$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json) Hash identifier: AYyJdMsgIPWm+Ny5Aiw36G5MEgeBfmJ9CNoJX6DFCrs= Subject key identifier: 1C:0D:73:E8:9D:C3:E5:F8:1E:2A:52:49:A5:FC:E4:ED:55:67:19:68 Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft Manifest number: 04CD Signing time: Sun 19 May 2024 01:23:01 +0000 Manifest this update: Sun 19 May 2024 01:23:01 +0000 Manifest next update: Sun 26 May 2024 01:23:01 +0000 Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: 84ElxSsN9WJpg1IW4SiRQ6Dd7P5RU1hulqIA+gKWXSU=) 2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: YG0ZC8oIIxI+2G2v2VjdwVQ8+l6RciS4VjDR9GF+Pmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD Validity Not Before: May 19 01:23:01 2024 GMT Not After : May 26 01:23:01 2024 GMT Subject: CN=66495475-c779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:7e:e4:3d:e1:f5:05:59:25:f8:a1:48:9b: 21:9f:b3:f4:29:8c:0b:43:81:aa:48:df:67:32:d6: 28:bc:a5:47:18:50:a5:da:b0:bf:6a:8a:66:fb:f5: 1d:a6:a1:85:13:36:16:8d:fd:6c:35:a1:a7:48:04: 07:ea:cb:3b:a4:d3:f6:58:b1:97:09:02:1b:bc:47: c9:8c:d0:3d:72:d2:5d:59:b0:27:21:8a:98:2e:ad: 33:00:6b:15:84:d3:bf:2c:bd:55:db:cd:ae:7e:46: 90:bd:f2:ee:58:2d:87:a8:a5:e4:c2:92:0c:7f:2f: d4:87:73:ef:dc:c5:ad:b5:ce:7f:36:31:c3:d4:71: c6:f0:88:9e:f4:19:5c:ef:86:69:fd:7e:62:c7:9f: e6:71:34:99:8f:58:cb:18:4a:4c:0f:3d:cd:73:7d: 0d:0f:f6:f1:e8:e0:87:6a:51:a4:34:59:f2:d4:ad: 0b:68:12:0d:22:11:99:d8:b5:6a:46:f1:a5:fc:9e: 96:f5:1c:74:cf:67:5f:d6:b5:20:58:2d:4b:cd:1a: 32:02:13:c1:d7:7f:b1:eb:ae:43:75:7d:0a:9a:53: 1e:56:79:9b:f2:45:13:cc:f1:f0:66:12:86:be:87: 15:ef:fe:65:8d:38:0d:87:f7:1a:0e:bd:61:72:59: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0D:73:E8:9D:C3:E5:F8:1E:2A:52:49:A5:FC:E4:ED:55:67:19:68 X509v3 Authority Key Identifier: keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b9:69:53:69:79:4f:18:94:3a:aa:d0:90:06:e2:03:46:bb: ce:f7:4b:31:ee:60:d3:f5:31:89:a7:1d:5d:5f:60:65:73:8c: 6d:39:fd:3f:31:a1:bb:dc:9e:49:35:6f:6b:4f:97:91:b0:e4: 00:fd:c7:c3:87:db:a4:36:fb:da:f2:54:59:22:4e:1f:f3:26: 10:c8:7a:a6:c0:46:ef:c2:2b:90:94:ef:90:7c:01:e4:52:fc: e9:b9:a6:ad:3d:3e:05:70:03:53:f4:bc:fc:9d:cf:e4:ac:e8: 59:b1:8b:69:3b:4d:e0:67:fc:ee:d0:29:ea:9d:84:c1:b2:f3: 80:b5:a9:09:4a:97:6c:f3:4b:72:60:30:ad:0f:99:bc:35:03: 0a:58:b5:53:05:31:f3:e6:66:b4:41:3a:c5:67:f3:04:74:2d: 33:d6:ac:95:03:4b:49:35:de:d5:f7:1a:99:ca:27:91:0c:dc: 84:bf:52:c9:ef:15:ba:e3:12:8f:a5:22:a9:c3:80:d7:17:d2: 9c:be:01:4c:a3:59:5f:a5:e8:1b:01:0c:d9:37:0e:00:ec:3d: 8c:5c:6f:ec:4c:31:eb:61:41:bb:08:53:38:ad:49:7a:51:6e: be:ed:79:c2:06:6b:75:97:d8:9e:1f:e8:bc:57:82:b2:75:0d: d1:87:52:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyNzExMTAvBgNVBAUTKDJDNTRDRTVCNzQzOUM4QzEzNzNDODIzOTRGNjA3OTE3 MDU3MkY3RkQwHhcNMjQwNTE5MDEyMzAxWhcNMjQwNTI2MDEyMzAxWjAYMRYwFAYD VQQDEw02NjQ5NTQ3NS1jNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5J+5D3h9QVZJfihSJshn7P0KYwLQ4GqSN9nMtYovKVHGFCl2rC/aopm+/Ud pqGFEzYWjf1sNaGnSAQH6ss7pNP2WLGXCQIbvEfJjNA9ctJdWbAnIYqYLq0zAGsV hNO/LL1V282ufkaQvfLuWC2HqKXkwpIMfy/Uh3Pv3MWttc5/NjHD1HHG8Iie9Blc 74Zp/X5ix5/mcTSZj1jLGEpMDz3Nc30ND/bx6OCHalGkNFny1K0LaBINIhGZ2LVq RvGl/J6W9Rx0z2df1rUgWC1LzRoyAhPB13+x665DdX0KmlMeVnmb8kUTzPHwZhKG vocV7/5ljTgNh/caDr1hclmFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwNc+id w+X4HipSSaX85O1VZxloMB8GA1UdIwQYMBaAFCxUzlt0OcjBNzyCOU9geRcFcvf9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI3MS83MjRCREFBMkQ1 OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlNRTNQSUk1VDJCNUZ3Vnk5 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xGVE9XM1E1eU1FM1BJSTVUMkI1RndWeTlfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzI3MS83MjRCREFBMkQ1OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlN RTNQSUk1VDJCNUZ3Vnk5XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxuWlTaXlPGJQ6qtCQBuIDRrvO90sx7mDT9TGJpx1dX2Blc4xtOf0/ MaG73J5JNW9rT5eRsOQA/cfDh9ukNvva8lRZIk4f8yYQyHqmwEbvwiuQlO+QfAHk UvzpuaatPT4FcANT9Lz8nc/krOhZsYtpO03gZ/zu0CnqnYTBsvOAtakJSpds80ty YDCtD5m8NQMKWLVTBTHz5ma0QTrFZ/MEdC0z1qyVA0tJNd7V9xqZyieRDNyEv1LJ 7xW64xKPpSKpw4DXF9KcvgFMo1lfpegbAQzZNw4A7D2MXG/sTDHrYUG7CFM4rUl6 UW6+7XnCBmt1l9ieH+i8V4KydQ3Rh1JD -----END CERTIFICATE-----Generated at Sun May 19 02:59:15 2024 by rpki-client on console-ams.rpki-client.org