$ rpki-client -vvf rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft File: -LGWnnogmA-I6xCFb5oqWhkT3VE.mft (raw, json) Hash identifier: EKlGxrEA4vuJw6o8uq5J9rus2EYCknVwyj84X72LBaU= Subject key identifier: ED:DD:75:CA:F2:89:48:2F:E2:D1:79:36:2B:6D:BD:43:D9:AC:C4:0E Authority key identifier: F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51 Certificate issuer: /CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft Manifest number: 0416 Signing time: Sun 05 May 2024 02:11:34 +0000 Manifest this update: Sun 05 May 2024 02:11:33 +0000 Manifest next update: Sun 12 May 2024 02:11:33 +0000 Files and hashes: 1: -LGWnnogmA-I6xCFb5oqWhkT3VE.crl (hash: o5lP66bmMA58bksDoJZcpDM6K+ztLnBIOqh0Q0cgm+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.crl rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A38BD/serialNumber=F8B1969E7A20980F88EB10856F9A2A5A1913DD51 Validity Not Before: May 5 02:11:33 2024 GMT Not After : May 12 02:11:33 2024 GMT Subject: CN=6636ead5-6d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:a8:3a:c7:bd:50:28:50:eb:90:3f:2c:32: f3:c7:48:21:2f:93:20:4a:0f:da:8d:26:be:33:22: df:d3:2b:66:3c:23:c9:4a:ea:51:7c:47:95:59:ed: e5:39:f9:e0:22:e3:11:f7:f2:20:7d:2e:f2:80:c8: 89:42:d9:78:dd:d6:39:c7:7b:fd:e1:0f:31:69:75: 19:08:4c:6f:8d:62:a3:f2:c1:4a:57:e8:76:ba:08: a2:23:7a:a0:80:c9:73:68:ac:1d:7d:f4:bb:dd:08: 08:d6:05:b5:37:5d:a8:5d:8a:d4:39:2c:fa:7e:79: 6a:57:11:04:1b:f8:3b:40:cd:bf:32:c4:20:1a:89: fb:e6:c4:63:98:9d:a2:44:94:5c:90:d8:91:13:df: 8e:47:b5:61:be:9c:95:24:e1:ae:f5:33:1e:66:42: 95:d9:95:a7:56:6e:a4:8a:95:ab:06:3a:f6:bd:ec: 13:a5:90:dc:b0:18:2a:3e:ad:d6:a1:3a:40:65:08: b8:fd:e6:45:8e:62:76:6c:33:bd:63:31:90:5f:61: d5:6c:b5:8e:65:40:6b:a6:6a:73:b8:91:12:1f:5c: fd:77:c2:2e:a1:a1:e2:68:84:f8:a9:bd:d8:8f:c5: a0:b4:81:43:3f:77:fc:99:83:13:0e:f8:81:68:a5: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DD:75:CA:F2:89:48:2F:E2:D1:79:36:2B:6D:BD:43:D9:AC:C4:0E X509v3 Authority Key Identifier: keyid:F8:B1:96:9E:7A:20:98:0F:88:EB:10:85:6F:9A:2A:5A:19:13:DD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-LGWnnogmA-I6xCFb5oqWhkT3VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A38BD/935C08E419C111EC8B7DA372C4F9AE02/-LGWnnogmA-I6xCFb5oqWhkT3VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:28:ba:85:cd:9f:9e:f9:05:a2:9e:c9:38:d0:cf:48:f0:e0: 07:3d:a4:42:66:e8:d1:6c:4f:b8:bf:20:e1:8f:29:6f:58:ac: d1:00:81:04:90:97:ac:ae:74:bd:ec:3a:85:59:fd:ec:5a:ec: 24:6c:0d:30:b3:6d:e1:56:95:5d:65:46:db:07:45:10:d1:a0: 6f:e7:97:09:b0:51:a0:56:3a:b1:e4:25:5d:b4:37:e7:73:3b: 9b:ae:41:c6:7d:52:0c:17:01:d6:d4:31:73:59:99:ce:3a:6b: 24:98:95:03:8f:e1:8b:5e:e0:f7:f1:a9:0b:15:6c:3f:01:40: 56:74:94:84:ab:45:86:43:04:a7:08:77:c1:5b:99:b8:46:3d: 27:bd:ba:2e:9a:16:a0:cd:e1:d4:e3:c0:57:16:c4:57:53:c5: fb:3a:99:df:09:ce:ad:9d:19:fd:0f:a1:c1:cc:37:16:ba:91: d5:fc:2d:3c:10:0c:9f:93:25:69:ec:67:79:f1:47:e2:8b:ca: e1:5b:51:8e:e2:31:81:c5:07:2e:25:3e:6b:3e:1f:bd:0e:7d: c5:2c:3a:6e:e8:e7:dd:23:b3:e2:6b:1c:19:9f:29:7c:65:d9: 92:a3:10:c6:7b:6e:3c:9a:be:ed:65:b8:1a:ac:c6:f6:6b:5d: e9:5f:7c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4QkQxMTAvBgNVBAUTKEY4QjE5NjlFN0EyMDk4MEY4OEVCMTA4NTZGOUEyQTVB MTkxM0RENTEwHhcNMjQwNTA1MDIxMTMzWhcNMjQwNTEyMDIxMTMzWjAYMRYwFAYD VQQDEw02NjM2ZWFkNS02ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYqoOse9UChQ65A/LDLzx0ghL5MgSg/ajSa+MyLf0ytmPCPJSupRfEeVWe3l OfngIuMR9/IgfS7ygMiJQtl43dY5x3v94Q8xaXUZCExvjWKj8sFKV+h2ugiiI3qg gMlzaKwdffS73QgI1gW1N12oXYrUOSz6fnlqVxEEG/g7QM2/MsQgGon75sRjmJ2i RJRckNiRE9+OR7VhvpyVJOGu9TMeZkKV2ZWnVm6kipWrBjr2vewTpZDcsBgqPq3W oTpAZQi4/eZFjmJ2bDO9YzGQX2HVbLWOZUBrpmpzuJESH1z9d8IuoaHiaIT4qb3Y j8WgtIFDP3f8mYMTDviBaKX4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3ddcry iUgv4tF5NittvUPZrMQOMB8GA1UdIwQYMBaAFPixlp56IJgPiOsQhW+aKloZE91R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzhCRC85MzVDMDhFNDE5 QzExMUVDOEI3REEzNzJDNEY5QUUwMi8tTEdXbm5vZ21BLUk2eENGYjVvcVdoa1Qz VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MR1dubm9nbUEtSTZ4Q0ZiNW9xV2hrVDNWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzhCRC85MzVDMDhFNDE5QzExMUVDOEI3REEzNzJDNEY5QUUwMi8tTEdXbm5vZ21B LUk2eENGYjVvcVdoa1QzVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLKLqFzZ+e+QWinsk40M9I8OAHPaRCZujRbE+4vyDhjylvWKzRAIEE kJesrnS97DqFWf3sWuwkbA0ws23hVpVdZUbbB0UQ0aBv55cJsFGgVjqx5CVdtDfn czubrkHGfVIMFwHW1DFzWZnOOmskmJUDj+GLXuD38akLFWw/AUBWdJSEq0WGQwSn CHfBW5m4Rj0nvboumhagzeHU48BXFsRXU8X7OpnfCc6tnRn9D6HBzDcWupHV/C08 EAyfkyVp7Gd58Ufii8rhW1GO4jGBxQcuJT5rPh+9Dn3FLDpu6OfdI7PiaxwZnyl8 ZdmSoxDGe248mr7tZbgarMb2a13pX3wB -----END CERTIFICATE-----Generated at Sun May 5 03:09:56 2024 by rpki-client on console-ams.rpki-client.org