$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: A6whL9jB89YsFSOL+GajhldC4loZZ8SGnoAv+hhE7fU= Subject key identifier: 54:86:6F:A1:B7:23:A1:1B:E3:DF:E3:BC:55:57:BC:42:E5:12:00:0B Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 035F Signing time: Sun 19 May 2024 02:53:23 +0000 Manifest this update: Sun 19 May 2024 02:53:22 +0000 Manifest next update: Sun 26 May 2024 02:53:22 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: sfD2p2PkKU8goc64mR8Kmw0dO/qmZT6Eon6II3Q/1hA=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: jvk96CEDll1/qLiM4Of9YUMKuZHTCq+mSdJsfvPCWmQ=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: 3to0kmpKm4kD9eXIyJENq46vq98MggdA6Yvgp0l4ahU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: May 19 02:53:22 2024 GMT Not After : May 26 02:53:22 2024 GMT Subject: CN=664969a2-0994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:6e:95:d3:77:3e:15:0d:57:48:1a:28:a9: f5:5c:f0:bd:14:d8:3b:98:46:86:ce:3f:1d:e2:a5: 2d:80:25:88:aa:13:27:5c:62:91:e7:43:2a:8c:fa: 50:ee:a6:13:39:18:5e:35:ba:13:83:59:29:9e:6b: 91:70:01:8d:2c:72:d4:29:f2:9f:46:c9:f2:44:9a: 41:9f:e1:bd:65:61:e6:62:11:c9:e7:94:b0:33:46: 6b:cb:50:6b:dd:d6:6c:94:c7:9a:11:6f:6d:bf:58: 60:8d:4a:09:9a:5e:d4:af:c9:52:f1:21:e8:3b:fa: 76:4d:4f:cf:c1:4d:a3:bb:34:a7:58:95:bc:35:d3: b8:03:05:1d:0c:7a:28:2f:0d:c4:95:4d:d2:ec:29: e0:9c:66:d8:35:65:a7:14:65:67:ca:6a:d1:c7:69: 12:bf:83:44:9e:ac:c6:f6:fa:38:90:59:12:16:4a: 90:d6:27:bf:d2:8b:57:c0:ab:31:0a:c2:e0:37:b5: 7e:1f:0b:0b:63:31:7f:70:4c:81:25:32:e3:ad:94: cb:23:47:40:33:43:e0:c7:21:b5:7f:4a:d6:2d:a4: ef:02:bb:3e:6e:86:eb:d0:08:84:ef:fa:3a:ad:5f: 7b:e4:76:c0:fb:93:7b:fd:15:fc:0f:a2:29:c1:f6: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:86:6F:A1:B7:23:A1:1B:E3:DF:E3:BC:55:57:BC:42:E5:12:00:0B X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:07:91:f4:ba:69:86:b4:95:44:63:5a:50:72:2d:7f:a6:ca: f9:77:fb:ff:00:2d:45:ca:7e:c0:32:b3:e0:9f:8a:5d:49:5d: 95:b5:b6:50:0f:59:ba:50:63:1d:97:aa:37:e6:61:c1:19:6a: 95:25:0f:6e:45:8b:5b:61:a4:fc:01:bb:54:42:c9:e5:1b:8b: 80:13:4c:40:4b:72:b4:53:32:0e:1e:a1:8c:81:e0:f1:39:44: 15:7c:34:61:bc:0b:77:3d:42:56:2c:1d:65:04:19:eb:97:c8: 37:8a:06:20:94:69:bd:da:79:0e:c4:a1:86:b1:b3:f3:38:fa: ec:c7:ce:c2:9d:e9:38:af:94:8d:ce:cd:f7:1a:86:d9:27:75: ef:10:db:16:c9:2c:ab:ce:32:a3:94:6e:be:a3:bf:03:a4:9e: 2c:e0:49:97:2c:cb:17:ea:78:85:f9:fd:68:c2:84:b1:91:44: 23:09:ec:29:fb:b4:23:99:11:04:2a:3c:e0:95:da:7a:50:f8: a8:e0:05:d0:ae:6a:83:76:a4:9a:a0:23:fb:b3:9e:b0:e9:5e: 94:4a:57:cd:1e:c0:ea:8e:8a:8c:21:9d:c5:0a:1f:03:12:c8: 1d:f9:cf:9f:f2:da:32:df:6a:b4:34:16:e4:34:b5:a2:5a:a4: 8b:bc:ea:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjQwNTE5MDI1MzIyWhcNMjQwNTI2MDI1MzIyWjAYMRYwFAYD VQQDEw02NjQ5NjlhMi0wOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpBuldN3PhUNV0gaKKn1XPC9FNg7mEaGzj8d4qUtgCWIqhMnXGKR50MqjPpQ 7qYTORheNboTg1kpnmuRcAGNLHLUKfKfRsnyRJpBn+G9ZWHmYhHJ55SwM0Zry1Br 3dZslMeaEW9tv1hgjUoJml7Ur8lS8SHoO/p2TU/PwU2juzSnWJW8NdO4AwUdDHoo Lw3ElU3S7CngnGbYNWWnFGVnymrRx2kSv4NEnqzG9vo4kFkSFkqQ1ie/0otXwKsx CsLgN7V+HwsLYzF/cEyBJTLjrZTLI0dAM0PgxyG1f0rWLaTvArs+bobr0AiE7/o6 rV975HbA+5N7/RX8D6IpwfaSZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSGb6G3 I6Eb49/jvFVXvELlEgALMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4B5H0ummGtJVEY1pQci1/psr5d/v/AC1Fyn7AMrPgn4pdSV2VtbZQ D1m6UGMdl6o35mHBGWqVJQ9uRYtbYaT8AbtUQsnlG4uAE0xAS3K0UzIOHqGMgeDx OUQVfDRhvAt3PUJWLB1lBBnrl8g3igYglGm92nkOxKGGsbPzOPrsx87Cnek4r5SN zs33GobZJ3XvENsWySyrzjKjlG6+o78DpJ4s4EmXLMsX6niF+f1owoSxkUQjCewp +7QjmREEKjzgldp6UPio4AXQrmqDdqSaoCP7s56w6V6USlfNHsDqjoqMIZ3FCh8D Esgd+c+f8toy32q0NBbkNLWiWqSLvOpH -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org