$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: W/85LkTjEYqwOyZAqDcqyRVt8pfEjTtXZY4EilrNq78= Subject key identifier: D2:78:22:57:F1:75:23:B2:5B:FC:5D:D5:41:94:B4:7B:02:9A:18:25 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 03C1 Signing time: Sun 19 May 2024 02:27:37 +0000 Manifest this update: Sun 19 May 2024 02:27:36 +0000 Manifest next update: Sun 26 May 2024 02:27:36 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: RFL2gyQ1j6FGQTufg/1Roncv0mWZxqI/eF0UqJty+tg=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: 5T7dToRNDFlOZIMhz0V1aN3lG6JivnfiSfUrF62C9Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: May 19 02:27:36 2024 GMT Not After : May 26 02:27:36 2024 GMT Subject: CN=66496399-973d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c7:27:ba:71:7c:7a:23:df:14:90:0f:bf:fc: f3:63:a7:ac:d7:fd:ef:ea:57:f0:18:9b:d0:15:f2: aa:cf:ce:3d:13:ce:ff:61:91:ca:0d:a6:5a:dd:1e: 57:5c:90:ae:c0:75:83:4f:a5:09:b7:c9:6e:cf:21: ee:1b:c8:98:41:00:4d:1c:c3:41:f2:31:00:1d:17: 77:38:7c:56:b4:0f:e4:55:d4:4f:72:54:4c:0f:87: f5:90:05:54:d7:31:a1:8f:35:c0:df:1e:ac:23:ce: 35:22:e2:c9:8c:ed:50:26:dd:59:73:3b:07:32:2a: fb:8b:47:ba:3d:c9:3e:11:e5:15:98:65:7a:f9:f6: 73:58:e9:1e:70:42:04:ce:7d:e6:00:ab:a2:2b:da: 57:b6:7d:b7:49:57:41:52:3b:2f:53:0e:f4:c0:ae: fb:fa:48:df:df:8b:ea:d7:6b:37:fc:3a:c1:f4:c1: 67:46:d9:34:c5:58:54:6e:a0:18:20:e9:3c:0c:e3: 9f:81:2a:39:69:e3:d3:0f:e9:7f:52:16:81:c8:ac: 45:7b:0a:a0:42:e6:f0:1c:38:6f:87:00:0d:8a:bc: b0:6f:99:d5:11:ea:be:ff:20:77:b0:c3:10:ba:c8: 84:9b:42:8d:ed:ac:18:b7:dd:b0:aa:56:9a:ac:a1: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:78:22:57:F1:75:23:B2:5B:FC:5D:D5:41:94:B4:7B:02:9A:18:25 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:fe:f4:4e:17:0c:d7:39:0a:a0:4b:8f:23:f3:9f:5d:78:95: 50:bb:3e:9d:ee:3b:14:36:5e:a9:e6:69:9e:6b:e2:26:1a:11: b1:4e:23:b5:f9:ff:6f:67:06:de:f9:ab:83:47:42:c6:e0:42: 17:04:21:2a:ec:60:eb:6b:b4:2a:67:93:f3:d0:5a:fb:7d:ef: a8:74:66:b8:4e:6a:84:40:52:49:56:b4:1d:dc:91:25:13:ef: 73:00:b6:7c:28:ea:09:70:2f:f9:ff:ff:47:06:fc:e4:c4:d7: cc:c7:d7:a6:40:62:c1:2e:c5:e6:7a:80:42:74:d9:c3:5f:8b: 17:6a:a2:cf:88:0d:9b:94:4d:7c:e9:c5:68:d9:89:00:a8:f1: 25:e4:06:77:d3:52:39:06:c1:a0:a4:44:7e:64:87:a7:5a:c7: 2e:e9:ef:49:09:c2:ee:38:45:6a:b3:03:6c:53:01:bc:10:c9: 3d:f6:17:50:e1:64:42:46:8b:ec:1b:3c:f9:ac:5c:87:84:6f: 57:ae:ed:aa:73:53:7e:41:c0:e5:2b:59:6b:d7:0e:70:49:b9: ad:35:ea:f1:df:73:3f:67:5d:ea:f9:ef:fe:9e:eb:9f:5a:24: e8:2b:10:0a:60:9d:9c:74:3c:a0:0c:46:eb:df:a4:b2:f0:73: c1:0a:97:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjQwNTE5MDIyNzM2WhcNMjQwNTI2MDIyNzM2WjAYMRYwFAYD VQQDEw02NjQ5NjM5OS05NzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ccnunF8eiPfFJAPv/zzY6es1/3v6lfwGJvQFfKqz849E87/YZHKDaZa3R5X XJCuwHWDT6UJt8luzyHuG8iYQQBNHMNB8jEAHRd3OHxWtA/kVdRPclRMD4f1kAVU 1zGhjzXA3x6sI841IuLJjO1QJt1ZczsHMir7i0e6Pck+EeUVmGV6+fZzWOkecEIE zn3mAKuiK9pXtn23SVdBUjsvUw70wK77+kjf34vq12s3/DrB9MFnRtk0xVhUbqAY IOk8DOOfgSo5aePTD+l/UhaByKxFewqgQubwHDhvhwANirywb5nVEeq+/yB3sMMQ usiEm0KN7awYt92wqlaarKHmywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ4Ilfx dSOyW/xd1UGUtHsCmhglMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG/vROFwzXOQqgS48j859deJVQuz6d7jsUNl6p5mmea+ImGhGxTiO1 +f9vZwbe+auDR0LG4EIXBCEq7GDra7QqZ5Pz0Fr7fe+odGa4TmqEQFJJVrQd3JEl E+9zALZ8KOoJcC/5//9HBvzkxNfMx9emQGLBLsXmeoBCdNnDX4sXaqLPiA2blE18 6cVo2YkAqPEl5AZ301I5BsGgpER+ZIenWscu6e9JCcLuOEVqswNsUwG8EMk99hdQ 4WRCRovsGzz5rFyHhG9Xru2qc1N+QcDlK1lr1w5wSbmtNerx33M/Z13q+e/+nuuf WiToKxAKYJ2cdDygDEbr36Sy8HPBCpf9 -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org