$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: LtYvbrS/1wXAA8hluVaBdPLvnphslSF6G9vm8w/4z6Y= Subject key identifier: CD:AB:20:09:FC:B0:81:F8:A2:6B:B3:62:1B:E5:9F:1A:5B:6F:18:83 Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 0617 Signing time: Sat 18 May 2024 23:51:55 +0000 Manifest this update: Sat 18 May 2024 23:51:54 +0000 Manifest next update: Sat 25 May 2024 23:51:54 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: D6sVkZMwe8R+0i71cMP84lRu0VOCzM1kTJ6oHCTtzy0=) 2: 10125F86258D11EE90D2D87EC4F9AE02.roa (hash: RRd9626oufWQNsXlUb3qkz1Xr4UeRexRn6TmN9fSM8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: May 18 23:51:54 2024 GMT Not After : May 25 23:51:54 2024 GMT Subject: CN=66493f1b-e3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:a6:f3:bc:db:93:ea:49:e4:7e:b7:17:0c: 6d:08:31:70:47:15:91:bf:29:f4:7e:af:9e:51:ec: 6f:35:e1:15:c0:3e:7c:02:00:d2:e3:c2:26:21:03: 88:e7:66:12:bc:82:08:4f:f5:bb:9a:7d:9c:63:3c: e5:b6:92:09:e4:30:a7:78:41:9b:38:76:dd:71:22: d0:66:9a:6e:e2:31:68:74:ca:5d:39:a2:9f:12:f9: 2c:75:08:bf:ce:b0:57:9b:c6:2d:33:8d:a9:7f:66: 2a:e1:21:2f:fd:2d:43:6a:5d:9f:fe:34:20:90:65: 3d:72:0f:fc:a8:95:a7:f2:82:fd:14:6f:b8:58:1c: af:ac:d5:7f:98:8f:b0:23:3b:18:5d:1c:70:9c:a9: 16:f3:c5:5c:90:6e:57:7d:8e:5c:c2:c7:0d:cb:68: 98:1e:fa:75:00:7a:6e:9e:40:75:41:b0:1d:93:27: 55:60:96:c0:41:27:1c:94:d2:1b:d2:70:81:56:25: ac:66:a5:55:5a:f8:90:a4:92:fd:d7:93:c3:3d:8d: cb:b5:00:95:49:bf:83:c2:79:92:6f:2f:3c:29:0f: 37:70:a7:2b:b0:ae:62:61:71:ba:c1:ea:42:c5:b0: ea:52:20:15:d2:7f:95:9f:54:2e:bb:ff:89:5d:3d: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:20:09:FC:B0:81:F8:A2:6B:B3:62:1B:E5:9F:1A:5B:6F:18:83 X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b3:72:52:52:f1:f5:4b:e6:22:be:18:56:68:53:1a:33:89: b1:59:22:f8:34:bc:fe:cb:53:d4:5a:14:0a:58:e0:06:15:3b: 6f:d8:68:a6:44:1b:53:5f:a3:d3:2f:11:52:41:69:44:f3:f7: 65:cd:3c:8a:1f:d4:05:d6:2f:c1:97:3e:f5:1c:ba:c5:92:17: cc:b0:64:67:32:ce:6d:6e:08:61:e9:da:9a:22:1e:46:c3:a9: 64:8f:ae:a3:cf:e2:87:89:99:4e:53:2b:87:c9:e1:1d:61:bf: 6b:30:6a:00:97:3b:e8:2c:1d:dd:03:e0:d6:df:1c:8e:9b:c9: 5f:fd:30:5a:a8:85:93:d2:45:dd:65:a7:7c:37:41:c9:f0:c0: bc:03:d3:ff:34:a8:68:ac:76:59:32:82:7f:e8:5d:4f:11:78: a1:ae:4c:21:72:1d:28:d3:06:b9:67:b6:60:37:76:59:b4:be: 26:95:a5:d8:69:28:75:bc:ba:c8:a1:e8:41:20:7f:ee:0d:ff: 02:f0:9f:2d:ac:1d:a4:93:3f:97:eb:d9:3b:9c:ab:11:25:a6: 81:4d:36:07:bb:c9:43:fd:ab:79:cd:b0:a0:41:f7:ad:41:2e: 44:75:90:68:83:d1:41:66:23:d6:64:6d:3c:b3:6d:1a:a6:8a: e4:18:ad:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjQwNTE4MjM1MTU0WhcNMjQwNTI1MjM1MTU0WjAYMRYwFAYD VQQDEw02NjQ5M2YxYi1lM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGWm87zbk+pJ5H63FwxtCDFwRxWRvyn0fq+eUexvNeEVwD58AgDS48ImIQOI 52YSvIIIT/W7mn2cYzzltpIJ5DCneEGbOHbdcSLQZppu4jFodMpdOaKfEvksdQi/ zrBXm8YtM42pf2Yq4SEv/S1Dal2f/jQgkGU9cg/8qJWn8oL9FG+4WByvrNV/mI+w IzsYXRxwnKkW88VckG5XfY5cwscNy2iYHvp1AHpunkB1QbAdkydVYJbAQScclNIb 0nCBViWsZqVVWviQpJL915PDPY3LtQCVSb+DwnmSby88KQ83cKcrsK5iYXG6wepC xbDqUiAV0n+Vn1Quu/+JXT3IjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2rIAn8 sIH4omuzYhvlnxpbbxiDMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGs3JSUvH1S+YivhhWaFMaM4mxWSL4NLz+y1PUWhQKWOAGFTtv2Gim RBtTX6PTLxFSQWlE8/dlzTyKH9QF1i/Blz71HLrFkhfMsGRnMs5tbghh6dqaIh5G w6lkj66jz+KHiZlOUyuHyeEdYb9rMGoAlzvoLB3dA+DW3xyOm8lf/TBaqIWT0kXd Zad8N0HJ8MC8A9P/NKhorHZZMoJ/6F1PEXihrkwhch0o0wa5Z7ZgN3ZZtL4mlaXY aSh1vLrIoehBIH/uDf8C8J8trB2kkz+X69k7nKsRJaaBTTYHu8lD/at5zbCgQfet QS5EdZBog9FBZiPWZG08s20aporkGK1w -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org