$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: mrSkgj/mfhxriRUd+LHHu+qz9yo4WDt5dVwXOx/TPw4= Subject key identifier: 33:0E:80:E5:C2:A6:AE:BC:87:56:37:EF:75:00:28:FE:C3:38:E4:11 Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 0389 Signing time: Sun 19 May 2024 02:41:32 +0000 Manifest this update: Sun 19 May 2024 02:41:31 +0000 Manifest next update: Sun 26 May 2024 02:41:31 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: kSK3VqYRcmQilTP0wf25sSOUHtic3BasnlbG6g9el0U=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: FiCTOia3dtnewSfPwDMA18gyV4CZ/I7iQt5+bH2v0P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: May 19 02:41:31 2024 GMT Not After : May 26 02:41:31 2024 GMT Subject: CN=664966db-788d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:12:52:9f:fe:3a:6d:e5:c6:98:ef:86:34: 55:a4:8d:6f:a3:1d:17:88:f0:3b:7a:a3:31:ad:51: 76:3c:de:7f:21:01:ce:f8:90:2a:28:59:b1:f9:db: 36:c5:26:97:41:f2:2d:1a:41:5c:1f:05:b4:55:90: ba:4f:6d:05:47:63:9a:68:a2:ad:69:e4:cf:20:87: 23:d8:9c:81:f0:e5:4e:a0:1d:51:df:61:ee:a3:bc: d0:11:0d:3d:6c:5e:98:93:96:37:65:9c:d2:5e:00: 6f:eb:fc:83:16:9d:d6:f5:ae:77:8c:de:11:90:61: 58:c6:25:f2:00:d2:3a:0b:98:cd:e8:8d:60:36:12: a1:e2:b6:ea:f8:0d:87:69:4b:8a:48:50:fd:9d:c1: 44:88:e0:4c:e3:a8:b0:67:32:86:4e:2d:4d:d8:3b: d9:7e:11:c3:c5:d8:c9:f5:ee:3f:e5:96:9e:14:3c: 4f:8e:9b:28:50:ef:cb:79:2b:e7:93:d7:94:4b:14: a7:18:87:87:f7:22:3d:c1:cc:59:ab:c7:e7:78:50: 80:52:93:53:80:ac:da:89:1e:35:28:0f:bf:9b:18: bc:0a:ac:55:06:9e:0c:4a:fd:12:3b:97:c6:8c:c1: d0:38:14:c2:10:ec:e5:fe:98:0c:cd:ed:05:83:a7: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0E:80:E5:C2:A6:AE:BC:87:56:37:EF:75:00:28:FE:C3:38:E4:11 X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:2e:20:56:c9:06:ac:6d:92:62:14:be:cb:36:60:c1:8c:d0: 7d:87:fa:9c:d8:0e:8b:bc:fd:de:40:3d:da:09:2f:c4:0f:e9: 18:1e:2e:fc:4f:ad:d5:ad:e7:d6:5a:08:22:63:99:e5:87:d1: e5:0f:f1:bf:f1:0b:5b:c6:34:37:c2:a8:21:23:b7:61:7f:09: 08:d3:27:c0:49:17:b1:a7:d6:7b:48:6a:8d:b2:f5:5a:63:8b: bc:fc:fd:3d:f8:78:04:5d:38:61:1c:28:1b:2a:f6:16:7f:ca: a0:8a:84:3f:c8:9e:3a:b1:ee:ec:32:63:38:44:c9:09:f5:15: 59:01:65:e3:65:4d:ff:12:a8:26:21:7a:1f:bb:3e:46:af:9a: 65:6e:02:88:46:04:f7:0e:03:48:43:c5:57:eb:9e:f0:15:2b: 44:45:49:5b:d2:88:16:22:0e:79:cc:82:7f:3e:b9:f7:c0:19: 6e:6a:d3:5b:52:d3:69:76:e2:6e:fe:a8:8f:96:7b:79:ae:d6: 88:d0:e0:d9:7c:ba:8b:34:ca:13:9e:d0:ad:28:8a:50:ef:20: b2:ad:75:13:ea:b3:a7:fb:93:9e:71:e7:3f:50:e1:34:02:b1: ad:06:00:5d:04:28:63:4d:6f:f5:40:16:3e:ec:07:ae:7a:04: 38:e5:18:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjQwNTE5MDI0MTMxWhcNMjQwNTI2MDI0MTMxWjAYMRYwFAYD VQQDEw02NjQ5NjZkYi03ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAww0SUp/+Om3lxpjvhjRVpI1vox0XiPA7eqMxrVF2PN5/IQHO+JAqKFmx+ds2 xSaXQfItGkFcHwW0VZC6T20FR2OaaKKtaeTPIIcj2JyB8OVOoB1R32Huo7zQEQ09 bF6Yk5Y3ZZzSXgBv6/yDFp3W9a53jN4RkGFYxiXyANI6C5jN6I1gNhKh4rbq+A2H aUuKSFD9ncFEiOBM46iwZzKGTi1N2DvZfhHDxdjJ9e4/5ZaeFDxPjpsoUO/LeSvn k9eUSxSnGIeH9yI9wcxZq8fneFCAUpNTgKzaiR41KA+/mxi8CqxVBp4MSv0SO5fG jMHQOBTCEOzl/pgMze0Fg6fWHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMOgOXC pq68h1Y373UAKP7DOOQRMB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClLiBWyQasbZJiFL7LNmDBjNB9h/qc2A6LvP3eQD3aCS/ED+kYHi78 T63VrefWWggiY5nlh9HlD/G/8QtbxjQ3wqghI7dhfwkI0yfASRexp9Z7SGqNsvVa Y4u8/P09+HgEXThhHCgbKvYWf8qgioQ/yJ46se7sMmM4RMkJ9RVZAWXjZU3/Eqgm IXofuz5Gr5plbgKIRgT3DgNIQ8VX657wFStERUlb0ogWIg55zIJ/Prn3wBluatNb UtNpduJu/qiPlnt5rtaI0ODZfLqLNMoTntCtKIpQ7yCyrXUT6rOn+5Oecec/UOE0 ArGtBgBdBChjTW/1QBY+7AeuegQ45RhO -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org