$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: pLMn4qUFsRGqhVIrMN0kKovN94B6pbLINvC+RckalQs= Subject key identifier: 92:DA:AF:6C:06:AB:57:9C:8A:25:94:C0:9A:1A:8F:B5:0E:19:A9:57 Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 06E5 Signing time: Sat 18 May 2024 22:49:49 +0000 Manifest this update: Sat 18 May 2024 22:49:48 +0000 Manifest next update: Sat 25 May 2024 22:49:48 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: Ld+m3u78KkqwHYwSicBZJTE4Z2oCbRE3UGDPO2N3JpY=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: CJrI9wQZ2hxyLqaRQUs5rsp/QVGIEwTqRWwS7HetIkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: May 18 22:49:48 2024 GMT Not After : May 25 22:49:48 2024 GMT Subject: CN=6649308c-37bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:8d:5e:9a:b6:78:a0:2c:5a:17:7a:fc:59: 8b:c5:a7:91:e7:56:36:30:84:2a:d7:96:72:1d:33: 40:ef:39:8e:ca:c7:f1:10:97:eb:6e:e6:1a:65:da: 00:cd:7b:7f:a9:ac:f1:47:f4:8b:db:ce:38:ef:6f: 76:05:ed:82:3a:15:a2:79:cc:41:30:8e:6e:bc:40: 21:b6:1c:18:8d:56:9b:fa:32:b8:a2:3a:23:34:68: ad:43:b2:d2:d4:9b:84:31:5e:ce:16:1e:14:58:5f: f3:de:02:8c:e2:ca:90:74:20:a4:44:fc:27:f2:7c: 11:b8:40:fb:d9:53:6d:b1:85:99:9e:c0:a2:ca:44: ec:d0:0f:07:94:c8:27:23:ea:83:8e:8d:2c:ed:e1: 24:fe:0a:89:b0:f9:8d:fc:08:2a:77:20:fa:7c:6a: 75:27:7e:50:9b:6d:ba:1a:ee:b6:0d:f9:d5:dc:cc: 7b:ac:9a:c8:fe:f4:ce:68:e6:05:5d:0f:3d:da:33: 88:b8:66:00:bc:e5:94:1f:d1:46:d2:26:40:53:4d: b2:ef:6c:8b:22:92:4a:24:31:2a:f3:3d:31:bc:cd: 95:e5:ab:41:da:14:e3:8e:93:da:f2:96:b9:91:08: fe:80:65:a4:12:82:03:ab:b5:22:07:fe:e8:93:ed: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DA:AF:6C:06:AB:57:9C:8A:25:94:C0:9A:1A:8F:B5:0E:19:A9:57 X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:13:d4:d3:04:35:1f:15:c0:a6:00:6c:c2:0b:c6:8c:c0:05: 9f:98:f3:c5:f2:3c:df:e8:a5:80:bd:ed:45:df:f5:f2:a3:0c: fd:a9:ff:e9:af:94:ba:8c:b5:5c:56:bb:b8:45:9d:73:c8:5f: 66:c5:c1:1a:66:b1:e3:52:23:10:40:e1:01:71:43:e9:9d:e6: 33:a5:6d:96:ba:fa:be:37:3f:bd:77:a5:c9:ec:06:aa:5e:2e: 1f:24:e3:3b:6e:2c:50:59:59:48:98:e5:56:2e:47:c0:5a:df: b5:1a:96:49:55:65:53:b2:ea:2f:38:63:47:4e:3e:b6:d1:e9: a0:9f:d2:21:be:33:ec:35:2b:d6:7c:60:25:f9:bd:e2:26:8e: d7:2e:72:48:6f:7a:72:75:c5:82:9d:75:2d:4c:64:a8:d0:69: 73:77:19:04:cb:7f:65:a6:f0:6f:d1:50:4d:43:94:69:6a:49: 09:e4:bc:f7:72:f8:94:da:62:76:09:11:8d:d1:95:2b:44:ea: 20:44:65:d1:43:3c:dd:3e:60:ff:e6:bb:c9:e6:d9:41:af:3d: 55:7e:56:bb:ae:fd:e0:b4:fd:03:6e:a9:31:d9:b3:aa:4a:7c: 16:21:c6:f2:07:5d:37:ab:40:c6:64:c7:53:1d:72:90:6c:e8: b3:8b:d8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjQwNTE4MjI0OTQ4WhcNMjQwNTI1MjI0OTQ4WjAYMRYwFAYD VQQDEw02NjQ5MzA4Yy0zN2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm+NXpq2eKAsWhd6/FmLxaeR51Y2MIQq15ZyHTNA7zmOysfxEJfrbuYaZdoA zXt/qazxR/SL28447292Be2COhWiecxBMI5uvEAhthwYjVab+jK4ojojNGitQ7LS 1JuEMV7OFh4UWF/z3gKM4sqQdCCkRPwn8nwRuED72VNtsYWZnsCiykTs0A8HlMgn I+qDjo0s7eEk/gqJsPmN/AgqdyD6fGp1J35Qm226Gu62DfnV3Mx7rJrI/vTOaOYF XQ892jOIuGYAvOWUH9FG0iZAU02y72yLIpJKJDEq8z0xvM2V5atB2hTjjpPa8pa5 kQj+gGWkEoIDq7UiB/7ok+36MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLar2wG q1eciiWUwJoaj7UOGalXMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqE9TTBDUfFcCmAGzCC8aMwAWfmPPF8jzf6KWAve1F3/Xyowz9qf/p r5S6jLVcVru4RZ1zyF9mxcEaZrHjUiMQQOEBcUPpneYzpW2Wuvq+Nz+9d6XJ7Aaq Xi4fJOM7bixQWVlImOVWLkfAWt+1GpZJVWVTsuovOGNHTj620emgn9IhvjPsNSvW fGAl+b3iJo7XLnJIb3pydcWCnXUtTGSo0GlzdxkEy39lpvBv0VBNQ5RpakkJ5Lz3 cviU2mJ2CRGN0ZUrROogRGXRQzzdPmD/5rvJ5tlBrz1Vfla7rv3gtP0Dbqkx2bOq SnwWIcbyB103q0DGZMdTHXKQbOizi9jo -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org