$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json) Hash identifier: ieQ88aH3z7sSpfSC1EPRZv2cxuiUzW8IDdcgh9S5VUs= Subject key identifier: 4A:ED:C5:95:80:50:8E:A5:87:F2:6B:FD:8E:F0:B9:AE:5E:C3:56:CB Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft Manifest number: 037E Signing time: Sun 19 May 2024 03:40:06 +0000 Manifest this update: Sun 19 May 2024 03:40:06 +0000 Manifest next update: Sun 26 May 2024 03:40:06 +0000 Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: qlrqJj8m0YPR7NxeafPNAt16yXKGxP2Cz4lWfo+QyFs=) 2: C310EE5AACD311ED84BAA06EC4F9AE02.roa (hash: qWXVDjibiHtSIWksvfhSyOreQF5fIpHdHGrtQkZOi7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Validity Not Before: May 19 03:40:06 2024 GMT Not After : May 26 03:40:06 2024 GMT Subject: CN=66497496-26ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:a8:df:98:c1:a9:6d:ac:35:20:46:7d:6c: d5:60:88:17:a1:a5:02:35:90:33:4b:32:a7:88:55: 81:50:02:ab:64:08:a8:ba:54:8e:e2:f5:e7:ac:9e: bc:7e:3e:b9:7b:9c:4c:94:c4:8f:d7:31:23:40:df: e0:37:d7:d0:52:22:3f:49:b2:12:66:62:e2:1f:07: fb:1b:a5:81:f8:2d:cc:5f:fb:fc:f7:db:11:85:e2: 1c:c2:ec:d7:71:9e:ae:e8:de:41:85:cb:e3:b4:cf: 69:87:82:13:39:a0:f2:b8:b5:56:97:e2:ea:3c:e7: 92:9d:c5:ed:91:46:d8:2e:96:f0:de:32:da:26:77: e1:98:8e:c5:e6:76:15:36:6e:f5:3d:31:d6:60:b0: 36:db:44:a7:40:63:8f:3a:4d:b2:e1:8d:59:08:08: d3:17:d0:fd:aa:2b:e4:b6:13:ca:86:40:9f:26:7c: d2:5f:87:21:a9:71:c5:3f:8b:a3:47:32:28:3e:b4: b1:e6:4c:71:cb:cd:bc:56:8e:22:5b:7a:1a:45:fc: 61:b4:57:ec:ae:e4:9f:79:39:47:87:02:98:15:14: cc:cd:39:94:f4:27:7d:00:6a:6e:17:c4:09:c0:75: 7c:3b:2d:75:7b:5a:91:ab:05:23:b2:55:d3:1a:23: 87:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:C5:95:80:50:8E:A5:87:F2:6B:FD:8E:F0:B9:AE:5E:C3:56:CB X509v3 Authority Key Identifier: keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e8:40:3f:a9:7f:85:61:84:73:2b:0c:33:49:26:95:c9:a1: 62:8e:92:58:f5:f2:45:15:b8:99:0b:23:c5:15:92:f8:5a:73: 81:54:62:b9:9e:53:71:7f:5b:b4:9b:42:e7:b0:83:1f:ae:42: 97:da:13:d4:8b:33:1a:ff:0f:a6:48:34:48:7a:a7:80:f2:72: a4:40:63:f2:1f:1e:ce:75:42:7f:94:11:06:62:f3:cd:fa:62: d6:54:07:de:aa:03:aa:ee:76:76:9b:51:6b:37:a9:d1:92:7a: b0:e9:a2:65:1d:fc:56:b3:98:2b:cf:d3:37:9c:c6:96:77:98: b1:10:11:b2:82:b9:de:27:2c:c7:e9:19:db:ee:d9:13:0c:7f: 68:c1:a8:fb:a8:67:ee:53:e5:47:a0:0a:95:5a:2f:ec:11:1f: 89:20:5b:f1:24:4a:ff:c7:03:10:ea:20:11:12:d1:16:cd:81: 7f:48:29:c2:d0:8b:1d:95:ed:b9:5b:af:80:19:bf:57:16:41: 3d:24:9a:ed:fa:d1:ca:db:d6:b6:97:00:85:ae:f6:77:e5:b3: f9:82:6b:44:c0:d6:86:09:75:ee:8b:1b:e9:c0:76:07:a5:d8: 5c:49:dc:c1:5b:6d:e4:fb:20:f0:b5:db:08:0a:fa:25:f5:b5: d1:ff:79:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx ODA0RTM1RTYwHhcNMjQwNTE5MDM0MDA2WhcNMjQwNTI2MDM0MDA2WjAYMRYwFAYD VQQDEw02NjQ5NzQ5Ni0yNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Yuo35jBqW2sNSBGfWzVYIgXoaUCNZAzSzKniFWBUAKrZAioulSO4vXnrJ68 fj65e5xMlMSP1zEjQN/gN9fQUiI/SbISZmLiHwf7G6WB+C3MX/v899sRheIcwuzX cZ6u6N5BhcvjtM9ph4ITOaDyuLVWl+LqPOeSncXtkUbYLpbw3jLaJnfhmI7F5nYV Nm71PTHWYLA220SnQGOPOk2y4Y1ZCAjTF9D9qivkthPKhkCfJnzSX4chqXHFP4uj RzIoPrSx5kxxy828Vo4iW3oaRfxhtFfsruSfeTlHhwKYFRTMzTmU9Cd9AGpuF8QJ wHV8Oy11e1qRqwUjslXTGiOHXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErtxZWA UI6lh/Jr/Y7wua5ew1bLMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1Bo Z0w5MUpyb2RsVElZQk9OZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN6EA/qX+FYYRzKwwzSSaVyaFijpJY9fJFFbiZCyPFFZL4WnOBVGK5 nlNxf1u0m0LnsIMfrkKX2hPUizMa/w+mSDRIeqeA8nKkQGPyHx7OdUJ/lBEGYvPN +mLWVAfeqgOq7nZ2m1FrN6nRknqw6aJlHfxWs5grz9M3nMaWd5ixEBGygrneJyzH 6Rnb7tkTDH9owaj7qGfuU+VHoAqVWi/sER+JIFvxJEr/xwMQ6iAREtEWzYF/SCnC 0Isdle25W6+AGb9XFkE9JJrt+tHK29a2lwCFrvZ35bP5gmtEwNaGCXXuixvpwHYH pdhcSdzBW23k+yDwtdsICvol9bXR/3lu -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org