$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: RTUVL108rrYG6zi/9jVuKXstPCScnovGPacJbYVjzRc= Subject key identifier: 7B:FF:3C:7F:66:46:BE:B8:11:66:D7:5D:E3:7B:76:F8:8B:DE:F9:3E Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: 63 Signing time: Sun 19 May 2024 07:42:27 +0000 Manifest this update: Sun 19 May 2024 07:42:26 +0000 Manifest next update: Sun 26 May 2024 07:42:26 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: ou+dySPLKU/zdcBpA4fZqFlswi/o7WoVxZ6tPo9pX10=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: i6YPlaMnGASCs0Ij1ZA+/Al9vtaAI62dbzUJZsHZ5+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: May 19 07:42:26 2024 GMT Not After : May 26 07:42:26 2024 GMT Subject: CN=6649ad62-7864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:26:ef:8f:4b:c6:e0:13:59:80:4d:59:07: 3d:53:a4:aa:a1:00:b0:80:e4:48:7e:94:82:66:5a: 7a:54:02:9f:db:cc:2f:6e:e5:35:14:b9:cb:07:e6: 3c:fa:68:84:f4:28:40:24:b5:74:f6:72:e2:f9:46: ce:76:0a:bc:be:3a:72:11:2d:95:77:b7:23:b7:ff: 7f:44:6c:58:1b:3a:ec:8e:ef:85:ad:1a:41:cd:a2: a6:db:81:f6:4d:a1:ef:6d:ee:b5:e5:e3:e6:11:f5: b4:29:6e:a7:59:6f:b9:80:1c:d4:54:1a:aa:cd:1c: d7:b4:e6:8a:3f:46:0c:b3:40:ad:c0:12:d7:23:97: c1:69:85:d0:8f:64:f9:ab:c4:7b:f0:23:86:a4:81: 94:90:e0:88:ff:d2:88:f7:47:08:e8:5a:bd:b0:c1: e4:a0:a2:03:93:d3:69:96:eb:26:72:61:bc:f3:28: f9:83:99:f3:03:6c:25:3e:aa:28:63:06:29:c9:88: b2:3c:48:fa:bc:cb:d2:18:c1:5a:c4:6c:a2:3f:f8: 16:bf:2b:35:1a:68:73:84:11:ea:53:a4:62:6d:fd: 6a:27:d6:52:c1:ce:d5:06:c6:73:46:b3:33:fe:34: 7c:07:3f:2b:fa:a9:a3:c4:22:b7:71:37:b0:59:33: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:3C:7F:66:46:BE:B8:11:66:D7:5D:E3:7B:76:F8:8B:DE:F9:3E X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:43:58:b5:8b:9a:f9:f0:53:54:99:1b:2d:1d:27:28:9b:34: c4:86:74:53:36:59:89:ae:61:9c:f3:e7:02:19:7b:fa:80:b8: eb:5a:2f:d8:2a:6c:72:37:55:c3:b0:15:85:b0:27:9f:5e:5c: 9d:23:a0:6b:0f:24:95:76:4c:31:24:27:32:69:c8:f4:18:ec: 7d:92:8b:bd:b1:77:5f:1e:fb:ed:d7:f8:04:7b:77:ef:35:33: 83:84:4c:14:a2:5f:f0:4d:c7:0f:db:58:77:71:63:7b:cf:ce: 6a:ad:39:ad:f1:da:59:e7:fe:f1:ac:c0:10:30:7f:3a:48:63: 37:70:11:5a:a7:1e:c3:46:7b:d2:79:27:99:fb:aa:e7:02:01: fa:28:6e:12:ed:b8:75:2e:d3:36:d4:cd:21:16:0b:24:0d:e9: d5:ac:fc:22:5a:b9:db:6f:ea:a9:6a:00:7b:21:90:25:0b:40: cc:77:cd:76:10:1d:3d:25:e9:69:49:db:c2:aa:ff:d0:e3:84: 82:41:e1:0f:1b:07:ac:b9:dd:79:22:b3:b2:30:8a:1e:1b:6f: 50:ee:8c:28:23:64:c4:5e:3d:6e:86:78:82:22:85:3d:fc:97: bc:68:34:94:05:eb:49:cb:95:70:7f:36:c5:eb:e1:a1:ee:5f: 95:30:95:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUQ4NDExMC8GA1UEBRMoOTQ5QjY0N0E1RjhDNzlGNkRBNEFFMzZEOUUwMEM0NEUw MkE5QTdBNDAeFw0yNDA1MTkwNzQyMjZaFw0yNDA1MjYwNzQyMjZaMBgxFjAUBgNV BAMTDTY2NDlhZDYyLTc4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR/Cbvj0vG4BNZgE1ZBz1TpKqhALCA5Eh+lIJmWnpUAp/bzC9u5TUUucsH5jz6 aIT0KEAktXT2cuL5Rs52Cry+OnIRLZV3tyO3/39EbFgbOuyO74WtGkHNoqbbgfZN oe9t7rXl4+YR9bQpbqdZb7mAHNRUGqrNHNe05oo/RgyzQK3AEtcjl8FphdCPZPmr xHvwI4akgZSQ4Ij/0oj3RwjoWr2wweSgogOT02mW6yZyYbzzKPmDmfMDbCU+qihj BinJiLI8SPq8y9IYwVrEbKI/+Ba/KzUaaHOEEepTpGJt/Won1lLBztUGxnNGszP+ NHwHPyv6qaPEIrdxN7BZMxTjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe/88f2ZG vrgRZtdd43t2+Ive+T4wHwYDVR0jBBgwFoAUlJtkel+MefbaSuNtngDETgKpp6Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RDg0L0Y4MDY5NDNDODZD ODExRUVBQUQzNDQxNEM0RjlBRTAyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEp0a2VsLU1lZmJhU3VOdG5nREVUZ0twcDZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RDg0L0Y4MDY5NDNDODZDODExRUVBQUQzNDQxNEM0RjlBRTAyL2xKdGtlbC1NZWZi YVN1TnRuZ0RFVGdLcHA2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJpDWLWLmvnwU1SZGy0dJyibNMSGdFM2WYmuYZzz5wIZe/qAuOtaL9gq bHI3VcOwFYWwJ59eXJ0joGsPJJV2TDEkJzJpyPQY7H2Si72xd18e++3X+AR7d+81 M4OETBSiX/BNxw/bWHdxY3vPzmqtOa3x2lnn/vGswBAwfzpIYzdwEVqnHsNGe9J5 J5n7qucCAfoobhLtuHUu0zbUzSEWCyQN6dWs/CJaudtv6qlqAHshkCULQMx3zXYQ HT0l6WlJ28Kq/9DjhIJB4Q8bB6y53Xkis7Iwih4bb1DujCgjZMRePW6GeIIihT38 l7xoNJQF60nLlXB/NsXr4aHuX5UwlXc= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org