$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: Tf9ZRBxdVOplzynlpVycg8Em5n7UFjAU1hpLrE9V0Uc= Subject key identifier: D9:8D:6B:92:41:D2:81:CC:ED:59:CB:5F:F0:AE:1B:45:8D:18:38:2D Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 33F2 Signing time: Sat 18 May 2024 14:26:36 +0000 Manifest this update: Sat 18 May 2024 14:26:35 +0000 Manifest next update: Sat 25 May 2024 14:26:35 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: guOZ+rxUoxj5SN+aILxEsSTNlYwpEuIw/KhYn6r3jSE=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: A/LkVdVh/veEJzFTXT8KazQTYKHfbJbE274xbg3PKqI=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: 1fBWeYLG2pi7AypRGjpLaX9NtiSyHOW5P0pUjKJwK6E=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: 4ZoxknvBZ7HwSXrqH9SF2hziVvW41P06vSusRZcmVjs=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MrXAmnGMswO2bHrZlMFFt542A/DbAOo1bWS6AtgSvng=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: K7JApbq9zwKTpcFwmr6e5jJ6jGolL8ttohijFBKpay4=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 8FohK/zegKwO9kEnPSVAChVsdZMDlGzmpA55SZVmIQ0=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: Xs6V5lF7PVKLSV0+ngYKywjkaYd1tF47ibwWBJwFrtk=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: uGPnNR4FjQG1Et1kLY2iU4Oz9dYJGeYqTRCnJn4hpbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13385 (0x3449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: May 18 14:26:35 2024 GMT Not After : May 25 14:26:35 2024 GMT Subject: CN=6648ba9b-ce86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9d:21:15:d5:48:65:73:a1:5e:c8:b9:ff:5d: 10:5e:e4:33:dd:2c:18:e0:8d:c9:94:4e:82:a7:27: 8a:39:7d:21:0c:12:99:76:80:a0:67:41:f7:c0:15: 5b:4f:9c:9c:36:6e:de:1a:15:09:1c:e1:d4:95:f5: bc:f0:25:2c:3e:25:4c:7f:4b:2a:56:30:63:6b:8f: d9:76:b0:54:a1:36:da:b8:92:8c:d0:20:e9:f8:a3: 99:10:b1:90:e9:89:0c:4c:2a:1f:0d:63:aa:33:bb: b5:8f:bb:5e:5b:f2:f0:5c:92:c3:7a:37:0e:4a:ce: 3b:fe:8b:4c:09:da:6a:25:bd:21:90:0d:30:da:b1: 1e:15:ae:b8:d4:85:88:64:6f:12:d0:36:84:9e:c8: 70:57:35:7c:fa:9c:73:1b:ef:c8:41:02:11:d9:04: 71:46:ba:b6:74:62:36:07:6a:50:30:88:6b:7e:07: 3e:f8:0c:81:b3:a1:f7:ee:fe:ba:bb:cc:82:7d:e0: 9c:a2:63:04:e9:26:b7:af:7f:15:30:a3:d3:68:b3: b8:f0:32:31:b6:99:92:88:84:fd:39:02:7e:5f:b2: c3:fe:44:dc:54:db:9d:e6:46:f2:29:ce:76:ca:a5: ee:ca:dc:a5:05:77:cd:78:19:43:09:3c:ce:6d:84: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8D:6B:92:41:D2:81:CC:ED:59:CB:5F:F0:AE:1B:45:8D:18:38:2D X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0e:8b:37:50:44:cf:a5:80:8e:00:25:9e:ba:b2:7f:cf:b5: 08:ef:5b:a9:3e:e5:21:3f:11:d0:88:65:25:5c:44:ed:3f:9e: 16:6f:df:dd:06:59:f3:e2:af:5a:7e:b5:a9:9f:a5:24:6b:9d: 0a:58:57:14:fc:76:ff:f1:14:2f:05:22:a2:2b:e3:e7:02:1b: a8:a2:1b:20:74:62:58:8a:3c:10:b3:36:4a:5a:fd:9b:4c:e0: 45:f6:4f:6b:1d:40:97:48:24:6b:0a:18:1e:c9:9b:e6:02:9f: ad:08:13:5f:f7:aa:2a:a4:bd:26:2a:96:d5:7c:ef:0f:35:75: f6:71:26:0e:45:86:46:8a:cf:54:cf:02:ce:0c:7f:d4:50:e5: fc:3c:3e:99:8d:93:01:04:74:a1:76:34:0b:b1:9f:00:b8:ad: a6:e0:41:00:4f:da:31:67:c1:76:8d:34:82:f2:34:1c:ff:36: 00:af:65:79:2e:b9:0f:55:56:52:23:9b:be:8b:3b:4a:64:f0: ed:ab:6b:da:cc:b1:bf:ad:7e:2b:e0:91:07:cd:4e:ab:d7:31: 65:65:80:64:9c:e9:9c:f8:c2:49:ad:97:99:0b:7e:d9:94:cc: 29:80:79:ab:6a:8a:31:0e:21:4e:a2:1d:18:16:d4:43:97:c9: fa:d8:18:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjQwNTE4MTQyNjM1WhcNMjQwNTI1MTQyNjM1WjAYMRYwFAYD VQQDEw02NjQ4YmE5Yi1jZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z0hFdVIZXOhXsi5/10QXuQz3SwY4I3JlE6CpyeKOX0hDBKZdoCgZ0H3wBVb T5ycNm7eGhUJHOHUlfW88CUsPiVMf0sqVjBja4/ZdrBUoTbauJKM0CDp+KOZELGQ 6YkMTCofDWOqM7u1j7teW/LwXJLDejcOSs47/otMCdpqJb0hkA0w2rEeFa641IWI ZG8S0DaEnshwVzV8+pxzG+/IQQIR2QRxRrq2dGI2B2pQMIhrfgc++AyBs6H37v66 u8yCfeCcomME6Sa3r38VMKPTaLO48DIxtpmSiIT9OQJ+X7LD/kTcVNud5kbyKc52 yqXuytylBXfNeBlDCTzObYSuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmNa5JB 0oHM7VnLX/CuG0WNGDgtMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxDos3UETPpYCOACWeurJ/z7UI71upPuUhPxHQiGUlXETtP54Wb9/d Blnz4q9afrWpn6Uka50KWFcU/Hb/8RQvBSKiK+PnAhuoohsgdGJYijwQszZKWv2b TOBF9k9rHUCXSCRrChgeyZvmAp+tCBNf96oqpL0mKpbVfO8PNXX2cSYORYZGis9U zwLODH/UUOX8PD6ZjZMBBHShdjQLsZ8AuK2m4EEAT9oxZ8F2jTSC8jQc/zYAr2V5 LrkPVVZSI5u+iztKZPDtq2vazLG/rX4r4JEHzU6r1zFlZYBknOmc+MJJrZeZC37Z lMwpgHmraooxDiFOoh0YFtRDl8n62BjA -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org