$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft File: LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json) Hash identifier: MLXcvk9XzwPuG1INYfaMJSoLXJUKQq90x5Y/i4IUQA4= Subject key identifier: E3:5A:0B:C1:B6:F6:60:5A:88:24:46:C1:6E:FF:7C:C6:55:EF:21:64 Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F Certificate issuer: /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Certificate serial: 0557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft Manifest number: 071A Signing time: Sun 19 May 2024 00:55:49 +0000 Manifest this update: Sun 19 May 2024 00:55:48 +0000 Manifest next update: Sun 26 May 2024 00:55:48 +0000 Files and hashes: 1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: 9SM+vgOMgO/Qkd+sT43wRJKspidahdQvqc/yXqasg4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F Validity Not Before: May 19 00:55:48 2024 GMT Not After : May 26 00:55:48 2024 GMT Subject: CN=66494e15-49f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:c5:aa:24:de:88:be:29:db:4a:16:9d:47: de:b8:b3:f3:d8:33:0d:60:fb:5d:8f:d3:f5:00:88: 38:c4:f6:10:75:81:82:d3:16:18:a0:63:42:a2:b4: b2:36:38:0f:6d:f1:70:c7:ac:c9:6a:ab:c5:3c:59: f3:28:d2:f5:1a:6c:cb:28:22:24:02:56:3d:c3:14: 1f:0f:3f:19:84:bb:96:af:54:b3:7b:24:a4:db:ac: 02:16:12:41:64:22:c8:8d:85:11:71:31:0b:4d:fc: 85:28:47:53:10:01:0d:d8:2c:fa:35:ff:bc:cc:ef: 5d:09:eb:9e:d8:cc:0c:58:c0:79:17:8e:4b:5f:9b: 73:16:a2:77:d4:34:0c:05:37:d3:15:04:2c:07:42: 87:8e:81:fd:70:49:7d:5f:dc:59:3f:44:69:bf:63: 3f:a7:62:66:d7:11:71:21:7d:14:8d:45:cd:11:b8: 5b:d3:d2:43:61:cc:5b:54:a2:20:31:d0:7c:38:47: 90:bb:6e:65:74:9e:4e:88:8d:d9:3b:3e:56:64:b0: b1:1a:7a:34:e5:57:3a:c0:91:65:42:a3:d3:aa:a3: a5:51:a6:1d:fa:d6:69:a8:f2:c2:74:7a:eb:67:ab: ee:98:45:21:4c:e6:25:47:ff:be:62:e0:19:97:74: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5A:0B:C1:B6:F6:60:5A:88:24:46:C1:6E:FF:7C:C6:55:EF:21:64 X509v3 Authority Key Identifier: keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:50:61:a2:7b:26:c5:f5:53:3f:0f:72:ba:a3:7e:95:69:d8: 25:14:dd:42:eb:ec:6c:7c:56:b3:f3:e0:6f:5d:d4:cd:47:ea: d9:58:8a:e6:50:7b:92:bb:2a:22:24:2c:de:e9:a8:74:a7:28: f4:83:31:d7:49:f3:7b:66:c4:0f:a3:6c:9b:e5:f2:72:c2:1a: 7e:a7:38:c2:bf:1f:bd:95:c3:5b:ab:36:12:db:c9:7b:03:26: c0:1d:dc:c6:13:15:ff:ff:5b:40:b0:68:50:4d:6d:50:99:45: de:83:3a:27:4a:9b:94:3c:5e:8c:a1:00:96:32:92:8f:29:d4: 09:2c:6d:1b:fb:02:93:97:17:4b:bf:99:8a:54:dc:76:56:aa: f1:fc:28:bf:03:19:b0:ed:06:cc:77:d9:6a:e2:a5:cc:4b:7c: 2a:d5:eb:c6:bf:03:1b:f6:9c:4e:ea:29:f4:63:5e:14:f1:4a: b4:c4:46:66:1c:cd:8d:2f:b8:9b:4a:d1:56:33:81:6a:0e:ac: 06:86:25:d7:13:9e:e5:55:ee:1a:88:52:b5:a3:25:a2:0e:9d: 3d:37:5f:3d:44:b5:c8:f2:c9:d3:17:1d:7b:71:87:b0:ea:a3: 1b:ef:62:97:1b:18:38:1b:3b:21:89:fc:bf:00:db:35:50:1d: b6:91:7e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD N0U4NUVBNUYwHhcNMjQwNTE5MDA1NTQ4WhcNMjQwNTI2MDA1NTQ4WjAYMRYwFAYD VQQDEw02NjQ5NGUxNS00OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbfFqiTeiL4p20oWnUfeuLPz2DMNYPtdj9P1AIg4xPYQdYGC0xYYoGNCorSy NjgPbfFwx6zJaqvFPFnzKNL1GmzLKCIkAlY9wxQfDz8ZhLuWr1SzeySk26wCFhJB ZCLIjYURcTELTfyFKEdTEAEN2Cz6Nf+8zO9dCeue2MwMWMB5F45LX5tzFqJ31DQM BTfTFQQsB0KHjoH9cEl9X9xZP0Rpv2M/p2Jm1xFxIX0UjUXNEbhb09JDYcxbVKIg MdB8OEeQu25ldJ5OiI3ZOz5WZLCxGno05Vc6wJFlQqPTqqOlUaYd+tZpqPLCdHrr Z6vumEUhTOYlR/++YuAZl3Q2BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONaC8G2 9mBaiCRGwW7/fMZV7yFkMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwUGGieybF9VM/D3K6o36VadglFN1C6+xsfFaz8+BvXdTNR+rZWIrm UHuSuyoiJCze6ah0pyj0gzHXSfN7ZsQPo2yb5fJywhp+pzjCvx+9lcNbqzYS28l7 AybAHdzGExX//1tAsGhQTW1QmUXegzonSpuUPF6MoQCWMpKPKdQJLG0b+wKTlxdL v5mKVNx2Vqrx/Ci/Axmw7QbMd9lq4qXMS3wq1evGvwMb9pxO6in0Y14U8Uq0xEZm HM2NL7ibStFWM4FqDqwGhiXXE57lVe4aiFK1oyWiDp09N189RLXI8snTFx17cYew 6qMb72KXGxg4Gzshify/ANs1UB22kX5M -----END CERTIFICATE-----Generated at Sun May 19 01:47:19 2024 by rpki-client on console-ams.rpki-client.org