$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: 9ix9yjR3Q7E8QyElEslsu8vHYR4upZQPq2ngN1bbaR4= Subject key identifier: 69:E3:51:FA:D6:18:76:63:D2:72:A9:16:1F:9F:8B:4D:FA:B9:A2:EE Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0516 Signing time: Sat 01 Jun 2024 02:13:56 +0000 Manifest this update: Sat 01 Jun 2024 02:13:55 +0000 Manifest next update: Sat 08 Jun 2024 02:13:55 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: rVbspFFHmUTMQml+y29hu/zDWwU6Z/w1CpMdqaPjzKg=) 2: 32B24F6425FD11EDA4097785C4F9AE02.roa (hash: oCfdzQyYRsIRC12KmJ3LXf4aAzIohlkO5epU8CiYIrw=) 3: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: /lgRgsVbOk11+aR4zJT9E0tlRjbV/Z20R2zZnazcgxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Jun 1 02:13:55 2024 GMT Not After : Jun 8 02:13:55 2024 GMT Subject: CN=665a83e3-eff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:94:cf:bc:72:c4:3e:91:ce:7e:a7:89:f6: 72:9b:54:f6:5d:57:4b:2e:da:a0:ec:63:e2:7c:4e: ca:a0:0a:29:e0:1b:b6:95:25:03:1c:5a:e2:12:78: f6:0c:fe:bd:09:d9:87:71:dc:8f:4e:78:34:05:a0: dd:47:c8:d9:94:36:d2:26:35:f9:2f:99:99:fd:ff: e5:fe:67:26:a1:ba:bc:47:a0:2b:17:75:5e:da:44: 7a:c6:d7:cb:7e:8a:be:6a:bb:87:3e:ff:c0:9d:ea: 6b:a8:8e:ed:a7:59:fb:49:f7:46:4f:33:28:50:25: 9b:03:34:d0:65:bb:7d:3c:74:c2:f1:fc:1c:f4:0f: ad:f5:d4:7b:42:e7:d2:5f:ad:e8:a3:43:ac:75:00: 7f:a1:c7:7f:82:f0:57:e8:3d:b2:a3:59:02:39:0c: be:60:2c:64:d4:04:9e:9f:63:1b:f3:12:df:42:df: 19:e0:84:cd:00:5d:f7:a8:ce:e3:6f:66:8d:c2:9e: 70:76:24:33:ff:50:13:6e:bd:08:42:26:33:4a:59: 70:80:3e:cd:4c:f1:99:2d:ba:bd:eb:89:7f:1b:74: b5:ac:f1:65:c1:5c:87:c3:81:89:24:11:60:03:c6: a8:24:eb:35:8d:bd:65:6b:af:2b:21:77:2d:9b:e4: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E3:51:FA:D6:18:76:63:D2:72:A9:16:1F:9F:8B:4D:FA:B9:A2:EE X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bb:6d:6b:b4:bd:b6:a5:03:e8:e9:0c:05:75:34:6d:1b:cb: d3:85:dc:c4:60:ac:35:6c:d4:e8:5a:23:da:18:cf:c3:0e:56: 6a:1c:a2:0b:d8:88:df:e4:ba:62:fc:82:a4:f8:50:fc:7e:a1: ac:77:3f:b5:15:8c:3c:8b:22:f8:13:74:96:bb:7d:89:ca:1b: e1:36:c1:29:0a:a0:71:8c:78:04:e6:fe:b3:29:d4:5b:94:2d: 6c:36:b4:88:4e:37:ce:02:df:a2:f5:c5:f0:bf:5e:6f:69:42: 4a:c2:24:5e:89:2a:73:8d:d3:6f:93:f8:c0:a5:3c:8c:35:2b: c2:5c:ca:05:ad:e3:e5:a6:61:95:92:d0:5b:f3:17:5c:5c:4a: f6:7c:f3:3e:bc:4f:92:80:12:5b:1b:1f:1b:9f:8d:08:ab:90: 10:2f:92:80:82:3e:9b:03:ab:dd:3b:d6:ed:b9:65:43:df:d2: 3b:9a:33:53:1e:17:e2:4c:8a:07:17:12:48:dc:7b:11:c9:77: 40:ab:52:16:7e:36:d4:10:dd:8d:41:76:40:7c:f7:8d:7b:f4: 6f:01:90:42:b5:dc:23:19:29:26:6c:76:78:58:a5:f2:a3:dd: 6b:38:73:34:a3:c2:de:fa:e5:55:d8:71:65:db:4a:39:e0:32: 46:ff:7c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjQwNjAxMDIxMzU1WhcNMjQwNjA4MDIxMzU1WjAYMRYwFAYD VQQDEw02NjVhODNlMy1lZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfWUz7xyxD6Rzn6nifZym1T2XVdLLtqg7GPifE7KoAop4Bu2lSUDHFriEnj2 DP69CdmHcdyPTng0BaDdR8jZlDbSJjX5L5mZ/f/l/mcmobq8R6ArF3Ve2kR6xtfL foq+aruHPv/AneprqI7tp1n7SfdGTzMoUCWbAzTQZbt9PHTC8fwc9A+t9dR7QufS X63oo0OsdQB/ocd/gvBX6D2yo1kCOQy+YCxk1ASen2Mb8xLfQt8Z4ITNAF33qM7j b2aNwp5wdiQz/1ATbr0IQiYzSllwgD7NTPGZLbq964l/G3S1rPFlwVyHw4GJJBFg A8aoJOs1jb1la68rIXctm+RZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnjUfrW GHZj0nKpFh+fi036uaLuMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLu21rtL22pQPo6QwFdTRtG8vThdzEYKw1bNToWiPaGM/DDlZqHKIL 2Ijf5Lpi/IKk+FD8fqGsdz+1FYw8iyL4E3SWu32JyhvhNsEpCqBxjHgE5v6zKdRb lC1sNrSITjfOAt+i9cXwv15vaUJKwiReiSpzjdNvk/jApTyMNSvCXMoFrePlpmGV ktBb8xdcXEr2fPM+vE+SgBJbGx8bn40Iq5AQL5KAgj6bA6vdO9btuWVD39I7mjNT HhfiTIoHFxJI3HsRyXdAq1IWfjbUEN2NQXZAfPeNe/RvAZBCtdwjGSkmbHZ4WKXy o91rOHM0o8Le+uVV2HFl20o54DJG/3x3 -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:30 2024 by rpki-client on console-ams.rpki-client.org