$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: lGPlrwfRTrblhhA5zf8Md/d/Y6iZgx8neQuFSq+0kGM= Subject key identifier: 77:F0:92:5D:B6:EB:47:7A:E4:89:BD:43:27:67:FE:E0:EC:D6:10:EC Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: DA Signing time: Fri 03 May 2024 06:05:17 +0000 Manifest this update: Fri 03 May 2024 06:05:16 +0000 Manifest next update: Fri 10 May 2024 06:05:16 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: 2ZHNnM4ZvJS2BUle0OJrXGvTF51lsR+q/FlY9fnDRok=) 2: 77D00C0ABD6D11EDB9B1D286C4F9AE02.roa (hash: jka2FLtJek/QxOtMc1GO5J+BIhuFKDvN5hLDgENj7Eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: May 3 06:05:16 2024 GMT Not After : May 10 06:05:16 2024 GMT Subject: CN=66347e9d-8eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:67:29:8f:50:cd:67:2f:36:c5:65:3e:b9: fa:e8:35:fb:e3:f1:41:96:5b:eb:95:53:22:2b:1e: c8:24:57:f0:18:1c:01:3c:65:24:07:9c:6f:40:db: 02:a3:81:44:98:a6:1f:59:23:51:42:6b:ff:96:bd: 3c:e3:c7:90:b2:1c:65:4c:ad:59:5d:10:fd:22:25: 29:b6:74:71:a0:cc:e9:6f:30:5b:f9:82:83:48:da: 43:16:1e:29:a3:95:1c:de:c3:2d:1e:aa:09:cf:4c: 54:43:5d:5c:fd:f7:ba:0e:b2:b7:ff:a5:4b:2c:8b: 10:5c:08:10:e5:82:7e:e9:0e:c3:50:e7:22:1c:a3: 73:f9:6d:40:89:18:a8:91:af:8c:3a:28:79:32:fa: ac:4f:27:db:5c:44:52:ad:fe:f3:fb:03:2d:75:fc: b8:30:28:28:d1:76:65:f2:9e:4d:78:37:28:26:41: e5:02:be:42:7b:e1:e5:bd:67:d0:d9:c2:47:08:16: a3:09:74:a1:23:88:6e:a3:6a:09:d7:a6:e0:c8:b7: 75:a1:d2:70:34:23:ae:f9:59:dc:b3:a0:48:50:15: 5f:cb:90:5e:56:3b:7a:0b:c9:ed:54:09:3d:da:84: 6b:92:c1:39:29:4b:24:05:73:42:71:85:48:43:6b: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F0:92:5D:B6:EB:47:7A:E4:89:BD:43:27:67:FE:E0:EC:D6:10:EC X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b3:a7:89:92:65:5b:55:da:37:8f:48:f2:0c:7e:1d:31:d5: 33:01:db:03:ff:84:a5:e0:5a:06:f7:5d:52:07:20:c1:21:9b: 4f:14:54:3f:81:04:48:a0:0d:9a:6b:2e:02:77:ad:b1:fa:ec: b1:b2:64:75:97:78:19:ff:b7:b6:b7:08:71:bd:76:ca:2e:26: 20:74:2f:d3:76:37:a3:a5:c0:f2:bb:37:7c:4e:ea:a7:4c:30: fc:99:5b:b9:ea:14:3e:98:6b:64:5e:0d:03:64:fe:b6:a9:6c: 3c:2c:2a:08:45:7c:54:96:fe:9a:20:f0:55:28:ee:ed:fd:37: 65:3c:66:99:70:a0:eb:7f:31:52:76:7f:c5:76:c8:51:ea:45: a4:b8:13:8d:62:3c:a9:2d:fd:b4:60:44:07:12:a1:b4:ce:d2: 69:b8:89:08:58:11:5d:b4:f6:43:cb:2c:bc:fe:39:e7:fa:44: 23:5b:50:d8:18:2a:b2:44:74:30:79:62:ae:e0:cc:2d:d8:a3: 05:6c:11:bc:d5:75:cd:a9:4d:87:00:76:f3:6f:5a:5e:59:66: e2:e6:ac:b0:34:e3:2e:52:2f:14:0d:74:c4:3a:8e:9b:2c:57: 76:b4:91:7b:98:f6:08:92:25:71:6b:2f:d9:1b:a6:55:22:43: a6:bb:d4:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjQwNTAzMDYwNTE2WhcNMjQwNTEwMDYwNTE2WjAYMRYwFAYD VQQDEw02NjM0N2U5ZC04ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VFnKY9QzWcvNsVlPrn66DX74/FBllvrlVMiKx7IJFfwGBwBPGUkB5xvQNsC o4FEmKYfWSNRQmv/lr0848eQshxlTK1ZXRD9IiUptnRxoMzpbzBb+YKDSNpDFh4p o5Uc3sMtHqoJz0xUQ11c/fe6DrK3/6VLLIsQXAgQ5YJ+6Q7DUOciHKNz+W1AiRio ka+MOih5MvqsTyfbXERSrf7z+wMtdfy4MCgo0XZl8p5NeDcoJkHlAr5Ce+HlvWfQ 2cJHCBajCXShI4huo2oJ16bgyLd1odJwNCOu+Vncs6BIUBVfy5BeVjt6C8ntVAk9 2oRrksE5KUskBXNCcYVIQ2unRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfwkl22 60d65Im9Qydn/uDs1hDsMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChs6eJkmVbVdo3j0jyDH4dMdUzAdsD/4Sl4FoG911SByDBIZtPFFQ/ gQRIoA2aay4Cd62x+uyxsmR1l3gZ/7e2twhxvXbKLiYgdC/TdjejpcDyuzd8Tuqn TDD8mVu56hQ+mGtkXg0DZP62qWw8LCoIRXxUlv6aIPBVKO7t/TdlPGaZcKDrfzFS dn/FdshR6kWkuBONYjypLf20YEQHEqG0ztJpuIkIWBFdtPZDyyy8/jnn+kQjW1DY GCqyRHQweWKu4Mwt2KMFbBG81XXNqU2HAHbzb1peWWbi5qywNOMuUi8UDXTEOo6b LFd2tJF7mPYIkiVxay/ZG6ZVIkOmu9Tr -----END CERTIFICATE-----Generated at Fri May 3 09:08:47 2024 by rpki-client on console-fra.rpki-client.org