$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.mft File: ls0KaXDWhbDM6jQk4JROhAUOt-w.mft (raw, json) Hash identifier: HQESziQM+MBkM3yZvzn8jMkDi1iZtsQeVaedZoHHyCI= Subject key identifier: 80:4E:A7:18:5A:D7:CF:21:D5:56:94:80:16:66:B0:49:5F:67:E5:52 Authority key identifier: 96:CD:0A:69:70:D6:85:B0:CC:EA:34:24:E0:94:4E:84:05:0E:B7:EC Certificate issuer: /CN=A91B3C87/serialNumber=96CD0A6970D685B0CCEA3424E0944E84050EB7EC Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.mft Manifest number: 1570 Signing time: Fri 31 May 2024 18:41:52 +0000 Manifest this update: Fri 31 May 2024 18:41:51 +0000 Manifest next update: Fri 07 Jun 2024 18:41:51 +0000 Files and hashes: 1: ls0KaXDWhbDM6jQk4JROhAUOt-w.crl (hash: 56nufqIiC7MBD02VC0yt3ZMOb+U1xswJGHeQd558C4g=) 2: 1D07036632DA11EBA1A7F93BC4F9AE02.roa (hash: 3v0WZSZ9WXyN0p5iCYS1oEpxr7FNjE1W1kGnGnmRkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.crl rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3C87/serialNumber=96CD0A6970D685B0CCEA3424E0944E84050EB7EC Validity Not Before: May 31 18:41:51 2024 GMT Not After : Jun 7 18:41:51 2024 GMT Subject: CN=665a19ef-f3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:73:e8:2c:20:94:c9:a9:3d:68:1a:57:c0: e7:60:44:d6:b3:06:4d:2c:1a:8b:80:71:ec:20:8e: 0c:51:eb:9e:1f:ee:d6:84:ea:5d:8f:f4:19:63:79: 32:31:89:75:25:2f:98:c1:b0:ce:a2:15:5f:52:dc: 42:be:34:13:dd:2d:04:05:87:8c:04:df:61:0a:1f: 02:61:08:e2:66:98:df:73:d7:0d:95:be:c5:1a:43: ec:9f:16:b4:34:63:fd:c8:7a:c7:8c:9f:2b:12:48: 9e:4a:6f:4a:80:a2:f3:55:24:ca:86:d8:fc:23:1d: ad:83:59:c1:50:46:bf:b5:a1:f4:24:5f:91:e6:16: 58:34:9e:56:8a:c8:96:2f:3c:85:6a:39:58:11:17: 0e:79:d6:e9:65:85:2b:94:d5:0d:a3:d9:bb:b3:5c: b2:91:c7:61:6f:8c:77:b8:59:18:d1:b8:f9:ee:d3: e3:6b:0b:35:d5:4c:69:a3:eb:17:cf:b0:57:66:17: e3:87:4a:74:8f:d9:63:a5:74:51:a7:0a:23:9f:17: dd:b8:7d:8e:00:b8:60:38:85:6d:03:ab:c8:06:e1: 23:d9:d3:65:12:6d:27:c4:94:b3:2e:cd:17:b8:b6: b4:f5:65:0b:a4:05:7f:90:13:28:66:23:70:bc:86: 25:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:A7:18:5A:D7:CF:21:D5:56:94:80:16:66:B0:49:5F:67:E5:52 X509v3 Authority Key Identifier: keyid:96:CD:0A:69:70:D6:85:B0:CC:EA:34:24:E0:94:4E:84:05:0E:B7:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ls0KaXDWhbDM6jQk4JROhAUOt-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/ls0KaXDWhbDM6jQk4JROhAUOt-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:eb:c2:8b:30:0d:38:1b:23:7a:a6:0b:b3:07:0a:20:17:ca: 8d:49:18:2f:b6:a0:30:e5:73:7a:2c:c8:89:27:0c:31:a7:a3: d1:e3:1a:97:7f:7c:7f:fb:e5:34:55:d8:d7:36:84:a2:e9:00: b4:60:ed:69:65:12:e5:43:10:6a:72:9e:4b:9e:aa:05:ce:64: 0c:ac:37:57:68:23:a0:fb:d4:fe:52:e9:68:1b:e0:f8:a5:d2: 84:3f:f0:17:7b:fe:96:99:da:70:8a:b2:74:66:23:2b:4c:e0: ba:7c:75:ad:d2:28:4b:eb:5d:e7:9b:a3:d2:62:3c:0a:92:57: 9c:ad:78:14:08:52:34:4b:1f:e3:a8:9e:83:89:0f:29:27:14: 6b:14:46:93:c5:c8:be:a6:56:a6:21:2c:51:c1:4b:33:ce:78: e7:ba:08:17:56:79:2a:bd:38:2a:44:cc:4d:92:eb:f2:2f:6e: f0:4f:51:48:6e:53:f8:f3:cd:12:7a:7e:da:af:40:96:01:0b: 06:9e:9c:17:be:13:3e:bc:74:8c:8c:1c:17:19:0f:3d:27:72: 14:c2:64:85:32:7c:f7:4e:c3:78:6c:94:57:eb:90:87:de:86: 03:ec:77:53:58:66:2e:7b:9a:94:44:fd:d4:f6:6b:f2:bf:52: b1:60:e0:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDODcxMTAvBgNVBAUTKDk2Q0QwQTY5NzBENjg1QjBDQ0VBMzQyNEUwOTQ0RTg0 MDUwRUI3RUMwHhcNMjQwNTMxMTg0MTUxWhcNMjQwNjA3MTg0MTUxWjAYMRYwFAYD VQQDEw02NjVhMTllZi1mM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H5z6CwglMmpPWgaV8DnYETWswZNLBqLgHHsII4MUeueH+7WhOpdj/QZY3ky MYl1JS+YwbDOohVfUtxCvjQT3S0EBYeMBN9hCh8CYQjiZpjfc9cNlb7FGkPsnxa0 NGP9yHrHjJ8rEkieSm9KgKLzVSTKhtj8Ix2tg1nBUEa/taH0JF+R5hZYNJ5WisiW LzyFajlYERcOedbpZYUrlNUNo9m7s1yykcdhb4x3uFkY0bj57tPjaws11Uxpo+sX z7BXZhfjh0p0j9ljpXRRpwojnxfduH2OALhgOIVtA6vIBuEj2dNlEm0nxJSzLs0X uLa09WULpAV/kBMoZiNwvIYlHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBOpxha 188h1VaUgBZmsElfZ+VSMB8GA1UdIwQYMBaAFJbNCmlw1oWwzOo0JOCUToQFDrfs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0M4Ny84QjdDN0U3NjU3 NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi9sczBLYVhEV2hiRE02alFrNEpST2hBVU90 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzMEthWERXaGJETTZqUWs0SlJPaEFVT3Qtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0M4Ny84QjdDN0U3NjU3NTIxMUU5ODA4RUNGMUJDNEY5QUUwMi9sczBLYVhEV2hi RE02alFrNEpST2hBVU90LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDv68KLMA04GyN6pguzBwogF8qNSRgvtqAw5XN6LMiJJwwxp6PR4xqX f3x/++U0VdjXNoSi6QC0YO1pZRLlQxBqcp5LnqoFzmQMrDdXaCOg+9T+UuloG+D4 pdKEP/AXe/6WmdpwirJ0ZiMrTOC6fHWt0ihL613nm6PSYjwKklecrXgUCFI0Sx/j qJ6DiQ8pJxRrFEaTxci+plamISxRwUszznjnuggXVnkqvTgqRMxNkuvyL27wT1FI blP4880Sen7ar0CWAQsGnpwXvhM+vHSMjBwXGQ89J3IUwmSFMnz3TsN4bJRX65CH 3oYD7HdTWGYue5qURP3U9mvyv1KxYOCd -----END CERTIFICATE-----Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org