$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: Obao2onH3QDbUhCXp9mjCrDzJM/sgppEHviFGBLjpUM= Subject key identifier: E2:94:DD:F5:4F:2F:A2:DB:FD:05:79:AA:C8:0B:F1:42:90:B9:10:B4 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0C7C Signing time: Sat 04 May 2024 19:02:41 +0000 Manifest this update: Sat 04 May 2024 19:02:41 +0000 Manifest next update: Sat 11 May 2024 19:02:41 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: gKuB9TPlIBkG3wc6UFmbDZYMdFM9jmQZa39mpdAnZTo=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: VMNO8FNq0eLyX6JPFhATiUsnlzGjEI7n6kEVtb0uqOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: May 4 19:02:41 2024 GMT Not After : May 11 19:02:41 2024 GMT Subject: CN=66368651-d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:68:3c:a8:ce:6e:a4:99:21:c1:1d:e5:68:0c: 6a:dd:b4:57:4e:30:82:7b:9e:4a:57:16:d6:c1:0c: b6:f4:00:3b:a1:23:60:2e:ae:62:47:d4:a7:96:4d: 0e:c4:d3:3d:e8:2d:f5:6a:db:61:09:ab:df:5a:12: 25:82:be:bd:25:c7:3c:53:3a:5f:c6:0a:d3:90:0d: 7c:31:00:6e:58:5a:fd:47:d7:ad:9a:3e:41:a8:61: 27:c1:cb:ce:e8:82:5d:99:b5:ea:59:c8:4f:23:31: 09:88:c5:9a:3d:10:c0:cd:94:76:0e:ea:aa:30:d9: 02:65:13:93:1f:c1:00:07:60:1b:97:bc:2a:16:86: c6:65:f6:31:39:62:eb:47:c4:2d:34:02:22:32:28: 39:95:20:8e:86:fe:2b:ad:d5:98:29:68:8d:86:5d: 9d:e7:47:94:5a:91:d3:cd:cc:d5:bb:0c:40:db:bf: ab:a7:d6:d4:43:d6:83:a0:f8:c2:52:a8:02:1e:14: 83:bd:07:97:b8:bc:40:8c:71:7f:67:a9:30:50:08: 37:e6:2d:db:ee:9d:25:b4:31:c1:55:68:bd:a2:23: 12:66:1e:11:a4:df:d0:fd:a5:a0:18:d3:20:72:ee: b9:64:7c:98:cf:f0:30:79:fe:d8:6c:3d:0a:0c:69: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:94:DD:F5:4F:2F:A2:DB:FD:05:79:AA:C8:0B:F1:42:90:B9:10:B4 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:59:8d:fc:64:59:72:46:5f:d6:43:4e:9b:37:b4:f1:77:d9: 72:c9:ff:c0:ca:bf:17:c2:9f:24:84:bd:b6:3d:6d:35:70:3b: 9c:c4:31:5f:ec:b5:83:99:8d:00:89:ae:d0:54:4d:30:fb:fa: db:f4:9b:e6:c3:ac:15:6e:86:83:f0:44:69:06:8f:57:b2:a1: 81:0f:89:e1:e3:c3:f6:32:5b:24:2b:c2:64:ff:22:0a:2f:5d: 32:0d:24:54:49:4b:63:b7:d4:2e:f0:fb:30:0b:71:18:df:a7: cd:98:fa:c4:49:2f:76:bb:08:b9:07:a2:01:68:c1:3d:07:84: e3:23:c8:4a:da:8a:e1:72:57:c2:9f:27:90:f4:98:9e:24:e2: b4:c5:f3:25:b2:f0:36:fb:50:e7:8d:d2:62:3a:3b:30:68:98: 75:fe:a7:56:3b:cb:37:5e:bc:62:b6:e4:61:44:b3:7f:00:69: d8:e3:43:14:e9:75:f1:44:05:aa:2e:f0:2b:14:27:b1:72:3c: 12:4d:39:f4:64:c7:81:21:1a:69:f3:2f:b5:16:30:f3:99:92: 31:ac:99:b8:5c:c1:98:c7:55:e9:9c:be:61:6a:61:72:39:3f: 91:fa:96:2e:4d:b1:8b:22:c9:66:5d:4f:05:08:af:5f:82:df: d7:f3:26:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjQwNTA0MTkwMjQxWhcNMjQwNTExMTkwMjQxWjAYMRYwFAYD VQQDEw02NjM2ODY1MS1kODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Gg8qM5upJkhwR3laAxq3bRXTjCCe55KVxbWwQy29AA7oSNgLq5iR9Snlk0O xNM96C31atthCavfWhIlgr69Jcc8UzpfxgrTkA18MQBuWFr9R9etmj5BqGEnwcvO 6IJdmbXqWchPIzEJiMWaPRDAzZR2DuqqMNkCZROTH8EAB2Abl7wqFobGZfYxOWLr R8QtNAIiMig5lSCOhv4rrdWYKWiNhl2d50eUWpHTzczVuwxA27+rp9bUQ9aDoPjC UqgCHhSDvQeXuLxAjHF/Z6kwUAg35i3b7p0ltDHBVWi9oiMSZh4RpN/Q/aWgGNMg cu65ZHyYz/Awef7YbD0KDGkEPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKU3fVP L6Lb/QV5qsgL8UKQuRC0MB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4WY38ZFlyRl/WQ06bN7Txd9lyyf/Ayr8Xwp8khL22PW01cDucxDFf 7LWDmY0Aia7QVE0w+/rb9Jvmw6wVboaD8ERpBo9XsqGBD4nh48P2MlskK8Jk/yIK L10yDSRUSUtjt9Qu8PswC3EY36fNmPrESS92uwi5B6IBaME9B4TjI8hK2orhclfC nyeQ9JieJOK0xfMlsvA2+1DnjdJiOjswaJh1/qdWO8s3XrxituRhRLN/AGnY40MU 6XXxRAWqLvArFCexcjwSTTn0ZMeBIRpp8y+1FjDzmZIxrJm4XMGYx1XpnL5hamFy OT+R+pYuTbGLIslmXU8FCK9fgt/X8yb6 -----END CERTIFICATE-----Generated at Sat May 4 19:58:45 2024 by rpki-client on console-ams.rpki-client.org