$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft File: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json) Hash identifier: H+MDbwRMpD14KXsa+WgzNCdzD4emUJL9cJR3oHdA2ho= Subject key identifier: 8E:AF:57:3F:C9:A3:02:3B:E5:F1:00:1E:6E:E5:89:64:7A:7E:47:0C Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 Certificate issuer: /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft Manifest number: 0101 Signing time: Wed 01 May 2024 05:51:05 +0000 Manifest this update: Wed 01 May 2024 05:51:05 +0000 Manifest next update: Wed 08 May 2024 05:51:05 +0000 Files and hashes: 1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: Hs7+Wy3eG7tbqwhXKKw3kTWEeiIm+jKv9iM6ADL972g=) 2: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: vOSrn73uuNI7bKVAyn91p2274vbKZOFmvm+dfMnjwrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325 Validity Not Before: May 1 05:51:05 2024 GMT Not After : May 8 05:51:05 2024 GMT Subject: CN=6631d849-bb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:07:a9:1e:55:a1:ba:99:cb:05:16:b5:9a: d4:66:69:bd:30:1b:f7:c4:32:d2:de:bb:9b:36:52: 19:8e:b5:64:3d:2f:5d:e8:4d:f3:b6:37:27:d1:0c: 19:db:98:15:05:15:54:e1:2b:d4:fb:9f:74:1e:ff: 59:21:75:68:e9:7b:09:19:cc:78:4f:0b:bc:8e:f0: 87:14:89:0b:2f:fe:c1:67:fe:bb:a4:f7:d9:c6:33: cb:2d:00:26:ec:ae:4c:89:a2:07:33:91:0b:ae:fa: f1:d4:f7:e0:db:4d:bf:31:dc:d9:6b:12:4b:49:ee: 00:fd:72:8c:cd:2d:ee:e2:25:7a:22:24:8e:fb:d7: 1c:db:7d:cf:0b:c3:a6:82:12:a6:e6:bb:6c:c8:f0: b9:10:cb:99:58:d7:34:14:03:81:c3:ea:1d:0e:01: 68:75:07:a9:08:0a:18:12:ff:97:75:a8:18:4b:f1: f7:72:3b:9a:23:83:4b:c4:f3:65:5a:ce:30:8d:90: c6:6e:63:e6:76:4a:ff:fe:cc:45:4e:7a:0a:47:50: e6:2f:66:e8:eb:b3:3a:64:c6:bc:a7:d2:50:3c:db: ec:01:59:62:f8:9f:5e:cf:0b:9d:af:e3:6b:d1:d8: 67:93:d1:0b:79:26:ff:2d:10:4e:10:7e:4e:80:eb: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:57:3F:C9:A3:02:3B:E5:F1:00:1E:6E:E5:89:64:7A:7E:47:0C X509v3 Authority Key Identifier: keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7c:de:94:7f:c3:07:70:00:14:08:86:12:e0:6a:5d:2b:52: a5:d7:f5:ca:fd:95:99:af:20:5a:6a:78:3e:f0:94:2a:58:9b: 3d:ab:88:cf:eb:0e:8b:da:14:2a:3e:75:4d:85:db:31:64:a5: 7c:77:6c:c7:f2:d9:cb:5d:ad:aa:f8:c6:a8:62:b7:b1:c4:3e: 5e:91:cb:cf:e3:89:19:72:55:ea:a7:ff:76:58:c7:f2:5e:f0: af:50:6a:81:d0:bd:e1:9e:36:77:b1:d7:77:fd:98:27:98:e1: 37:83:48:96:14:95:a2:03:77:18:05:ed:d8:ad:10:b9:8f:b7: 5e:a0:4d:93:72:62:32:1a:b8:99:9d:b6:4b:78:79:6f:24:58: 13:2c:0a:0d:a2:da:89:9d:85:2a:34:76:31:5b:93:04:57:1d: ec:1e:4f:e4:27:71:7d:0e:68:5e:8d:9e:ba:5a:47:67:d0:34: 9d:51:95:02:5f:69:77:1a:66:8e:5f:7c:e9:3e:17:c9:e5:01: 4f:e4:0b:b0:40:34:c9:aa:37:10:f3:0e:d3:9f:c3:3d:5b:f8: b8:fa:f0:47:6b:3c:c2:0b:c4:79:50:08:45:4c:64:4b:93:5d: 96:61:8d:58:bd:ba:83:6c:c7:06:53:8b:17:b4:8e:e2:df:6d: 0c:f4:65:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC RDNFMEUzMjUwHhcNMjQwNTAxMDU1MTA1WhcNMjQwNTA4MDU1MTA1WjAYMRYwFAYD VQQDEw02NjMxZDg0OS1iYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDcHqR5VobqZywUWtZrUZmm9MBv3xDLS3rubNlIZjrVkPS9d6E3ztjcn0QwZ 25gVBRVU4SvU+590Hv9ZIXVo6XsJGcx4Twu8jvCHFIkLL/7BZ/67pPfZxjPLLQAm 7K5MiaIHM5ELrvrx1Pfg202/MdzZaxJLSe4A/XKMzS3u4iV6IiSO+9cc233PC8Om ghKm5rtsyPC5EMuZWNc0FAOBw+odDgFodQepCAoYEv+XdagYS/H3cjuaI4NLxPNl Ws4wjZDGbmPmdkr//sxFTnoKR1DmL2bo67M6ZMa8p9JQPNvsAVli+J9ezwudr+Nr 0dhnk9ELeSb/LRBOEH5OgOvgQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6vVz/J owI75fEAHm7liWR6fkcMMB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlfN6Uf8MHcAAUCIYS4GpdK1Kl1/XK/ZWZryBaang+8JQqWJs9q4jP 6w6L2hQqPnVNhdsxZKV8d2zH8tnLXa2q+MaoYrexxD5ekcvP44kZclXqp/92WMfy XvCvUGqB0L3hnjZ3sdd3/ZgnmOE3g0iWFJWiA3cYBe3YrRC5j7deoE2TcmIyGriZ nbZLeHlvJFgTLAoNotqJnYUqNHYxW5MEVx3sHk/kJ3F9DmhejZ66Wkdn0DSdUZUC X2l3GmaOX3zpPhfJ5QFP5AuwQDTJqjcQ8w7Tn8M9W/i4+vBHazzCC8R5UAhFTGRL k12WYY1YvbqDbMcGU4sXtI7i320M9GXP -----END CERTIFICATE-----Generated at Wed May 1 06:34:04 2024 by rpki-client on console-ams.rpki-client.org