$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: XKkttVVSBydGJ6oNoHs8EaxR2t9VkTPcy6hGemTw0R4= Subject key identifier: 85:45:E7:FC:51:BD:DF:58:AF:1D:66:79:DC:CE:90:A5:F8:0B:1D:8C Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 01FB Signing time: Fri 03 May 2024 04:18:28 +0000 Manifest this update: Fri 03 May 2024 04:18:27 +0000 Manifest next update: Fri 10 May 2024 04:18:27 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: DZ+cG1/Anh1yJDjBV+h9DGzjgSal1GmX8ytEHbfehdM=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: bm/6uCHJYiPIV+MXeSgNNGIwHrjP2Ncfyg9Q1HBQVZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: May 3 04:18:27 2024 GMT Not After : May 10 04:18:27 2024 GMT Subject: CN=66346593-4c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:67:6f:03:41:b6:3c:24:46:b6:6a:3a:83: 2e:b3:2e:37:1a:03:e1:5b:7c:5c:14:16:b2:2f:62: 78:8b:f3:c3:d8:84:30:a7:ed:62:39:a1:ca:68:4f: 89:23:7d:96:1e:48:e7:0f:eb:69:71:f6:d9:e9:d7: ad:86:8c:7f:81:cf:a7:70:cd:fa:52:c1:29:fd:14: 94:78:13:9a:b7:bd:b7:20:b4:96:de:aa:1b:8a:60: e3:ba:2b:60:07:d4:cb:33:9c:95:52:bd:19:dc:9c: 54:08:6a:a8:44:28:ee:b7:8b:8a:c5:0b:d6:ae:13: b4:e6:ff:71:9d:bb:80:5e:58:ea:36:f9:6a:8c:68: 19:02:ae:e7:33:a1:5d:e7:a6:49:c6:cd:39:4f:de: 94:98:02:10:d4:ea:e9:8e:37:0c:25:8f:db:da:de: e2:08:17:71:12:7b:d3:b4:fb:8b:82:80:65:51:a2: 0c:dc:91:b2:de:17:2b:7a:30:ec:b5:e5:d1:13:6e: 1e:fd:59:ce:25:32:d0:e5:24:ae:90:49:fd:05:97: f8:25:6c:6a:83:3c:7b:0c:4a:2a:f5:59:60:1c:49: a6:9e:69:f3:b8:b4:fd:1f:cd:62:b9:b4:7e:eb:83: 84:c7:de:9c:32:33:1e:cb:7a:45:02:fb:ad:3c:16: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:E7:FC:51:BD:DF:58:AF:1D:66:79:DC:CE:90:A5:F8:0B:1D:8C X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d3:08:0f:47:1b:cb:ee:1a:f7:b6:be:1d:a9:00:02:69:1c: 68:aa:df:90:8e:c5:33:25:c1:0e:5f:85:82:8d:fb:24:66:fe: 6b:27:2c:bf:38:52:a7:dd:54:f5:fa:3f:41:c8:ce:66:cd:af: 96:a5:25:e1:87:f2:75:4c:98:55:ea:b3:4a:f5:0e:d8:ac:8b: 19:01:cf:50:18:1a:d0:0b:81:1e:09:7e:64:ac:06:16:aa:19: 4c:de:81:3f:67:ea:78:e0:26:5f:21:20:f1:17:18:dd:42:7e: 7b:20:ea:85:c0:9f:47:f7:d7:69:49:88:d8:bc:5b:78:fe:62: 88:75:68:28:e7:69:25:02:ff:57:f3:93:d0:00:f6:74:de:6e: 4a:9e:e6:a8:3b:a5:6d:f9:c2:c2:c4:a9:62:4e:5d:d3:e1:b8: 62:9b:5c:60:e0:40:31:cc:db:b0:16:9d:fa:5f:2c:03:39:79: 96:c6:cc:f5:42:75:8d:32:f0:a9:24:39:7a:05:9b:fe:bb:30: 33:e3:0e:10:cd:1e:06:ea:03:65:31:34:18:a7:3a:23:32:3c: 8f:53:88:0c:e3:2f:35:94:b9:59:54:f7:5a:9a:d8:bd:3d:6d: 83:16:2b:e1:d1:5e:2d:39:08:38:1b:0b:c1:e1:7d:d9:6e:13: f8:8d:f9:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjQwNTAzMDQxODI3WhcNMjQwNTEwMDQxODI3WjAYMRYwFAYD VQQDEw02NjM0NjU5My00YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypVnbwNBtjwkRrZqOoMusy43GgPhW3xcFBayL2J4i/PD2IQwp+1iOaHKaE+J I32WHkjnD+tpcfbZ6dethox/gc+ncM36UsEp/RSUeBOat723ILSW3qobimDjuitg B9TLM5yVUr0Z3JxUCGqoRCjut4uKxQvWrhO05v9xnbuAXljqNvlqjGgZAq7nM6Fd 56ZJxs05T96UmAIQ1OrpjjcMJY/b2t7iCBdxEnvTtPuLgoBlUaIM3JGy3hcrejDs teXRE24e/VnOJTLQ5SSukEn9BZf4JWxqgzx7DEoq9VlgHEmmnmnzuLT9H81iubR+ 64OEx96cMjMey3pFAvutPBbZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVF5/xR vd9Yrx1medzOkKX4Cx2MMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj0wgPRxvL7hr3tr4dqQACaRxoqt+QjsUzJcEOX4WCjfskZv5rJyy/ OFKn3VT1+j9ByM5mza+WpSXhh/J1TJhV6rNK9Q7YrIsZAc9QGBrQC4EeCX5krAYW qhlM3oE/Z+p44CZfISDxFxjdQn57IOqFwJ9H99dpSYjYvFt4/mKIdWgo52klAv9X 85PQAPZ03m5KnuaoO6Vt+cLCxKliTl3T4bhim1xg4EAxzNuwFp36XywDOXmWxsz1 QnWNMvCpJDl6BZv+uzAz4w4QzR4G6gNlMTQYpzojMjyPU4gM4y81lLlZVPdamti9 PW2DFivh0V4tOQg4GwvB4X3ZbhP4jfk3 -----END CERTIFICATE-----Generated at Fri May 3 06:29:23 2024 by rpki-client on console-fra.rpki-client.org