$ rpki-client -vvf rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft File: LDTzNZTMO-PAfo54N2v8QzJjFUg.mft (raw, json) Hash identifier: cViSzKRkyULcmw0Zbd5gnzqFNWvNsOMP3YpCguwVLKQ= Subject key identifier: 9C:9C:24:CA:39:97:75:4C:F6:12:04:A5:E4:36:3D:C2:C7:1A:8D:4F Authority key identifier: 2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 Certificate issuer: /CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft Manifest number: 33C3 Signing time: Sat 18 May 2024 14:31:38 +0000 Manifest this update: Sat 18 May 2024 14:31:37 +0000 Manifest next update: Sat 25 May 2024 14:31:37 +0000 Files and hashes: 1: LDTzNZTMO-PAfo54N2v8QzJjFUg.crl (hash: 1mC/Lt3g90VHqkhV6PVd+s9WQ/DkJO2q9PDC+TtryhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ADD8/serialNumber=2C34F33594CC3BE3C07E8E78376BFC4332631548 Validity Not Before: May 18 14:31:37 2024 GMT Not After : May 25 14:31:37 2024 GMT Subject: CN=6648bbca-cec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:58:23:6b:e4:f6:e2:cc:f0:f9:24:77:f6: 86:24:c2:98:69:b2:5d:59:1b:17:23:7d:d4:36:b3: 17:13:b8:f0:c2:9b:70:28:b5:7b:4c:06:2a:32:be: 15:fc:3b:72:91:9a:b1:ae:f4:89:35:62:27:af:5c: 80:88:23:46:1b:73:29:6d:47:c4:2a:9f:63:d1:c2: 03:b8:7a:3b:b2:4c:a6:c8:69:63:f6:16:4d:9b:4e: f8:44:51:1c:ce:c1:33:5c:a2:f8:9e:07:3f:7a:97: 72:a4:78:39:f0:3f:e4:7f:4d:eb:29:01:eb:81:6c: 7f:9c:d2:94:29:c7:d7:c0:71:54:e8:e1:bb:af:4e: 8f:cc:bc:68:a0:ed:86:38:11:78:d9:d1:b9:2a:86: 44:16:d3:05:d3:dd:7d:13:d7:a6:d1:e4:1e:b3:f6: c6:db:b5:4d:0f:10:af:2f:54:1c:d8:07:e3:1a:37: 3e:28:1f:ee:1d:bd:c3:11:08:a0:41:05:ea:94:36: f5:b5:75:37:8d:93:07:6a:26:f9:8f:d1:6e:bd:a4: 0a:03:3d:85:fb:51:1a:1c:de:03:19:82:a2:80:25: d2:1c:3d:14:f5:ee:4b:f9:f7:e3:9d:ee:77:79:79: d9:42:c2:66:b4:e0:97:4d:bf:21:c6:6a:5d:fc:6b: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9C:24:CA:39:97:75:4C:F6:12:04:A5:E4:36:3D:C2:C7:1A:8D:4F X509v3 Authority Key Identifier: keyid:2C:34:F3:35:94:CC:3B:E3:C0:7E:8E:78:37:6B:FC:43:32:63:15:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDTzNZTMO-PAfo54N2v8QzJjFUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ADD8/A4D8104E1D8711E2834CB9DF08B02CD2/LDTzNZTMO-PAfo54N2v8QzJjFUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:12:a4:d6:b7:63:18:f7:78:1b:90:f9:15:e4:4f:18:4e:65: 85:59:27:15:dd:05:86:45:4f:2e:4e:ba:05:4c:54:3f:7c:2e: 36:d6:7d:e3:db:41:d9:35:b3:55:2d:2f:de:77:59:27:ff:98: f3:12:32:2b:6a:4c:d3:d4:6b:48:bd:d2:4b:b1:a7:02:51:34: c3:8e:d3:90:65:fa:ad:14:04:21:50:ce:69:95:34:27:2a:b9: d1:f1:e2:e8:54:b2:81:e3:52:bd:af:cc:85:ba:ec:3d:04:1c: 3a:5c:4c:6d:b1:b9:7f:18:e3:23:5f:bd:d5:de:79:c1:80:55: 66:62:92:bf:f8:20:64:7d:73:b3:03:ce:fa:be:56:9a:26:31: 70:a6:18:1d:10:32:23:1c:02:fd:62:1f:76:d8:fc:05:89:e6: 2b:fe:be:5d:1a:a7:be:68:e6:bb:4e:3d:1f:62:bd:31:97:c4: dd:7e:90:34:96:1a:1f:24:a5:5e:08:43:3c:17:5e:14:dc:f6: fe:28:eb:96:b7:93:50:41:d5:9c:3a:fa:25:97:99:6c:27:98: 37:60:84:85:f3:4e:67:54:2c:5a:09:70:a0:9f:76:66:d5:c5: 19:09:0b:7a:0f:f5:3d:61:e0:09:b5:32:47:e0:c3:0f:25:66: ed:45:f3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFERDgxMTAvBgNVBAUTKDJDMzRGMzM1OTRDQzNCRTNDMDdFOEU3ODM3NkJGQzQz MzI2MzE1NDgwHhcNMjQwNTE4MTQzMTM3WhcNMjQwNTI1MTQzMTM3WjAYMRYwFAYD VQQDEw02NjQ4YmJjYS1jZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkJYI2vk9uLM8Pkkd/aGJMKYabJdWRsXI33UNrMXE7jwwptwKLV7TAYqMr4V /DtykZqxrvSJNWInr1yAiCNGG3MpbUfEKp9j0cIDuHo7skymyGlj9hZNm074RFEc zsEzXKL4ngc/epdypHg58D/kf03rKQHrgWx/nNKUKcfXwHFU6OG7r06PzLxooO2G OBF42dG5KoZEFtMF0919E9em0eQes/bG27VNDxCvL1Qc2AfjGjc+KB/uHb3DEQig QQXqlDb1tXU3jZMHaib5j9FuvaQKAz2F+1EaHN4DGYKigCXSHD0U9e5L+ffjne53 eXnZQsJmtOCXTb8hxmpd/GspsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJycJMo5 l3VM9hIEpeQ2PcLHGo1PMB8GA1UdIwQYMBaAFCw08zWUzDvjwH6OeDdr/EMyYxVI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUREOC9BNEQ4MTA0RTFE ODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8tUEFmbzU0TjJ2OFF6SmpG VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEVHpOWlRNTy1QQWZvNTROMnY4UXpKakZVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUREOC9BNEQ4MTA0RTFEODcxMUUyODM0Q0I5REYwOEIwMkNEMi9MRFR6TlpUTU8t UEFmbzU0TjJ2OFF6SmpGVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7EqTWt2MY93gbkPkV5E8YTmWFWScV3QWGRU8uTroFTFQ/fC421n3j 20HZNbNVLS/ed1kn/5jzEjIrakzT1GtIvdJLsacCUTTDjtOQZfqtFAQhUM5plTQn KrnR8eLoVLKB41K9r8yFuuw9BBw6XExtsbl/GOMjX73V3nnBgFVmYpK/+CBkfXOz A876vlaaJjFwphgdEDIjHAL9Yh922PwFieYr/r5dGqe+aOa7Tj0fYr0xl8TdfpA0 lhofJKVeCEM8F14U3Pb+KOuWt5NQQdWcOvoll5lsJ5g3YISF805nVCxaCXCgn3Zm 1cUZCQt6D/U9YeAJtTJH4MMPJWbtRfPR -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org