$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft File: lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft (raw, json) Hash identifier: ScJehlTQJWYvutrpZxc1OyCE3BgN2CcxPcU6ReMmYd8= Subject key identifier: D5:76:B0:3D:F1:2A:A7:FF:25:66:72:53:8A:AB:CB:77:6B:C1:04:B7 Authority key identifier: 94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3 Certificate issuer: /CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3 Certificate serial: 25F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft Manifest number: 309D Signing time: Sat 18 May 2024 15:58:58 +0000 Manifest this update: Sat 18 May 2024 15:58:56 +0000 Manifest next update: Sat 25 May 2024 15:58:56 +0000 Files and hashes: 1: lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl (hash: sgGpzVqhhsDYKbAaDzN+oBxxcw3Vvxd4HgjCIU2e3uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9719 (0x25f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3 Validity Not Before: May 18 15:58:56 2024 GMT Not After : May 25 15:58:56 2024 GMT Subject: CN=6648d041-ea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:c3:d2:05:e7:e4:2a:25:4e:fc:14:89:f3: 15:ec:74:98:dd:e4:87:11:95:fa:c7:00:d6:39:fa: 0f:1a:66:75:69:e1:1e:10:e2:af:82:8d:01:04:93: 5f:dd:bf:bf:98:17:f8:57:e2:25:11:0b:b9:07:b4: 5e:e2:c0:65:17:cd:d5:79:05:17:ad:e6:5a:34:94: 15:1b:10:ca:9d:86:b5:c7:01:61:88:4a:46:fb:8f: 9e:48:2c:a3:c9:d8:1f:67:22:98:aa:ff:ed:9c:32: a6:3a:68:40:bd:ab:15:43:aa:84:11:a7:91:4d:e5: 13:d3:7d:00:00:0e:bc:76:7d:6c:3d:4c:0c:40:c3: 71:7a:07:6c:fe:bc:4f:ad:0a:3e:19:8a:d6:40:dd: 1b:0b:22:6b:ca:f0:de:fa:35:79:e7:08:5f:81:97: b5:14:85:15:f9:1c:a0:08:70:59:b3:7b:30:9a:bc: 8e:6f:a4:bc:34:23:34:dd:68:7a:fb:66:6a:76:aa: da:b0:52:bf:b8:d6:19:70:f8:f2:50:e5:d3:f2:85: 82:88:c3:58:34:2f:57:14:ad:17:80:12:2c:97:de: c9:a8:80:b8:d6:84:29:7a:ed:c1:5f:a6:37:ac:e2: 04:8b:7f:c3:f6:72:da:9f:78:22:24:28:fc:d9:62: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:76:B0:3D:F1:2A:A7:FF:25:66:72:53:8A:AB:CB:77:6B:C1:04:B7 X509v3 Authority Key Identifier: keyid:94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:06:86:59:cc:fb:cc:15:a2:ac:a4:6c:e2:7a:e9:09:8f: 8b:e7:17:71:d2:58:c6:1b:42:5f:8f:08:ef:36:8a:85:d9:78: 0a:47:dc:3c:c4:34:c1:74:88:b7:cd:46:6e:45:c4:c1:31:2d: bc:39:86:d5:bf:d0:a4:1b:5b:74:19:4f:7b:80:11:21:f9:bc: 8d:00:84:e3:89:55:44:e4:92:e0:ee:5a:65:b6:84:d3:d5:60: 49:43:4d:28:74:52:2f:93:5b:18:cd:49:07:4d:94:a0:ae:e2: d1:7f:3e:61:c4:c1:ff:22:a0:4f:0b:a1:c3:84:21:9b:b9:e7: 15:e7:b0:30:33:97:93:62:e7:7b:db:75:8b:5c:4e:65:fe:fe: 3c:7e:1a:f7:e9:06:d4:8c:e2:31:de:21:b6:a2:54:66:1c:df: 10:26:75:30:c8:e5:28:9e:24:97:ff:80:5e:f2:d9:de:72:2c: b1:41:72:78:a8:ed:ea:38:a4:24:2a:95:31:55:a8:25:ea:bb: 8c:c3:54:cf:81:8d:fe:60:58:0f:72:82:28:f7:13:51:39:7b: a1:6c:59:3b:0e:e6:51:ca:60:6a:5a:d6:6a:52:56:14:8b:38: a4:cb:b2:5b:76:0a:45:3a:65:d0:f4:66:48:52:99:5b:16:82: ac:21:28:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwQTMxMTAvBgNVBAUTKDk0QTE1QkM5OTE2QzVCMkNBMThFMzU5MDUxNTAxRTU0 NjQyQzA4RDMwHhcNMjQwNTE4MTU1ODU2WhcNMjQwNTI1MTU1ODU2WjAYMRYwFAYD VQQDEw02NjQ4ZDA0MS1lYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQzD0gXn5ColTvwUifMV7HSY3eSHEZX6xwDWOfoPGmZ1aeEeEOKvgo0BBJNf 3b+/mBf4V+IlEQu5B7Re4sBlF83VeQUXreZaNJQVGxDKnYa1xwFhiEpG+4+eSCyj ydgfZyKYqv/tnDKmOmhAvasVQ6qEEaeRTeUT030AAA68dn1sPUwMQMNxegds/rxP rQo+GYrWQN0bCyJryvDe+jV55whfgZe1FIUV+RygCHBZs3swmryOb6S8NCM03Wh6 +2ZqdqrasFK/uNYZcPjyUOXT8oWCiMNYNC9XFK0XgBIsl97JqIC41oQpeu3BX6Y3 rOIEi3/D9nLan3giJCj82WKFwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV2sD3x Kqf/JWZyU4qry3drwQS3MB8GA1UdIwQYMBaAFJShW8mRbFssoY41kFFQHlRkLAjT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBBMy83MUFERTFGRUQ4 MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5eWhqaldRVVZBZVZHUXND Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLRmJ5WkZzV3l5aGpqV1FVVkFlVkdRc0NOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBBMy83MUFERTFGRUQ4MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5 eWhqaldRVVZBZVZHUXNDTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhAaGWcz7zBWirKRs4nrpCY+L5xdx0ljGG0JfjwjvNoqF2XgKR9w8 xDTBdIi3zUZuRcTBMS28OYbVv9CkG1t0GU97gBEh+byNAITjiVVE5JLg7lpltoTT 1WBJQ00odFIvk1sYzUkHTZSgruLRfz5hxMH/IqBPC6HDhCGbuecV57AwM5eTYud7 23WLXE5l/v48fhr36QbUjOIx3iG2olRmHN8QJnUwyOUoniSX/4Be8tneciyxQXJ4 qO3qOKQkKpUxVagl6ruMw1TPgY3+YFgPcoIo9xNROXuhbFk7DuZRymBqWtZqUlYU iziky7JbdgpFOmXQ9GZIUplbFoKsIShd -----END CERTIFICATE-----Generated at Sat May 18 17:20:05 2024 by rpki-client on console-ams.rpki-client.org