$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: jpbPsSekaizG52SbmYJL7NAcf/yf/xoxUvMpDABiE7Y= Subject key identifier: 5A:32:76:B2:BE:CD:E2:9B:5B:28:14:27:DF:8D:A0:52:4D:2E:A1:72 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0B8C Signing time: Fri 31 May 2024 20:06:20 +0000 Manifest this update: Fri 31 May 2024 20:06:19 +0000 Manifest next update: Fri 07 Jun 2024 20:06:19 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: kxDleSg0rBd5eBK35imPrtKhuV84xchAtIJMgwD0X2o=) 2: A531869E063511EFA8F7035EC4F9AE02.roa (hash: 4SyutlgXRpYCJoB3j4MTa+eQHwfmzMJ8xgBt9Ug7nzU=) 3: E3A83166063511EF81D98D5EC4F9AE02.roa (hash: JY/9Mrotlj4kyV7+9fbvlzU4R5g8Z2UU9l54u689StU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: May 31 20:06:19 2024 GMT Not After : Jun 7 20:06:19 2024 GMT Subject: CN=665a2dbb-e339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:23:7f:e8:20:5c:99:72:55:51:32:b9:ba: 38:eb:65:24:c6:08:51:0f:7c:37:32:35:a4:89:ac: 3a:1c:e6:36:c6:63:cf:80:ef:73:7d:a7:70:c8:a3: 77:4b:35:cd:a8:7f:6e:35:cb:d0:22:90:15:58:ae: 47:46:4a:61:0d:6b:c2:93:bc:15:90:96:76:5a:7f: c4:ae:58:27:89:ba:31:a5:ac:a3:44:8f:c0:1f:f0: 7f:b7:0b:32:e8:36:ae:33:f1:9c:6c:11:b1:8c:02: 77:4f:ae:5d:22:f0:2f:39:c8:e7:ad:88:32:8e:37: c8:8f:e4:82:75:81:bd:93:00:37:19:2e:fb:2d:34: db:1f:76:33:7e:06:fc:48:c5:bc:1e:98:3a:a3:d2: cb:23:35:cd:3d:05:ce:9b:d9:86:bf:b8:3b:d5:61: aa:2d:8a:45:d6:53:0e:0a:24:c7:85:97:6b:89:77: be:16:85:69:86:cf:0d:ae:d5:ce:83:b8:95:1f:a9: 65:04:84:fa:2b:e1:f3:bb:39:7e:b5:c3:82:73:80: 10:b8:19:53:c5:a3:88:85:4a:a4:09:57:6b:fb:85: 1d:d5:45:a2:39:a9:6a:57:74:98:19:d3:c2:42:e7: e9:e8:d6:19:1e:e9:dd:59:d3:07:68:b9:8d:1d:f4: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:76:B2:BE:CD:E2:9B:5B:28:14:27:DF:8D:A0:52:4D:2E:A1:72 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d1:d6:8b:a2:2a:49:40:e7:c1:63:c4:5f:0e:ba:2b:32:2d: 62:43:6c:3c:ab:b9:40:e4:11:b9:0f:9d:37:52:dc:8b:47:a3: e2:7a:b1:59:2a:8a:63:8a:0b:53:e1:83:79:8d:81:d2:46:46: b7:81:7a:ec:0e:d0:26:da:59:54:8e:84:8c:44:6d:4e:71:ab: 2f:28:84:28:d9:f1:b2:ac:eb:9c:7d:ba:c7:c9:6a:9d:b8:2b: 6e:89:44:f2:da:20:7c:ab:56:78:c0:e3:90:e2:9b:af:63:e8: f1:1d:62:4a:0a:8f:62:86:ab:9b:db:0c:1d:f4:73:5d:88:21: 88:bf:bd:8d:32:a2:ca:ce:a1:3f:5b:0c:da:eb:eb:47:d4:77: 76:4c:01:9d:1f:df:45:70:f6:3b:58:bc:fc:c4:3f:eb:09:86: a7:07:24:af:d1:31:1c:89:04:c1:42:4a:94:0e:95:54:15:bf: 7b:fb:d7:fc:b9:b1:60:53:e3:38:dc:c8:0c:2f:4c:14:0f:7a: 24:00:24:b4:8f:36:a1:31:89:0d:76:ac:f6:da:80:24:48:4b: 85:8e:93:09:e8:50:31:9f:8c:ba:09:0b:67:9d:25:87:d0:8f: b9:95:b5:5e:7e:5d:2c:68:65:76:19:68:2a:dd:dc:6d:43:67: f3:b6:a1:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjQwNTMxMjAwNjE5WhcNMjQwNjA3MjAwNjE5WjAYMRYwFAYD VQQDEw02NjVhMmRiYi1lMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+ojf+ggXJlyVVEyubo462UkxghRD3w3MjWkiaw6HOY2xmPPgO9zfadwyKN3 SzXNqH9uNcvQIpAVWK5HRkphDWvCk7wVkJZ2Wn/ErlgniboxpayjRI/AH/B/twsy 6DauM/GcbBGxjAJ3T65dIvAvOcjnrYgyjjfIj+SCdYG9kwA3GS77LTTbH3Yzfgb8 SMW8Hpg6o9LLIzXNPQXOm9mGv7g71WGqLYpF1lMOCiTHhZdriXe+FoVphs8NrtXO g7iVH6llBIT6K+Hzuzl+tcOCc4AQuBlTxaOIhUqkCVdr+4Ud1UWiOalqV3SYGdPC Qufp6NYZHundWdMHaLmNHfSFywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoydrK+ zeKbWygUJ9+NoFJNLqFyMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ0daLoipJQOfBY8RfDrorMi1iQ2w8q7lA5BG5D503UtyLR6PierFZ KopjigtT4YN5jYHSRka3gXrsDtAm2llUjoSMRG1OcasvKIQo2fGyrOucfbrHyWqd uCtuiUTy2iB8q1Z4wOOQ4puvY+jxHWJKCo9ihqub2wwd9HNdiCGIv72NMqLKzqE/ Wwza6+tH1Hd2TAGdH99FcPY7WLz8xD/rCYanBySv0TEciQTBQkqUDpVUFb97+9f8 ubFgU+M43MgML0wUD3okACS0jzahMYkNdqz22oAkSEuFjpMJ6FAxn4y6CQtnnSWH 0I+5lbVefl0saGV2GWgq3dxtQ2fztqE6 -----END CERTIFICATE-----Generated at Fri May 31 22:13:08 2024 by rpki-client on console-fra.rpki-client.org