$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: 65fBzIPg+WTzacZymtN5fCICKEeSFFkOj61b0CvHHF0= Subject key identifier: 71:5C:23:70:AD:4A:80:CC:69:20:00:1E:5D:94:98:E0:47:81:65:53 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0BE8 Signing time: Sat 18 May 2024 19:02:32 +0000 Manifest this update: Sat 18 May 2024 19:02:32 +0000 Manifest next update: Sat 25 May 2024 19:02:32 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: 6LDvzqmL+2ICcN6//sTO+TxMLySfJ5ev4oAI023t1iw=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: VEw9MLhojPtBj7/yVbdylAjgIZeL4XHegjDH9vdhq/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: May 18 19:02:32 2024 GMT Not After : May 25 19:02:32 2024 GMT Subject: CN=6648fb48-5170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:7a:5e:af:6b:cf:11:fe:4f:42:f0:ba:e0: 30:4e:ca:5d:53:7d:94:ad:6f:37:12:db:ca:fe:11: 56:1a:23:90:fd:86:ac:1e:01:57:6d:f1:a4:41:97: 11:40:10:a0:dc:9a:d2:58:15:ce:87:1d:b8:32:38: e0:6b:72:a4:80:33:61:5c:e1:84:92:61:6e:e4:26: 40:36:bb:16:d2:73:08:99:e4:6f:b9:36:45:1f:49: 54:ff:0d:80:c5:21:95:ce:b0:6c:38:cc:ff:dd:44: 9f:b2:59:07:a8:f0:6c:14:8b:49:12:88:1b:14:a2: 69:7d:74:92:b5:f7:ad:d8:45:c1:74:a2:9d:5f:25: 23:6a:34:c6:5a:53:e3:11:f4:65:ef:ec:d9:db:04: 27:01:98:de:6d:f3:0d:a3:33:26:03:2d:90:e2:0a: a0:5b:ce:af:e4:fc:f4:f2:c4:a2:50:5e:86:1d:e7: d7:88:91:5e:03:3e:a4:88:8e:da:1d:8b:cb:b8:4a: a9:5e:5c:ca:b0:63:bb:d2:51:c1:11:66:2b:f6:96: 09:52:bc:42:db:c4:3b:8b:93:ff:f4:52:fc:87:2c: 68:9c:90:e4:e7:25:50:ab:7c:6f:b4:66:b1:30:86: 5c:d1:a4:f5:5a:13:b3:0d:f3:52:c1:7c:44:e4:2d: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5C:23:70:AD:4A:80:CC:69:20:00:1E:5D:94:98:E0:47:81:65:53 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:fc:0f:de:dd:56:df:cc:57:e1:66:54:44:ae:24:9f:a7:69: e2:d7:ba:0a:c6:ef:6c:eb:8b:cf:d4:9f:0b:b4:88:86:dc:d0: 5b:b0:f9:25:a3:30:71:6c:44:12:2c:7d:cb:17:af:5d:68:02: 0c:28:8c:90:92:59:fc:d3:8c:7f:a2:d9:6e:71:51:e9:ca:02: d6:8a:ad:69:ef:d9:78:b1:54:33:1f:de:7e:2e:61:9c:ea:58: 7e:a4:8b:a3:70:ab:7e:1e:7d:ec:b9:68:e6:e1:fa:fb:3b:29: 46:f1:af:0c:b9:6e:a2:f0:b4:10:eb:b0:2f:16:de:83:65:f1: 5a:da:8e:7a:4d:8f:66:03:bc:f8:10:51:21:7e:2d:01:41:13: f2:3b:d1:73:9b:aa:b5:d8:37:40:f5:0f:9c:f7:b9:f2:16:71: 22:1d:30:49:65:50:fd:d2:42:68:f3:36:9a:4f:c6:eb:cf:d1: 74:76:25:38:88:e0:19:88:ea:39:a2:82:df:08:e2:16:03:6f: 47:32:c0:e2:f5:bf:31:49:0e:8d:84:78:44:60:22:31:9d:24: 43:81:cd:75:85:93:b5:eb:76:64:b2:d9:bd:63:ec:d6:96:67: b5:ff:57:f7:b0:ec:a2:d1:d0:dd:36:56:96:01:1f:f9:ea:ed: ac:fe:ea:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjQwNTE4MTkwMjMyWhcNMjQwNTI1MTkwMjMyWjAYMRYwFAYD VQQDEw02NjQ4ZmI0OC01MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqb96Xq9rzxH+T0LwuuAwTspdU32UrW83EtvK/hFWGiOQ/YasHgFXbfGkQZcR QBCg3JrSWBXOhx24Mjjga3KkgDNhXOGEkmFu5CZANrsW0nMImeRvuTZFH0lU/w2A xSGVzrBsOMz/3USfslkHqPBsFItJEogbFKJpfXSStfet2EXBdKKdXyUjajTGWlPj EfRl7+zZ2wQnAZjebfMNozMmAy2Q4gqgW86v5Pz08sSiUF6GHefXiJFeAz6kiI7a HYvLuEqpXlzKsGO70lHBEWYr9pYJUrxC28Q7i5P/9FL8hyxonJDk5yVQq3xvtGax MIZc0aT1WhOzDfNSwXxE5C3ekQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFcI3Ct SoDMaSAAHl2UmOBHgWVTMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT/A/e3VbfzFfhZlREriSfp2ni17oKxu9s64vP1J8LtIiG3NBbsPkl ozBxbEQSLH3LF69daAIMKIyQkln804x/otlucVHpygLWiq1p79l4sVQzH95+LmGc 6lh+pIujcKt+Hn3suWjm4fr7OylG8a8MuW6i8LQQ67AvFt6DZfFa2o56TY9mA7z4 EFEhfi0BQRPyO9Fzm6q12DdA9Q+c97nyFnEiHTBJZVD90kJo8zaaT8brz9F0diU4 iOAZiOo5ooLfCOIWA29HMsDi9b8xSQ6NhHhEYCIxnSRDgc11hZO163Zkstm9Y+zW lme1/1f3sOyi0dDdNlaWAR/56u2s/uqx -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org