$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: vUWkbxsN1Vl0dQ/wC3OHpbjBLvEu3ufEYgLrWQjAezM= Subject key identifier: 91:BC:B2:9E:54:A9:AC:4E:E1:24:2A:34:2C:E9:65:33:91:14:0E:06 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: 16 Signing time: Sun 19 May 2024 08:47:26 +0000 Manifest this update: Sun 19 May 2024 08:47:26 +0000 Manifest next update: Sun 26 May 2024 08:47:26 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: WhyuL/BnQlF7V4tai7eyVRCqMFtSUapchjhCW8ZPWZQ=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: VHWFb8Z2Eu6wi8MvhvaLD3Xh92wBU8OtO+jqiGApjkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: May 19 08:47:26 2024 GMT Not After : May 26 08:47:26 2024 GMT Subject: CN=6649bc9e-24ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:d9:3c:87:7a:ef:53:6a:37:0e:c1:cf:86: 5a:d7:79:5c:87:fa:47:59:81:b5:4f:d3:25:ba:aa: ff:fb:be:f6:2c:55:20:2b:54:39:77:bc:4d:e8:d9: 72:c9:f8:db:2b:10:6e:76:b9:87:8d:12:de:0a:9f: 3a:03:c2:00:7e:92:40:89:98:ec:55:d1:69:9a:16: d4:b1:c3:c1:ac:31:f5:c2:9a:fe:cc:e5:6c:71:4f: fc:aa:5f:24:5b:74:3d:ee:c4:67:3e:fd:3e:12:4f: b1:9c:cd:c0:e6:76:72:72:c4:5f:92:07:8e:48:3d: af:19:af:c5:8e:79:cf:26:9d:f2:dc:3f:fb:d6:03: 04:f8:b6:7b:c9:b6:c5:3d:de:ba:86:c3:d7:db:aa: 82:23:35:82:9b:6a:71:e6:a5:8d:6e:70:f4:dc:2b: cb:bf:4e:4d:1c:97:80:b8:fd:c6:05:71:ed:61:29: fd:74:b9:ca:36:46:a9:38:5d:cd:87:0b:5d:11:8c: 43:54:2d:9e:d0:87:7d:87:e4:aa:60:83:3c:29:cb: 27:38:b1:b9:6c:9c:67:c2:51:d6:3c:56:90:ad:97: 2e:41:82:b4:80:1e:f6:5e:17:d9:a8:e8:f5:4d:34: 91:e8:34:82:5f:01:d7:7d:9f:9e:28:a7:38:21:a1: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BC:B2:9E:54:A9:AC:4E:E1:24:2A:34:2C:E9:65:33:91:14:0E:06 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:53:df:97:6c:f3:57:5e:08:a5:96:0e:f5:8f:dc:8d:12:c0: 20:80:e2:ec:96:e6:26:af:4d:0a:a6:2f:41:f0:f6:bf:a0:6f: 19:40:b4:b8:23:69:ca:a4:84:0f:3d:41:83:79:b5:4b:0a:17: 02:d6:e3:7e:8d:64:f7:72:1b:e7:e6:31:15:f3:a9:c8:81:4f: ba:40:e6:57:df:f8:2d:59:66:33:da:02:c5:a6:c9:2b:98:cf: 28:ca:02:73:33:62:2c:f4:e6:f0:a5:1b:b7:f9:3b:c9:5a:8e: 7c:dc:e5:f8:74:2a:80:d2:6e:63:4a:01:99:04:bb:ca:42:f9: 1c:19:4b:94:19:d1:3a:8e:a9:25:fd:82:87:3d:8f:03:46:c2: 96:09:9b:8d:b9:3c:0e:05:f5:6b:04:ed:ab:0c:f4:c9:80:e2: 4c:bf:c6:4b:09:9f:c9:ef:8c:af:eb:94:cb:fb:d6:36:48:34: 11:86:37:a5:90:ca:77:9f:9b:75:fd:c1:7d:71:0f:01:12:8e: 79:ee:6b:07:27:d2:d8:67:1e:db:da:e6:bd:fa:e1:a4:22:1f: 61:af:96:c0:d4:c8:5d:7e:44:3b:0b:9a:48:63:61:a6:d7:55: 1e:3f:7f:56:3f:e5:d0:20:fa:f1:20:9a:32:62:45:a1:02:71: d3:95:46:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjgyRDExMC8GA1UEBRMoOTUyMjgzMzhBODVGMjQ4MjMwMzEyQ0YzOThCMjRGODEx OUQ4MjMyRjAeFw0yNDA1MTkwODQ3MjZaFw0yNDA1MjYwODQ3MjZaMBgxFjAUBgNV BAMTDTY2NDliYzllLTI0ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+3tk8h3rvU2o3DsHPhlrXeVyH+kdZgbVP0yW6qv/7vvYsVSArVDl3vE3o2XLJ +NsrEG52uYeNEt4KnzoDwgB+kkCJmOxV0WmaFtSxw8GsMfXCmv7M5WxxT/yqXyRb dD3uxGc+/T4ST7GczcDmdnJyxF+SB45IPa8Zr8WOec8mnfLcP/vWAwT4tnvJtsU9 3rqGw9fbqoIjNYKbanHmpY1ucPTcK8u/Tk0cl4C4/cYFce1hKf10uco2Rqk4Xc2H C10RjENULZ7Qh32H5Kpggzwpyyc4sblsnGfCUdY8VpCtly5BgrSAHvZeF9mo6PVN NJHoNIJfAdd9n54opzghoVp5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkbyynlSp rE7hJCo0LOllM5EUDgYwHwYDVR0jBBgwFoAUlSKDOKhfJIIwMSzzmLJPgRnYIy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyODJELzBBQzIyQUM0RjhB MTExRUVCMERFRkU0RkM0RjlBRTAyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFNLRE9LaGZKSUl3TVN6em1MSlBnUm5ZSXk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy ODJELzBBQzIyQUM0RjhBMTExRUVCMERFRkU0RkM0RjlBRTAyL2xTS0RPS2hmSklJ d01TenptTEpQZ1JuWUl5OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAChT35ds81deCKWWDvWP3I0SwCCA4uyW5iavTQqmL0Hw9r+gbxlAtLgj acqkhA89QYN5tUsKFwLW436NZPdyG+fmMRXzqciBT7pA5lff+C1ZZjPaAsWmySuY zyjKAnMzYiz05vClG7f5O8lajnzc5fh0KoDSbmNKAZkEu8pC+RwZS5QZ0TqOqSX9 goc9jwNGwpYJm425PA4F9WsE7asM9MmA4ky/xksJn8nvjK/rlMv71jZINBGGN6WQ ynefm3X9wX1xDwESjnnuawcn0thnHtva5r364aQiH2GvlsDUyF1+RDsLmkhjYabX VR4/f1Y/5dAg+vEgmjJiRaECcdOVRjQ= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org