$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: WS293hjvKM+7jA5G3jVNh8cEzsTsZ+OQwsdDpWy5QW0= Subject key identifier: 73:9F:42:A5:58:C9:C0:F3:5F:CF:BD:C7:46:0D:F8:B6:ED:B8:C4:D7 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 112F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 1112 Signing time: Thu 30 May 2024 18:12:09 +0000 Manifest this update: Thu 30 May 2024 18:12:08 +0000 Manifest next update: Thu 06 Jun 2024 18:12:08 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: 8S1VDfK7rjvgt2QUpFFINRF2mhAsEmlElYDQ8wuCwxM=) 2: D7C35FAA55C411EE8F952D11C4F9AE02.roa (hash: tXLz8oLQZ1PQ5H+Kf3ZucgR+3fR74d0tydF/o2LTX60=) 3: F05E8084931011EDB92FFC5FC4F9AE02.roa (hash: Nw4+ql9tn6rQ3d7k5HNXS5zSWny6YmYw+cyXWfgiJZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4399 (0x112f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: May 30 18:12:08 2024 GMT Not After : Jun 6 18:12:08 2024 GMT Subject: CN=6658c179-7620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:f4:77:43:d3:f4:68:4a:73:f6:af:73:da: 8c:9a:2e:a2:42:52:a7:ca:08:97:48:1d:cd:a2:2d: b4:2a:24:c6:9b:35:a5:66:a9:a1:1b:ae:a6:90:19: d9:48:00:fc:f5:af:5f:0f:5b:65:22:7e:30:47:06: 74:a5:fb:c2:dd:51:70:92:a1:03:2c:22:07:72:97: 95:33:45:15:21:c3:5e:bf:20:8b:87:f3:c2:c2:88: 8f:d0:f6:e2:5b:fe:d4:6b:cc:f1:be:88:aa:c9:b2: 56:4c:a5:56:f2:f2:6a:fd:08:f0:ae:8e:d3:c6:7c: e1:f8:0d:b4:8b:fb:e0:ff:c3:02:5a:ca:d2:62:4c: 7a:73:df:0b:24:7b:b1:6a:ca:f9:a9:ed:3e:26:cf: 16:a4:cd:21:ba:ee:f6:f4:03:10:71:db:dd:35:e8: 6d:a6:02:21:fc:7c:13:9e:1e:24:7d:40:6f:14:7f: 57:40:a0:46:15:be:22:21:c5:3d:56:93:01:06:98: c0:42:da:77:7b:17:05:a2:b4:70:5a:43:d5:97:1f: bb:83:0f:91:5b:4f:fd:ca:16:c9:83:09:40:2e:46: ae:77:7a:44:41:bd:37:96:6d:98:ff:a3:50:a7:51: 37:85:34:cc:f3:83:78:39:21:b5:04:fd:dd:e1:b3: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:42:A5:58:C9:C0:F3:5F:CF:BD:C7:46:0D:F8:B6:ED:B8:C4:D7 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:36:a4:94:90:1f:a7:aa:65:06:34:29:0a:ef:a7:74:7b:4e: c6:cc:1d:0d:dd:52:7c:5e:d4:eb:d8:af:42:e8:4b:f8:3e:17: 0d:c0:0f:39:5c:b7:d6:7d:4a:a8:b0:21:93:14:55:21:9b:de: ce:d1:a0:2e:d5:1d:cd:a3:9a:43:62:26:42:4e:89:12:28:d2: e7:af:d6:6a:ec:8d:59:8c:0e:9d:c0:49:f1:58:99:28:83:60: c7:78:ed:4e:ab:ea:82:dd:bd:cb:90:4b:a8:67:8f:34:db:47: 02:f7:83:82:e4:66:d6:fb:af:c7:ce:76:9d:ba:10:3e:fd:fc: c8:61:f6:83:ca:b5:1b:e9:d8:28:08:55:33:51:18:10:6d:ac: 93:c2:36:19:1f:0c:9e:f4:2b:95:f8:a5:3b:74:ce:0b:16:25: d9:a7:cc:13:73:b5:97:97:ac:d9:65:b9:99:78:7e:c4:cb:9a: 1c:8a:db:15:0a:23:f1:a9:32:31:52:26:04:90:ae:68:66:55: 38:cb:f7:64:2a:46:40:6b:86:9a:fe:4b:79:41:fb:a6:04:f6: e8:2c:3a:29:8b:dd:86:4a:85:51:ba:d5:9a:47:2a:ff:c1:f5: 3b:a5:30:be:8e:84:3b:0c:9c:dd:b9:a0:fa:a2:70:ed:16:4c: d3:7f:12:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICES8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjQwNTMwMTgxMjA4WhcNMjQwNjA2MTgxMjA4WjAYMRYwFAYD VQQDEw02NjU4YzE3OS03NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw430d0PT9GhKc/avc9qMmi6iQlKnygiXSB3Noi20KiTGmzWlZqmhG66mkBnZ SAD89a9fD1tlIn4wRwZ0pfvC3VFwkqEDLCIHcpeVM0UVIcNevyCLh/PCwoiP0Pbi W/7Ua8zxvoiqybJWTKVW8vJq/Qjwro7Txnzh+A20i/vg/8MCWsrSYkx6c98LJHux asr5qe0+Js8WpM0huu729AMQcdvdNehtpgIh/HwTnh4kfUBvFH9XQKBGFb4iIcU9 VpMBBpjAQtp3excForRwWkPVlx+7gw+RW0/9yhbJgwlALkaud3pEQb03lm2Y/6NQ p1E3hTTM84N4OSG1BP3d4bN1HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOfQqVY ycDzX8+9x0YN+LbtuMTXMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALNqSUkB+nqmUGNCkK76d0e07GzB0N3VJ8XtTr2K9C6Ev4PhcNwA85 XLfWfUqosCGTFFUhm97O0aAu1R3No5pDYiZCTokSKNLnr9Zq7I1ZjA6dwEnxWJko g2DHeO1Oq+qC3b3LkEuoZ48020cC94OC5GbW+6/HznaduhA+/fzIYfaDyrUb6dgo CFUzURgQbayTwjYZHwye9CuV+KU7dM4LFiXZp8wTc7WXl6zZZbmZeH7Ey5ocitsV CiPxqTIxUiYEkK5oZlU4y/dkKkZAa4aa/kt5QfumBPboLDopi92GSoVRutWaRyr/ wfU7pTC+joQ7DJzduaD6onDtFkzTfxLH -----END CERTIFICATE-----Generated at Thu May 30 21:49:41 2024 by rpki-client on console-ams.rpki-client.org