$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: UsWARwnDDbarTw+MJBtJ4YHL8vNUKL4teOWFh+PrQmQ= Subject key identifier: 3B:57:42:F2:B0:2A:D4:D2:34:31:14:EB:50:32:C7:CC:E9:69:9F:A9 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 0811 Signing time: Sat 18 May 2024 21:51:17 +0000 Manifest this update: Sat 18 May 2024 21:51:16 +0000 Manifest next update: Sat 25 May 2024 21:51:16 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: B5bkwmZo+infeeO35l60LXu6nznxIOR41AECi27EbmY=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: Q4pLtfURGynOSNQ90XJYRWxhaby7Q7g0CFRA4swtSSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: May 18 21:51:16 2024 GMT Not After : May 25 21:51:16 2024 GMT Subject: CN=664922d4-5d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:42:20:4c:2e:6b:36:98:54:90:16:6c:6d: 6d:9f:68:2c:5f:1e:ca:f8:83:d3:9d:92:5a:8a:28: 89:c4:1f:a1:0b:0c:aa:36:89:08:89:44:96:73:7b: 2c:40:6d:d8:56:fa:5b:ee:d7:3b:32:7e:2f:ed:d3: 02:15:f9:43:2e:8e:8f:ef:85:3a:ed:ec:0c:02:87: 07:a7:37:9c:1e:2a:0e:f8:cd:fa:2d:3a:82:62:a8: 15:ed:9f:b3:67:f7:f5:af:24:db:4d:ae:bb:95:a3: c3:34:8f:a1:67:b5:25:4c:9f:ce:fa:3f:c9:15:d3: f0:3b:9a:38:a5:3a:32:af:92:c5:c4:e6:c5:8e:0e: 62:19:05:94:b4:b1:63:05:80:3d:35:c4:ad:18:46: 62:b4:13:9a:e7:eb:2d:5f:9d:cc:57:6b:29:70:ef: 29:ce:7c:84:25:b5:4a:65:a0:76:88:0d:e5:e0:9f: 1f:2e:97:2d:39:19:8d:33:4c:ad:56:a9:8e:d0:cf: 6b:4a:0c:e8:6b:71:74:97:df:7d:f3:00:98:29:e8: 12:9d:28:ec:3f:18:0d:c7:86:5d:89:e1:96:14:c8: 57:d8:79:36:f6:81:1d:f6:eb:53:f8:16:4b:98:9c: a7:2d:e4:77:d0:bf:24:9e:f6:ef:91:35:5a:f6:74: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:57:42:F2:B0:2A:D4:D2:34:31:14:EB:50:32:C7:CC:E9:69:9F:A9 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:68:b7:4f:5d:d5:b2:ff:7c:2e:7e:92:e6:ac:58:7f:f2:1c: 20:c2:2e:00:df:85:e6:b8:80:32:d2:0b:28:38:c7:27:be:7c: b6:75:43:54:56:10:56:97:f9:12:3f:da:0b:33:1f:48:0b:c1: fc:52:c2:8b:8c:44:02:62:4e:f5:93:17:f4:be:9a:b0:ef:ad: 7c:d7:e5:3b:7a:22:2f:cc:b0:d2:1d:8a:9c:f6:aa:be:32:3f: 41:61:6a:9f:18:78:ba:b5:1c:da:d5:c3:05:3f:8b:f2:57:e1: 93:54:39:52:ac:50:ae:16:1c:e4:f7:0d:e5:37:fd:5f:63:56: 55:bd:d0:cd:b0:00:d7:7d:a4:83:9a:21:b1:04:2c:65:6b:60: f8:ed:f5:45:54:72:8c:33:f4:e6:50:76:f5:60:44:86:6d:28: dd:8d:60:49:12:12:98:49:a9:2e:36:33:f5:e5:a0:9a:23:57: 35:bf:5a:8d:66:e0:b0:57:84:0c:b3:c5:9f:b3:10:ea:22:b4: 25:36:03:57:49:c9:5a:37:c8:15:47:17:fa:e3:1e:7b:9b:dc: 37:19:b0:ea:ed:2d:c0:7a:6d:65:0d:dd:24:b2:a4:57:7a:55: fd:6d:f1:56:a4:01:b1:b9:87:40:0c:61:a7:9d:7e:c8:c9:ba: c0:23:d4:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjQwNTE4MjE1MTE2WhcNMjQwNTI1MjE1MTE2WjAYMRYwFAYD VQQDEw02NjQ5MjJkNC01ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwytCIEwuazaYVJAWbG1tn2gsXx7K+IPTnZJaiiiJxB+hCwyqNokIiUSWc3ss QG3YVvpb7tc7Mn4v7dMCFflDLo6P74U67ewMAocHpzecHioO+M36LTqCYqgV7Z+z Z/f1ryTbTa67laPDNI+hZ7UlTJ/O+j/JFdPwO5o4pToyr5LFxObFjg5iGQWUtLFj BYA9NcStGEZitBOa5+stX53MV2spcO8pznyEJbVKZaB2iA3l4J8fLpctORmNM0yt VqmO0M9rSgzoa3F0l9998wCYKegSnSjsPxgNx4ZdieGWFMhX2Hk29oEd9utT+BZL mJynLeR30L8knvbvkTVa9nTREQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtXQvKw KtTSNDEU61Ayx8zpaZ+pMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUaLdPXdWy/3wufpLmrFh/8hwgwi4A34XmuIAy0gsoOMcnvny2dUNU VhBWl/kSP9oLMx9IC8H8UsKLjEQCYk71kxf0vpqw76181+U7eiIvzLDSHYqc9qq+ Mj9BYWqfGHi6tRza1cMFP4vyV+GTVDlSrFCuFhzk9w3lN/1fY1ZVvdDNsADXfaSD miGxBCxla2D47fVFVHKMM/TmUHb1YESGbSjdjWBJEhKYSakuNjP15aCaI1c1v1qN ZuCwV4QMs8WfsxDqIrQlNgNXSclaN8gVRxf64x57m9w3GbDq7S3Aem1lDd0ksqRX elX9bfFWpAGxuYdADGGnnX7IybrAI9Rv -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org