$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: ZGJ5h4sZtQSuQwpVQ73ntaQ/OulKfbfjmxUBH6CB6uU= Subject key identifier: 8D:96:BF:0B:0D:97:32:00:39:66:86:14:9C:6D:FD:F8:52:B5:A5:0B Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 06E9 Signing time: Sat 18 May 2024 22:56:24 +0000 Manifest this update: Sat 18 May 2024 22:56:24 +0000 Manifest next update: Sat 25 May 2024 22:56:24 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: X/ja42+27EfCYof1okXI2Vi6073hfaegw5cnpGY+jvg=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: zrrI6AtdyN6IWstAzQnI1Tab8e42Oncb5pCDnEH10Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: May 18 22:56:24 2024 GMT Not After : May 25 22:56:24 2024 GMT Subject: CN=66493218-c55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:bf:13:9d:bd:b7:55:96:8f:b0:c4:95:51: af:41:be:cd:65:12:9d:82:8d:b9:19:e8:09:80:21: 55:76:1a:61:5d:b5:3a:b9:3b:d4:9c:55:2d:d4:63: d5:a5:cb:f5:0a:7d:ec:5c:c6:ad:d4:d7:27:7d:db: 5f:e9:7b:47:ed:fc:dc:5a:12:93:2b:d3:99:4d:30: 4d:3d:31:ad:9e:52:7c:b3:70:b1:2d:22:93:eb:1c: 7e:f7:3e:99:1d:c1:bc:1d:98:93:b7:9d:3e:c2:c7: ac:e7:60:19:e1:94:29:94:f1:5c:cb:25:7f:53:c0: ad:1f:58:44:dd:ca:2d:1b:51:76:51:f1:51:d2:70: e6:f3:28:cb:3a:49:d1:fa:67:e5:9a:22:dd:99:fd: 84:8b:d7:c6:5a:ee:4c:ce:e7:04:29:91:48:70:a5: 9e:39:05:12:e4:3c:4f:81:0b:4f:6d:8b:7d:5d:fa: 84:c0:4b:f7:41:14:2e:ac:27:53:96:7e:86:25:85: 4a:d5:46:54:b6:a6:2c:aa:7d:1d:a1:b4:93:dd:f1: e7:2f:80:d0:9c:48:24:51:29:77:fb:a1:4c:13:d8: 1e:16:ae:a2:c7:b3:37:e1:73:e9:5a:7b:f8:e3:8f: 8a:83:e6:f3:0c:8a:e1:34:fe:73:60:0b:a0:24:23: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:BF:0B:0D:97:32:00:39:66:86:14:9C:6D:FD:F8:52:B5:A5:0B X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0b:26:a0:9c:d1:ea:87:80:6e:bf:5a:79:d5:a2:7d:14:be: ef:d0:d7:1e:fd:b4:af:48:ba:d1:6f:ac:95:0b:ab:4e:f1:71: 36:c1:b1:fe:a9:9f:3b:8b:e2:e0:66:e4:18:4e:a2:3b:95:43: ab:b9:c6:66:34:63:e4:77:e6:cb:49:57:5b:68:da:4d:ec:41: 44:e6:37:36:55:5d:e2:4c:bf:58:d8:c1:8a:fb:00:7b:30:30: 44:3f:74:67:8c:94:47:90:1f:f7:7a:0f:4c:6b:19:28:78:05: 2c:4f:3e:f0:df:1c:ec:71:21:68:36:fd:c9:13:76:78:5e:d8: ba:5c:3e:1b:2b:a1:08:7f:0c:85:55:dc:ef:c7:30:37:3b:11: 15:c5:21:0e:6c:90:43:18:c4:03:2e:f6:22:ff:b3:ec:54:8b: 14:cf:e1:92:9a:00:f5:9a:eb:85:08:d4:03:c9:0e:fb:c3:1d: 22:b6:64:49:b3:a3:07:f9:0e:8e:af:1d:2b:e2:d7:4d:cc:27: fd:40:e8:35:c5:5f:44:4d:c0:6e:82:a5:1a:13:c9:8e:91:95: 8c:14:ae:52:39:d2:d0:37:7e:cb:00:2c:e5:1b:7b:7b:19:3a: 44:4f:50:a2:7f:94:c8:3f:c5:b0:20:ec:92:88:38:f7:0e:67: c3:9c:ce:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjQwNTE4MjI1NjI0WhcNMjQwNTI1MjI1NjI0WjAYMRYwFAYD VQQDEw02NjQ5MzIxOC1jNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqM2/E529t1WWj7DElVGvQb7NZRKdgo25GegJgCFVdhphXbU6uTvUnFUt1GPV pcv1Cn3sXMat1Ncnfdtf6XtH7fzcWhKTK9OZTTBNPTGtnlJ8s3CxLSKT6xx+9z6Z HcG8HZiTt50+wses52AZ4ZQplPFcyyV/U8CtH1hE3cotG1F2UfFR0nDm8yjLOknR +mflmiLdmf2Ei9fGWu5MzucEKZFIcKWeOQUS5DxPgQtPbYt9XfqEwEv3QRQurCdT ln6GJYVK1UZUtqYsqn0dobST3fHnL4DQnEgkUSl3+6FME9geFq6ix7M34XPpWnv4 44+Kg+bzDIrhNP5zYAugJCOqAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2WvwsN lzIAOWaGFJxt/fhStaULMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxCyagnNHqh4Buv1p51aJ9FL7v0Nce/bSvSLrRb6yVC6tO8XE2wbH+ qZ87i+LgZuQYTqI7lUOrucZmNGPkd+bLSVdbaNpN7EFE5jc2VV3iTL9Y2MGK+wB7 MDBEP3RnjJRHkB/3eg9MaxkoeAUsTz7w3xzscSFoNv3JE3Z4Xti6XD4bK6EIfwyF VdzvxzA3OxEVxSEObJBDGMQDLvYi/7PsVIsUz+GSmgD1muuFCNQDyQ77wx0itmRJ s6MH+Q6Orx0r4tdNzCf9QOg1xV9ETcBugqUaE8mOkZWMFK5SOdLQN37LACzlG3t7 GTpET1Cif5TIP8WwIOySiDj3DmfDnM74 -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org