$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: SRhkd7V7kbRxLpdk5TnVE4dlyf5TSiDh7RrirJ5dJ1U= Subject key identifier: CA:70:54:A9:6E:26:94:3F:A8:1F:68:5D:7B:EA:35:AB:0D:19:53:A3 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 0855 Signing time: Fri 26 Apr 2024 21:44:50 +0000 Manifest this update: Fri 26 Apr 2024 21:44:49 +0000 Manifest next update: Fri 03 May 2024 21:44:49 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: diflE+s+lioStNGn3qsVHqVb/7SxRZpEo4IvZaf3iME=) 2: C87A727C2F8411EBA83F6F6DC4F9AE02.roa (hash: MsppnoKs5sY8vwtLpvFUKRCYQilabrALIyzrhW0Z5hw=) 3: 5C0A4894F60D11EEADD2752BC4F9AE02.roa (hash: H/NoPQuzUHx4Pz2NsHS1IxKvOouKPbRBspJCW/d+jBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Apr 26 21:44:49 2024 GMT Not After : May 3 21:44:49 2024 GMT Subject: CN=662c2052-5c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:90:31:da:06:f2:c9:78:7d:74:0a:dc:7e: 1b:03:88:aa:8f:25:f0:8a:77:c8:94:d1:6e:17:a3: c4:c3:5c:99:b0:32:f4:7b:a8:b4:d1:97:c5:64:95: 12:a9:47:ac:d7:4a:9a:44:a8:d9:4d:e8:02:e0:ee: 85:76:fe:a2:b0:1f:7c:7a:4b:b2:f9:fc:af:80:e8: d5:ac:0f:5c:eb:a6:8e:59:ff:0e:ea:73:f3:d5:62: 53:b4:db:f0:a5:1a:4d:70:ca:05:81:23:5a:9f:94: fb:da:f7:be:fb:29:04:4f:8c:1b:3c:dd:38:c5:3b: 2c:61:4a:88:30:b1:56:d2:21:0e:5a:84:60:0c:6d: fc:bc:f4:ac:3c:22:d5:89:71:aa:67:7b:7a:60:e2: 4e:ca:26:9e:e6:5f:19:e8:70:5d:4a:78:5e:c0:e9: a5:ce:82:1d:c5:14:9a:e2:bc:b7:a0:38:1f:75:ed: 37:91:d6:2e:a2:23:ab:73:92:9f:68:c1:37:7c:b5: da:56:f2:8b:3f:a8:18:90:18:7c:ca:67:e3:60:7b: 77:65:07:8c:46:e0:6a:bf:57:a9:ae:b0:0a:5a:ac: 28:8b:f6:43:e7:77:f5:5c:82:f5:32:1c:43:13:a7: ef:10:36:6c:18:b1:00:18:bc:a1:8e:81:12:cb:8b: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:54:A9:6E:26:94:3F:A8:1F:68:5D:7B:EA:35:AB:0D:19:53:A3 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c9:39:9d:9c:8a:ed:13:41:1b:3d:36:ed:d4:9b:74:40:47: 45:85:45:ef:3e:a8:9f:ec:fd:15:7d:1d:7c:2c:60:d6:de:47: d9:59:5d:7a:46:db:bc:38:ff:e8:b1:b8:68:95:a3:43:b5:c3: 90:50:fa:59:16:4f:74:8b:b1:7c:6a:1b:48:ea:e1:b2:de:38: ba:1d:a6:8f:d0:e5:0d:80:f4:3b:52:2d:70:c9:0f:f1:29:48: 14:b9:ef:dc:9d:de:68:a5:a4:6c:c3:c9:8b:b6:39:1e:1a:cc: 79:2d:3a:b8:73:5c:92:d9:24:55:c5:ca:8e:bc:ed:0d:6f:5e: b3:f2:ff:ab:70:19:7d:ef:f4:07:0f:0c:8d:d6:a6:96:cd:52: e6:79:44:a7:ae:16:6f:42:93:f7:3e:b0:9e:ae:bb:27:f6:eb: cf:ee:fb:8e:ab:4e:ce:40:fa:4a:53:37:bc:0e:7f:d7:a3:35: 57:78:f4:18:17:4a:40:49:c4:2b:0a:90:b6:4e:65:32:7e:3e: 15:e3:c1:28:99:55:af:42:01:ed:99:80:82:18:61:82:7b:04: 0c:43:45:6d:0e:4c:ad:87:ad:04:6e:87:ae:f3:d6:68:00:9b: b3:4e:ce:8f:fa:65:bc:4c:70:c3:af:a4:8b:3a:b3:6d:20:39: f3:87:ac:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjQwNDI2MjE0NDQ5WhcNMjQwNTAzMjE0NDQ5WjAYMRYwFAYD VQQDEw02NjJjMjA1Mi01YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdeQMdoG8sl4fXQK3H4bA4iqjyXwinfIlNFuF6PEw1yZsDL0e6i00ZfFZJUS qUes10qaRKjZTegC4O6Fdv6isB98ekuy+fyvgOjVrA9c66aOWf8O6nPz1WJTtNvw pRpNcMoFgSNan5T72ve++ykET4wbPN04xTssYUqIMLFW0iEOWoRgDG38vPSsPCLV iXGqZ3t6YOJOyiae5l8Z6HBdSnhewOmlzoIdxRSa4ry3oDgfde03kdYuoiOrc5Kf aME3fLXaVvKLP6gYkBh8ymfjYHt3ZQeMRuBqv1eprrAKWqwoi/ZD53f1XIL1MhxD E6fvEDZsGLEAGLyhjoESy4uL0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpwVKlu JpQ/qB9oXXvqNasNGVOjMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7yTmdnIrtE0EbPTbt1Jt0QEdFhUXvPqif7P0VfR18LGDW3kfZWV16 Rtu8OP/osbholaNDtcOQUPpZFk90i7F8ahtI6uGy3ji6HaaP0OUNgPQ7Ui1wyQ/x KUgUue/cnd5opaRsw8mLtjkeGsx5LTq4c1yS2SRVxcqOvO0Nb16z8v+rcBl97/QH DwyN1qaWzVLmeUSnrhZvQpP3PrCerrsn9uvP7vuOq07OQPpKUze8Dn/XozVXePQY F0pAScQrCpC2TmUyfj4V48EomVWvQgHtmYCCGGGCewQMQ0VtDkyth60Eboeu89Zo AJuzTs6P+mW8THDDr6SLOrNtIDnzh6zp -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:19 2024 by rpki-client on console-ams.rpki-client.org