$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft File: LXsNej-fFd4AcqWmxO0KX48iHgM.mft (raw, json) Hash identifier: 4jxugQheqavhEZid9Beyd9AUHn5+Xokv0b6B0ncAoBM= Subject key identifier: D2:04:70:9D:49:3E:1C:FC:79:E8:24:C9:47:65:FC:5F:8D:38:54:F4 Authority key identifier: 2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 Certificate issuer: /CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Certificate serial: 08D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft Manifest number: 08CB Signing time: Sat 04 May 2024 21:35:05 +0000 Manifest this update: Sat 04 May 2024 21:35:04 +0000 Manifest next update: Sat 11 May 2024 21:35:04 +0000 Files and hashes: 1: LXsNej-fFd4AcqWmxO0KX48iHgM.crl (hash: ZrjkGGa8iASQTzEGuWKP0BcxIzwLeQBmAq5U+IC37Do=) 2: 73BD59AE8A8C11EA8CB4F53CC4F9AE02.roa (hash: N+jthyTGVjfvL/quxUMUol5Q7xnLJ/R/6L1JWE7fVrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC46/serialNumber=2D7B0D7A3F9F15DE0072A5A6C4ED0A5F8F221E03 Validity Not Before: May 4 21:35:04 2024 GMT Not After : May 11 21:35:04 2024 GMT Subject: CN=6636aa08-bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:26:20:43:11:50:e9:8c:a6:00:48:34:7c: 33:78:a1:6b:5c:1c:91:5e:25:e2:30:f0:dc:b4:a4: 83:01:ff:0a:4a:67:94:f3:4a:17:93:36:83:2f:79: e5:b6:3d:b9:f8:7c:0c:8a:60:5c:62:f1:7e:07:19: 4d:b1:d1:6f:d1:a4:7e:49:af:63:4c:65:27:5f:52: 0c:e3:ab:16:f7:f3:11:83:8a:22:db:e6:8a:ab:62: d0:71:ae:1c:a4:7a:c0:d7:13:7f:92:69:46:97:8f: 09:fa:80:f1:b4:35:b3:45:24:ba:e9:de:f9:c0:16: a0:f6:83:50:56:b2:62:1d:6d:70:b0:1c:4b:49:52: 8f:d7:0b:02:88:8a:0d:0e:bd:13:3b:b7:68:dc:d2: d2:e5:b1:1b:8b:36:6a:fd:ca:f1:14:44:f3:8c:b0: 59:25:53:ef:8a:bc:a9:53:38:e0:9c:31:a0:6f:58: 00:fb:b2:91:b6:50:f1:1b:74:04:84:36:a5:06:d8: fb:fc:1f:a3:13:a8:4a:49:20:91:fb:56:db:ab:0b: 05:6b:1c:94:06:0d:c7:c6:ce:db:44:8a:9c:1a:3c: a0:13:4a:43:be:64:a3:69:c3:b7:56:d9:a9:1c:d6: 11:eb:24:ad:04:b7:d8:8a:63:54:b9:6a:e7:89:7d: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:70:9D:49:3E:1C:FC:79:E8:24:C9:47:65:FC:5F:8D:38:54:F4 X509v3 Authority Key Identifier: keyid:2D:7B:0D:7A:3F:9F:15:DE:00:72:A5:A6:C4:ED:0A:5F:8F:22:1E:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXsNej-fFd4AcqWmxO0KX48iHgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC46/58F7513E8A8B11EAAC2A8C3AC4F9AE02/LXsNej-fFd4AcqWmxO0KX48iHgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ea:65:ad:89:d0:a2:b7:1e:66:7c:34:78:66:ac:de:80:23: 54:5f:55:07:54:50:a4:f4:56:55:99:df:42:bf:43:25:bf:1b: 5a:77:19:2b:b2:b3:5c:c5:6f:7f:e3:92:0e:b7:a1:9d:54:d1: d8:f1:e0:b8:57:b5:2e:ed:9c:87:33:c7:ba:be:23:63:41:5f: 24:3d:01:91:12:35:bc:62:f3:89:54:0c:88:98:99:be:bd:fa: 1f:68:e1:62:c3:0a:e0:77:94:64:b3:50:f5:da:c3:68:f7:47: a0:fb:db:ea:98:36:7d:33:f8:55:08:a0:fc:6f:bc:62:2e:60: 7f:bc:12:14:a1:aa:5f:ab:61:8c:04:aa:db:be:16:76:ba:a3: 25:0f:48:c8:0c:05:47:f0:eb:92:94:7e:64:3b:66:91:39:af: 0e:9b:71:b6:1d:6a:54:39:3c:ec:9f:e2:18:20:9e:55:10:31: 9c:ba:a5:1a:3a:5a:22:47:87:65:e6:87:84:19:91:33:0d:0f: cb:81:59:89:ff:b6:cc:2b:78:b0:35:c4:d3:2f:47:ef:11:13: 7a:dd:ca:fa:e5:bb:01:7b:bb:58:6d:4b:cd:99:a4:8e:72:e6: ea:5b:cc:76:10:a5:82:f5:78:3d:8b:a9:d2:2a:48:df:53:df: 28:cf:10:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDNDYxMTAvBgNVBAUTKDJEN0IwRDdBM0Y5RjE1REUwMDcyQTVBNkM0RUQwQTVG OEYyMjFFMDMwHhcNMjQwNTA0MjEzNTA0WhcNMjQwNTExMjEzNTA0WjAYMRYwFAYD VQQDEw02NjM2YWEwOC1iYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bEmIEMRUOmMpgBINHwzeKFrXByRXiXiMPDctKSDAf8KSmeU80oXkzaDL3nl tj25+HwMimBcYvF+BxlNsdFv0aR+Sa9jTGUnX1IM46sW9/MRg4oi2+aKq2LQca4c pHrA1xN/kmlGl48J+oDxtDWzRSS66d75wBag9oNQVrJiHW1wsBxLSVKP1wsCiIoN Dr0TO7do3NLS5bEbizZq/crxFETzjLBZJVPvirypUzjgnDGgb1gA+7KRtlDxG3QE hDalBtj7/B+jE6hKSSCR+1bbqwsFaxyUBg3Hxs7bRIqcGjygE0pDvmSjacO3Vtmp HNYR6yStBLfYimNUuWrniX2kLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIEcJ1J Phz8eegkyUdl/F+NOFT0MB8GA1UdIwQYMBaAFC17DXo/nxXeAHKlpsTtCl+PIh4D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUM0Ni81OEY3NTEzRThB OEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZkNEFjcVdteE8wS1g0OGlI Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYc05lai1mRmQ0QWNxV214TzBLWDQ4aUhnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUM0Ni81OEY3NTEzRThBOEIxMUVBQUMyQThDM0FDNEY5QUUwMi9MWHNOZWotZkZk NEFjcVdteE8wS1g0OGlIZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq6mWtidCitx5mfDR4ZqzegCNUX1UHVFCk9FZVmd9Cv0Mlvxtadxkr srNcxW9/45IOt6GdVNHY8eC4V7Uu7ZyHM8e6viNjQV8kPQGREjW8YvOJVAyImJm+ vfofaOFiwwrgd5Rks1D12sNo90eg+9vqmDZ9M/hVCKD8b7xiLmB/vBIUoapfq2GM BKrbvhZ2uqMlD0jIDAVH8OuSlH5kO2aROa8Om3G2HWpUOTzsn+IYIJ5VEDGcuqUa OloiR4dl5oeEGZEzDQ/LgVmJ/7bMK3iwNcTTL0fvERN63cr65bsBe7tYbUvNmaSO cubqW8x2EKWC9Xg9i6nSKkjfU98ozxCj -----END CERTIFICATE-----Generated at Sun May 5 00:12:24 2024 by rpki-client on console-fra.rpki-client.org