$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: CJb/EeNHT8ii+vEB824WlPVVZX8N/wg8JNTFjEU/GIE= Subject key identifier: 62:DB:E7:61:4C:03:43:FB:23:8B:F4:59:79:11:8E:6E:66:65:9F:40 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0B7E Signing time: Wed 24 Apr 2024 19:23:45 +0000 Manifest this update: Wed 24 Apr 2024 19:23:45 +0000 Manifest next update: Wed 01 May 2024 19:23:45 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: 3gtSYSNV6TvUnM0yEPnsdm6tNDE4yP/FnvPPFq4SLaw=) 2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: NYT/+dXRGNE4n78yrbVdoSsKa03KPsLPyYJ+n8ppEDY=) 3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: O7/1GkgMEHQQodITlwVqElLcPlYbuqeUKvs7BDhU9AU=) 4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: 1WethnxF/F05QSoIjAHFrflpjzsmzP2OzQZ710INxZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Apr 24 19:23:45 2024 GMT Not After : May 1 19:23:45 2024 GMT Subject: CN=66295c41-4cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:f2:af:78:b6:74:a9:9a:36:b3:d9:c3:df: cc:1c:49:b6:d6:2b:98:61:66:b8:de:a0:05:8a:03: 1a:ae:59:b7:3e:ed:7a:77:27:5f:2d:98:d4:df:2b: e4:a9:59:1c:18:e2:98:f7:d8:12:04:d8:dc:02:b8: c7:8b:de:a8:2b:b3:77:24:2d:55:44:b5:9c:d5:12: 44:ea:dc:68:bf:40:09:e7:1b:a7:e5:79:c6:5b:4f: d8:46:8d:31:36:44:ba:91:a7:d7:5d:ef:c9:ed:27: d7:d1:53:e7:52:f6:da:b3:8e:5d:f8:a7:03:f5:d4: 0d:33:d2:63:a3:05:ef:0e:15:6f:3e:dd:ad:e6:9f: fa:9b:41:cc:7f:96:6b:c3:ce:6d:8d:c3:b2:10:9c: 9b:41:e7:61:b5:07:74:31:96:b4:72:e6:25:bf:c0: 2f:e3:a0:78:8a:ff:35:ab:ce:cf:7c:a2:d9:ef:fb: 6f:b3:94:bc:ec:5d:fb:58:29:1c:bd:a7:bb:61:38: f8:2d:39:dd:a5:d5:19:af:2c:be:90:6b:f4:62:e4: 3d:1d:3f:43:57:f6:c2:3e:a0:20:23:55:b6:81:82: 1e:76:4d:8d:13:77:da:a9:ce:8d:e4:a3:dd:1b:a9: ba:55:e0:0e:f6:4c:33:f3:22:e9:29:07:9e:c5:7b: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:E7:61:4C:03:43:FB:23:8B:F4:59:79:11:8E:6E:66:65:9F:40 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:da:95:a2:f5:73:05:80:26:61:81:3e:47:d4:90:bf:5a:cf: 68:2d:01:ce:d8:a9:29:42:4e:88:df:98:8f:43:55:7a:aa:79: 9b:7b:c0:29:4b:1a:07:15:df:96:52:c9:ab:d5:67:78:50:3f: 0b:76:08:eb:f5:9d:7d:d1:cc:49:a6:77:59:a9:b1:16:ab:66: 1d:09:f4:50:0c:65:d1:25:59:98:b2:8f:1a:d6:19:e0:89:7e: 7e:b5:d3:fa:8e:aa:be:de:7f:50:17:de:88:39:b1:e7:ae:99: 22:43:cf:4a:61:74:56:74:f5:5e:17:62:f6:de:c4:9f:92:3b: 99:76:45:90:e7:6c:6f:91:67:ff:5d:00:ca:dd:1d:79:e3:d4: dd:f1:21:a5:76:91:4b:7c:b6:0d:b6:01:fe:68:97:0b:77:51: 9a:33:16:c3:9b:d8:e0:76:69:f2:e2:70:52:4a:8e:52:33:a4: db:2a:18:ef:f8:64:e1:7f:dc:8f:77:d0:4c:35:00:a7:9e:ef: 98:7b:ee:cd:ea:d2:87:9e:d3:02:37:be:d7:8a:b9:12:b3:fa: 7d:a4:21:64:2a:7e:15:83:26:67:0e:fb:9f:4f:fa:a2:26:23: 3d:79:f5:bc:24:b2:75:0e:56:4b:a1:1d:6e:d3:b1:ae:2d:fd: a6:92:04:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjQwNDI0MTkyMzQ1WhcNMjQwNTAxMTkyMzQ1WjAYMRYwFAYD VQQDEw02NjI5NWM0MS00Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPDyr3i2dKmaNrPZw9/MHEm21iuYYWa43qAFigMarlm3Pu16dydfLZjU3yvk qVkcGOKY99gSBNjcArjHi96oK7N3JC1VRLWc1RJE6txov0AJ5xun5XnGW0/YRo0x NkS6kafXXe/J7SfX0VPnUvbas45d+KcD9dQNM9JjowXvDhVvPt2t5p/6m0HMf5Zr w85tjcOyEJybQedhtQd0MZa0cuYlv8Av46B4iv81q87PfKLZ7/tvs5S87F37WCkc vae7YTj4LTndpdUZryy+kGv0YuQ9HT9DV/bCPqAgI1W2gYIedk2NE3faqc6N5KPd G6m6VeAO9kwz8yLpKQeexXtR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLb52FM A0P7I4v0WXkRjm5mZZ9AMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL2pWi9XMFgCZhgT5H1JC/Ws9oLQHO2KkpQk6I35iPQ1V6qnmbe8Ap SxoHFd+WUsmr1Wd4UD8Ldgjr9Z190cxJpndZqbEWq2YdCfRQDGXRJVmYso8a1hng iX5+tdP6jqq+3n9QF96IObHnrpkiQ89KYXRWdPVeF2L23sSfkjuZdkWQ52xvkWf/ XQDK3R1549Td8SGldpFLfLYNtgH+aJcLd1GaMxbDm9jgdmny4nBSSo5SM6TbKhjv +GThf9yPd9BMNQCnnu+Ye+7N6tKHntMCN77XirkSs/p9pCFkKn4VgyZnDvufT/qi JiM9efW8JLJ1DlZLoR1u07GuLf2mkgTB -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:11 2024 by rpki-client on console-ams.rpki-client.org