$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: JSqW2ZBvycCYLYH+D6YyDVUBieMeVGL6k7n3ePhgjHc= Subject key identifier: 84:64:A1:A8:94:D9:6E:B5:E4:B7:BA:F4:9F:76:CC:12:DA:54:4B:C7 Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0ABF Signing time: Thu 02 May 2024 20:14:55 +0000 Manifest this update: Thu 02 May 2024 20:14:55 +0000 Manifest next update: Thu 09 May 2024 20:14:55 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: AUrF0ppp68qD4PsOSn0pBCddOTOwPN40W+H/4aWnkV4=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: RFkdvM0yvnWg1PPxc+28GrSpqbXtHdiWn1AY6Pg66BM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: May 2 20:14:55 2024 GMT Not After : May 9 20:14:55 2024 GMT Subject: CN=6633f43f-9f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:06:e7:46:68:40:e5:09:e6:89:8d:8f:17: e7:66:65:9e:d1:79:7a:d6:1e:bc:01:48:cd:08:aa: 81:c0:ef:21:b7:81:bf:21:44:0f:df:d0:46:85:c0: 82:5b:e6:19:f6:fd:f5:89:81:54:d3:95:96:39:f6: a5:4a:72:48:1f:3b:65:ea:30:fb:9d:4a:ec:62:01: e7:aa:2d:e6:f3:71:19:e2:af:09:e6:43:45:a7:3f: 8f:e8:fd:a8:9a:20:ad:a5:b0:db:b3:12:08:70:45: 3e:07:ce:d1:87:31:63:10:d9:2f:45:91:bf:92:c3: 8a:e3:e7:2e:41:70:e9:55:92:18:3a:12:5c:9f:d7: 84:96:89:4a:88:54:18:90:e6:03:b5:7d:d0:c4:67: 56:90:5e:6f:17:36:27:51:0a:a2:12:28:59:66:aa: f9:f8:13:0c:b7:76:63:81:ab:e9:0d:0b:93:ac:5c: 15:0d:34:2f:1c:e5:b1:ef:d2:a4:d4:a3:a3:8b:74: a8:59:98:9c:85:08:4c:02:ef:9f:53:1c:bd:5c:74: 2a:67:1f:18:1a:db:90:34:84:b3:0e:7e:c0:19:f6: 39:73:6a:e0:9c:58:b0:db:af:bb:bb:60:12:8a:ba: 1d:c1:22:cf:2e:5b:ad:d9:75:75:ca:cd:d8:be:8a: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:A1:A8:94:D9:6E:B5:E4:B7:BA:F4:9F:76:CC:12:DA:54:4B:C7 X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:47:5c:41:86:a2:7d:78:a7:55:47:68:05:14:79:d5:1b:b9: 0e:5f:3e:8e:ed:cd:4c:7e:51:fb:fd:28:e4:84:b3:0a:76:93: c3:73:16:55:bd:70:a5:b7:e1:5f:57:6f:bc:bc:46:1b:2a:24: 80:19:60:bd:2d:2c:f9:24:e3:90:80:45:cd:a4:83:7f:5b:13: 73:5a:16:c3:c8:74:84:d2:1e:f4:61:03:68:06:99:62:1e:82: d7:63:2c:d3:36:9e:2c:09:6d:d8:68:08:d6:b5:6f:ca:8b:80: 21:02:ca:89:de:76:d2:de:54:f1:20:b8:72:19:99:1b:e8:73: bc:9c:87:ba:40:88:1c:1a:6b:08:1d:e3:06:8f:2a:59:ee:9c: 34:57:2a:db:77:2d:a9:4a:b7:95:67:51:56:8d:07:8c:12:cd: 66:9a:73:17:1e:41:84:db:9c:17:c0:18:d6:3b:57:38:46:00: 37:bd:68:7a:bf:a0:84:c6:49:11:65:5c:f8:99:41:dc:46:62: b4:71:00:f4:01:b1:10:73:9a:ab:85:ee:a4:25:09:a4:7f:1a: 52:32:64:11:c4:d1:81:67:92:b3:69:a2:1c:8f:ad:08:a5:e1: d6:80:1f:9a:bf:fc:50:fc:34:37:da:39:48:eb:0e:6f:b7:32: 55:43:e6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjQwNTAyMjAxNDU1WhcNMjQwNTA5MjAxNDU1WjAYMRYwFAYD VQQDEw02NjMzZjQzZi05ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHoG50ZoQOUJ5omNjxfnZmWe0Xl61h68AUjNCKqBwO8ht4G/IUQP39BGhcCC W+YZ9v31iYFU05WWOfalSnJIHztl6jD7nUrsYgHnqi3m83EZ4q8J5kNFpz+P6P2o miCtpbDbsxIIcEU+B87RhzFjENkvRZG/ksOK4+cuQXDpVZIYOhJcn9eElolKiFQY kOYDtX3QxGdWkF5vFzYnUQqiEihZZqr5+BMMt3ZjgavpDQuTrFwVDTQvHOWx79Kk 1KOji3SoWZichQhMAu+fUxy9XHQqZx8YGtuQNISzDn7AGfY5c2rgnFiw26+7u2AS irodwSLPLlut2XV1ys3YvooTLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRkoaiU 2W615Le69J92zBLaVEvHMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3R1xBhqJ9eKdVR2gFFHnVG7kOXz6O7c1MflH7/SjkhLMKdpPDcxZV vXClt+FfV2+8vEYbKiSAGWC9LSz5JOOQgEXNpIN/WxNzWhbDyHSE0h70YQNoBpli HoLXYyzTNp4sCW3YaAjWtW/Ki4AhAsqJ3nbS3lTxILhyGZkb6HO8nIe6QIgcGmsI HeMGjypZ7pw0Vyrbdy2pSreVZ1FWjQeMEs1mmnMXHkGE25wXwBjWO1c4RgA3vWh6 v6CExkkRZVz4mUHcRmK0cQD0AbEQc5qrhe6kJQmkfxpSMmQRxNGBZ5KzaaIcj60I peHWgB+av/xQ/DQ32jlI6w5vtzJVQ+Zu -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org