$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: Qk47zoFwARjZLBVNSMStaLUGA5TzTxQurJCpi5NQYyg= Subject key identifier: 58:CA:E7:F8:8B:A2:07:0D:7C:8D:67:B6:70:83:89:1F:C1:C2:81:C6 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 1818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 1806 Signing time: Mon 06 May 2024 17:03:07 +0000 Manifest this update: Mon 06 May 2024 17:03:07 +0000 Manifest next update: Mon 13 May 2024 17:03:07 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: AOCo9HLBiWFxkNnU2uKPVFSPf3Oq2QyNwS+XJb2TUnQ=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: qZ/6NzbqJ1abxA/j9iS2yiuC6w9jWxl5UQ+sdk+4DcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6168 (0x1818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: May 6 17:03:07 2024 GMT Not After : May 13 17:03:07 2024 GMT Subject: CN=66390d4b-d115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:66:20:58:cd:7d:bb:12:7d:b7:e1:cc:4d:85: 71:3d:11:99:f1:1c:36:da:92:c6:84:fb:1a:dc:bb: 04:53:4f:c9:43:d0:5c:3b:11:35:a8:87:2b:62:16: fc:4e:16:13:50:a8:0f:5b:9b:9f:ac:31:2a:5e:82: ba:49:25:e8:75:9c:7f:d2:91:33:dc:c6:c5:f0:d9: 74:fd:e1:1e:d6:bc:05:0f:08:fb:3f:66:1e:b2:e1: 5e:db:64:b0:a6:40:f6:3e:c5:c9:63:34:48:b3:43: 50:9d:f7:00:5a:97:8e:9a:97:6b:eb:8a:a3:42:f7: 45:b0:95:a9:94:eb:1f:2c:97:0c:4b:88:d3:39:1c: c7:fa:3a:14:6b:f2:7f:5d:bd:b0:f6:4c:18:ee:6a: 4d:db:3a:c8:8f:83:2d:59:58:fa:5a:33:df:c5:38: 8e:d7:21:ba:97:73:74:71:db:dd:94:fa:01:4d:1f: b0:33:f9:3c:60:6b:bc:5f:ab:22:a4:19:e8:5a:4e: 72:59:c2:56:7b:bb:d8:b2:fa:50:be:ad:85:00:f8: e2:42:d5:86:4f:72:2f:9f:c0:f8:05:9c:b7:10:15: 42:d5:b1:a0:65:1e:61:5a:d3:b0:f2:68:da:72:05: 85:b2:3d:d7:70:f6:52:c1:90:6c:5d:d5:94:56:a5: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CA:E7:F8:8B:A2:07:0D:7C:8D:67:B6:70:83:89:1F:C1:C2:81:C6 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:18:65:58:5d:fe:da:8e:84:b5:f1:a5:dc:b7:31:f4:95:1d: 26:f6:4b:24:3b:93:0e:19:4a:14:e7:90:a5:72:2f:19:4f:e1: cb:0f:90:5b:e0:c7:ab:0f:58:fc:81:fe:99:9e:66:41:42:31: 73:a7:ae:ac:e4:21:89:0f:a4:41:06:f5:51:05:ca:f1:c4:86: e4:d8:bf:50:42:fe:6e:04:40:1f:bc:5f:d5:6a:5b:17:7b:f0: 92:1a:0b:4e:92:d4:2f:a2:2c:35:3e:eb:fc:e5:4b:ea:d2:00: 92:4e:8b:56:00:fe:7f:10:5c:bf:9e:e4:45:f9:71:7e:6b:04: fb:66:aa:11:e4:3e:4b:e7:53:46:ff:ec:c7:fb:db:37:ec:45: 83:46:51:43:bb:22:2a:ac:99:70:4c:eb:8e:a1:19:1f:d1:05: f4:16:27:f6:8a:7f:03:b0:66:70:b7:da:d0:41:0e:19:3f:38: d4:a6:25:0d:47:68:2a:9c:91:47:98:84:a6:dd:ab:21:d4:80: c9:8c:68:34:6a:56:7a:a9:48:6c:e0:96:c9:95:37:b2:09:37: 4c:36:73:5b:15:4e:dc:ff:b2:88:ef:73:d3:5d:93:6f:c7:11: 28:7c:2a:5b:22:ac:ac:41:9b:c9:bc:84:f5:99:06:60:12:c1: 4b:1f:37:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjQwNTA2MTcwMzA3WhcNMjQwNTEzMTcwMzA3WjAYMRYwFAYD VQQDEw02NjM5MGQ0Yi1kMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GYgWM19uxJ9t+HMTYVxPRGZ8Rw22pLGhPsa3LsEU0/JQ9BcOxE1qIcrYhb8 ThYTUKgPW5ufrDEqXoK6SSXodZx/0pEz3MbF8Nl0/eEe1rwFDwj7P2YesuFe22Sw pkD2PsXJYzRIs0NQnfcAWpeOmpdr64qjQvdFsJWplOsfLJcMS4jTORzH+joUa/J/ Xb2w9kwY7mpN2zrIj4MtWVj6WjPfxTiO1yG6l3N0cdvdlPoBTR+wM/k8YGu8X6si pBnoWk5yWcJWe7vYsvpQvq2FAPjiQtWGT3Ivn8D4BZy3EBVC1bGgZR5hWtOw8mja cgWFsj3XcPZSwZBsXdWUVqWvYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjK5/iL ogcNfI1ntnCDiR/BwoHGMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxGGVYXf7ajoS18aXctzH0lR0m9kskO5MOGUoU55Clci8ZT+HLD5Bb 4MerD1j8gf6ZnmZBQjFzp66s5CGJD6RBBvVRBcrxxIbk2L9QQv5uBEAfvF/ValsX e/CSGgtOktQvoiw1Puv85Uvq0gCSTotWAP5/EFy/nuRF+XF+awT7ZqoR5D5L51NG /+zH+9s37EWDRlFDuyIqrJlwTOuOoRkf0QX0Fif2in8DsGZwt9rQQQ4ZPzjUpiUN R2gqnJFHmISm3ash1IDJjGg0alZ6qUhs4JbJlTeyCTdMNnNbFU7c/7KI73PTXZNv xxEofCpbIqysQZvJvIT1mQZgEsFLHzdX -----END CERTIFICATE-----Generated at Mon May 6 20:19:42 2024 by rpki-client on console-ams.rpki-client.org