$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: roLeAEDbQZ7JsoSd+ioQQGFzl4Y0RhGudbouZdbaI+A= Subject key identifier: AB:5F:DE:0C:7D:E0:77:B7:36:14:61:C8:AF:83:34:33:6E:06:17:87 Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 123A Signing time: Sat 18 May 2024 19:42:01 +0000 Manifest this update: Sat 18 May 2024 19:42:01 +0000 Manifest next update: Sat 25 May 2024 19:42:01 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: SEZon51ib6GVl9Ji2MBY8Q7Vzv8PcVVV+he3xOHsg/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: May 18 19:42:01 2024 GMT Not After : May 25 19:42:01 2024 GMT Subject: CN=66490489-5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:28:89:06:2a:75:0a:99:e2:2d:52:c7:7c: 0b:7c:0e:8c:e5:8a:65:b0:6e:72:71:4f:a3:84:26: 8b:93:87:ae:df:ad:b3:39:77:3e:35:75:4d:dd:83: 70:e3:ba:43:5c:d4:de:22:b0:64:b8:4c:e8:64:cc: 2e:13:59:fc:9f:7a:de:d8:6b:06:a8:11:34:a4:48: cc:79:44:b4:ef:b7:e4:70:a1:5b:41:d8:9c:d6:a7: d3:40:58:da:cd:8c:31:99:cf:04:92:4f:7c:35:58: 82:20:94:ef:ce:c6:8b:cb:a8:2c:2f:cb:53:98:b5: fb:06:f3:90:c8:69:37:fd:2e:85:49:ce:bb:e8:d2: a3:dc:f3:ba:4b:53:83:1f:5e:ed:81:da:67:c8:b5: de:4c:3e:2f:4d:2b:2d:4d:25:ac:05:38:57:5a:09: de:0c:59:e7:7d:7c:69:5f:2d:95:a9:b2:88:45:d9: f2:70:dc:da:05:c3:7f:9b:ce:3a:53:4a:71:06:5b: 3d:e7:5f:ca:1c:db:68:22:c0:c7:c8:c6:62:df:61: 42:22:de:ab:f4:5c:17:42:5f:86:b0:b3:c9:83:fc: 5a:8f:54:1c:97:db:d2:4b:3c:bb:6e:99:c9:80:0e: 3b:06:2b:b4:e5:0c:74:81:bd:c4:d7:f4:f5:e4:98: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:DE:0C:7D:E0:77:B7:36:14:61:C8:AF:83:34:33:6E:06:17:87 X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:57:98:a1:4a:e6:99:ea:d8:c5:f5:2d:63:af:38:7a:3f:8e: a9:82:f6:1f:33:8c:27:08:a4:4b:26:60:c0:99:f3:9c:ba:e5: 6b:35:a4:a4:9f:60:6f:41:06:d6:94:2b:88:59:75:f8:69:fc: 69:97:1e:8f:9f:75:75:e9:f4:ac:39:03:d9:7a:1a:dd:55:54: fb:35:3f:b8:bf:34:32:1f:dd:27:f3:92:5b:6e:b4:56:1d:f6: f0:e6:7a:42:10:b2:a3:6e:fb:12:c8:40:31:2a:40:1c:15:97: 4a:2d:62:18:dc:b7:f4:03:fa:95:ba:1c:0e:d3:7c:35:19:bd: 53:90:17:4a:c8:69:a8:e3:48:9c:5e:c6:6f:6c:5c:c4:db:92: c3:2f:2d:38:94:a9:fa:ea:e4:d8:05:87:97:d4:52:c6:59:2b: 4b:58:7d:e9:1f:13:61:12:f3:b0:aa:5b:fc:9f:d5:f2:21:a6: 8b:d2:be:e9:9b:b2:54:ee:ac:33:76:6e:ef:38:ef:b9:bf:7f: b3:25:3d:63:01:7b:26:68:ac:9d:dc:1d:a6:1d:22:7c:37:9d: df:c0:86:8a:d3:fe:e3:a6:61:b1:48:90:9f:a0:0a:fb:91:c9: 40:20:71:5e:09:6b:4e:40:2d:73:62:54:96:e9:d4:f9:4b:f9: 1e:88:ce:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjQwNTE4MTk0MjAxWhcNMjQwNTI1MTk0MjAxWjAYMRYwFAYD VQQDEw02NjQ5MDQ4OS01ODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/0oiQYqdQqZ4i1Sx3wLfA6M5YplsG5ycU+jhCaLk4eu362zOXc+NXVN3YNw 47pDXNTeIrBkuEzoZMwuE1n8n3re2GsGqBE0pEjMeUS077fkcKFbQdic1qfTQFja zYwxmc8Ekk98NViCIJTvzsaLy6gsL8tTmLX7BvOQyGk3/S6FSc676NKj3PO6S1OD H17tgdpnyLXeTD4vTSstTSWsBThXWgneDFnnfXxpXy2VqbKIRdnycNzaBcN/m846 U0pxBls951/KHNtoIsDHyMZi32FCIt6r9FwXQl+GsLPJg/xaj1Qcl9vSSzy7bpnJ gA47Biu05Qx0gb3E1/T15Ji5/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtf3gx9 4He3NhRhyK+DNDNuBheHMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOV5ihSuaZ6tjF9S1jrzh6P46pgvYfM4wnCKRLJmDAmfOcuuVrNaSk n2BvQQbWlCuIWXX4afxplx6Pn3V16fSsOQPZehrdVVT7NT+4vzQyH90n85JbbrRW Hfbw5npCELKjbvsSyEAxKkAcFZdKLWIY3Lf0A/qVuhwO03w1Gb1TkBdKyGmo40ic XsZvbFzE25LDLy04lKn66uTYBYeX1FLGWStLWH3pHxNhEvOwqlv8n9XyIaaL0r7p m7JU7qwzdm7vOO+5v3+zJT1jAXsmaKyd3B2mHSJ8N53fwIaK0/7jpmGxSJCfoAr7 kclAIHFeCWtOQC1zYlSW6dT5S/keiM4Z -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org