$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: cTmVZ0F5QaBeImLQ6fsdWp4nPUH8taKTt3qzFGlr58E= Subject key identifier: 78:12:25:A7:49:D1:FD:CA:F4:E3:4E:8D:E2:24:5F:93:3A:FC:92:A8 Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 0640 Signing time: Sat 18 May 2024 23:41:18 +0000 Manifest this update: Sat 18 May 2024 23:41:17 +0000 Manifest next update: Sat 25 May 2024 23:41:17 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: P0QTFi1sDOp/k7Y8/ACb0h0EnLR605xH8xlnPRXxYH0=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: SHGtx48jizWMPTmbjinGpFJTeIxTYjm6SPEzGcA5GIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: May 18 23:41:17 2024 GMT Not After : May 25 23:41:17 2024 GMT Subject: CN=66493c9e-a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:da:a6:98:7b:59:ef:9a:dd:f5:5c:ef:e0: 4b:92:17:d4:c5:91:71:21:e9:c4:03:0a:77:e1:6d: 20:a5:c4:3f:f2:aa:4c:06:fb:d4:3c:1a:8a:cc:78: 7e:4b:92:c6:8f:4c:84:3b:55:aa:f1:5d:ef:f0:e0: 9a:89:76:28:2b:ed:6f:ac:f0:0d:8d:e7:25:6b:b6: 93:34:f8:f2:85:b8:4d:21:ce:80:bc:5b:50:df:59: ad:c9:b5:77:e8:f1:44:73:14:95:20:ab:92:d8:5e: ba:e1:24:50:5f:3a:d4:59:51:56:5e:21:50:01:c6: fe:45:a4:5e:a8:97:00:07:c4:6f:ba:93:4f:3a:e3: f4:33:e6:7d:32:b3:a4:f4:96:26:21:f8:a9:d7:7a: 43:43:d7:a1:18:8c:a3:2c:65:e6:8a:2a:6a:33:34: a3:d1:97:99:59:47:b0:76:c8:f9:bf:ed:0f:bc:5c: 68:3f:fc:de:33:c2:6d:f5:7a:56:24:c5:ff:44:12: 76:53:33:d4:9b:0c:04:2e:c4:9b:9d:46:07:8e:a6: 32:86:9e:4a:1b:27:42:2e:fb:9d:91:8b:1e:07:3a: a4:95:48:70:67:ee:43:57:e6:7d:58:26:b8:71:9f: ff:c5:73:96:05:7c:ab:f5:ab:22:87:df:73:e8:61: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:12:25:A7:49:D1:FD:CA:F4:E3:4E:8D:E2:24:5F:93:3A:FC:92:A8 X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8f:bc:a2:71:70:9b:3c:f1:f7:75:8d:76:12:c8:d0:4f:83: 18:ed:84:74:aa:87:54:37:aa:ee:9d:bb:95:19:1b:11:87:18: de:90:c8:dc:76:67:e4:c3:22:3a:98:42:a9:e1:c0:0d:10:0f: ff:cd:4d:1e:6e:ec:2e:96:d6:9a:e0:7f:f6:fd:46:aa:b5:ca: 14:9b:f9:8e:a3:33:5a:32:a6:f0:5d:e0:b8:3d:e4:f5:1e:56: 58:10:7b:f0:84:75:93:e2:6a:58:df:43:53:c6:f8:14:ff:be: 28:e3:9e:29:91:73:cd:83:4a:9b:c9:65:e5:f1:86:de:b7:0c: 1b:77:fb:e3:5a:25:63:27:ba:7d:9a:0b:46:e4:a9:f6:b1:37: 61:4d:22:0a:97:35:dd:aa:50:f1:40:06:64:bf:7b:e4:38:96: b4:22:fa:27:f5:51:a0:1a:01:90:11:99:53:ca:13:c4:d6:8f: a0:ab:2e:d7:fc:0d:90:b3:91:a3:6f:d9:f9:77:e2:cd:1a:3b: 61:2c:ae:c6:19:dd:a0:d2:1e:a7:c5:51:3a:df:e7:d7:f7:53: a0:0a:ea:f2:3e:d2:15:91:f3:34:18:30:40:06:e3:62:f8:d0: 2f:2e:e6:b4:b2:d2:57:d1:5d:22:6f:57:dd:62:67:12:7b:bb: d0:3c:03:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjQwNTE4MjM0MTE3WhcNMjQwNTI1MjM0MTE3WjAYMRYwFAYD VQQDEw02NjQ5M2M5ZS1hOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuirapph7We+a3fVc7+BLkhfUxZFxIenEAwp34W0gpcQ/8qpMBvvUPBqKzHh+ S5LGj0yEO1Wq8V3v8OCaiXYoK+1vrPANjecla7aTNPjyhbhNIc6AvFtQ31mtybV3 6PFEcxSVIKuS2F664SRQXzrUWVFWXiFQAcb+RaReqJcAB8RvupNPOuP0M+Z9MrOk 9JYmIfip13pDQ9ehGIyjLGXmiipqMzSj0ZeZWUewdsj5v+0PvFxoP/zeM8Jt9XpW JMX/RBJ2UzPUmwwELsSbnUYHjqYyhp5KGydCLvudkYseBzqklUhwZ+5DV+Z9WCa4 cZ//xXOWBXyr9asih99z6GEYbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgSJadJ 0f3K9ONOjeIkX5M6/JKoMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEj7yicXCbPPH3dY12EsjQT4MY7YR0qodUN6runbuVGRsRhxjekMjc dmfkwyI6mEKp4cANEA//zU0ebuwultaa4H/2/UaqtcoUm/mOozNaMqbwXeC4PeT1 HlZYEHvwhHWT4mpY30NTxvgU/74o454pkXPNg0qbyWXl8Ybetwwbd/vjWiVjJ7p9 mgtG5Kn2sTdhTSIKlzXdqlDxQAZkv3vkOJa0Ivon9VGgGgGQEZlTyhPE1o+gqy7X /A2Qs5Gjb9n5d+LNGjthLK7GGd2g0h6nxVE63+fX91OgCuryPtIVkfM0GDBABuNi +NAvLua0stJX0V0ib1fdYmcSe7vQPAO3 -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org