$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft File: LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft (raw, json) Hash identifier: JLdXqiefFRC1j07prj/RHtcG9cfi6yb55VIby+jzOjY= Subject key identifier: CC:5E:80:07:58:02:FE:D0:AC:35:03:E0:23:25:D8:28:60:8E:D6:F7 Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft Manifest number: 07CC Signing time: Mon 06 May 2024 22:07:37 +0000 Manifest this update: Mon 06 May 2024 22:07:36 +0000 Manifest next update: Mon 13 May 2024 22:07:36 +0000 Files and hashes: 1: LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl (hash: ULSJuZZceb6nhuYk/GCvAjMozAJQwquesS7hv+ErD1I=) 2: 82FB96E899E411EB8B298058C4F9AE02.roa (hash: lB8jvJ5bEzn+S/BaX3fSwOG1B3sAsvq+F5z/Unmp2x0=) 3: B6C75D94084711EEB760A583C4F9AE02.roa (hash: LstT+eSPsxOVFpV2OMu8Jy/4bTbA0FS/hFEXozEyEvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4 Validity Not Before: May 6 22:07:36 2024 GMT Not After : May 13 22:07:36 2024 GMT Subject: CN=663954a9-2cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:a6:94:6a:c6:02:a4:dc:54:15:c9:1e:49: 2a:48:5f:89:2c:98:7d:2e:e3:c4:f4:ee:0f:d8:6d: 26:bf:13:81:dd:c3:c8:22:71:53:dc:9d:06:63:b8: 74:cf:58:14:db:1b:eb:f1:c8:05:3a:02:6f:1b:f7: 33:88:7b:a9:5d:86:40:e6:22:cd:fd:f7:4e:d5:17: 84:bd:11:c4:4c:7c:fe:19:f1:4b:21:0f:d9:1b:94: 42:62:8b:a5:78:29:1c:74:bc:f8:0d:b3:0f:70:3e: 60:73:52:c4:86:bd:c5:61:13:05:5e:52:ad:92:c4: 2f:13:b9:97:2a:f3:cf:6e:88:ee:bf:2f:1c:de:f7: f8:2f:0f:7c:dd:1a:fd:e6:34:97:12:8b:75:ca:00: 34:55:dc:7d:c7:df:8a:c6:da:72:27:43:82:d0:f3: 70:d1:4e:71:b0:3d:fa:d9:a1:4a:6d:2c:6f:56:2f: c7:d0:f9:6a:6e:7f:89:18:a3:5f:68:af:bf:a9:c5: db:57:38:a5:3a:a6:fb:e7:d5:c2:e6:09:a4:9d:58: 95:b8:ab:67:0c:23:67:a6:b6:01:9a:f5:6a:56:52: 75:7b:46:a5:81:58:43:44:4c:47:d6:9f:17:33:94: 8a:f3:f7:b6:f3:83:f7:2c:28:60:d3:40:53:3c:db: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5E:80:07:58:02:FE:D0:AC:35:03:E0:23:25:D8:28:60:8E:D6:F7 X509v3 Authority Key Identifier: keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d7:18:5c:6b:c3:2c:2b:d8:ac:76:47:d5:48:39:38:fa:1e: 73:0c:5f:5a:8c:cc:44:a1:93:d8:2d:42:93:55:5e:49:81:29: 55:8e:52:24:3d:71:8f:84:7a:57:a9:63:13:00:be:65:52:dd: 27:6e:60:a8:04:b9:e6:7b:45:17:5d:9d:0f:63:ab:e1:5e:3c: 2c:2d:2a:25:09:82:0d:49:f8:cf:68:28:a3:51:00:e7:3b:a0: 52:6d:60:e9:54:6d:d3:0a:7a:65:ee:f1:4e:7e:99:55:b2:6f: af:20:87:2b:88:1e:49:39:a1:60:e3:bd:ff:6a:12:4c:7b:24: f8:19:e3:be:71:61:23:7a:5f:64:d1:91:95:24:bb:67:00:a9: ff:65:09:d3:70:f6:2a:64:66:43:79:18:65:cf:f3:04:9d:41: 67:83:08:2c:80:cc:04:a9:de:1d:7b:ee:62:ef:1a:27:f3:05: 39:76:1e:fb:86:a1:29:30:b3:18:cf:42:87:28:36:eb:68:b2: 75:1f:da:2a:c5:87:d3:95:ab:41:00:a1:15:8a:ce:6c:d3:ac: 50:df:44:cb:15:8e:b9:9a:1e:5a:65:bc:29:b0:5e:f5:36:ff: af:02:ee:c2:4d:64:b2:20:2f:ea:4c:d4:1d:22:0d:30:82:85: 71:09:90:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3NzE2N0Q1NDhC MERGRTNDRjQwHhcNMjQwNTA2MjIwNzM2WhcNMjQwNTEzMjIwNzM2WjAYMRYwFAYD VQQDEw02NjM5NTRhOS0yY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwOmlGrGAqTcVBXJHkkqSF+JLJh9LuPE9O4P2G0mvxOB3cPIInFT3J0GY7h0 z1gU2xvr8cgFOgJvG/cziHupXYZA5iLN/fdO1ReEvRHETHz+GfFLIQ/ZG5RCYoul eCkcdLz4DbMPcD5gc1LEhr3FYRMFXlKtksQvE7mXKvPPbojuvy8c3vf4Lw983Rr9 5jSXEot1ygA0Vdx9x9+KxtpyJ0OC0PNw0U5xsD362aFKbSxvVi/H0Plqbn+JGKNf aK+/qcXbVzilOqb759XC5gmknViVuKtnDCNnprYBmvVqVlJ1e0algVhDRExH1p8X M5SK8/e284P3LChg00BTPNusKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxegAdY Av7QrDUD4CMl2Chgjtb3MB8GA1UdIwQYMBaAFC09+14iErKQWGixdxZ9VIsN/jz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEU0OS8zRjAyMDI0NkJF MTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3NwQllhTEYzRm4xVWl3My1Q UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUMzdYaUlTc3BCWWFMRjNGbjFVaXczLVBQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJU3Nw QllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB71xhca8MsK9isdkfVSDk4+h5zDF9ajMxEoZPYLUKTVV5JgSlVjlIk PXGPhHpXqWMTAL5lUt0nbmCoBLnme0UXXZ0PY6vhXjwsLSolCYINSfjPaCijUQDn O6BSbWDpVG3TCnpl7vFOfplVsm+vIIcriB5JOaFg473/ahJMeyT4GeO+cWEjel9k 0ZGVJLtnAKn/ZQnTcPYqZGZDeRhlz/MEnUFngwgsgMwEqd4de+5i7xon8wU5dh77 hqEpMLMYz0KHKDbraLJ1H9oqxYfTlatBAKEVis5s06xQ30TLFY65mh5aZbwpsF71 Nv+vAu7CTWSyIC/qTNQdIg0wgoVxCZBy -----END CERTIFICATE-----Generated at Mon May 6 23:05:42 2024 by rpki-client on console-fra.rpki-client.org