$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: TB4VsiZ0hAEsqN1lZCg16Je6LfjeTsfoqCXSmB6Qwf4= Subject key identifier: 21:26:FF:C9:D8:21:DC:8E:1F:5B:2E:B0:80:94:C2:AA:63:90:AA:EC Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0A80 Signing time: Sat 18 May 2024 20:16:26 +0000 Manifest this update: Sat 18 May 2024 20:16:26 +0000 Manifest next update: Sat 25 May 2024 20:16:26 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: 7I6BzuPC0YbfppRtlkLWSqdIAmIXVGDmUxi72v2t8nw=) 2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: an8QcsqIykDysnx8UEP31FBu3+zGjozR3RM/gYXKosU=) 3: 837821AA9B0811EDB5FDAF75C4F9AE02.roa (hash: 6R58DKIp51BCGrrBGGy8fHU/1OuIVYOlSAZ5sOx4nqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: May 18 20:16:26 2024 GMT Not After : May 25 20:16:26 2024 GMT Subject: CN=66490c9a-322d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:9c:1b:95:54:ab:55:cd:0e:4f:6f:ee:3c: 51:12:b7:a6:7d:2c:e1:0a:0a:1b:87:ff:a6:24:ee: e9:f6:a2:8c:db:48:a5:4f:3c:d3:a2:a7:4f:8b:97: 44:34:57:8b:ed:dc:9e:09:aa:8b:1b:7a:f1:79:a3: b9:37:d9:a8:fa:73:05:e4:a3:54:06:d9:5e:2c:32: fa:58:ec:f1:fa:ce:46:9a:c8:37:63:d4:cd:c3:75: 93:06:18:bb:c1:6e:b2:be:2c:bb:cd:7b:3f:6c:ef: fb:7f:2d:8d:43:15:30:84:29:4e:fb:d9:8e:65:fa: 0e:0b:09:18:25:2c:93:04:db:52:8b:61:1f:98:76: 28:2a:24:6d:76:61:7f:3a:3e:47:f2:45:e0:c6:44: a3:ac:cb:6c:d0:b2:0c:ea:33:2b:b7:36:6a:77:1a: 06:ee:b3:19:fe:6a:ec:3f:0c:32:ca:1e:b7:3c:17: 53:d9:f8:5f:2d:16:07:b7:f0:51:8b:1b:43:6d:64: dc:ef:ea:41:7e:a1:2e:84:64:07:e5:89:af:19:12: a7:52:a5:3d:94:4f:47:a4:14:32:4d:2a:ec:9a:db: 86:e7:b9:4c:ee:6c:d1:d1:19:76:44:57:c5:04:97: 9c:6c:34:dc:92:3b:59:72:0a:1c:9c:69:ee:0d:a7: 0d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:26:FF:C9:D8:21:DC:8E:1F:5B:2E:B0:80:94:C2:AA:63:90:AA:EC X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ca:d2:e5:dc:5a:3f:9c:33:3e:9b:5f:42:92:09:68:a0:99: 9a:fe:0f:46:c1:a1:c5:ff:cd:7e:fc:28:f1:18:09:ec:09:0e: 24:4b:1d:e7:a5:9c:5d:95:a5:e9:d9:b6:14:79:73:2b:00:97: 38:2c:3f:e1:72:eb:30:24:d4:f7:61:c3:b7:16:da:31:f8:8a: bd:40:7e:b5:9f:56:11:90:17:5c:06:f0:30:80:51:cb:9a:b9: ac:19:a9:aa:ce:cf:e0:13:7c:92:a0:7d:17:c0:31:93:03:bb: 49:d6:05:66:d2:6e:7b:20:0d:75:59:1d:42:85:bb:bd:06:ba: 09:1f:b7:13:dd:3b:eb:91:a4:5c:f5:be:1d:d9:d7:af:96:f3: 08:d1:d0:6d:ed:4a:2f:d8:af:a1:cd:24:0f:ae:c6:f0:d9:c7: 0e:0d:8b:34:56:63:00:bb:55:a1:77:8e:bf:a5:79:af:0b:f0: 02:97:be:f1:e8:cf:f3:d0:64:b9:a6:90:27:e8:ad:d4:9c:e3: f3:f6:bb:df:24:d4:a9:59:28:65:30:78:d4:72:a0:8a:5c:7e: f1:62:1f:3c:a5:e9:3a:82:a0:37:fc:a0:cb:07:aa:cf:c5:ec: ec:71:f4:fb:50:fe:40:a2:4f:fa:f6:0a:4c:f5:4f:29:66:27: 06:4b:f5:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjQwNTE4MjAxNjI2WhcNMjQwNTI1MjAxNjI2WjAYMRYwFAYD VQQDEw02NjQ5MGM5YS0zMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWKcG5VUq1XNDk9v7jxREremfSzhCgobh/+mJO7p9qKM20ilTzzToqdPi5dE NFeL7dyeCaqLG3rxeaO5N9mo+nMF5KNUBtleLDL6WOzx+s5Gmsg3Y9TNw3WTBhi7 wW6yviy7zXs/bO/7fy2NQxUwhClO+9mOZfoOCwkYJSyTBNtSi2EfmHYoKiRtdmF/ Oj5H8kXgxkSjrMts0LIM6jMrtzZqdxoG7rMZ/mrsPwwyyh63PBdT2fhfLRYHt/BR ixtDbWTc7+pBfqEuhGQH5YmvGRKnUqU9lE9HpBQyTSrsmtuG57lM7mzR0Rl2RFfF BJecbDTckjtZcgocnGnuDacNxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEm/8nY IdyOH1susICUwqpjkKrsMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgytLl3Fo/nDM+m19CkglooJma/g9GwaHF/81+/CjxGAnsCQ4kSx3n pZxdlaXp2bYUeXMrAJc4LD/hcuswJNT3YcO3Ftox+Iq9QH61n1YRkBdcBvAwgFHL mrmsGamqzs/gE3ySoH0XwDGTA7tJ1gVm0m57IA11WR1Chbu9BroJH7cT3TvrkaRc 9b4d2devlvMI0dBt7Uov2K+hzSQPrsbw2ccODYs0VmMAu1Whd46/pXmvC/ACl77x 6M/z0GS5ppAn6K3UnOPz9rvfJNSpWShlMHjUcqCKXH7xYh88pek6gqA3/KDLB6rP xezscfT7UP5Aok/69gpM9U8pZicGS/Um -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org