$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: 7rQGsimthuSX11NQskIu9lcZQV2/RM6uXjZalx0Is+s= Subject key identifier: 3E:48:26:CC:89:6D:BD:E7:C4:8E:5F:30:51:C0:5F:2C:DC:D9:9D:49 Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 38 Signing time: Sun 19 May 2024 08:16:23 +0000 Manifest this update: Sun 19 May 2024 08:16:23 +0000 Manifest next update: Sun 26 May 2024 08:16:23 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: sKSh+caeVmQEnQzRWM2KUVXPZhSXNrTRX53sEJu1E3I=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: Le5wC9axWlTGJUJu0hs7m7UGYHbteqdIryoono/OIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: May 19 08:16:23 2024 GMT Not After : May 26 08:16:23 2024 GMT Subject: CN=6649b557-fe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:3e:a3:f9:d5:2f:d3:52:6b:c2:db:6b:e6: af:4b:d4:c4:26:b3:14:69:8d:26:f6:07:31:37:36: d9:81:69:c8:82:d3:f2:fa:26:6c:9e:63:98:04:09: 5d:d9:eb:63:36:18:d0:36:ba:53:3e:c2:a6:f6:4f: 42:7c:ac:d7:dd:10:75:e8:5a:8b:22:e1:bd:bc:97: ad:23:48:8a:f2:03:22:92:3a:ac:91:9c:10:60:82: ab:df:0b:47:a0:a2:31:c4:66:eb:ba:11:4a:9e:a5: 43:3d:dc:0c:0d:1c:a9:b4:58:e5:2c:40:89:45:3c: b0:29:6c:cc:aa:2f:7f:f9:4e:fc:d7:13:28:eb:49: 00:ba:07:bb:d0:15:ca:fb:cf:fd:b3:01:20:33:6c: 90:d2:f5:63:b4:70:0a:8e:e5:8e:ae:7a:25:38:cd: 6d:19:f9:a0:7e:d7:3b:8e:8e:af:4b:3a:af:fa:3f: 88:42:0c:29:29:c4:7f:71:1c:cb:e3:b1:8f:6e:60: 5c:19:3b:6e:96:23:00:91:cd:34:6d:be:a2:18:69: 03:cd:05:f9:d6:db:3f:53:53:27:50:61:6e:e9:eb: 2d:39:2b:fa:00:d9:5a:72:43:49:62:94:88:a6:15: a1:a1:bd:fb:51:d2:9a:75:15:5b:44:d6:2f:a6:e6: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:48:26:CC:89:6D:BD:E7:C4:8E:5F:30:51:C0:5F:2C:DC:D9:9D:49 X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:f7:f1:2e:73:93:63:78:3e:5b:da:44:75:41:f2:59:d3: 56:44:60:4a:bd:2d:cf:66:98:90:52:2f:4f:d3:94:ce:1a:91: 5a:d9:0f:2e:ce:c5:78:9c:ea:f4:80:6f:95:5b:fc:01:8f:5a: 98:5a:5e:0d:a1:95:c8:9f:23:b0:97:52:44:b6:e4:4f:55:db: 46:e4:f3:60:2a:57:84:e8:6f:85:a4:a9:d9:d8:93:dd:ca:82: 7d:9e:d9:71:fe:5e:2f:2d:6a:ba:ca:96:3a:aa:8f:19:23:ae: a0:6a:5a:01:1e:17:ce:3e:20:38:a3:37:28:e4:f6:8e:7a:09: bd:a8:32:48:b4:f4:95:fa:7a:cc:94:38:19:ee:7f:84:ba:75: 69:17:c7:ee:19:1b:27:fa:2e:fd:2e:da:15:2b:fe:a6:44:c6: a6:3b:08:7a:f5:f0:63:4d:59:06:6b:ec:f1:00:87:df:0a:04: 9c:a6:18:da:ec:bc:3b:ce:c9:1e:29:7d:d0:45:f4:51:f5:c4: 5d:6e:cf:49:bc:de:83:f6:11:8e:65:ae:2d:87:83:7a:f1:76: e1:4c:bb:c8:6c:ba:32:3a:8d:9b:df:f3:98:49:fd:d1:00:cd: 43:83:f5:aa:e7:df:91:c9:f8:17:ac:32:90:7b:6d:a6:99:df: 97:c4:79:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTc0MjExMC8GA1UEBRMoMkM2QjhDN0Y4QjYxMEU4OTFDQjlDQkY2Q0RCRDk5OThB QTkzODYwQjAeFw0yNDA1MTkwODE2MjNaFw0yNDA1MjYwODE2MjNaMBgxFjAUBgNV BAMTDTY2NDliNTU3LWZlN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi1D6j+dUv01Jrwttr5q9L1MQmsxRpjSb2BzE3NtmBaciC0/L6JmyeY5gECV3Z 62M2GNA2ulM+wqb2T0J8rNfdEHXoWosi4b28l60jSIryAyKSOqyRnBBggqvfC0eg ojHEZuu6EUqepUM93AwNHKm0WOUsQIlFPLApbMyqL3/5TvzXEyjrSQC6B7vQFcr7 z/2zASAzbJDS9WO0cAqO5Y6ueiU4zW0Z+aB+1zuOjq9LOq/6P4hCDCkpxH9xHMvj sY9uYFwZO26WIwCRzTRtvqIYaQPNBfnW2z9TUydQYW7p6y05K/oA2VpyQ0lilIim FaGhvftR0pp1FVtE1i+m5sPNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPkgmzIlt vefEjl8wUcBfLNzZnUkwHwYDVR0jBBgwFoAULGuMf4thDokcucv2zb2ZmKqThgsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNzQyL0QyMDU1OUZFQzA1 NjExRUU5NzE1NzgxMEM0RjlBRTAyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhn cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTEd1TWY0dGhEb2tjdWN2MnpiMlptS3FUaGdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NzQyL0QyMDU1OUZFQzA1NjExRUU5NzE1NzgxMEM0RjlBRTAyL0xHdU1mNHRoRG9r Y3VjdjJ6YjJabUtxVGhncy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+19/Euc5NjeD5b2kR1QfJZ01ZEYEq9Lc9mmJBSL0/TlM4akVrZDy7O xXic6vSAb5Vb/AGPWphaXg2hlcifI7CXUkS25E9V20bk82AqV4Tob4WkqdnYk93K gn2e2XH+Xi8tarrKljqqjxkjrqBqWgEeF84+IDijNyjk9o56Cb2oMki09JX6esyU OBnuf4S6dWkXx+4ZGyf6Lv0u2hUr/qZExqY7CHr18GNNWQZr7PEAh98KBJymGNrs vDvOyR4pfdBF9FH1xF1uz0m83oP2EY5lri2Hg3rxduFMu8hsujI6jZvf85hJ/dEA zUOD9arn35HJ+BesMpB7baaZ35fEeQc= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org