$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json) Hash identifier: tSerhl1xQoWv1GJamy0aAoUKk09D7Gd7rOBIUuqAqQQ= Subject key identifier: AE:C8:FD:43:D7:14:2B:26:9E:2F:FE:93:B2:B6:51:5A:E3:9D:ED:73 Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft Manifest number: 03A5 Signing time: Sun 19 May 2024 02:32:47 +0000 Manifest this update: Sun 19 May 2024 02:32:46 +0000 Manifest next update: Sun 26 May 2024 02:32:46 +0000 Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: mmRDRHzJs8PwJHNY3wSWiJ/QmV31xgTVttPzQHoDk5I=) 2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: EZ0C93RRgxM1+OA5teU4M7qZFeuET3Gg7L9gPM+xBew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Validity Not Before: May 19 02:32:46 2024 GMT Not After : May 26 02:32:46 2024 GMT Subject: CN=664964ce-a83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:e2:8f:e9:e8:6b:b3:21:4f:dc:8b:98:d5: 1a:a1:06:b8:0d:89:e2:9d:30:98:5b:1c:fe:5c:7d: a1:d3:d0:60:48:40:b7:2f:56:a3:44:1f:17:65:3f: f6:9a:11:0a:9a:80:34:85:a9:2d:ab:ad:44:7e:91: 75:f3:17:5d:2a:15:9a:62:f0:e9:3b:87:f5:00:67: 42:ee:41:a4:ab:78:2e:5a:7d:9a:00:c0:f9:94:39: b8:19:2b:0a:53:98:af:b2:0c:0a:66:5c:50:6d:ce: e4:29:03:c5:85:be:12:d1:37:3c:2d:89:53:52:53: a6:e0:a4:75:f5:57:32:44:b9:3f:1b:68:31:f0:25: a2:58:a7:78:ea:ea:d9:62:38:c1:18:00:92:c9:21: 0a:05:7e:f6:8f:4a:b6:36:91:aa:c1:a9:a2:bc:1e: ca:cf:9b:d1:1f:6b:c0:c2:dd:73:88:d0:b3:8c:ee: ea:e2:66:fb:89:61:36:f0:ad:85:2b:14:04:0f:be: 4a:3e:af:63:ad:f0:49:6b:3a:bb:68:2e:d9:df:bf: 42:18:19:e8:7f:0f:dd:18:e9:1c:9a:f7:34:fc:ae: 62:14:01:2f:f9:3e:69:4f:bf:71:40:c9:81:76:72: 0d:ed:89:de:09:7c:05:12:b5:8b:4a:14:ce:06:d7: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C8:FD:43:D7:14:2B:26:9E:2F:FE:93:B2:B6:51:5A:E3:9D:ED:73 X509v3 Authority Key Identifier: keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e9:40:1e:50:31:16:2c:33:d5:20:73:5f:cc:cc:e8:bd:0b: 34:39:f7:07:26:3f:c8:0d:5d:a9:5a:79:1c:af:50:d4:05:da: 2a:70:79:36:fb:c3:92:58:2b:b3:7f:53:be:e6:a2:7b:0c:a8: bd:58:7b:c0:01:26:59:74:92:8b:9b:b1:53:bd:9e:c1:4a:18: 02:89:0b:86:67:e9:a8:f8:42:32:b4:db:7b:1f:69:35:ee:fe: 74:41:0c:cc:15:54:59:fb:0a:71:0b:e8:42:99:e3:e0:20:50: a6:8c:42:77:65:24:28:e1:d0:ff:7c:af:96:ad:10:9b:66:8b: 0f:1e:5d:1e:98:23:66:5f:5f:d8:35:ee:e5:28:d6:a3:97:73: 79:d1:c5:6d:ca:13:50:8b:4c:dc:a0:31:a0:7a:37:d0:74:70: 38:93:58:a1:64:ae:10:42:2e:5f:eb:fc:16:be:f4:ca:3d:09: fe:eb:84:7d:ce:30:12:34:29:dc:ba:60:dd:84:31:26:66:35: 02:07:e5:0e:ff:7b:5f:6c:6c:83:ef:d0:78:82:59:24:05:af: 74:eb:68:b6:40:5a:d5:39:b7:13:4a:fc:8a:54:d5:59:a6:fb: e8:b3:33:8a:e3:fe:23:dc:20:ce:4c:d5:e8:d3:84:16:3f:32: ef:d4:f8:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5 QkQxQUUzM0YwHhcNMjQwNTE5MDIzMjQ2WhcNMjQwNTI2MDIzMjQ2WjAYMRYwFAYD VQQDEw02NjQ5NjRjZS1hODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVTij+noa7MhT9yLmNUaoQa4DYninTCYWxz+XH2h09BgSEC3L1ajRB8XZT/2 mhEKmoA0haktq61EfpF18xddKhWaYvDpO4f1AGdC7kGkq3guWn2aAMD5lDm4GSsK U5ivsgwKZlxQbc7kKQPFhb4S0Tc8LYlTUlOm4KR19VcyRLk/G2gx8CWiWKd46urZ YjjBGACSySEKBX72j0q2NpGqwamivB7Kz5vRH2vAwt1ziNCzjO7q4mb7iWE28K2F KxQED75KPq9jrfBJazq7aC7Z379CGBnofw/dGOkcmvc0/K5iFAEv+T5pT79xQMmB dnIN7YneCXwFErWLShTOBte30QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7I/UPX FCsmni/+k7K2UVrjne1zMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa NXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa6UAeUDEWLDPVIHNfzMzovQs0OfcHJj/IDV2pWnkcr1DUBdoqcHk2 +8OSWCuzf1O+5qJ7DKi9WHvAASZZdJKLm7FTvZ7BShgCiQuGZ+mo+EIytNt7H2k1 7v50QQzMFVRZ+wpxC+hCmePgIFCmjEJ3ZSQo4dD/fK+WrRCbZosPHl0emCNmX1/Y Ne7lKNajl3N50cVtyhNQi0zcoDGgejfQdHA4k1ihZK4QQi5f6/wWvvTKPQn+64R9 zjASNCncumDdhDEmZjUCB+UO/3tfbGyD79B4glkkBa9062i2QFrVObcTSvyKVNVZ pvvoszOK4/4j3CDOTNXo04QWPzLv1Ph1 -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org