$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: jpIrtmqtv2Wy9yii7IFAh3FLplouYiJA8EUEdnVJSkA= Subject key identifier: 75:00:5B:C0:9F:96:D4:BA:98:0E:2C:6E:54:5E:C3:F8:AB:E8:8B:C1 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 034A Signing time: Sun 19 May 2024 02:55:52 +0000 Manifest this update: Sun 19 May 2024 02:55:52 +0000 Manifest next update: Sun 26 May 2024 02:55:52 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: 428KOHhJV2BGaDG0I3HT/Dqf9DXJnXR2M2pWrxI1JjU=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: N5LWFk30bxfGEjnI/0LUgGK8Je9skUkmcUeWBKL7XaM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: L+4Lrg0LST+xlCPRZ+c8/SmkJQOixAhrBKDqQLo3DG4=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: Egiew0vIR4ASEObbQXrj+Fnao9gPGKz63PPXUXFBbpA=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: Z6KFl5cF5bVExSjJp72ePfl6f6wUu4zvQN9XMoTQ/QY=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: 1W1utkz3ijyEngxKL3HT/wTn1CGNqvqDy4otJjVWoPI=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: GbVMv+sx7LPV2Egetdh3mHAabLSsFSIVDky1cvCHiFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: May 19 02:55:52 2024 GMT Not After : May 26 02:55:52 2024 GMT Subject: CN=66496a38-9cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:ec:36:70:da:24:63:f5:c0:ad:95:d5:0d: eb:98:9f:10:21:2e:79:1d:ba:56:fc:7f:e3:f3:ae: 41:bc:af:21:f5:00:31:36:db:88:a5:b7:59:54:99: 84:b4:ae:6c:dd:ec:5f:0b:a8:3a:07:2b:f4:2e:24: 9f:e9:eb:b0:ba:7d:1f:1e:7c:3e:fd:00:fd:9d:15: 8c:a6:ab:a9:42:ce:c3:c4:a8:a6:12:3e:c1:1c:2c: 45:53:bf:6c:0e:d2:6d:d6:4c:c0:aa:8d:40:e9:00: 91:05:68:7e:c4:1b:18:79:32:8b:f7:59:67:de:2d: f8:c4:52:5f:82:53:c8:d3:fd:d0:e6:d9:ee:ba:73: 7d:14:3c:17:d6:d5:cb:cf:49:f8:7d:23:d3:66:84: e3:bd:d5:e0:e1:00:14:2b:c1:86:ed:0e:ab:31:d7: 55:87:87:23:1a:68:d8:21:bd:98:62:ac:6e:b0:cb: 92:d9:48:69:3c:52:b5:5c:53:f0:88:dd:8d:2c:50: 9a:b4:64:dc:fb:3d:58:52:bc:a9:82:49:9c:36:ca: 4b:d4:2f:d0:7d:46:ec:13:bf:42:ea:35:21:b9:5e: bf:a8:8c:68:fd:6a:0e:08:db:99:5f:c9:12:f2:22: 87:42:07:bf:e5:47:30:d2:46:28:41:0c:74:5a:9d: 10:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:00:5B:C0:9F:96:D4:BA:98:0E:2C:6E:54:5E:C3:F8:AB:E8:8B:C1 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:37:fd:1e:6a:39:c7:e4:de:54:9e:54:82:ab:75:88:44:1c: c1:d4:3d:0d:6e:99:75:fc:bb:d4:13:8f:e4:bb:0a:30:d2:c4: 4b:85:a4:d7:d5:3b:9d:cf:c9:15:8e:74:e5:0d:e3:5c:45:81: 40:c7:4e:23:e0:67:29:bb:58:68:92:e1:e1:1f:71:50:e6:a7: a8:ad:0b:b9:1f:8a:9c:17:90:1e:bd:a6:db:5b:37:b2:77:59: 5f:fe:83:05:05:99:12:07:df:33:cf:a9:69:91:b3:ac:4d:17: 80:26:93:ba:22:76:67:96:bf:9d:27:ad:58:99:6a:c7:91:9d: 89:61:76:ce:51:67:f4:49:51:13:35:e7:9d:38:cb:c2:a3:95: da:76:da:18:82:75:47:9b:08:7c:02:cc:1f:3e:13:1a:f2:06: 28:47:b2:14:be:e7:a1:2e:f6:a3:b5:a0:72:bf:3d:fa:a5:c6: 2d:2d:36:29:ff:e8:d8:bd:1a:73:0e:17:fe:22:cf:92:a0:a0: 82:c6:e1:b5:f3:15:22:71:34:ac:56:41:fc:0c:27:68:e3:e8: 39:b5:b6:61:79:b7:b7:42:42:7a:66:8a:ba:ec:9a:d6:2e:e2: 1d:6c:96:a4:ff:20:48:33:2a:34:8a:65:4d:08:ec:1b:a3:63: 03:67:fd:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjQwNTE5MDI1NTUyWhcNMjQwNTI2MDI1NTUyWjAYMRYwFAYD VQQDEw02NjQ5NmEzOC05Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeXsNnDaJGP1wK2V1Q3rmJ8QIS55HbpW/H/j865BvK8h9QAxNtuIpbdZVJmE tK5s3exfC6g6Byv0LiSf6euwun0fHnw+/QD9nRWMpqupQs7DxKimEj7BHCxFU79s DtJt1kzAqo1A6QCRBWh+xBsYeTKL91ln3i34xFJfglPI0/3Q5tnuunN9FDwX1tXL z0n4fSPTZoTjvdXg4QAUK8GG7Q6rMddVh4cjGmjYIb2YYqxusMuS2UhpPFK1XFPw iN2NLFCatGTc+z1YUrypgkmcNspL1C/QfUbsE79C6jUhuV6/qIxo/WoOCNuZX8kS 8iKHQge/5Ucw0kYoQQx0Wp0QMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUAW8Cf ltS6mA4sblRew/ir6IvBMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMN/0eajnH5N5UnlSCq3WIRBzB1D0Nbpl1/LvUE4/kuwow0sRLhaTX 1Tudz8kVjnTlDeNcRYFAx04j4Gcpu1hokuHhH3FQ5qeorQu5H4qcF5AevabbWzey d1lf/oMFBZkSB98zz6lpkbOsTReAJpO6InZnlr+dJ61YmWrHkZ2JYXbOUWf0SVET NeedOMvCo5XadtoYgnVHmwh8AswfPhMa8gYoR7IUvuehLvajtaByvz36pcYtLTYp /+jYvRpzDhf+Is+SoKCCxuG18xUicTSsVkH8DCdo4+g5tbZhebe3QkJ6Zoq67JrW LuIdbJak/yBIMyo0imVNCOwbo2MDZ/1U -----END CERTIFICATE-----Generated at Sun May 19 03:38:13 2024 by rpki-client on console-ams.rpki-client.org