$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json) Hash identifier: viIb9bCkwRX2LtDkRdvNK/XZnzYEOVTcw+dPJFxXmW4= Subject key identifier: 02:16:A2:0C:CF:D7:D5:F0:81:4A:A3:99:58:CB:27:46:64:82:F5:BF Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Certificate serial: 0A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft Manifest number: 0A66 Signing time: Sat 18 May 2024 20:19:07 +0000 Manifest this update: Sat 18 May 2024 20:19:07 +0000 Manifest next update: Sat 25 May 2024 20:19:07 +0000 Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: n00z1W0xb9vl+ACcQqtxYd39/lI/BbO4txeBMJJQFsg=) 2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: +Ss8JuJ8i/ZlqkFUJbp2u+rFHfJ1QOq9ahocv6L4dbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2669 (0xa6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Validity Not Before: May 18 20:19:07 2024 GMT Not After : May 25 20:19:07 2024 GMT Subject: CN=66490d3b-2778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:5d:18:bb:62:54:8d:26:0c:3a:23:5f:cd: c9:9e:fa:bb:98:05:82:b9:2e:13:8e:b1:6b:1b:fc: 5f:ae:ce:33:d9:3d:f7:ff:4c:98:6f:ad:53:7d:d2: 40:68:bc:d9:4e:b6:47:de:61:12:cb:e7:6d:be:aa: 7c:12:a9:88:59:14:e0:29:9d:8a:28:e4:b4:3a:7b: 29:f6:78:51:13:69:72:e0:e8:a6:fe:5b:fb:ad:91: 54:08:b4:89:e0:87:db:18:98:40:7c:2f:4e:ea:c8: fb:f4:0b:b1:67:03:a2:99:3a:ee:dc:95:2e:ea:df: 75:e2:96:82:45:94:09:6d:54:22:0f:2b:24:91:2d: f4:9e:88:35:fa:70:67:5d:80:e9:67:0c:08:f4:51: 9b:cb:73:10:fd:0d:63:75:a7:38:fc:30:b6:80:9b: 10:ee:d1:42:46:ef:36:97:e4:a8:ec:fb:f1:97:ee: 29:55:ae:1a:0e:56:44:4c:ff:dc:d7:9b:a4:6d:44: 4c:8a:1c:c7:0d:91:eb:c9:dc:9c:e8:b9:1c:e3:a5: aa:5c:76:fb:1a:73:49:0e:9c:7e:08:5b:bf:ed:9a: 02:2e:58:54:f0:7a:92:b5:3a:28:2c:b7:4b:fc:c5: 4c:0a:f2:d5:3d:f3:f0:f1:25:3c:48:fa:fb:6f:e7: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:16:A2:0C:CF:D7:D5:F0:81:4A:A3:99:58:CB:27:46:64:82:F5:BF X509v3 Authority Key Identifier: keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2b:7e:b9:58:8b:b2:7d:bb:85:7f:79:32:78:80:45:f3:39: f4:7c:47:1b:2e:a5:87:37:0f:7f:46:48:1c:69:a6:a0:e5:5f: 94:37:c6:22:4c:67:3e:22:e5:10:74:3a:13:85:90:c9:2e:63: 7c:af:4b:d5:69:9a:92:6d:55:47:1a:3f:4c:12:f5:e3:67:a7: b6:dc:26:1b:85:4e:d8:cc:a7:38:83:f7:45:f1:9c:cb:f8:37: af:da:99:f5:a4:6e:59:8b:f1:a3:31:4f:52:63:59:27:fd:2e: d6:85:c4:b0:e2:23:69:95:54:03:b5:33:32:2c:ec:5b:67:01: c2:d5:c7:5a:38:1e:df:e2:bc:84:cb:71:01:37:63:a5:82:f1: cc:a1:9c:f3:5d:70:52:49:0e:be:61:5b:c6:9d:93:83:e6:89: d1:d1:4c:c7:7b:e8:d6:2d:4c:51:99:8f:10:e8:aa:20:b1:43: e1:ac:7d:4f:f7:d5:64:1c:4f:c7:9d:18:8c:a1:98:eb:20:46: 2b:d8:cb:a3:e7:be:a9:cb:80:c1:f2:75:ca:ee:24:6b:72:2c: 30:8a:70:4b:a7:95:23:31:ed:f7:d6:56:b6:04:3f:0a:22:c2: f2:0e:61:07:8a:15:fb:ad:92:06:38:13:2f:09:53:8e:ef:a2: f5:6a:6a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzNDAxMTAvBgNVBAUTKDJFNzM1MzkyQzY4NkI4RDhEQzg4QzBDQ0Q1OUJGMkFF RkJBN0U4QjAwHhcNMjQwNTE4MjAxOTA3WhcNMjQwNTI1MjAxOTA3WjAYMRYwFAYD VQQDEw02NjQ5MGQzYi0yNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmVdGLtiVI0mDDojX83Jnvq7mAWCuS4TjrFrG/xfrs4z2T33/0yYb61TfdJA aLzZTrZH3mESy+dtvqp8EqmIWRTgKZ2KKOS0Onsp9nhRE2ly4Oim/lv7rZFUCLSJ 4IfbGJhAfC9O6sj79AuxZwOimTru3JUu6t914paCRZQJbVQiDyskkS30nog1+nBn XYDpZwwI9FGby3MQ/Q1jdac4/DC2gJsQ7tFCRu82l+So7Pvxl+4pVa4aDlZETP/c 15ukbURMihzHDZHrydyc6Lkc46WqXHb7GnNJDpx+CFu/7ZoCLlhU8HqStTooLLdL /MVMCvLVPfPw8SU8SPr7b+fLWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIWogzP 19XwgUqjmVjLJ0ZkgvW/MB8GA1UdIwQYMBaAFC5zU5LGhrjY3IjAzNWb8q77p+iw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDM0MC8wNDY4Mzk3QTND NEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VOamNpTURNMVp2eXJ2dW42 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTlRrc2FHdU5qY2lNRE0xWnZ5cnZ1bjZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDM0MC8wNDY4Mzk3QTNDNEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VO amNpTURNMVp2eXJ2dW42TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRK365WIuyfbuFf3kyeIBF8zn0fEcbLqWHNw9/Rkgcaaag5V+UN8Yi TGc+IuUQdDoThZDJLmN8r0vVaZqSbVVHGj9MEvXjZ6e23CYbhU7YzKc4g/dF8ZzL +Dev2pn1pG5Zi/GjMU9SY1kn/S7WhcSw4iNplVQDtTMyLOxbZwHC1cdaOB7f4ryE y3EBN2OlgvHMoZzzXXBSSQ6+YVvGnZOD5onR0UzHe+jWLUxRmY8Q6KogsUPhrH1P 99VkHE/HnRiMoZjrIEYr2Muj576py4DB8nXK7iRrciwwinBLp5UjMe331la2BD8K IsLyDmEHihX7rZIGOBMvCVOO76L1amr6 -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org