$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json) Hash identifier: +pUNVY/FyTLWPqaas+ULnwMyNtLBjunmRq5vOrrRUJ0= Subject key identifier: 18:D7:8B:0F:59:47:FB:C3:C7:1C:E9:96:18:87:D8:66:32:DD:AC:56 Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Certificate serial: 2469 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft Manifest number: 241A Signing time: Sat 18 May 2024 16:02:07 +0000 Manifest this update: Sat 18 May 2024 16:02:06 +0000 Manifest next update: Sat 25 May 2024 16:02:06 +0000 Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: 1gpkaoU5qvhmlSW/AKy3+0Ri6NXqSDpSild1rIblY0A=) 2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: Ez/PaSdgtjQw0FOVprB7ZQvQsV7UFC/yAhl1d8YZdH8=) 3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: 5H4HxYZ6gOM9gixxXCuRxErTHGKTT5vkvqEovL8hCmg=) 4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: olmgUz9SVCBjiL/Bv925zWayhEyrsJ1eU7V4AUmdPk0=) 5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: +AXnC0BrM7UgnnX4bYv1bsmfgMrEkS9sqNlXbbVawFU=) 6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: l2ohcd93Jna0nv/Pa5DANRoNmPIzd1dg7MYWz4MSOWw=) 7: ADAE2980A05B11ED9406DE26C4F9AE02.roa (hash: 5lKwdeAbFWJEXhUuY2CvMVBM56hWLyqhuKcjetHMVuM=) 8: 260428EC312211EEAF54935BC4F9AE02.roa (hash: /RjHikccRVacNzWC8nUjZDF/C6S1VsZZt8OprR2kZLE=) 9: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: 9JmYlt1c9E/j/NU+NicyDsO+kRDpgNSabN6w1iwtd7w=) 10: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: mykZN2nAwpEl6fbHEk/W27pAx7oiT5eYLy8cjGZa5Es=) 11: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: aKF1DBlhylpfTz5/wv2ykAvprnxeTzOrGaR7lShfz1A=) 12: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: iRmrBr9LnKAe7kE8dKHGV7aaptdCKed2ioea9GqAY8Q=) 13: ACA5633A9B1111EE855AC94DC4F9AE02.roa (hash: cDR9kc44D9zHmzXFdpP4P6LrUULErKlG97PKquwn2yY=) 14: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: q3tLrUCkN5xPjShrVqT12ra3zyskFiwjYjcI+j+B4kw=) 15: F2426526F08411EB82AC0545C4F9AE02.roa (hash: 0FgJs+tXH4br6psyg91FaAswpbQ/gY8G3sQq9ojvQsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9321 (0x2469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Validity Not Before: May 18 16:02:06 2024 GMT Not After : May 25 16:02:06 2024 GMT Subject: CN=6648d0fe-7358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:5b:d9:a9:38:b0:34:6b:d8:13:9b:8a:74: fb:e4:2d:3a:cc:96:36:26:3a:44:99:c5:8a:86:77: ec:24:f5:36:a9:c0:be:51:86:2e:8a:cb:55:8d:23: 71:bb:fa:b7:07:ed:4b:3d:95:b0:5b:84:48:7c:4c: 08:60:27:d2:2d:67:e1:f0:56:76:6f:c2:1a:9d:cc: 36:4d:a6:8c:b5:6c:dc:2d:db:ba:ce:3e:de:c6:9b: 4b:b4:e9:18:2a:eb:67:c1:9e:5f:42:e5:d9:77:e4: 76:57:e4:4e:fc:8e:14:1a:e0:e2:17:cb:66:bc:aa: f9:f6:60:df:03:e2:8e:0c:9e:97:23:13:23:74:d1: 99:8a:73:0d:8c:07:b5:cd:96:9b:6c:c9:07:49:d8: ec:d7:54:e7:c3:01:a0:00:f9:22:0b:73:a3:3a:85: fe:b7:13:f6:4e:1a:0f:0a:94:d4:d7:34:d1:14:da: c6:92:f6:8a:08:7f:39:a5:12:9b:bd:b2:87:a5:f9: d2:0c:c0:02:02:e5:37:41:66:d3:d5:ee:f0:b2:f1: 6d:29:58:f8:f7:3c:7a:9b:67:44:b2:e7:5e:49:49: 45:71:55:41:70:e6:67:f9:ad:19:06:b5:aa:92:0c: cc:9f:35:f1:dd:36:65:dd:92:74:7a:02:66:d4:b1: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D7:8B:0F:59:47:FB:C3:C7:1C:E9:96:18:87:D8:66:32:DD:AC:56 X509v3 Authority Key Identifier: keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d7:30:75:89:3e:6d:7b:5f:1a:90:e1:55:94:11:23:d5:14: aa:af:f5:61:d3:1b:af:62:bd:32:a0:e5:b9:48:f0:ae:29:7e: 54:f0:9f:ee:4b:11:e0:75:a4:12:ef:47:40:c1:a4:74:b2:3f: 55:50:62:bc:21:fc:d6:bd:b1:fe:de:9b:d4:11:08:9b:17:cc: 7c:44:f5:d2:03:e1:ed:6a:54:93:31:2f:4a:cf:ea:7a:8a:b9: 23:ee:02:96:f1:ec:67:eb:d7:d3:82:23:d7:5d:36:18:5c:0e: f6:99:ad:d0:20:c6:9d:23:da:c7:d0:d2:26:71:74:43:9d:c5: 48:49:aa:3e:47:90:0e:7a:92:6b:a8:ee:88:f4:91:19:14:14: ea:8c:6f:e2:42:45:0b:af:3b:29:4f:1d:d4:65:ef:fc:0f:5a: 38:3a:ca:fe:b3:1c:b2:3c:b8:8d:3a:3a:23:0c:81:aa:ad:72: ea:7d:5f:9f:b2:58:3e:24:9a:a4:5e:b0:f9:b7:f1:79:2e:bf: 66:e8:ee:e3:48:5b:8a:e1:46:c9:bf:15:81:cc:3e:14:a4:3c: 13:fd:46:3b:79:33:0e:fe:03:21:40:b0:03:9a:35:e7:f0:13: a4:29:af:8a:14:54:d2:ec:5c:cb:eb:aa:2c:4b:fb:79:87:c3: 79:7a:4a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx NDhDNkI0RkEwHhcNMjQwNTE4MTYwMjA2WhcNMjQwNTI1MTYwMjA2WjAYMRYwFAYD VQQDEw02NjQ4ZDBmZS03MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykJb2ak4sDRr2BObinT75C06zJY2JjpEmcWKhnfsJPU2qcC+UYYuistVjSNx u/q3B+1LPZWwW4RIfEwIYCfSLWfh8FZ2b8Iancw2TaaMtWzcLdu6zj7exptLtOkY KutnwZ5fQuXZd+R2V+RO/I4UGuDiF8tmvKr59mDfA+KODJ6XIxMjdNGZinMNjAe1 zZabbMkHSdjs11TnwwGgAPkiC3OjOoX+txP2ThoPCpTU1zTRFNrGkvaKCH85pRKb vbKHpfnSDMACAuU3QWbT1e7wsvFtKVj49zx6m2dEsudeSUlFcVVBcOZn+a0ZBrWq kgzMnzXx3TZl3ZJ0egJm1LGS8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjXiw9Z R/vDxxzplhiH2GYy3axWMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0 UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkQ1NC9EOTAxMTI4NDNGNEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZm UmpMem5Wb3h3cVVVakd0UG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR1zB1iT5te18akOFVlBEj1RSqr/Vh0xuvYr0yoOW5SPCuKX5U8J/u SxHgdaQS70dAwaR0sj9VUGK8IfzWvbH+3pvUEQibF8x8RPXSA+HtalSTMS9Kz+p6 irkj7gKW8exn69fTgiPXXTYYXA72ma3QIMadI9rH0NImcXRDncVISao+R5AOepJr qO6I9JEZFBTqjG/iQkULrzspTx3UZe/8D1o4Osr+sxyyPLiNOjojDIGqrXLqfV+f slg+JJqkXrD5t/F5Lr9m6O7jSFuK4UbJvxWBzD4UpDwT/UY7eTMO/gMhQLADmjXn 8BOkKa+KFFTS7FzL66osS/t5h8N5ekov -----END CERTIFICATE-----Generated at Sat May 18 16:57:52 2024 by rpki-client on console-fra.rpki-client.org