$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json) Hash identifier: M5v3d59VEbZvkOhtR0T9ORb68ns97zvcmtrlcWPitQM= Subject key identifier: 9B:02:19:1F:89:7F:2A:2C:02:3A:5F:F9:2C:46:B6:91:1B:89:54:F0 Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft Manifest number: 0595 Signing time: Mon 27 May 2024 00:32:09 +0000 Manifest this update: Mon 27 May 2024 00:32:09 +0000 Manifest next update: Mon 03 Jun 2024 00:32:09 +0000 Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: +4dY9IWvv9YS/XLIbYWL5c1P9Al7Vqp2tNzel933N/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Validity Not Before: May 27 00:32:09 2024 GMT Not After : Jun 3 00:32:09 2024 GMT Subject: CN=6653d489-6340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:77:78:06:25:71:c0:a2:33:79:2a:ff:d9: 56:e2:d0:87:f3:49:ce:ae:d7:e2:c9:0a:86:80:7d: e1:93:f0:bd:a1:16:01:84:66:4a:78:4e:82:4a:9e: 31:87:8f:99:d0:c4:fd:fd:5a:43:bd:1a:a7:b1:e3: 7c:9a:6e:22:36:a0:e5:9a:fc:51:76:c8:65:f2:70: 90:e1:d3:ae:de:89:27:95:ab:7a:fc:5a:55:19:bd: b9:13:8e:9d:52:ab:be:88:4f:74:12:1b:bb:06:3f: 83:c7:e1:8f:d9:f2:cd:ed:82:6f:3c:b9:08:16:eb: d0:ed:1b:27:01:2f:44:c1:ce:0c:4f:a7:d2:f5:e8: 35:af:49:f8:29:7a:c3:e8:b4:d0:cf:d1:1b:fc:de: ec:23:63:2f:57:2b:e7:7b:40:c2:e6:f6:bd:84:15: e7:fc:9a:3c:5a:9c:d8:88:5f:05:eb:d4:66:9a:5a: a2:9d:e6:0d:53:2b:4d:b5:be:27:9e:dd:85:e0:f6: 24:43:f9:90:96:a6:e9:3b:b8:39:0e:5a:9e:7d:96: e5:69:2a:4d:5a:e6:d4:5c:6e:2d:eb:86:de:bc:38: 45:cf:be:db:d2:48:71:a7:d6:7e:6f:04:56:25:26: c6:5f:8a:9f:ca:db:b5:f8:79:e3:f6:15:eb:76:00: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:19:1F:89:7F:2A:2C:02:3A:5F:F9:2C:46:B6:91:1B:89:54:F0 X509v3 Authority Key Identifier: keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:0c:1b:19:4a:3d:79:0f:6a:d3:cb:68:6a:0f:89:c2:5b: 27:65:cb:e0:ac:04:94:86:2e:6a:d0:01:6f:6c:98:7a:82:ac: bb:e3:cd:8b:57:ca:90:2e:90:9e:aa:f7:c9:cc:66:c5:22:f7: a8:59:db:62:4d:4a:7f:7b:f8:d5:f2:03:96:f8:51:14:9f:fa: cc:d4:fc:3e:2a:4d:6a:8b:bd:f9:a9:de:76:47:21:d3:7f:67: 07:f1:c5:23:20:37:28:59:15:b9:b3:ea:9a:58:ed:63:3a:d1: 5f:35:eb:7d:9b:6a:29:8a:79:b1:cc:88:27:0f:27:e0:ec:77: 17:b7:08:f6:6c:67:15:5b:2d:3e:81:97:04:6c:8e:aa:2c:4c: 7b:6e:c2:3f:62:50:a4:a5:ce:60:81:ea:3e:07:9f:42:cc:3d: 4d:54:dd:95:99:47:76:7c:80:ab:12:43:0a:4c:f2:3a:a8:26: f2:14:a6:31:32:1f:c0:4f:1c:23:45:3f:c3:85:0c:9b:c5:f2: 65:ed:63:43:f1:3a:c2:6e:df:64:35:60:c5:68:c9:1b:92:40: ee:3d:85:69:5f:59:6a:d7:3c:ae:f0:9e:5c:28:60:f6:a1:d7: b0:be:e8:b3:6e:80:e6:12:39:0a:3d:d9:9c:ad:0c:22:1c:40: fe:54:fa:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMTMxMTAvBgNVBAUTKDJFMTU5NjM4Q0I3OTBGNzk0NTE3MjJFNTJBQ0VCNERB ODA1RjhCOTcwHhcNMjQwNTI3MDAzMjA5WhcNMjQwNjAzMDAzMjA5WjAYMRYwFAYD VQQDEw02NjUzZDQ4OS02MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkp3eAYlccCiM3kq/9lW4tCH80nOrtfiyQqGgH3hk/C9oRYBhGZKeE6CSp4x h4+Z0MT9/VpDvRqnseN8mm4iNqDlmvxRdshl8nCQ4dOu3oknlat6/FpVGb25E46d Uqu+iE90Ehu7Bj+Dx+GP2fLN7YJvPLkIFuvQ7RsnAS9Ewc4MT6fS9eg1r0n4KXrD 6LTQz9Eb/N7sI2MvVyvne0DC5va9hBXn/Jo8WpzYiF8F69RmmlqineYNUytNtb4n nt2F4PYkQ/mQlqbpO7g5DlqefZblaSpNWubUXG4t64bevDhFz77b0khxp9Z+bwRW JSbGX4qfytu1+Hnj9hXrdgCL3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsCGR+J fyosAjpf+SxGtpEbiVTwMB8GA1UdIwQYMBaAFC4VljjLeQ95RRci5SrOtNqAX4uX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxMy8wRkE1RjBEMDg2 NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQzbEZGeUxsS3M2MDJvQmZp NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xoV1dPTXQ1RDNsRkZ5TGxLczYwMm9CZmk1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxMy8wRkE1RjBEMDg2NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQz bEZGeUxsS3M2MDJvQmZpNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASSAwbGUo9eQ9q08toag+JwlsnZcvgrASUhi5q0AFvbJh6gqy7482L V8qQLpCeqvfJzGbFIveoWdtiTUp/e/jV8gOW+FEUn/rM1Pw+Kk1qi735qd52RyHT f2cH8cUjIDcoWRW5s+qaWO1jOtFfNet9m2opinmxzIgnDyfg7HcXtwj2bGcVWy0+ gZcEbI6qLEx7bsI/YlCkpc5ggeo+B59CzD1NVN2VmUd2fICrEkMKTPI6qCbyFKYx Mh/ATxwjRT/DhQybxfJl7WND8TrCbt9kNWDFaMkbkkDuPYVpX1lq1zyu8J5cKGD2 odewvuizboDmEjkKPdmcrQwiHED+VPrq -----END CERTIFICATE-----Generated at Mon May 27 01:34:44 2024 by rpki-client on console-fra.rpki-client.org