$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json) Hash identifier: zRKj59HC7QWlIgaiTB/efJz5wCyMRgl/UsRiriQgVIE= Subject key identifier: B4:85:7C:BB:3A:77:27:8E:EB:7C:C1:05:CE:DD:4F:E4:F2:25:5C:BF Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft Manifest number: 035B Signing time: Sun 19 May 2024 02:53:59 +0000 Manifest this update: Sun 19 May 2024 02:53:59 +0000 Manifest next update: Sun 26 May 2024 02:53:59 +0000 Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: WHF4dCVd6SEQ7fue/qhfhxQhvxcYMIt2QBQFPsRMHBo=) 2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: pMYN1gxNifDL2LdQmKqpC3aYx3QFKCr7008509Ozo8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Validity Not Before: May 19 02:53:59 2024 GMT Not After : May 26 02:53:59 2024 GMT Subject: CN=664969c7-3da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:c2:95:98:54:47:d1:90:c2:d8:d2:87:ad: 3f:5b:a2:b1:fd:80:c8:f2:82:88:df:03:59:8b:84: 4d:24:9b:0a:45:a6:6d:59:0a:82:11:49:42:23:cf: b5:b6:bc:6b:35:86:16:e8:d8:58:e2:f6:00:49:71: f9:bc:5a:c0:72:c4:88:3a:90:cc:c5:8e:27:62:57: c3:38:8b:fd:7f:a0:13:97:ce:31:bf:60:33:98:6c: 2c:de:25:d2:73:4a:00:72:e0:c3:59:c9:61:52:5f: b6:04:b8:6b:6c:cd:9a:c2:8b:81:65:67:8c:87:47: b4:94:d2:18:7f:09:35:96:a0:2a:2d:59:d2:ac:34: aa:37:c7:d7:38:1c:64:f2:d6:66:8b:23:b6:2a:71: 1d:af:02:57:05:b0:e6:5d:c2:13:99:0b:54:be:f9: 6a:a6:59:a1:c0:dc:c7:f2:3b:23:b6:3c:84:bf:fe: 20:39:7c:27:5c:f8:1f:f3:94:7c:4a:69:4e:5d:04: 6d:b8:ff:f1:67:0f:21:de:e6:79:fc:d9:e9:59:61: 88:50:a9:3b:13:8b:bc:1c:5c:87:1e:f4:00:9f:40: a8:b0:89:e4:b7:d9:6c:3e:f8:b1:95:bc:d1:41:be: 68:aa:1c:55:1b:64:01:f4:56:6b:64:c0:53:83:04: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:7C:BB:3A:77:27:8E:EB:7C:C1:05:CE:DD:4F:E4:F2:25:5C:BF X509v3 Authority Key Identifier: keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4b:56:ca:1e:b1:33:ca:71:13:2d:81:d8:27:c8:a8:a2:94: 02:63:8a:1b:2e:c2:f3:00:13:93:87:ba:08:9b:dd:d0:fb:ec: 97:f4:8a:8b:cc:ed:84:af:d1:76:d9:d6:2f:b4:08:ee:3c:a9: 09:56:66:0e:d4:1d:39:a0:dc:53:a1:21:36:5d:dc:0b:a6:47: df:f0:cb:8f:4c:a0:b9:fb:08:0a:a5:4a:3e:0c:93:95:c9:0c: a8:b7:dd:73:91:74:73:7e:8e:d0:6b:8b:36:42:e8:89:bf:93: f3:d3:6c:5f:a1:a3:3f:c6:95:da:fb:a2:10:6c:83:e0:ad:38: fc:a7:b6:36:60:1a:63:43:60:dc:e9:3a:72:a5:7c:35:6f:3b: c4:55:8d:91:29:ea:7e:16:37:38:2d:2c:57:8c:f5:ec:70:83: 28:71:e2:f9:27:57:ee:60:ae:54:e3:73:1a:e6:4e:5a:19:3c: 0f:74:1e:c4:6d:30:4a:5b:b7:8d:aa:ea:3c:10:e1:47:91:da: f5:c8:a8:5c:92:fd:27:4e:bf:f4:a5:a3:96:c6:99:8c:1b:36: 68:39:b0:9f:46:5c:4f:5e:c0:fb:8f:4c:9c:16:f8:ed:37:f1: ec:6f:44:a9:0f:68:d2:c3:a8:5d:dd:60:36:a7:7f:b3:c0:8d: 72:4a:c4:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy QThBRjFDQjUwHhcNMjQwNTE5MDI1MzU5WhcNMjQwNTI2MDI1MzU5WjAYMRYwFAYD VQQDEw02NjQ5NjljNy0zZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNPClZhUR9GQwtjSh60/W6Kx/YDI8oKI3wNZi4RNJJsKRaZtWQqCEUlCI8+1 trxrNYYW6NhY4vYASXH5vFrAcsSIOpDMxY4nYlfDOIv9f6ATl84xv2AzmGws3iXS c0oAcuDDWclhUl+2BLhrbM2awouBZWeMh0e0lNIYfwk1lqAqLVnSrDSqN8fXOBxk 8tZmiyO2KnEdrwJXBbDmXcITmQtUvvlqplmhwNzH8jsjtjyEv/4gOXwnXPgf85R8 SmlOXQRtuP/xZw8h3uZ5/NnpWWGIUKk7E4u8HFyHHvQAn0CosInkt9lsPvixlbzR Qb5oqhxVG2QB9FZrZMBTgwQ16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSFfLs6 dyeO63zBBc7dT+TyJVy/MB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATS1bKHrEzynETLYHYJ8ioopQCY4obLsLzABOTh7oIm93Q++yX9IqL zO2Er9F22dYvtAjuPKkJVmYO1B05oNxToSE2XdwLpkff8MuPTKC5+wgKpUo+DJOV yQyot91zkXRzfo7Qa4s2QuiJv5Pz02xfoaM/xpXa+6IQbIPgrTj8p7Y2YBpjQ2Dc 6TpypXw1bzvEVY2RKep+Fjc4LSxXjPXscIMoceL5J1fuYK5U43Ma5k5aGTwPdB7E bTBKW7eNquo8EOFHkdr1yKhckv0nTr/0paOWxpmMGzZoObCfRlxPXsD7j0ycFvjt N/Hsb0SpD2jSw6hd3WA2p3+zwI1ySsRy -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org