$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: eVVya3nxAzJiX3zS73QVtb7Hz+qsqtniUMzbx2wLF3o= Subject key identifier: E0:AB:93:C4:04:D0:7F:82:10:FA:71:AD:70:90:67:3D:3D:27:48:56 Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 7C Signing time: Wed 15 May 2024 07:22:32 +0000 Manifest this update: Wed 15 May 2024 07:22:31 +0000 Manifest next update: Wed 22 May 2024 07:22:31 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: mtwMP61QPSuKXGYIIuzRI2GxT0TVxtCjPjym/JHSHYI=) 2: 322FAB6057B911EEB3EFC969C4F9AE02.roa (hash: i5vtLwQfH9vXuFGWq01zMKqNkT2TrL831iWEv/+GmBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: May 15 07:22:31 2024 GMT Not After : May 22 07:22:31 2024 GMT Subject: CN=664462b8-2e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:ec:8f:33:63:3a:58:2f:3a:05:78:b2:6c: 7f:82:4d:f3:7e:b7:78:e0:54:00:ce:7c:b2:eb:03: 6e:8c:d2:46:d6:5e:e2:02:7c:7d:5e:40:e5:c9:c1: c2:ad:57:03:55:fa:34:ce:6d:5e:6d:70:22:94:cb: 0d:2d:45:b3:f7:e6:37:9f:ed:7e:4c:9c:c0:09:a6: fd:df:04:90:c0:72:1c:0e:f2:c5:06:b0:82:bc:64: b4:62:51:72:43:ea:79:7c:5b:de:42:c8:d5:42:65: 67:b6:54:f1:90:61:f0:d8:fd:0c:6c:72:95:8c:b2: 65:c9:47:44:ed:83:42:c7:46:a1:d8:79:7c:ac:02: d4:26:dd:6a:62:0f:d2:d8:69:cc:7e:a9:06:2c:27: cb:5d:27:ba:08:12:6b:c3:d3:f5:bd:28:b0:60:f8: d8:f0:ca:6c:1e:c6:fa:05:b7:71:8d:03:f8:30:44: 6d:f4:71:1a:ba:2a:9a:84:16:84:49:60:88:9a:5f: e7:7b:79:90:21:b5:c4:32:b6:1d:b4:c5:8b:b7:fe: 0b:55:fe:95:d2:20:7a:cc:b7:90:12:2a:18:ea:37: b6:bf:26:e6:7d:5e:4d:01:b7:d1:41:fb:84:07:f4: 88:7d:71:ff:ac:97:9a:6b:c5:3c:a4:b9:a3:61:b2: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AB:93:C4:04:D0:7F:82:10:FA:71:AD:70:90:67:3D:3D:27:48:56 X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bb:8c:32:c2:16:e4:c1:16:fb:20:2f:f4:f4:2c:61:20:a1: 3d:65:4d:2f:80:a3:e4:54:47:00:bf:aa:1d:2f:74:ca:89:c2: c6:1d:31:f3:66:e0:0d:a5:c1:f8:99:e4:a2:39:cb:20:85:46: 23:f1:39:e5:ac:25:5e:d3:17:8f:8e:3f:58:ec:8b:3b:d3:57: 97:71:d2:01:3b:28:2b:4c:c0:6b:05:bc:11:f7:d6:3f:1a:18: c2:e5:b6:42:a3:1f:52:89:3a:d7:95:13:16:80:dd:4f:62:ef: c7:5d:d5:82:c8:95:ff:33:c8:d8:f7:d8:25:bb:30:3b:85:f6: c3:73:3d:7b:64:d6:ee:20:87:76:70:f6:fd:85:c1:2b:ed:36: 72:d3:bb:f2:04:fc:5c:73:ac:61:32:cf:fa:e4:99:ed:41:17: 9c:e2:44:5e:bb:05:61:b9:74:96:40:5e:5a:15:85:24:bd:8b: 0a:8d:67:d9:32:54:32:82:f3:a9:e5:ab:b1:d0:e6:6f:f8:50: cc:e9:53:d4:81:5a:c0:41:7d:f8:67:39:75:19:ba:22:ac:d0: 40:b8:22:0b:45:4d:84:35:f8:b2:8c:0f:af:28:c9:5a:c5:d1: 88:aa:fe:90:a4:6c:16:52:75:46:65:0f:79:13:99:69:94:5e: 60:49:a5:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0JGMTExMC8GA1UEBRMoOTRCMDM3Rjc2RkEyMzdBNzhFQTk1NDhFMzU1N0E1RTE2 RUQ2MjQ5QTAeFw0yNDA1MTUwNzIyMzFaFw0yNDA1MjIwNzIyMzFaMBgxFjAUBgNV BAMTDTY2NDQ2MmI4LTJlNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDALeyPM2M6WC86BXiybH+CTfN+t3jgVADOfLLrA26M0kbWXuICfH1eQOXJwcKt VwNV+jTObV5tcCKUyw0tRbP35jef7X5MnMAJpv3fBJDAchwO8sUGsIK8ZLRiUXJD 6nl8W95CyNVCZWe2VPGQYfDY/QxscpWMsmXJR0Ttg0LHRqHYeXysAtQm3WpiD9LY acx+qQYsJ8tdJ7oIEmvD0/W9KLBg+NjwymwexvoFt3GNA/gwRG30cRq6KpqEFoRJ YIiaX+d7eZAhtcQyth20xYu3/gtV/pXSIHrMt5ASKhjqN7a/JuZ9Xk0Bt9FB+4QH 9Ih9cf+sl5prxTykuaNhsj5vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4KuTxATQ f4IQ+nGtcJBnPT0nSFYwHwYDVR0jBBgwFoAUlLA392+iN6eOqVSONVel4W7WJJow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3QkYxLzdEMTZFNEZBNTdC ODExRUVBRTE4QjU2OEM0RjlBRTAyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pK by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbExBMzkyLWlONmVPcVZTT05WZWw0VzdXSkpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 QkYxLzdEMTZFNEZBNTdCODExRUVBRTE4QjU2OEM0RjlBRTAyL2xMQTM5Mi1pTjZl T3FWU09OVmVsNFc3V0pKby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABu7jDLCFuTBFvsgL/T0LGEgoT1lTS+Ao+RURwC/qh0vdMqJwsYdMfNm 4A2lwfiZ5KI5yyCFRiPxOeWsJV7TF4+OP1jsizvTV5dx0gE7KCtMwGsFvBH31j8a GMLltkKjH1KJOteVExaA3U9i78dd1YLIlf8zyNj32CW7MDuF9sNzPXtk1u4gh3Zw 9v2FwSvtNnLTu/IE/FxzrGEyz/rkme1BF5ziRF67BWG5dJZAXloVhSS9iwqNZ9ky VDKC86nlq7HQ5m/4UMzpU9SBWsBBffhnOXUZuiKs0EC4IgtFTYQ1+LKMD68oyVrF 0Yiq/pCkbBZSdUZlD3kTmWmUXmBJpQE= -----END CERTIFICATE-----Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org