98:47:67:43: 95:e0:de:90:8f:d9:b2:97:0b:f3:23:a7:d5:d6:56: ad:6b:c9:03:55:05:f2:3e:20:55:d7:bb:69:d0:aa: 67:7a:cf:0f:b5:bd:70:26:ab:5c:55:87:67:e1:e4: 2d:16:4e:de:eb:d6:30:7e:ef:5f:33:89:44:72:04: c8:fb:e1:22:29:a4:9d:49:40:f2:24:16:94:38:c4: ae:e7:2c:c0:c8:26:19:b4:53:fb:69:0b:78:94:80: 88:69:20:8c:8f:f3:23:2b:a7:a7:d5:9d:20:df:6d: f5:ed:3b:29:33:2b:31:97:68:3b:e8:0f:2e:49:ad: 1d:a5:3f:a5:0d:79:6d:ea:c8:14:35:02:a5:b4:41: 1e:53:85:08:da:da:be:ac:1c:99:97:bb:bc:b2:bd: 3f:63:3c:b7:e4:4b:91:64:1b:f1:61:c7:48:6a:89: 6a:3e:56:ae:5e:4e:18:a5:aa:50:b0:27:79:a2:99: 3c:2b:1f:9f:19:f1:11:f8:13:11:b3:07:b0:c4:60: 40:e4:6f:f8:88:b8:49:04:71:e9:0e:33:9c:95:0a: 53:81:f9:4f:3b:13:96:63:0b:c1:8f:85:64:01:d6: 0d:fe:e5:94:f0:cc:2d:99:9c:b2:83:62:c3:c8:f5: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:9B:E5:B6:46:BB:A7:CD:5B:FD:99:72:07:68:2A:90:86:8B:21 X509v3 Authority Key Identifier: keyid:2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2b:35:cb:50:c7:98:a6:e5:1c:eb:2a:21:2e:bf:64:73:f5: 39:53:7e:b4:20:4b:46:24:cc:07:00:49:7e:bf:1f:33:7a:59: b0:e5:65:f8:fa:d0:f0:43:16:8f:a0:ad:00:62:c7:30:cb:84: 4c:db:1f:7a:3d:14:96:ea:02:16:4a:2d:20:90:5f:20:37:29: 6a:d8:c4:36:02:ee:7f:7c:f0:78:77:70:e0:a7:b9:c5:3c:41: 85:3c:a0:f3:03:26:e3:ab:67:40:ba:60:09:fa:db:5a:6a:bb: 64:4e:f4:e8:8c:cb:b9:4f:4b:53:2f:88:60:ce:08:ab:40:d3: 8d:ec:c7:40:6f:9d:89:f6:09:c5:92:bc:3d:eb:1f:ce:ae:b5: 87:7e:e8:14:3a:3a:c3:92:ed:f4:13:11:c3:f7:00:5b:ee:db: aa:4c:95:5f:cf:4b:80:a7:6d:92:0b:72:57:4d:d9:a0:bc:d5: 5e:21:1b:d3:63:54:c5:95:c3:20:4d:69:f7:18:c8:f1:1b:c5: 0a:d7:6f:7c:4e:5b:ef:9e:ab:9f:fe:4f:41:77:fe:fc:72:60: 6f:a6:2f:ab:cd:52:47:de:c0:38:8e:67:2f:b9:6e:28:50:38: 6e:c0:b7:65:c3:58:a4:14:7a:cf:ae:2f:97:d1:1e:4c:89:ab: 8e:7c:65:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTFENDExMC8GA1UEBRMoMkMyQzVDOUE3ODVGMkVBNzM0MDc5QzE0MEUzQTQ3MTlC Mzg2RDM4MzAeFw0yNDA1MTkwODAwNDhaFw0yNDA1MjYwODAwNDhaMBgxFjAUBgNV BAMTDTY2NDliMWIwLTMyZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChen8ImOt5E8xfmEdnQ5Xg3pCP2bKXC/Mjp9XWVq1ryQNVBfI+IFXXu2nQqmd6 zw+1vXAmq1xVh2fh5C0WTt7r1jB+718ziURyBMj74SIppJ1JQPIkFpQ4xK7nLMDI Jhm0U/tpC3iUgIhpIIyP8yMrp6fVnSDfbfXtOykzKzGXaDvoDy5JrR2lP6UNeW3q yBQ1AqW0QR5ThQja2r6sHJmXu7yyvT9jPLfkS5FkG/Fhx0hqiWo+Vq5eThilqlCw J3mimTwrH58Z8RH4ExGzB7DEYEDkb/iIuEkEcekOM5yVClOB+U87E5ZjC8GPhWQB 1g3+5ZTwzC2ZnLKDYsPI9eZ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx6Kb5bZG u6fNW/2ZcgdoKpCGiyEwHwYDVR0jBBgwFoAULCxcmnhfLqc0B5wUDjpHGbOG04Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBMUQ0LzU1NDVFMjFDQTkz NjExRUU4ODRBQjE1OUM0RjlBRTAyL0xDeGNtbmhmTHFjMEI1d1VEanBIR2JPRzA0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEN4Y21uaGZMcWMwQjV3VURqcEhHYk9HMDRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB MUQ0LzU1NDVFMjFDQTkzNjExRUU4ODRBQjE1OUM0RjlBRTAyL0xDeGNtbmhmTHFj MEI1d1VEanBIR2JPRzA0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8rNctQx5im5RzrKiEuv2Rz9TlTfrQgS0YkzAcASX6/HzN6WbDlZfj6 0PBDFo+grQBixzDLhEzbH3o9FJbqAhZKLSCQXyA3KWrYxDYC7n988Hh3cOCnucU8 QYU8oPMDJuOrZ0C6YAn621pqu2RO9OiMy7lPS1MviGDOCKtA043sx0BvnYn2CcWS vD3rH86utYd+6BQ6OsOS7fQTEcP3AFvu26pMlV/PS4CnbZILcldN2aC81V4hG9Nj VMWVwyBNafcYyPEbxQrXb3xOW++eq5/+T0F3/vxyYG+mL6vNUkfewDiOZy+5bihQ OG7At2XDWKQUes+uL5fRHkyJq458ZRU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org