$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json) Hash identifier: Z7M1/4i6A49SZKkpWN6oSuwUFJO9UIVsQEDOlvD1jSg= Subject key identifier: 02:59:E1:3B:5C:D1:8E:0D:77:3C:04:A9:CC:83:CB:6E:78:C3:20:D7 Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft Manifest number: 91 Signing time: Fri 17 May 2024 07:03:41 +0000 Manifest this update: Fri 17 May 2024 07:03:40 +0000 Manifest next update: Fri 24 May 2024 07:03:40 +0000 Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: DNK7aTfxpW+SN4VJpxLN0/9F4sHg50+/EozNo2uHp5k=) 2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: bpZ6TrvHmWk1Z5e90iDIkECXOJCmqPQsoPLq8mFn9rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Validity Not Before: May 17 07:03:40 2024 GMT Not After : May 24 07:03:40 2024 GMT Subject: CN=6647014c-d59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:32:c9:e1:ee:f5:8f:a6:78:d4:70:6f:ab: 5c:78:d3:7d:c2:50:87:da:2d:37:0f:56:5e:e1:63: 72:19:dc:a8:11:3e:9b:5d:83:29:f2:55:22:e6:fc: c6:ab:9b:c6:e0:54:e0:74:cd:2a:3c:44:ec:30:48: e8:f1:bf:ff:ae:80:6f:c0:c9:35:44:03:ce:c9:f2: 72:38:02:3f:fa:a9:f1:f4:72:a5:76:04:d9:16:8b: db:75:27:6d:2a:89:71:0c:de:d1:46:7c:bd:af:a5: 3a:da:6b:48:34:1d:fe:8b:41:67:c4:23:d5:2e:19: fd:f0:61:51:00:29:79:40:b7:a6:22:a2:1b:ff:11: 1c:10:f1:99:96:c6:73:45:9a:dd:9a:97:db:4c:2e: 32:1a:e4:0b:62:0b:11:25:e0:77:65:f1:af:8b:44: d3:6b:45:00:a0:60:02:1e:b9:99:32:93:e9:f2:a3: 0b:a3:85:68:6a:dc:88:66:cd:1d:bc:00:52:94:6e: 59:39:4b:94:25:1c:f7:a5:af:c8:90:85:15:b4:d5: fa:a9:fd:53:80:97:b5:62:15:f1:4b:70:59:22:1c: e7:95:fe:83:84:ff:e2:10:7d:49:3d:64:2e:e0:90: 88:8e:24:91:9e:d5:c4:4c:e1:3f:6d:bb:f4:5c:e1: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:59:E1:3B:5C:D1:8E:0D:77:3C:04:A9:CC:83:CB:6E:78:C3:20:D7 X509v3 Authority Key Identifier: keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b4:e9:9f:54:0d:d9:59:5d:59:92:68:4a:e4:98:d4:47:bb: 06:df:73:66:26:db:77:80:24:c3:de:f3:5f:06:04:a1:61:53: c4:4e:b8:7f:10:22:5d:a0:49:30:9b:c8:10:91:66:5e:fa:58: b2:e8:2b:b5:2f:a3:bb:c1:9e:32:a0:5f:4a:38:c9:5d:0a:52: 9a:17:93:70:d0:98:39:34:0b:09:9b:c3:66:b0:00:4e:d0:41: af:d8:18:55:d4:b6:90:70:39:2d:21:3f:74:c7:e4:d3:d9:a2: ab:9e:f2:e3:58:2d:78:89:f2:62:3b:09:1a:4c:d8:c3:f0:d2: 4d:ef:9d:ee:8a:13:04:00:7b:0b:bf:63:5c:85:e9:55:d9:4b: 0f:74:22:68:98:dc:8b:be:ea:8c:31:91:9f:53:d4:06:7f:09: 23:09:25:d9:67:dd:10:fc:a9:59:ec:b1:70:92:06:0a:45:45: ff:23:3c:e9:b4:a3:73:35:eb:ec:b6:48:0c:d9:79:da:9c:9a: 0d:d9:8c:ed:6d:00:6a:38:e4:0f:fd:84:17:f0:45:e8:eb:ac: 2d:ce:4c:ef:73:e8:5b:a5:f1:56:22:ed:93:c5:64:d8:57:84: 09:f2:0e:85:76:b5:18:ad:b2:77:09:1a:c6:e1:c1:0e:99:4d: c9:5c:d5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAxNUQxMTAvBgNVBAUTKDJDQjhDMUY5RUEwQzdCNUE4MDM2ODkzODg0MDBDQzZG RDhCMDQ5RDIwHhcNMjQwNTE3MDcwMzQwWhcNMjQwNTI0MDcwMzQwWjAYMRYwFAYD VQQDEw02NjQ3MDE0Yy1kNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZUyyeHu9Y+meNRwb6tceNN9wlCH2i03D1Ze4WNyGdyoET6bXYMp8lUi5vzG q5vG4FTgdM0qPETsMEjo8b//roBvwMk1RAPOyfJyOAI/+qnx9HKldgTZFovbdSdt KolxDN7RRny9r6U62mtINB3+i0FnxCPVLhn98GFRACl5QLemIqIb/xEcEPGZlsZz RZrdmpfbTC4yGuQLYgsRJeB3ZfGvi0TTa0UAoGACHrmZMpPp8qMLo4VoatyIZs0d vABSlG5ZOUuUJRz3pa/IkIUVtNX6qf1TgJe1YhXxS3BZIhznlf6DhP/iEH1JPWQu 4JCIjiSRntXETOE/bbv0XOEhAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJZ4Ttc 0Y4NdzwEqcyDy254wyDXMB8GA1UdIwQYMBaAFCy4wfnqDHtagDaJOIQAzG/YsEnS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE1RC80MTRBRUQ2QTM0 RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUxcUFOb2s0aEFETWI5aXdT ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xMakItZW9NZTFxQU5vazRoQURNYjlpd1NkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDE1RC80MTRBRUQ2QTM0RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUx cUFOb2s0aEFETWI5aXdTZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAItOmfVA3ZWV1ZkmhK5JjUR7sG33NmJtt3gCTD3vNfBgShYVPETrh/ ECJdoEkwm8gQkWZe+liy6Cu1L6O7wZ4yoF9KOMldClKaF5Nw0Jg5NAsJm8NmsABO 0EGv2BhV1LaQcDktIT90x+TT2aKrnvLjWC14ifJiOwkaTNjD8NJN753uihMEAHsL v2NchelV2UsPdCJomNyLvuqMMZGfU9QGfwkjCSXZZ90Q/KlZ7LFwkgYKRUX/Izzp tKNzNevstkgM2XnanJoN2YztbQBqOOQP/YQX8EXo66wtzkzvc+hbpfFWIu2TxWTY V4QJ8g6FdrUYrbJ3CRrG4cEOmU3JXNWr -----END CERTIFICATE-----Generated at Fri May 17 08:52:43 2024 by rpki-client on console-ams.rpki-client.org