$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: FNQ/u0QKoS9CtMzjqS8lLoSN2hJZEwBsbAzcXVlSbNc= Subject key identifier: 04:42:07:F9:76:65:7E:6B:45:6A:C4:EC:E2:1B:EC:97:08:9E:E4:B7 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 10D8 Signing time: Sat 18 May 2024 21:22:45 +0000 Manifest this update: Sat 18 May 2024 21:22:44 +0000 Manifest next update: Sat 25 May 2024 21:22:44 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: o7BNh9JyBo7svVGmMYY/CgYw+OV+91gRYC+Oi5igQdc=) 2: 4FD095F0045611EEAABA8378C4F9AE02.roa (hash: /wsmnHSvdhR0eXj2ZYFfaPcqvnJyIV8OMXrW2ADzPig=) 3: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yc/5nfOTItcG0NV1AdeMQ8Pj65RtxD47YTJrDDnkdqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: May 18 21:22:44 2024 GMT Not After : May 25 21:22:44 2024 GMT Subject: CN=66491c25-86ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:ab:ac:61:d3:b8:3b:98:ce:40:e2:d3:1a: d9:4d:75:bb:51:19:00:69:ae:4d:be:4a:4d:60:6c: 91:f8:7f:84:44:94:55:2a:b2:21:e0:d4:31:28:af: 09:ec:e7:72:cb:00:30:91:34:af:a0:53:a3:2c:5a: a6:8d:8d:af:bb:30:6b:85:2d:01:8d:f1:46:69:0f: fb:d2:a0:ad:61:eb:ad:70:6f:47:e0:79:23:66:8c: 06:7a:09:fd:a9:b7:ea:53:fc:ab:96:8a:f7:cb:0a: 2f:42:7c:8a:ce:b8:6e:ec:b5:c8:8a:b8:f0:83:c3: 62:51:d6:d2:a8:60:e9:a2:45:97:5b:71:95:2a:60: 27:56:c8:56:6b:08:85:16:38:65:41:96:f1:84:30: a6:d6:09:9c:9e:0a:80:42:7a:3b:76:9d:2d:9d:2e: 75:59:c0:01:69:e0:f0:f1:1b:d0:ea:2d:07:3d:28: a8:4d:d2:f8:2d:f1:47:6c:4c:d8:5f:29:5e:90:d4: d6:01:14:b7:fa:42:ed:6b:af:57:4c:37:f9:78:b7: ff:6b:9d:4f:7d:b4:f9:f3:50:cf:cb:f4:57:f5:83: 89:61:9c:0b:81:58:be:2d:9c:6d:0c:0e:08:36:8d: 24:3d:ac:d5:d6:8a:fe:8d:d2:ff:91:ac:c2:f7:bf: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:07:F9:76:65:7E:6B:45:6A:C4:EC:E2:1B:EC:97:08:9E:E4:B7 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:15:b2:21:49:18:aa:ab:27:57:c7:21:e6:75:17:7f:9d:68: 30:d0:77:27:77:08:e9:30:3a:06:78:0f:51:3d:5e:bc:e4:c1: c9:f9:7f:44:39:c1:66:6d:59:d6:93:01:21:4f:23:90:b3:ea: 0b:93:0a:45:4e:3c:d1:9e:f5:0b:ee:46:be:42:72:40:56:ab: d0:18:ac:9b:7b:9c:9c:a7:97:90:f2:e5:66:94:1c:d9:70:81: 80:d3:2c:af:a8:31:8e:df:21:99:22:b8:7a:fe:45:53:a2:ee: 16:21:3e:83:87:a0:7e:c4:02:f4:33:e1:ca:16:f7:49:1d:7d: 96:c8:5a:ab:3a:7d:f9:ce:f0:13:ce:30:ac:8c:11:d3:60:bc: 65:77:41:f6:37:db:f6:9b:22:d3:32:5d:cd:e0:05:1b:fe:cc: f7:8a:1a:ba:a0:b2:c5:61:15:87:36:96:a4:1d:84:02:09:c7: 0a:b3:e6:2a:2b:ee:3e:3d:54:8a:4e:87:28:66:53:36:e3:b4: 51:bf:c7:a6:48:7a:d8:e7:59:d1:e9:80:ed:33:4d:18:54:60: 4b:34:b3:64:e1:7e:1b:65:0f:c9:ee:c0:54:9d:e5:59:87:51: 93:e9:55:eb:7b:69:e3:22:9a:32:0c:06:ce:18:19:27:32:85: 3f:7e:fb:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjQwNTE4MjEyMjQ0WhcNMjQwNTI1MjEyMjQ0WjAYMRYwFAYD VQQDEw02NjQ5MWMyNS04NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm6rrGHTuDuYzkDi0xrZTXW7URkAaa5NvkpNYGyR+H+ERJRVKrIh4NQxKK8J 7OdyywAwkTSvoFOjLFqmjY2vuzBrhS0BjfFGaQ/70qCtYeutcG9H4HkjZowGegn9 qbfqU/yrlor3ywovQnyKzrhu7LXIirjwg8NiUdbSqGDpokWXW3GVKmAnVshWawiF FjhlQZbxhDCm1gmcngqAQno7dp0tnS51WcABaeDw8RvQ6i0HPSioTdL4LfFHbEzY XylekNTWARS3+kLta69XTDf5eLf/a51PfbT581DPy/RX9YOJYZwLgVi+LZxtDA4I No0kPazV1or+jdL/kazC9791BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARCB/l2 ZX5rRWrE7OIb7JcInuS3MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIFbIhSRiqqydXxyHmdRd/nWgw0HcndwjpMDoGeA9RPV685MHJ+X9E OcFmbVnWkwEhTyOQs+oLkwpFTjzRnvUL7ka+QnJAVqvQGKybe5ycp5eQ8uVmlBzZ cIGA0yyvqDGO3yGZIrh6/kVTou4WIT6Dh6B+xAL0M+HKFvdJHX2WyFqrOn35zvAT zjCsjBHTYLxld0H2N9v2myLTMl3N4AUb/sz3ihq6oLLFYRWHNpakHYQCCccKs+Yq K+4+PVSKTocoZlM247RRv8emSHrY51nR6YDtM00YVGBLNLNk4X4bZQ/J7sBUneVZ h1GT6VXre2njIpoyDAbOGBknMoU/fvuC -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org