$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: HYoiNod2fM1rBPhpEI6oVWPjh/A3y4vLub08EZW0RVA= Subject key identifier: 03:6B:09:FE:8D:57:E3:0A:68:0A:BB:61:E6:70:2A:1B:B8:39:E5:72 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 33CB Signing time: Fri 31 May 2024 15:36:44 +0000 Manifest this update: Fri 31 May 2024 15:36:43 +0000 Manifest next update: Fri 07 Jun 2024 15:36:43 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: 8aVqGs/WbAW0J/vgOVP51Y0QliwqV3Y2U3m7A4jFPGw=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: QaQ5tb2HeArxrs87I/5ZhVBteyAtirQGpvcsd5zF3kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: May 31 15:36:43 2024 GMT Not After : Jun 7 15:36:43 2024 GMT Subject: CN=6659ee8b-668e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:44:9c:97:91:63:07:7f:2f:a4:75:6d:e1: 1a:f1:25:63:14:3e:ce:a3:ac:68:2e:f7:fe:29:83: 04:11:66:60:4e:94:b4:a7:4a:e5:62:73:75:74:74: 5c:ab:c3:02:76:0b:50:47:99:2f:d0:35:9f:d7:0e: f8:64:31:f1:41:fc:36:15:85:4e:de:83:6a:34:bb: f9:aa:15:e1:f5:05:04:37:0c:4e:f1:92:dd:b3:66: f5:a7:c8:31:9a:11:bc:a0:c1:d0:86:5d:cc:f7:87: d0:e0:70:ec:b2:b2:20:4f:f8:12:d4:0d:c4:f2:88: 49:38:78:ec:62:34:9d:9c:a1:b0:97:48:cf:a6:c9: 1d:99:95:3a:7b:98:b7:b4:70:00:b9:b2:60:c6:cb: 52:c5:4f:b4:7f:f0:7d:40:23:cd:f1:e0:ae:07:4c: 73:bd:37:31:b4:2a:82:69:fc:0e:39:3d:95:53:7b: 5b:a3:b0:8b:5c:71:0a:ef:71:cf:8a:e4:30:f8:7d: 8d:6a:ef:8b:4c:75:1c:74:9a:92:36:4c:54:28:bb: 36:56:f2:ab:f0:5f:e1:ca:ca:1e:f5:8f:d9:9f:f1: f9:1a:3f:9b:c9:da:60:ae:67:c1:b9:77:fb:bc:86: fa:f4:a0:78:32:3d:97:ef:84:d9:95:a9:33:59:7c: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:09:FE:8D:57:E3:0A:68:0A:BB:61:E6:70:2A:1B:B8:39:E5:72 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:fc:8d:8b:b0:fd:aa:73:70:af:76:51:4f:71:cf:b5:2e:4f: 7e:08:5a:91:47:3b:53:fc:4d:de:b9:f7:35:60:72:82:54:70: 06:d0:4c:26:84:cd:09:33:41:67:52:f8:5c:e9:d8:ce:0e:4a: 81:fd:69:48:1a:0e:52:f0:55:e1:83:f0:56:69:75:20:0e:0a: c3:a6:27:c2:c7:a8:dc:44:d0:33:5a:a9:38:96:e0:dc:1a:aa: b0:8a:52:da:e0:1e:a5:06:a1:be:8f:73:7e:20:4a:86:df:28: 35:6c:ad:9a:61:53:92:f5:af:87:f8:2f:a5:1e:cd:15:c3:7f: 98:91:31:26:ee:8b:47:88:12:96:95:21:81:b4:2d:48:65:52: 81:4c:3c:dd:49:ff:9a:e2:23:d8:e3:ab:91:26:d0:d1:3e:8d: 06:2f:52:4c:6b:95:a0:e8:f9:70:5f:e9:23:5d:45:5e:ab:b4: de:6c:e6:e6:38:95:4e:35:76:d2:9e:50:6c:ce:45:75:1e:50: a9:32:8f:33:7a:83:2b:5e:de:c0:76:99:71:9d:67:77:cd:48: cd:b3:69:e9:e5:d1:d8:48:2d:fe:85:e9:ff:1f:79:27:95:ce: dc:c8:da:58:af:7e:c3:a4:78:a1:49:48:98:93:3d:33:1d:31: dd:1f:98:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjQwNTMxMTUzNjQzWhcNMjQwNjA3MTUzNjQzWjAYMRYwFAYD VQQDEw02NjU5ZWU4Yi02NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhREnJeRYwd/L6R1beEa8SVjFD7Oo6xoLvf+KYMEEWZgTpS0p0rlYnN1dHRc q8MCdgtQR5kv0DWf1w74ZDHxQfw2FYVO3oNqNLv5qhXh9QUENwxO8ZLds2b1p8gx mhG8oMHQhl3M94fQ4HDssrIgT/gS1A3E8ohJOHjsYjSdnKGwl0jPpskdmZU6e5i3 tHAAubJgxstSxU+0f/B9QCPN8eCuB0xzvTcxtCqCafwOOT2VU3tbo7CLXHEK73HP iuQw+H2Nau+LTHUcdJqSNkxUKLs2VvKr8F/hysoe9Y/Zn/H5Gj+bydpgrmfBuXf7 vIb69KB4Mj2X74TZlakzWXzBOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANrCf6N V+MKaAq7YeZwKhu4OeVyMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS/I2LsP2qc3CvdlFPcc+1Lk9+CFqRRztT/E3eufc1YHKCVHAG0Ewm hM0JM0FnUvhc6djODkqB/WlIGg5S8FXhg/BWaXUgDgrDpifCx6jcRNAzWqk4luDc GqqwilLa4B6lBqG+j3N+IEqG3yg1bK2aYVOS9a+H+C+lHs0Vw3+YkTEm7otHiBKW lSGBtC1IZVKBTDzdSf+a4iPY46uRJtDRPo0GL1JMa5Wg6PlwX+kjXUVeq7TebObm OJVONXbSnlBszkV1HlCpMo8zeoMrXt7AdplxnWd3zUjNs2np5dHYSC3+hen/H3kn lc7cyNpYr37DpHihSUiYkz0zHTHdH5gI -----END CERTIFICATE-----Generated at Fri May 31 16:40:57 2024 by rpki-client on console-ams.rpki-client.org