$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json) Hash identifier: q1cfSGR7fkyHKHQMp/lJIc0tayghC7Vmc2iTi8kjxQs= Subject key identifier: 73:19:B9:11:B6:EA:EE:B0:8A:6B:C4:05:1B:73:F8:5F:15:89:62:8B Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft Manifest number: 0428 Signing time: Fri 03 May 2024 02:08:59 +0000 Manifest this update: Fri 03 May 2024 02:08:58 +0000 Manifest next update: Fri 10 May 2024 02:08:58 +0000 Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: oVXDPVS8BmFYHgQWGxm/yNGHi7W/roREWYp1a37KqZo=) 2: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: Ttn15R/2S0g9Iwpzx7uYzM1uyUX8bVHv0/bnifX+j4M=) 3: 5BADDAF216D911EC9ACD9223C4F9AE02.roa (hash: CjV+BRwzzXLQUXy+rMWWs67nLL9n86TEOpi9l3k8Kdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: May 3 02:08:58 2024 GMT Not After : May 10 02:08:58 2024 GMT Subject: CN=6634473b-c37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:ce:1d:c7:30:6a:33:5d:21:e5:fc:41:9f: ed:f8:9c:45:00:03:56:35:19:24:48:a5:a5:3f:d2: 7d:b6:7a:4b:96:84:13:3c:8d:d6:83:86:b0:d2:c2: d5:fa:d3:31:11:27:f9:3d:c7:8e:dd:83:bc:99:f7: 53:56:41:7f:f0:40:b9:28:c0:7f:5d:19:5a:0b:90: f6:b1:26:96:3a:90:13:00:06:e7:fa:18:a4:25:5d: d1:68:09:c6:c1:c4:f3:31:21:fe:e4:c8:1d:9d:92: f3:c4:00:e7:47:03:3c:1c:6c:ef:51:c8:b5:14:2b: 74:ec:64:5c:f7:dd:09:97:08:a6:5a:bf:8f:04:ad: d5:e9:e9:7a:c9:4e:78:ce:49:97:c9:d5:03:8d:e0: c5:5a:a6:55:4a:82:51:99:0d:3a:78:b8:98:44:69: 80:37:be:bd:16:61:eb:6f:aa:49:5e:8f:61:37:13: 1d:b5:8a:8f:f3:d9:4a:4e:88:77:9a:9b:50:b0:2f: 60:78:c4:08:8d:08:7b:af:a8:64:83:dc:8d:84:07: 82:b5:0c:fc:4a:d4:95:31:4d:53:eb:79:cf:4e:28: 7b:33:8a:6f:8a:dc:12:7e:5f:04:e7:7e:48:bc:74: b2:0e:38:f4:be:1b:d4:ae:ca:f0:f7:78:b2:56:db: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:19:B9:11:B6:EA:EE:B0:8A:6B:C4:05:1B:73:F8:5F:15:89:62:8B X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c2:1b:9d:7b:35:af:c6:14:a0:3e:eb:36:a9:ca:25:8e:d9: de:3e:30:f6:ee:b1:41:62:21:c4:b7:da:82:03:0c:3c:5c:c8: d2:66:01:61:52:95:2c:35:7d:fa:d2:f6:af:90:58:27:c0:53: a8:3f:b8:e7:cc:25:a3:c1:d9:d1:2b:93:66:8c:be:05:a8:d0: 30:c8:83:ed:db:0f:fa:09:83:17:e1:6a:06:83:7c:01:6c:1f: e6:0f:ae:fb:03:37:00:7d:0b:bc:ae:f0:c5:b3:af:8b:ed:40: 0c:d6:d6:48:69:88:50:56:cf:c8:ad:ee:a9:50:ef:72:6d:9b: 70:df:24:42:3c:1a:98:d9:1d:43:8a:9f:a2:01:11:22:ab:4f: 48:86:50:b5:9b:2c:9c:de:83:9c:f7:df:f8:f4:c0:02:ce:ee: d1:46:74:97:c9:3a:8b:8f:dc:c4:f2:64:7d:1e:ea:a1:37:07: d0:64:39:68:91:d2:3c:c4:86:37:fb:63:11:3b:23:b5:1f:52: 3b:72:cc:05:87:e3:9d:9f:58:b1:d3:87:e0:0b:f8:48:a8:4a: 5b:bf:f3:b4:ea:b6:68:2a:70:25:78:e8:af:3b:78:bb:e6:2b: 44:2e:8e:51:91:b5:25:6d:49:f4:00:b9:59:6b:17:76:a5:1a: 52:bb:8f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjQwNTAzMDIwODU4WhcNMjQwNTEwMDIwODU4WjAYMRYwFAYD VQQDEw02NjM0NDczYi1jMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAbOHccwajNdIeX8QZ/t+JxFAANWNRkkSKWlP9J9tnpLloQTPI3Wg4aw0sLV +tMxESf5PceO3YO8mfdTVkF/8EC5KMB/XRlaC5D2sSaWOpATAAbn+hikJV3RaAnG wcTzMSH+5MgdnZLzxADnRwM8HGzvUci1FCt07GRc990JlwimWr+PBK3V6el6yU54 zkmXydUDjeDFWqZVSoJRmQ06eLiYRGmAN769FmHrb6pJXo9hNxMdtYqP89lKToh3 mptQsC9geMQIjQh7r6hkg9yNhAeCtQz8StSVMU1T63nPTih7M4pvitwSfl8E535I vHSyDjj0vhvUrsrw93iyVtslLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMZuRG2 6u6wimvEBRtz+F8ViWKLMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81 T3lQSjN4VFpZWDJrRExKbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjwhudezWvxhSgPus2qcoljtnePjD27rFBYiHEt9qCAww8XMjSZgFh UpUsNX360vavkFgnwFOoP7jnzCWjwdnRK5NmjL4FqNAwyIPt2w/6CYMX4WoGg3wB bB/mD677AzcAfQu8rvDFs6+L7UAM1tZIaYhQVs/Ire6pUO9ybZtw3yRCPBqY2R1D ip+iAREiq09IhlC1myyc3oOc99/49MACzu7RRnSXyTqLj9zE8mR9HuqhNwfQZDlo kdI8xIY3+2MROyO1H1I7cswFh+Odn1ix04fgC/hIqEpbv/O06rZoKnAleOivO3i7 5itELo5RkbUlbUn0ALlZaxd2pRpSu4/V -----END CERTIFICATE-----Generated at Fri May 3 03:10:46 2024 by rpki-client on console-ams.rpki-client.org