$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: 8WvTFOi/Tv4lbj1zts61/JaUMektCJR7sZ84eStg1DE= Subject key identifier: 35:A0:2C:6A:02:CC:81:C0:63:1F:89:44:05:DA:5F:B7:DD:4B:86:1C Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0BAB Signing time: Sat 18 May 2024 19:10:44 +0000 Manifest this update: Sat 18 May 2024 19:10:43 +0000 Manifest next update: Sat 25 May 2024 19:10:43 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: y19b28lxMsDZ2ekvE8gxyGhTy/virQFfYMHMM4Sux/w=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: EOLnTEdfXy1O9hBrCXZNu4tSMYJmY5yEW4EBIrgMUzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: May 18 19:10:43 2024 GMT Not After : May 25 19:10:43 2024 GMT Subject: CN=6648fd33-3ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:09:4c:b8:85:d8:fa:db:71:85:6a:34:c7: a8:76:ec:cb:01:59:64:97:50:47:30:7a:16:7c:2c: cf:8a:d6:8b:06:a0:f5:74:64:52:0f:53:2a:8a:df: 11:14:a6:5d:8a:20:fe:b2:e5:fa:fc:4d:4b:fe:7c: 91:88:10:b2:ae:18:6f:cf:6a:fa:d2:8b:41:49:f4: de:e3:5e:d8:8b:87:5e:57:2f:f5:bf:53:12:76:62: f0:f4:5f:cf:14:79:e7:c2:5b:6c:d6:f1:16:70:00: 36:11:76:f1:80:b9:d9:dc:ab:fb:e3:e7:31:ef:10: f4:0b:e5:7b:4f:5c:27:12:21:f0:1e:06:1b:e4:9e: 31:d2:c6:79:c6:1b:8f:68:bc:e0:d0:d6:22:0c:3b: ff:a7:98:2d:6d:b2:4a:eb:a8:24:89:04:4a:48:42: f0:31:a7:51:ca:2b:fb:d4:2b:f8:3d:24:57:06:4f: 4b:d5:b3:55:e6:6a:4c:2a:bc:00:57:7d:5d:97:ac: 34:17:4b:7f:46:09:74:7c:49:4c:08:d9:f7:3f:2d: c8:e3:99:8b:7f:82:0d:3e:bc:cd:42:d7:c6:77:0c: 90:8c:74:7f:bc:c1:2c:e9:4d:ff:cd:6c:34:ed:df: eb:1d:58:b8:48:cc:1b:42:e3:f4:6f:6f:e9:97:53: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A0:2C:6A:02:CC:81:C0:63:1F:89:44:05:DA:5F:B7:DD:4B:86:1C X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:11:f3:3c:d1:04:81:b5:ac:d6:dc:57:a8:1b:5b:20:ae:4f: b8:af:4a:4c:d9:e3:d7:0f:8f:30:60:87:51:94:ea:1a:10:45: 13:64:c8:38:8f:1d:67:40:08:f1:67:25:50:49:22:25:1f:92: 93:56:47:5f:2a:0a:fe:28:c4:a5:42:3e:35:21:7d:d5:dd:6e: c3:85:e7:7e:d3:7e:65:64:1e:77:18:b7:a6:79:ae:df:a5:aa: ee:49:ac:c8:02:51:1f:f7:c1:d2:a4:24:87:e2:3c:43:04:08: 19:d7:15:5b:0e:1e:86:36:0e:2a:f4:ba:23:88:dc:ba:74:dc: 95:fc:8c:7e:f4:00:57:96:ac:bf:04:83:5e:7f:79:64:8a:5e: 86:be:01:89:9a:cb:06:93:79:9c:07:4d:4c:c0:b9:b9:fc:72: ee:69:7a:a9:7f:75:da:7c:97:5e:ea:71:31:9e:4f:4b:0e:71: 0c:e0:8e:d3:0d:92:aa:28:d7:03:1b:6b:ff:b8:cd:f2:70:4e: 1c:fd:c1:9b:25:38:48:ce:03:ca:99:ce:b8:33:e4:46:37:94: 86:96:9c:45:d7:ce:a6:d3:cc:d5:c9:98:02:df:67:24:c1:86: f7:65:4a:b0:9e:83:cd:bc:60:c2:9b:34:f4:53:a8:c7:7c:4a: 85:bb:7b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjQwNTE4MTkxMDQzWhcNMjQwNTI1MTkxMDQzWjAYMRYwFAYD VQQDEw02NjQ4ZmQzMy0zZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL8JTLiF2PrbcYVqNMeoduzLAVlkl1BHMHoWfCzPitaLBqD1dGRSD1Mqit8R FKZdiiD+suX6/E1L/nyRiBCyrhhvz2r60otBSfTe417Yi4deVy/1v1MSdmLw9F/P FHnnwlts1vEWcAA2EXbxgLnZ3Kv74+cx7xD0C+V7T1wnEiHwHgYb5J4x0sZ5xhuP aLzg0NYiDDv/p5gtbbJK66gkiQRKSELwMadRyiv71Cv4PSRXBk9L1bNV5mpMKrwA V31dl6w0F0t/Rgl0fElMCNn3Py3I45mLf4INPrzNQtfGdwyQjHR/vMEs6U3/zWw0 7d/rHVi4SMwbQuP0b2/pl1MtKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWgLGoC zIHAYx+JRAXaX7fdS4YcMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMEfM80QSBtazW3FeoG1sgrk+4r0pM2ePXD48wYIdRlOoaEEUTZMg4 jx1nQAjxZyVQSSIlH5KTVkdfKgr+KMSlQj41IX3V3W7Dhed+035lZB53GLemea7f paruSazIAlEf98HSpCSH4jxDBAgZ1xVbDh6GNg4q9LojiNy6dNyV/Ix+9ABXlqy/ BINef3lkil6GvgGJmssGk3mcB01MwLm5/HLuaXqpf3XafJde6nExnk9LDnEM4I7T DZKqKNcDG2v/uM3ycE4c/cGbJThIzgPKmc64M+RGN5SGlpxF186m08zVyZgC32ck wYb3ZUqwnoPNvGDCmzT0U6jHfEqFu3tu -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org