$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: /XUQJThgL3TOuU6r6stAUdvBa/i2uVRuSGQ7UV8fMUg= Subject key identifier: 38:37:7C:90:C0:5E:BE:C3:13:74:1B:9C:E4:A9:93:2B:6F:37:DD:84 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 05AA Signing time: Sun 19 May 2024 00:25:11 +0000 Manifest this update: Sun 19 May 2024 00:25:10 +0000 Manifest next update: Sun 26 May 2024 00:25:10 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: F4QnOYaKzANyfNj+dqgboq50dEgGUJeNtUipVJ9sHqQ=) 2: 81F69B10558C11EEA6144A0EC4F9AE02.roa (hash: R2brT2PfaZqNgOI14w0jGucC0QkZFQ5Bshs3NvaWGlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: May 19 00:25:10 2024 GMT Not After : May 26 00:25:10 2024 GMT Subject: CN=664946e6-e688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:5d:8d:02:dd:59:81:c8:2a:2a:85:e9:66: a7:10:54:07:bd:52:73:27:76:bd:5c:fc:4d:19:a6: a3:a0:6d:ef:0f:69:b4:3d:42:c2:6d:8f:ca:2f:31: 65:f2:7e:02:e1:ee:6f:02:22:d1:76:02:42:85:2f: f0:59:dd:5e:75:7b:19:7f:a5:1a:dc:8b:3a:00:b4: cb:cf:f8:0d:da:ad:a4:9a:b8:81:f1:07:ea:56:a8: 6f:15:cc:0d:ee:aa:4b:88:fb:9a:28:e7:63:98:eb: 9d:47:09:f1:78:4a:aa:9e:3e:e4:92:af:49:a8:3d: 5e:ce:13:a1:2e:b7:e9:91:32:71:d4:14:c9:ca:81: 9d:ee:65:07:91:46:7d:06:47:8c:2c:05:36:17:b3: c9:3d:6b:48:82:69:2e:0e:7b:92:f2:35:ad:06:15: 2d:50:fe:e9:ca:32:76:09:27:c8:1c:3c:b3:36:77: 58:24:27:0b:12:a6:ab:27:1d:2a:32:d1:14:29:b3: ee:13:49:fe:ac:1e:67:9c:4c:7d:f7:d1:5f:2d:9b: ec:87:5c:e1:30:3e:b0:ae:83:4a:cc:80:db:63:22: 39:ae:90:af:cb:5a:5f:3a:11:01:2a:a4:cb:af:33: 8e:59:e4:1f:81:c6:cd:b8:ba:1d:1e:32:53:df:89: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:37:7C:90:C0:5E:BE:C3:13:74:1B:9C:E4:A9:93:2B:6F:37:DD:84 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:37:2d:b8:02:3b:80:df:37:17:d5:9a:a2:73:66:f5:d4:f2: f6:a8:75:b8:b5:7e:6f:4f:91:ae:cd:34:64:9d:0a:d8:46:3d: cf:47:f8:4c:79:4c:49:18:0f:20:3b:8f:4c:73:f5:36:76:26: fa:04:85:6f:4f:5f:07:1e:59:01:32:1a:6f:48:0e:57:8b:6e: 3b:88:73:09:a2:c3:01:5e:d0:5b:63:ae:c4:d0:d9:d3:23:21: 5b:eb:7a:d0:5e:3b:33:5a:8f:b7:9d:69:3c:62:8a:20:5d:f6: ee:72:4f:6f:db:55:82:f9:1f:da:61:3e:7a:7a:93:1c:ed:54: 19:97:ea:55:41:f0:81:82:cb:9c:63:ed:7f:fc:b0:10:71:c1: a3:83:63:3f:c5:da:5f:a7:3e:0f:3a:86:97:dc:88:47:07:5d: 84:33:98:09:5e:c0:ad:a9:30:92:93:79:1d:ac:dd:4e:bf:f0: 7c:3b:6b:af:a5:14:f0:7a:de:66:59:59:34:b0:4d:b0:4d:1a: 3d:43:c0:73:73:bd:60:92:45:25:7d:c0:8e:46:d3:42:8f:b2: a4:ce:f9:a8:10:96:3c:83:88:6a:ed:2d:f9:03:e4:ca:1b:61: 6c:29:0e:9c:bc:08:b6:dc:29:66:d0:ef:e7:71:7e:3c:49:7f: da:75:f5:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjQwNTE5MDAyNTEwWhcNMjQwNTI2MDAyNTEwWjAYMRYwFAYD VQQDEw02NjQ5NDZlNi1lNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRldjQLdWYHIKiqF6WanEFQHvVJzJ3a9XPxNGaajoG3vD2m0PULCbY/KLzFl 8n4C4e5vAiLRdgJChS/wWd1edXsZf6Ua3Is6ALTLz/gN2q2kmriB8QfqVqhvFcwN 7qpLiPuaKOdjmOudRwnxeEqqnj7kkq9JqD1ezhOhLrfpkTJx1BTJyoGd7mUHkUZ9 BkeMLAU2F7PJPWtIgmkuDnuS8jWtBhUtUP7pyjJ2CSfIHDyzNndYJCcLEqarJx0q MtEUKbPuE0n+rB5nnEx999FfLZvsh1zhMD6wroNKzIDbYyI5rpCvy1pfOhEBKqTL rzOOWeQfgcbNuLodHjJT34nPWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg3fJDA Xr7DE3QbnOSpkytvN92EMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAANy24AjuA3zcX1Zqic2b11PL2qHW4tX5vT5GuzTRknQrYRj3PR/hM eUxJGA8gO49Mc/U2dib6BIVvT18HHlkBMhpvSA5Xi247iHMJosMBXtBbY67E0NnT IyFb63rQXjszWo+3nWk8YoogXfbuck9v21WC+R/aYT56epMc7VQZl+pVQfCBgsuc Y+1//LAQccGjg2M/xdpfpz4POoaX3IhHB12EM5gJXsCtqTCSk3kdrN1Ov/B8O2uv pRTwet5mWVk0sE2wTRo9Q8Bzc71gkkUlfcCORtNCj7KkzvmoEJY8g4hq7S35A+TK G2FsKQ6cvAi23Clm0O/ncX48SX/adfVI -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org