$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft File: LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json) Hash identifier: u/StxET582m05bwS9A9jX1G8blboxGAF4/R6pWPiZ/U= Subject key identifier: 15:22:83:6F:DC:05:04:4A:5D:3A:75:D1:C7:44:5A:60:72:C9:01:1D Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B Certificate issuer: /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft Manifest number: 39 Signing time: Tue 21 May 2024 08:11:47 +0000 Manifest this update: Tue 21 May 2024 08:11:47 +0000 Manifest next update: Tue 28 May 2024 08:11:47 +0000 Files and hashes: 1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: PTHtYpAyMAd/TtBJQkS/58r+uvUAEaqrqQq0gNUWBlM=) 2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: Le5wC9axWlTGJUJu0hs7m7UGYHbteqdIryoono/OIQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B Validity Not Before: May 21 08:11:47 2024 GMT Not After : May 28 08:11:47 2024 GMT Subject: CN=664c5743-17e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:cc:6d:72:02:04:af:42:b0:60:e7:87:93: 7c:44:f5:68:da:97:97:15:6a:55:52:8c:53:2a:95: 29:4c:f7:dc:22:cc:43:c5:e2:82:f9:11:c6:ea:ab: 3e:ec:70:52:87:0f:87:1b:bd:f9:d5:e1:c0:ce:9f: 42:7b:0f:b1:6d:1f:b2:2e:f4:9f:69:b1:30:a9:ab: 1d:9d:71:52:b9:c6:f6:e2:da:45:92:e9:60:57:67: a8:41:72:d4:cf:da:33:cd:ee:85:bd:88:a9:77:bd: a0:d7:ee:73:0d:cf:7f:8e:27:c0:0c:99:bb:12:b2: 84:96:ee:16:20:70:a2:ab:d0:db:46:c3:c2:e2:8b: 89:6c:d7:3a:1e:cd:ad:10:ad:54:b8:33:ec:f8:6f: 39:c4:3f:b5:b6:0c:8e:38:06:fa:67:e4:c9:59:00: 6b:39:b2:63:ab:2b:5d:98:4c:87:52:9d:36:92:89: 79:20:93:a2:ee:83:48:fa:b7:8e:c7:54:78:02:e1: 08:ff:9c:b6:e9:70:b0:66:01:c3:f3:a8:28:0b:e3: ac:1c:d4:e8:6d:0b:c7:a1:58:02:5a:fd:28:5e:8b: df:df:89:5b:ea:1e:06:5d:1b:f3:49:02:72:f2:8e: bf:4e:1e:3a:f5:5a:84:bc:fe:ff:e8:15:6f:f2:37: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:22:83:6F:DC:05:04:4A:5D:3A:75:D1:C7:44:5A:60:72:C9:01:1D X509v3 Authority Key Identifier: keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:05:fe:99:f8:7c:52:dc:f9:a8:10:b8:7e:e0:11:53:b8:b5: ad:d3:96:39:e6:85:7f:97:0a:d1:ca:1c:cb:e9:4e:cb:44:5c: 62:39:a7:c9:73:da:c3:e8:7f:6c:38:6e:3d:66:2d:a7:fc:5a: 70:80:37:74:67:33:48:81:1b:92:56:d2:1f:da:24:52:86:25: f1:69:60:5d:1f:10:78:db:67:67:e5:d7:23:2f:44:7e:bc:cf: f8:3a:91:b3:d7:8b:bc:35:3f:df:07:9e:40:76:75:e4:4d:88: fe:2c:8d:75:04:37:a4:0b:97:0e:ae:58:ef:3d:11:82:97:3c: 94:b7:3c:f5:4e:63:10:d0:99:a8:e3:dd:3a:4a:eb:fc:59:df: 20:e2:44:41:d6:d7:31:85:2b:8d:b7:ec:6a:6a:ea:30:a8:f4: 82:4b:54:7d:47:47:31:a8:61:a9:b1:ad:7b:9f:e2:06:f7:82: 76:8f:7b:36:3c:b9:2f:92:ef:9e:20:f5:f2:14:fb:b1:2a:80: 00:3a:73:79:c1:d2:3b:35:61:5e:fd:3a:0c:07:eb:61:e5:5a: e2:43:fd:b3:33:96:4f:7d:74:aa:26:8b:fd:49:d6:7a:94:d0: dc:7e:b3:dc:5a:0f:d8:ce:dc:38:ef:8b:be:e2:29:bb:25:32: 2a:d0:43:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTc0MjExMC8GA1UEBRMoMkM2QjhDN0Y4QjYxMEU4OTFDQjlDQkY2Q0RCRDk5OThB QTkzODYwQjAeFw0yNDA1MjEwODExNDdaFw0yNDA1MjgwODExNDdaMBgxFjAUBgNV BAMTDTY2NGM1NzQzLTE3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFKsxtcgIEr0KwYOeHk3xE9Wjal5cValVSjFMqlSlM99wizEPF4oL5Ecbqqz7s cFKHD4cbvfnV4cDOn0J7D7FtH7Iu9J9psTCpqx2dcVK5xvbi2kWS6WBXZ6hBctTP 2jPN7oW9iKl3vaDX7nMNz3+OJ8AMmbsSsoSW7hYgcKKr0NtGw8Lii4ls1zoeza0Q rVS4M+z4bznEP7W2DI44Bvpn5MlZAGs5smOrK12YTIdSnTaSiXkgk6Lug0j6t47H VHgC4Qj/nLbpcLBmAcPzqCgL46wc1OhtC8ehWAJa/Shei9/fiVvqHgZdG/NJAnLy jr9OHjr1WoS8/v/oFW/yN85PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFSKDb9wF BEpdOnXRx0RaYHLJAR0wHwYDVR0jBBgwFoAULGuMf4thDokcucv2zb2ZmKqThgsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNzQyL0QyMDU1OUZFQzA1 NjExRUU5NzE1NzgxMEM0RjlBRTAyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhn cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTEd1TWY0dGhEb2tjdWN2MnpiMlptS3FUaGdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NzQyL0QyMDU1OUZFQzA1NjExRUU5NzE1NzgxMEM0RjlBRTAyL0xHdU1mNHRoRG9r Y3VjdjJ6YjJabUtxVGhncy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4F/pn4fFLc+agQuH7gEVO4ta3TljnmhX+XCtHKHMvpTstEXGI5p8lz 2sPof2w4bj1mLaf8WnCAN3RnM0iBG5JW0h/aJFKGJfFpYF0fEHjbZ2fl1yMvRH68 z/g6kbPXi7w1P98HnkB2deRNiP4sjXUEN6QLlw6uWO89EYKXPJS3PPVOYxDQmajj 3TpK6/xZ3yDiREHW1zGFK4237Gpq6jCo9IJLVH1HRzGoYamxrXuf4gb3gnaPezY8 uS+S754g9fIU+7EqgAA6c3nB0js1YV79OgwH62HlWuJD/bMzlk99dKomi/1J1nqU 0Nx+s9xaD9jO3Djvi77iKbslMirQQzY= -----END CERTIFICATE-----Generated at Tue May 21 10:12:58 2024 by rpki-client on console-ams.rpki-client.org