$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json) Hash identifier: 06PMnhWM391x5Pbn//egMOIultKCU2AnCs6X3X3uzfo= Subject key identifier: E1:87:91:C5:01:D7:3D:1B:3B:B2:FC:4B:E6:AE:DA:C5:C8:90:40:A7 Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft Manifest number: 2F Signing time: Wed 15 May 2024 08:33:32 +0000 Manifest this update: Wed 15 May 2024 08:33:32 +0000 Manifest next update: Wed 22 May 2024 08:33:32 +0000 Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: hZLF2zbsx+NabNJIWAzqOdeJaHISDDLTdghDPBxV5Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Validity Not Before: May 15 08:33:32 2024 GMT Not After : May 22 08:33:32 2024 GMT Subject: CN=6644735c-442e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:4d:b9:ea:eb:c5:fc:26:0c:e1:92:86:92: 17:82:2e:5e:5f:4d:d6:4d:4e:5c:f2:73:4a:94:86: e7:b9:2c:fc:2d:b4:4d:e6:69:1b:e6:ae:eb:32:67: 52:de:67:99:84:7c:56:fc:92:b2:42:e2:9f:fd:f7: 94:b7:6f:20:0b:42:cc:cd:96:61:54:a9:54:bd:c6: 1d:ff:7a:75:be:ca:96:82:74:0b:e4:f4:ef:d4:1a: 9b:1d:79:b0:69:6d:ca:45:48:ea:d5:a7:e6:39:02: 06:20:35:1e:f6:c1:54:0d:fc:24:5a:e3:4e:83:58: b5:2f:6e:7e:5f:df:fc:5a:ad:ce:cd:39:76:2d:e8: 0a:7c:67:d6:96:ad:fd:1b:ee:9a:73:70:da:95:b8: 4d:9f:c8:02:1f:91:89:15:f9:8b:d3:40:ba:aa:b7: f6:36:2f:8d:65:34:31:69:20:25:4b:4b:60:51:7b: c1:88:0f:f1:df:46:00:6e:d3:ef:cd:27:77:66:3d: 11:99:1c:ed:dd:a8:5b:18:95:cf:fd:b0:76:51:06: 8f:88:49:3a:9d:09:3a:8d:48:85:6d:60:fc:d4:49: 1b:d4:b5:16:7b:01:c5:a8:79:d4:54:5b:14:a7:f9: bf:16:87:05:31:6e:e8:d3:eb:5a:45:a2:b8:6b:82: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:91:C5:01:D7:3D:1B:3B:B2:FC:4B:E6:AE:DA:C5:C8:90:40:A7 X509v3 Authority Key Identifier: keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:11:14:fb:7b:70:5d:95:98:8d:43:27:19:fa:d0:93:ed:ee: d3:27:6c:73:2d:52:94:70:81:a5:fc:e8:28:0a:f0:4f:75:71: bb:d5:dc:df:f5:57:c3:83:3b:11:2c:ea:23:95:a8:c4:14:e5: 0c:71:13:5c:55:ba:44:ce:bf:7c:8c:db:4c:87:90:4c:12:78: 36:bc:6c:ed:5a:a9:41:06:c4:3d:06:ba:e3:13:23:71:46:19: c2:06:f2:1f:4c:8e:8e:75:0d:f0:31:50:05:ab:bf:64:c3:cd: 39:c7:ce:05:15:75:cd:70:c1:74:ee:0e:6d:14:a2:03:51:4f: f8:ab:f0:43:3a:41:92:e9:7b:30:08:ac:ed:2f:4a:c2:15:b1: 39:77:e7:d9:6b:24:76:a5:2c:a2:4d:6b:e6:b8:9e:fc:96:1b: e2:16:b0:11:89:0b:95:01:19:57:4b:ee:6c:1b:74:8e:ed:e2: 5d:bb:e8:f5:3e:6f:ab:5a:dc:59:20:70:01:9e:60:7d:07:de: 37:ec:54:9c:9c:89:88:be:f3:c5:3b:38:81:76:c9:92:e8:4c: c9:13:04:9f:3e:e9:da:0f:95:b6:aa:fe:01:5d:60:9f:b8:63: 38:1d:ea:fe:3d:be:5d:58:e4:70:00:6a:61:df:17:ec:53:7d: 9e:d7:ec:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUJFRjExMC8GA1UEBRMoMkNGMTdFNjg1Qjc4OEY1RUFFNEEwMUQ1ODgzNTI2MUI1 RjBCMkVBNDAeFw0yNDA1MTUwODMzMzJaFw0yNDA1MjIwODMzMzJaMBgxFjAUBgNV BAMTDTY2NDQ3MzVjLTQ0MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9hk256uvF/CYM4ZKGkheCLl5fTdZNTlzyc0qUhue5LPwttE3maRvmrusyZ1Le Z5mEfFb8krJC4p/995S3byALQszNlmFUqVS9xh3/enW+ypaCdAvk9O/UGpsdebBp bcpFSOrVp+Y5AgYgNR72wVQN/CRa406DWLUvbn5f3/xarc7NOXYt6Ap8Z9aWrf0b 7ppzcNqVuE2fyAIfkYkV+YvTQLqqt/Y2L41lNDFpICVLS2BRe8GID/HfRgBu0+/N J3dmPRGZHO3dqFsYlc/9sHZRBo+ISTqdCTqNSIVtYPzUSRvUtRZ7AcWoedRUWxSn +b8WhwUxbujT61pForhrgjmPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4YeRxQHX PRs7svxL5q7axciQQKcwHwYDVR0jBBgwFoAULPF+aFt4j16uSgHViDUmG18LLqQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQkVGL0M5QUY1RDJDQ0Ix OTExRUU4MTVGQUI2OEM0RjlBRTAyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBGLWFGdDRqMTZ1U2dIVmlEVW1HMThMTHFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QkVGL0M5QUY1RDJDQ0IxOTExRUU4MTVGQUI2OEM0RjlBRTAyL0xQRi1hRnQ0ajE2 dVNnSFZpRFVtRzE4TExxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGARFPt7cF2VmI1DJxn60JPt7tMnbHMtUpRwgaX86CgK8E91cbvV3N/1 V8ODOxEs6iOVqMQU5QxxE1xVukTOv3yM20yHkEwSeDa8bO1aqUEGxD0GuuMTI3FG GcIG8h9Mjo51DfAxUAWrv2TDzTnHzgUVdc1wwXTuDm0UogNRT/ir8EM6QZLpezAI rO0vSsIVsTl359lrJHalLKJNa+a4nvyWG+IWsBGJC5UBGVdL7mwbdI7t4l276PU+ b6ta3FkgcAGeYH0H3jfsVJyciYi+88U7OIF2yZLoTMkTBJ8+6doPlbaq/gFdYJ+4 Yzgd6v49vl1Y5HAAamHfF+xTfZ7X7M0= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org