$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: sGXR09kN6s3EFfH9pIgHfW5fES0eaTHhcxq4Ng5f6W8= Subject key identifier: C4:2D:AF:32:72:97:88:1C:27:BF:58:52:77:4F:1C:0D:69:5B:04:2F Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 77 Signing time: Sun 19 May 2024 07:20:44 +0000 Manifest this update: Sun 19 May 2024 07:20:44 +0000 Manifest next update: Sun 26 May 2024 07:20:44 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: dqd9Dc4t88KzokKDYI1gOaRH3UVaINWYYqFp7Wxu4g8=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: cf7SiJ6qPo7EwtEsZkrmbFYXlJYPd1l7xqsKt5NMMZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: May 19 07:20:44 2024 GMT Not After : May 26 07:20:44 2024 GMT Subject: CN=6649a84c-11ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:c8:4a:94:85:a8:54:39:82:d5:9d:53:a8: 67:25:05:33:99:d3:c6:88:72:06:dd:ed:f1:f8:6e: 4b:45:cf:93:ae:12:41:9d:9a:2e:d6:88:21:c0:78: 4a:e3:61:d9:30:79:de:7e:f2:58:53:87:e3:db:9c: 23:65:c9:b4:0a:82:83:d3:ae:da:a5:be:45:2a:fe: 2c:26:fb:d2:c9:48:71:09:57:3f:88:73:03:44:12: ac:3b:0b:5e:e2:6e:76:69:f5:e9:f0:57:50:df:00: 71:90:80:a6:bf:81:b6:30:b7:17:6a:1b:d5:83:6e: e8:57:8d:6c:2c:97:ea:b9:3c:07:7d:1b:14:f3:47: 56:98:b8:d8:73:1d:1b:2b:27:ba:c9:b4:05:fb:1a: eb:de:6e:b4:0e:99:62:62:f6:00:18:bb:11:fc:ed: 58:ad:d1:a8:da:9c:cc:0f:27:6d:0b:56:d6:40:1b: 7e:58:51:ff:9d:df:80:54:bb:ab:8c:28:e0:5e:f6: 06:d9:95:72:64:8a:d3:c2:85:eb:3c:33:3a:f6:5a: 55:5f:71:3a:bf:52:a5:89:28:15:15:70:e3:35:d8: c1:87:11:44:b0:ad:98:8c:d0:a9:5b:12:7c:ea:02: 8b:1b:d0:9c:f5:b2:42:01:ed:91:41:19:81:96:52: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2D:AF:32:72:97:88:1C:27:BF:58:52:77:4F:1C:0D:69:5B:04:2F X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d3:8f:05:e2:e6:0b:0d:8b:43:f1:3f:7f:22:6b:dd:ef:cc: 74:71:e2:56:23:41:0a:71:a2:94:b9:b3:bb:cf:37:fa:5b:5b: 88:0d:a8:8f:08:68:c2:68:e8:d8:5d:e7:92:df:fa:47:1e:13: 03:fd:25:fd:e5:aa:d4:d6:c0:82:e2:35:ad:24:c5:1c:70:cb: 8f:f1:aa:bd:40:68:7c:2f:8b:a0:3a:dc:35:54:15:df:f8:f4: 17:34:51:67:0e:b4:31:8f:9f:cb:ac:73:d6:76:bf:6d:c6:a3: 40:28:50:76:b0:08:42:f9:c3:fd:06:91:e4:e9:c5:66:85:6e: 6e:aa:3e:53:02:06:3d:77:6f:5f:4a:fc:7f:b0:22:55:7f:76: 18:14:72:25:33:6f:65:4f:9c:39:7b:35:a3:f2:85:c0:68:b0: 61:34:94:22:57:28:93:f1:fa:24:eb:dc:13:cf:6a:cc:46:59: 3f:87:fa:9f:dc:0f:d2:8a:cc:c8:ef:a1:77:6c:08:22:51:15: 9a:49:19:e4:d2:2b:fe:89:3d:a3:69:19:39:a0:0a:c0:9f:5b: 83:8f:58:0f:08:ec:53:8f:b8:27:87:9c:e6:b0:ec:35:a0:90: dc:95:86:e2:f2:40:e0:4e:99:a6:07:f5:42:ac:d7:e3:9e:41: 17:35:2a:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mzk0QjExMC8GA1UEBRMoOTQwOEU5RDdCNkNFQjgzNENBOTA5MDFFNDU3ODYwMTBD MDY5QzMyQjAeFw0yNDA1MTkwNzIwNDRaFw0yNDA1MjYwNzIwNDRaMBgxFjAUBgNV BAMTDTY2NDlhODRjLTExYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv+chKlIWoVDmC1Z1TqGclBTOZ08aIcgbd7fH4bktFz5OuEkGdmi7WiCHAeErj Ydkwed5+8lhTh+PbnCNlybQKgoPTrtqlvkUq/iwm+9LJSHEJVz+IcwNEEqw7C17i bnZp9enwV1DfAHGQgKa/gbYwtxdqG9WDbuhXjWwsl+q5PAd9GxTzR1aYuNhzHRsr J7rJtAX7GuvebrQOmWJi9gAYuxH87Vit0ajanMwPJ20LVtZAG35YUf+d34BUu6uM KOBe9gbZlXJkitPChes8Mzr2WlVfcTq/UqWJKBUVcOM12MGHEUSwrZiM0KlbEnzq Aosb0Jz1skIB7ZFBGYGWUnj1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxC2vMnKX iBwnv1hSd08cDWlbBC8wHwYDVR0jBBgwFoAUlAjp17bOuDTKkJAeRXhgEMBpwysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzOTRCLzEwQUNBQjBBNjFC NDExRUU4MENFMTg0NkM0RjlBRTAyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEFqcDE3Yk91RFRLa0pBZVJYaGdFTUJwd3lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz OTRCLzEwQUNBQjBBNjFCNDExRUU4MENFMTg0NkM0RjlBRTAyL2xBanAxN2JPdURU S2tKQWVSWGhnRU1CcHd5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTTjwXi5gsNi0PxP38ia93vzHRx4lYjQQpxopS5s7vPN/pbW4gNqI8I aMJo6Nhd55Lf+kceEwP9Jf3lqtTWwILiNa0kxRxwy4/xqr1AaHwvi6A63DVUFd/4 9Bc0UWcOtDGPn8usc9Z2v23Go0AoUHawCEL5w/0GkeTpxWaFbm6qPlMCBj13b19K /H+wIlV/dhgUciUzb2VPnDl7NaPyhcBosGE0lCJXKJPx+iTr3BPPasxGWT+H+p/c D9KKzMjvoXdsCCJRFZpJGeTSK/6JPaNpGTmgCsCfW4OPWA8I7FOPuCeHnOaw7DWg kNyVhuLyQOBOmaYH9UKs1+OeQRc1KlA= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org