$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft File: LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json) Hash identifier: 0u0gknTFi13JPJHmjtC/PaEWMJ8t7uj5Ym3lPaqPiE8= Subject key identifier: D1:03:E1:E0:E9:31:13:BE:71:14:2B:94:6B:5D:20:6B:F8:48:48:A5 Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 Certificate issuer: /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft Manifest number: 0AEB Signing time: Thu 02 May 2024 20:06:22 +0000 Manifest this update: Thu 02 May 2024 20:06:22 +0000 Manifest next update: Thu 09 May 2024 20:06:22 +0000 Files and hashes: 1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: ri1tSu+1vnynbV0AdF3ZZY91S4Kshkqk1lUtUGoHbJQ=) 2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: dJEaJsJJpDHzwdHNo56OaUGpdykcvI+riSarHcmExbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Validity Not Before: May 2 20:06:22 2024 GMT Not After : May 9 20:06:22 2024 GMT Subject: CN=6633f23e-d522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:8d:b9:18:1f:65:86:94:a9:1c:ff:3a:53: 1f:ea:36:7b:79:92:e1:6d:a7:96:b6:d4:47:95:c8: d6:0a:e1:b3:95:a9:19:4e:11:41:16:1d:bb:5d:07: c0:2d:47:9f:57:70:10:01:16:3d:dc:93:de:46:2a: cf:41:9f:64:b3:04:72:ed:e8:4f:5d:82:22:5d:30: a0:2c:10:e9:64:5b:e9:44:03:bf:d5:1f:e6:2f:31: f6:19:0d:d3:f1:3a:5a:73:b1:a8:b7:2b:2a:26:4e: b4:b8:da:96:bb:5b:5a:81:63:9e:53:61:53:2a:0f: 61:dc:bf:35:38:18:7d:2d:ab:49:23:11:3e:f7:ad: 97:34:69:df:bc:4c:d2:da:43:63:07:7b:ea:a1:10: 61:84:61:a7:d7:3d:a7:ab:0e:ea:ca:9c:76:91:a1: 2a:a0:5e:63:54:30:7c:dd:fd:56:39:fd:4e:cc:ce: a9:0a:27:5a:5f:0b:ff:63:06:d7:22:bc:22:e2:70: 6e:dd:ae:b9:fc:f2:d0:0e:98:fc:f4:f4:6b:83:9b: 76:bd:c7:7b:f4:4b:c6:e5:f0:73:10:7b:32:d5:f8: 19:e3:fc:3b:01:83:e3:c3:78:c2:e3:1d:a4:36:4e: 2e:80:bd:db:40:8b:c9:dc:10:71:9f:fb:cc:fb:a0: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:03:E1:E0:E9:31:13:BE:71:14:2B:94:6B:5D:20:6B:F8:48:48:A5 X509v3 Authority Key Identifier: keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ae:3b:53:27:96:52:43:71:80:26:49:1c:e4:4a:b7:f7:4d: dc:2f:4d:b7:fc:f2:2c:a6:0f:fc:c2:c0:e0:28:0f:23:ea:b1: 5a:27:aa:41:a3:62:63:46:a6:1b:5c:ce:5d:69:fb:13:75:5b: ac:cb:fa:58:a8:80:e9:74:1b:ac:a6:46:bd:5c:70:46:a9:b7: c1:19:b6:a9:5b:71:c8:ef:3a:a5:f7:9a:27:fa:bb:4e:90:d9: df:41:de:ed:ff:16:f2:5d:03:6f:ea:a2:cc:02:79:92:17:b4: 0e:ba:b3:2f:a2:56:ed:17:b8:f6:95:1e:72:d1:ac:4d:e0:c9: af:7f:88:6b:8a:ea:7c:7a:3e:1a:2e:ad:a5:c1:06:37:3d:09: d5:ef:e4:8a:cf:b8:be:59:c7:30:ff:4d:62:b5:5d:7d:e8:d4: 39:95:e2:1a:c5:bd:6f:9e:f7:1a:7d:b9:3e:b4:3a:ce:25:26: 20:81:0b:4e:f2:4d:38:8c:7e:15:0c:0a:74:ea:8d:96:4f:00: 3e:3c:0d:e6:b3:e6:b6:d6:be:f9:1e:4f:58:36:53:38:33:1d: 10:0f:e3:9d:10:12:4c:d0:83:45:c3:e8:18:4f:97:7d:3d:00: 86:85:e2:cd:ef:67:22:73:7c:4e:58:58:77:1b:cc:a8:50:cb: 74:a2:34:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4 OTQ1RkNBQjkwHhcNMjQwNTAyMjAwNjIyWhcNMjQwNTA5MjAwNjIyWjAYMRYwFAYD VQQDEw02NjMzZjIzZS1kNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4ONuRgfZYaUqRz/OlMf6jZ7eZLhbaeWttRHlcjWCuGzlakZThFBFh27XQfA LUefV3AQARY93JPeRirPQZ9kswRy7ehPXYIiXTCgLBDpZFvpRAO/1R/mLzH2GQ3T 8Tpac7GotysqJk60uNqWu1tagWOeU2FTKg9h3L81OBh9LatJIxE+962XNGnfvEzS 2kNjB3vqoRBhhGGn1z2nqw7qypx2kaEqoF5jVDB83f1WOf1OzM6pCidaXwv/YwbX Irwi4nBu3a65/PLQDpj89PRrg5t2vcd79EvG5fBzEHsy1fgZ4/w7AYPjw3jC4x2k Nk4ugL3bQIvJ3BBxn/vM+6CJSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNED4eDp MRO+cRQrlGtdIGv4SEilMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5 cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS80NzMzOTU2NjIwOEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4 eHd4a1lsR2Z4dldKUmZ5cmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgrjtTJ5ZSQ3GAJkkc5Eq3903cL023/PIspg/8wsDgKA8j6rFaJ6pB o2JjRqYbXM5dafsTdVusy/pYqIDpdBuspka9XHBGqbfBGbapW3HI7zql95on+rtO kNnfQd7t/xbyXQNv6qLMAnmSF7QOurMvolbtF7j2lR5y0axN4Mmvf4hriup8ej4a Lq2lwQY3PQnV7+SKz7i+Wccw/01itV196NQ5leIaxb1vnvcafbk+tDrOJSYggQtO 8k04jH4VDAp06o2WTwA+PA3ms+a21r75Hk9YNlM4Mx0QD+OdEBJM0INFw+gYT5d9 PQCGheLN72cic3xOWFh3G8yoUMt0ojQn -----END CERTIFICATE-----Generated at Thu May 2 20:50:22 2024 by rpki-client on console-fra.rpki-client.org