$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json) Hash identifier: UcoiLrIPjHb5nD3Fca1I9DdzjhwwIBWMv52thtv9bQE= Subject key identifier: 84:4C:17:72:5C:32:47:06:34:E2:19:C4:82:2C:53:8C:FD:70:8E:89 Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Certificate serial: 0F63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft Manifest number: 0F63 Signing time: Fri 31 May 2024 18:34:26 +0000 Manifest this update: Fri 31 May 2024 18:34:25 +0000 Manifest next update: Fri 07 Jun 2024 18:34:25 +0000 Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: DxWFykZxkzKgZIUEluutyPy+vqkXvpRjMEw6WUOUKRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3939 (0xf63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Validity Not Before: May 31 18:34:25 2024 GMT Not After : Jun 7 18:34:25 2024 GMT Subject: CN=665a1831-f30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:03:e8:05:79:b4:da:dd:fa:f0:02:2f:8e: 3e:63:53:03:7a:0e:02:0e:08:20:ec:00:d4:86:f1: 8b:2b:e8:e2:7a:4c:d5:c9:c2:8f:51:bb:22:ea:c8: 64:09:d1:56:01:24:15:03:6e:86:dd:b8:41:32:23: 42:0b:80:e3:4e:7b:15:a9:a4:bc:38:06:c6:3a:11: 58:a8:ea:dc:9f:e6:50:b9:fb:26:24:ff:f8:cc:84: a7:88:3a:40:42:c8:63:8c:eb:68:c5:0b:32:49:d7: 73:23:26:09:0b:b8:95:03:9e:84:19:33:01:1a:4a: 83:b8:d3:83:5d:9e:c2:00:a3:0b:ef:b1:da:a7:c2: 49:29:81:2c:f7:72:41:b3:62:44:11:0b:a7:d3:d0: 69:9d:1b:ac:ba:38:0d:26:ac:db:0d:b2:34:bd:83: 1e:ea:00:e3:d1:fb:5c:a2:f0:a6:19:30:9e:1c:f2: e8:39:df:bb:7a:a1:37:09:a8:01:fe:ab:ce:71:3d: 25:68:06:a4:ad:23:46:e4:dc:9d:9f:ed:84:c2:6f: 18:ae:35:e7:8e:45:9a:7e:d3:52:b5:a9:8d:50:f0: a5:e5:b6:4f:31:47:c9:85:b6:b9:10:5e:f9:e0:c1: 1b:5e:81:c1:d2:4c:d5:cf:e6:38:a8:1e:56:c9:48: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4C:17:72:5C:32:47:06:34:E2:19:C4:82:2C:53:8C:FD:70:8E:89 X509v3 Authority Key Identifier: keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:71:de:d8:23:7c:fb:31:00:f7:61:4a:41:eb:9e:f9:4a:c0: a1:63:12:f4:7a:fc:82:5b:57:5b:92:66:b6:ff:de:52:3d:16: 77:a6:6e:6c:6f:4c:ba:29:97:38:f2:f8:14:2b:1c:a5:18:cd: 47:61:e4:22:9f:5d:b1:aa:67:81:55:cf:08:02:ce:49:f3:4a: 09:dd:fc:3d:05:f1:2d:1f:6b:b7:64:a8:b8:74:1f:dc:87:29: fd:6c:81:02:ef:f7:1a:ff:56:01:a8:53:61:97:74:bb:d6:d4: 59:16:ac:4f:6b:34:50:40:91:45:fd:b5:34:a6:d7:b3:1c:56: 43:cb:a7:17:66:6f:2d:5c:f1:10:2d:c5:02:3d:e0:16:a9:6c: b1:aa:05:3e:91:06:69:44:9a:14:93:e8:4a:ad:b6:40:49:d9: d1:68:85:e5:90:dd:c2:61:bb:34:dc:ff:bb:1a:97:25:ef:4b: 33:62:5b:13:8c:63:45:12:d3:df:66:95:f5:6c:9f:d5:3b:4e: b8:ed:4a:8e:1d:2f:87:03:1c:db:48:4d:73:90:93:08:c1:fe: 30:fb:ae:22:9a:76:d0:a4:29:ec:21:c0:8b:3a:57:57:f1:47: 17:d2:77:0c:62:c1:fc:8f:1a:be:1c:bc:6f:ca:c8:e8:96:a8: 20:b6:b7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBFMjExMTAvBgNVBAUTKDk0QzlENDNCNTNCNUQ4NTBEOThFMERBMkQ1RUYzQzRF MUMzMTIwNDUwHhcNMjQwNTMxMTgzNDI1WhcNMjQwNjA3MTgzNDI1WjAYMRYwFAYD VQQDEw02NjVhMTgzMS1mMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvYD6AV5tNrd+vACL44+Y1MDeg4CDggg7ADUhvGLK+jiekzVycKPUbsi6shk CdFWASQVA26G3bhBMiNCC4DjTnsVqaS8OAbGOhFYqOrcn+ZQufsmJP/4zISniDpA QshjjOtoxQsySddzIyYJC7iVA56EGTMBGkqDuNODXZ7CAKML77Hap8JJKYEs93JB s2JEEQun09BpnRusujgNJqzbDbI0vYMe6gDj0ftcovCmGTCeHPLoOd+7eqE3CagB /qvOcT0laAakrSNG5Nydn+2Ewm8YrjXnjkWaftNStamNUPCl5bZPMUfJhba5EF75 4MEbXoHB0kzVz+Y4qB5WyUgzjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRMF3Jc MkcGNOIZxIIsU4z9cI6JMB8GA1UdIwQYMBaAFJTJ1DtTtdhQ2Y4NotXvPE4cMSBF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEUyMS9BNUU5NTBENDQy NzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJGRFpqZzJpMWU4OFRod3hJ RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNblVPMU8xMkZEWmpnMmkxZTg4VGh3eElFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEUyMS9BNUU5NTBENDQyNzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJG RFpqZzJpMWU4OFRod3hJRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAicd7YI3z7MQD3YUpB6575SsChYxL0evyCW1dbkma2/95SPRZ3pm5s b0y6KZc48vgUKxylGM1HYeQin12xqmeBVc8IAs5J80oJ3fw9BfEtH2u3ZKi4dB/c hyn9bIEC7/ca/1YBqFNhl3S71tRZFqxPazRQQJFF/bU0ptezHFZDy6cXZm8tXPEQ LcUCPeAWqWyxqgU+kQZpRJoUk+hKrbZASdnRaIXlkN3CYbs03P+7Gpcl70szYlsT jGNFEtPfZpX1bJ/VO0647UqOHS+HAxzbSE1zkJMIwf4w+64imnbQpCnsIcCLOldX 8UcX0ncMYsH8jxq+HLxvysjolqggtrfY -----END CERTIFICATE-----Generated at Fri May 31 19:47:47 2024 by rpki-client on console-fra.rpki-client.org