$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: Jp9QyQSler51S+dyZDgLu0vmk8ZovrmAC1jJsDW0pa0= Subject key identifier: B1:16:5C:74:CD:EB:AF:31:BE:5B:7D:12:A7:72:5B:67:19:A9:B5:65 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 04BF Signing time: Sun 19 May 2024 01:30:04 +0000 Manifest this update: Sun 19 May 2024 01:30:03 +0000 Manifest next update: Sun 26 May 2024 01:30:03 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: Ou89ygW0Xov1n97LvroLgbwiNJDrvpk+TwvCRA2690w=) 2: 9017F7B806EC11EF8B407A22C4F9AE02.roa (hash: UgVGY+YeFe0NAWcUq6eAo2DeGkLVFztnk4i2uQnCQLY=) 3: 71178E2806EC11EFA61C4222C4F9AE02.roa (hash: lDgqADuTMK2GA8veFfF2SGSbvACpwsZa/dz0WmwAzKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: May 19 01:30:03 2024 GMT Not After : May 26 01:30:03 2024 GMT Subject: CN=6649561c-d0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:11:e3:51:8c:e7:3a:db:cd:af:7c:f0:73: d3:fb:f8:99:bd:b6:76:66:8f:d4:ee:28:bb:ea:b3: 22:d1:c9:90:cd:37:75:3e:41:5f:ba:64:d5:bd:8b: 13:8b:8a:5f:1d:41:fc:01:55:5d:a9:cd:af:27:ba: c0:62:e7:a5:25:d8:76:f6:c6:be:b5:f2:a1:f7:f5: ce:7b:c8:7e:cc:7c:81:ea:a1:8d:4b:87:6a:a9:f1: 87:38:88:6b:bf:4b:0b:91:99:0e:23:c7:74:f9:84: 85:9a:cf:58:9d:db:82:7a:e3:26:ea:af:83:dc:00: ec:e7:dc:99:6d:96:3f:5d:5d:8a:57:a4:74:02:53: 05:93:f3:57:4b:67:ba:e3:cc:62:8c:9c:c9:56:9b: fd:b7:19:5f:2f:6c:70:e5:8b:75:48:0d:58:4c:63: 0f:22:01:f6:20:67:d0:24:84:0f:dc:04:73:e5:0b: 18:27:e6:ff:0c:e3:cd:b3:0e:05:26:de:0a:81:59: 23:5d:36:1d:87:c7:eb:fd:93:32:6c:ab:59:21:fe: f7:1b:db:a8:72:09:b4:5f:2c:a4:7d:eb:73:98:62: 4b:92:e8:04:27:fe:48:b9:64:71:a7:f1:00:f9:79: a5:90:64:7e:11:f9:06:97:76:24:ff:2e:59:56:d5: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:5C:74:CD:EB:AF:31:BE:5B:7D:12:A7:72:5B:67:19:A9:B5:65 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f8:77:9c:23:0c:fe:2e:0a:d2:af:41:a8:2b:28:bd:08:d8: ab:2a:5a:98:2b:0a:7d:73:b6:2c:23:1d:00:29:a5:0d:b7:83: 9c:39:46:22:71:1e:6b:01:93:7a:35:9e:99:38:66:ac:24:b9: 1a:10:bf:b0:28:70:8c:bb:69:80:b2:ec:9b:58:17:62:e7:a3: 52:70:3d:c5:8b:fe:27:a9:00:4d:60:a6:ce:5f:74:d9:31:04: a3:66:ba:83:10:fa:e5:0e:05:7e:6b:d5:19:fb:cf:9f:c8:36: 64:a5:76:08:e8:31:93:f4:74:23:42:44:95:82:52:32:e7:7f: 87:c6:df:98:a3:56:eb:60:83:c8:4d:6a:16:24:93:ea:13:c9: 89:76:35:87:27:3e:02:6a:59:fd:3b:15:2e:8c:f4:ed:f6:1d: 5b:43:37:d6:d4:e5:d6:73:2e:5d:5f:14:62:05:73:54:16:74: f5:4f:cf:7a:0f:f4:67:f7:1d:5d:15:8d:73:46:cc:1f:30:5a: 17:9a:78:77:de:d0:04:bc:87:93:7b:ac:b4:76:9d:1a:22:3b: fa:a4:08:69:0b:71:a5:06:6d:e4:06:d4:8a:77:0e:a2:e6:4f: da:e0:b7:73:c0:12:a7:03:7b:aa:16:0f:8e:60:11:9d:2c:3b: 5f:93:cb:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjQwNTE5MDEzMDAzWhcNMjQwNTI2MDEzMDAzWjAYMRYwFAYD VQQDEw02NjQ5NTYxYy1kMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnt0R41GM5zrbza988HPT+/iZvbZ2Zo/U7ii76rMi0cmQzTd1PkFfumTVvYsT i4pfHUH8AVVdqc2vJ7rAYuelJdh29sa+tfKh9/XOe8h+zHyB6qGNS4dqqfGHOIhr v0sLkZkOI8d0+YSFms9YnduCeuMm6q+D3ADs59yZbZY/XV2KV6R0AlMFk/NXS2e6 48xijJzJVpv9txlfL2xw5Yt1SA1YTGMPIgH2IGfQJIQP3ARz5QsYJ+b/DOPNsw4F Jt4KgVkjXTYdh8fr/ZMybKtZIf73G9uocgm0XyykfetzmGJLkugEJ/5IuWRxp/EA +XmlkGR+EfkGl3Yk/y5ZVtWr/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEWXHTN 668xvlt9EqdyW2cZqbVlMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL+HecIwz+LgrSr0GoKyi9CNirKlqYKwp9c7YsIx0AKaUNt4OcOUYi cR5rAZN6NZ6ZOGasJLkaEL+wKHCMu2mAsuybWBdi56NScD3Fi/4nqQBNYKbOX3TZ MQSjZrqDEPrlDgV+a9UZ+8+fyDZkpXYI6DGT9HQjQkSVglIy53+Hxt+Yo1brYIPI TWoWJJPqE8mJdjWHJz4Caln9OxUujPTt9h1bQzfW1OXWcy5dXxRiBXNUFnT1T896 D/Rn9x1dFY1zRswfMFoXmnh33tAEvIeTe6y0dp0aIjv6pAhpC3GlBm3kBtSKdw6i 5k/a4LdzwBKnA3uqFg+OYBGdLDtfk8ue -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org