$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: vfMbnYW0Q+5Rkmb0eHlFKYaOFlt/KRe7Pn/p8SWTX3k= Subject key identifier: 27:BA:06:F6:31:A2:BB:BE:8A:B7:12:41:06:BC:B8:2A:DB:DD:2A:A9 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 0431 Signing time: Fri 03 May 2024 02:16:12 +0000 Manifest this update: Fri 03 May 2024 02:16:11 +0000 Manifest next update: Fri 10 May 2024 02:16:11 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: zOnwLUlmWM3vrvCERZvwGcgx9oG18mJKhHLhBTJw8gk=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: sNWMaE6Kxk7U7IVJoIVHc26Epr9NZPx+NxSKpYd0Rl0=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: p4TNgo9wMcdad9TW6jRHKAurVuODUEQBPpYKh3qruTY=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: AsBmvifqi5kf8Uva/ra6MediB6kZeyoXPryhmUwcMIo=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: hEnaLHRK3RhsZxVdnfBYMx2CZiUO3Zyp76r2D0ywcK4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: aqlNHvLsowrNCshV5huaECQwhT+7ps3G55fqOA8lWJY=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: EaL7saPML0jId9rtbBr/qVnmKgWaUc9g52nwg+Gepss=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: wiIyYyxWUkr+Ordrgxj8/xP4tlK+/DrPM/peLpho1gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: May 3 02:16:11 2024 GMT Not After : May 10 02:16:11 2024 GMT Subject: CN=663448eb-38fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:44:24:74:e6:8d:29:1c:07:92:cf:ec:58: d5:00:b3:71:74:c1:bc:ab:19:61:e8:04:db:29:f3: 7e:99:b4:1a:57:ad:64:06:a3:e9:3c:a8:67:a5:eb: f5:b4:16:b3:88:39:13:15:38:88:f1:fa:eb:72:9c: 09:83:ac:07:5a:83:a1:8c:50:43:e7:7b:87:16:6e: 70:90:28:65:36:24:af:fa:b5:17:c1:9e:6f:8a:25: 1d:3f:07:07:67:8d:ce:8c:f9:62:7e:51:c5:a0:b0: b4:cc:01:15:85:14:31:5a:85:6c:0b:87:3a:5f:d8: ca:bc:6d:16:ae:bf:a2:4b:57:26:41:f9:b9:fe:3b: 10:7f:e8:30:60:1d:7b:4b:3f:14:c3:3d:4a:90:27: f3:70:87:8b:c8:7d:eb:f7:be:6b:42:42:a3:96:a9: d6:12:f7:be:b8:93:0a:fc:0f:e3:96:66:33:37:d9: 35:f7:a4:c9:00:ae:86:2e:a9:7d:8b:c7:e0:d8:e9: 24:ee:da:df:1d:b0:d2:03:d1:c4:32:1b:68:ce:1f: 82:6f:03:1d:3c:51:2d:20:8b:74:fe:c7:af:85:ce: f2:56:3a:58:7f:82:da:3f:da:37:67:3e:e9:b8:f2: 62:42:9e:68:c1:40:d7:ef:1a:24:3f:0c:28:ee:f7: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BA:06:F6:31:A2:BB:BE:8A:B7:12:41:06:BC:B8:2A:DB:DD:2A:A9 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b5:18:34:13:b2:c8:d1:fc:f9:97:99:94:b0:d3:8f:43:de: 4d:35:6f:fb:51:53:0d:e4:ff:aa:e0:8a:7e:8b:20:ef:4f:63: 56:9b:66:71:fe:aa:1e:c9:30:2f:83:6b:1f:fd:89:b6:52:15: 13:84:e0:87:a9:79:1b:5e:fd:f8:61:1c:45:c6:79:62:83:ca: b2:a0:d5:ea:58:67:65:89:7b:98:b0:1c:2f:70:81:85:09:4d: d4:c9:1c:30:31:80:11:5e:0c:c4:26:f0:7c:50:f8:2b:90:67: cd:3d:75:85:51:ae:8a:ee:61:0d:78:16:b6:7c:4f:11:71:9e: 75:f9:71:1b:94:ba:25:49:15:68:b7:87:f9:de:af:87:26:24: cf:65:3c:49:be:84:87:91:0f:ce:62:71:d9:8f:ec:17:f3:b7: 9f:ac:2f:b5:6d:40:f6:68:95:c2:8a:25:a8:15:4d:f3:84:e0: fc:32:20:ab:2c:87:88:ae:69:b9:29:d9:3b:68:5d:87:5b:a6: 7d:bf:dc:13:8b:c5:2e:01:4b:f4:0e:c8:d2:0c:c4:d2:35:64: 11:46:72:38:ba:e4:8a:92:63:a1:b4:ae:c9:92:07:5d:3a:83: 85:4b:2c:40:ec:b6:b0:97:c3:b4:38:12:8c:85:c9:6e:63:e4: 00:ed:06:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjQwNTAzMDIxNjExWhcNMjQwNTEwMDIxNjExWjAYMRYwFAYD VQQDEw02NjM0NDhlYi0zOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUVEJHTmjSkcB5LP7FjVALNxdMG8qxlh6ATbKfN+mbQaV61kBqPpPKhnpev1 tBaziDkTFTiI8frrcpwJg6wHWoOhjFBD53uHFm5wkChlNiSv+rUXwZ5viiUdPwcH Z43OjPliflHFoLC0zAEVhRQxWoVsC4c6X9jKvG0Wrr+iS1cmQfm5/jsQf+gwYB17 Sz8Uwz1KkCfzcIeLyH3r975rQkKjlqnWEve+uJMK/A/jlmYzN9k196TJAK6GLql9 i8fg2Okk7trfHbDSA9HEMhtozh+CbwMdPFEtIIt0/sevhc7yVjpYf4LaP9o3Zz7p uPJiQp5owUDX7xokPwwo7ve/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe6BvYx oru+ircSQQa8uCrb3SqpMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYtRg0E7LI0fz5l5mUsNOPQ95NNW/7UVMN5P+q4Ip+iyDvT2NWm2Zx /qoeyTAvg2sf/Ym2UhUThOCHqXkbXv34YRxFxnlig8qyoNXqWGdliXuYsBwvcIGF CU3UyRwwMYARXgzEJvB8UPgrkGfNPXWFUa6K7mENeBa2fE8RcZ51+XEblLolSRVo t4f53q+HJiTPZTxJvoSHkQ/OYnHZj+wX87efrC+1bUD2aJXCiiWoFU3zhOD8MiCr LIeIrmm5Kdk7aF2HW6Z9v9wTi8UuAUv0DsjSDMTSNWQRRnI4uuSKkmOhtK7Jkgdd OoOFSyxA7Lawl8O0OBKMhcluY+QA7Qbr -----END CERTIFICATE-----Generated at Fri May 3 03:10:55 2024 by rpki-client on console-ams.rpki-client.org