$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: pjPBRUWMWvgPRTIMi828RKxoltrodaz+1bxxX40/3Zs= Subject key identifier: D9:8F:DA:0E:92:C0:47:3D:B8:8B:E3:DC:6E:77:0D:FF:5C:23:1C:DD Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 02ED Signing time: Sun 19 May 2024 03:18:47 +0000 Manifest this update: Sun 19 May 2024 03:18:47 +0000 Manifest next update: Sun 26 May 2024 03:18:47 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: BUwQROxw3XqajLutuW6L8n9IokuCptA43T62eXafukQ=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: hoH+aozMY2IU51e7wcI5cV7fi797Q+zPM7u/G866EuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: May 19 03:18:47 2024 GMT Not After : May 26 03:18:47 2024 GMT Subject: CN=66496f97-8d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:35:4f:cd:a3:07:e9:0c:7e:36:b2:85:cf: ce:28:f8:38:b3:e2:84:4d:44:8a:08:ad:ff:3d:88: 9b:74:87:45:49:07:31:27:a1:e5:de:fd:dd:20:31: cd:dc:25:00:7f:74:8f:22:37:b1:a0:c1:f6:48:06: d0:ea:48:fa:86:0e:ed:d7:d0:54:4a:59:a1:37:22: 4c:74:12:a6:b5:a5:72:fc:d5:e6:e2:5a:b4:ba:16: 6d:e6:21:67:72:11:73:82:89:57:5d:ca:6b:b8:39: c5:ed:c2:d7:ba:33:84:ec:91:67:7d:b2:6d:66:fe: f4:96:c8:a0:b0:f7:51:27:ec:12:2b:8d:64:75:bc: aa:bf:a2:13:19:1d:9a:2e:99:c4:29:52:f0:a0:76: 61:da:64:3f:7c:e1:97:f0:3e:23:86:b6:9a:46:76: 21:a7:d9:13:bf:21:eb:a9:5a:a1:01:14:a7:80:32: 9f:1c:0d:af:75:47:ee:23:69:22:7f:26:57:51:61: f0:7d:61:8a:6b:f6:2e:c2:0d:85:17:5f:6e:d0:0e: a4:ff:92:5b:e2:9c:df:11:39:56:32:98:c1:f4:40: d2:de:45:51:95:3d:5c:73:cc:e1:cc:e7:5a:8b:e2: 8d:5d:f5:73:8e:a4:8e:43:85:dd:94:89:b3:cc:dc: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8F:DA:0E:92:C0:47:3D:B8:8B:E3:DC:6E:77:0D:FF:5C:23:1C:DD X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2e:d3:a0:0c:12:94:e2:da:6a:38:98:ad:c6:26:26:af:4c: 4d:e4:fb:cf:17:ee:d0:7f:37:46:8f:f9:06:47:ae:3c:a7:9e: ab:ae:bf:fc:13:7c:a3:99:8a:38:6b:b5:c7:34:36:67:da:0e: b0:c9:c9:3f:89:6a:98:b1:f2:1d:57:9d:f2:3f:d8:02:e8:c9: 5d:3e:d2:0c:51:6d:e6:4e:bd:d4:4a:21:43:24:48:38:ee:1a: 38:26:5f:e2:02:b3:4f:22:b5:f9:95:e5:c2:40:97:0c:f7:bd: 0a:b4:5f:9a:e2:98:df:fe:ca:69:fe:46:8f:f5:df:fa:56:73: 06:fc:20:64:f5:39:b5:68:81:c6:6a:b3:56:b1:48:de:0d:8d: 6b:b4:f6:91:03:1f:8c:b0:2f:64:7f:44:c6:8c:1b:cb:00:13: 91:e3:f4:7e:84:0f:d4:0a:7b:ee:8b:dc:da:5e:91:e8:a2:42: 06:b3:c9:bf:1e:78:43:c1:04:dd:1f:88:47:e1:60:7d:7f:22: 91:df:93:12:c6:21:69:67:15:c8:9c:6c:17:21:aa:4a:17:9f: 08:e8:0f:bd:a9:c8:13:82:cd:27:ec:90:40:25:c6:56:81:62: 18:e9:60:1d:80:c7:3a:19:8a:1f:62:6b:6b:af:09:12:29:3c: 61:9a:a1:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjQwNTE5MDMxODQ3WhcNMjQwNTI2MDMxODQ3WjAYMRYwFAYD VQQDEw02NjQ5NmY5Ny04ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jQ1T82jB+kMfjayhc/OKPg4s+KETUSKCK3/PYibdIdFSQcxJ6Hl3v3dIDHN 3CUAf3SPIjexoMH2SAbQ6kj6hg7t19BUSlmhNyJMdBKmtaVy/NXm4lq0uhZt5iFn chFzgolXXcpruDnF7cLXujOE7JFnfbJtZv70lsigsPdRJ+wSK41kdbyqv6ITGR2a LpnEKVLwoHZh2mQ/fOGX8D4jhraaRnYhp9kTvyHrqVqhARSngDKfHA2vdUfuI2ki fyZXUWHwfWGKa/Yuwg2FF19u0A6k/5Jb4pzfETlWMpjB9EDS3kVRlT1cc8zhzOda i+KNXfVzjqSOQ4XdlImzzNwPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmP2g6S wEc9uIvj3G53Df9cIxzdMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCULtOgDBKU4tpqOJitxiYmr0xN5PvPF+7QfzdGj/kGR648p56rrr/8 E3yjmYo4a7XHNDZn2g6wyck/iWqYsfIdV53yP9gC6MldPtIMUW3mTr3USiFDJEg4 7ho4Jl/iArNPIrX5leXCQJcM970KtF+a4pjf/spp/kaP9d/6VnMG/CBk9Tm1aIHG arNWsUjeDY1rtPaRAx+MsC9kf0TGjBvLABOR4/R+hA/UCnvui9zaXpHookIGs8m/ HnhDwQTdH4hH4WB9fyKR35MSxiFpZxXInGwXIapKF58I6A+9qcgTgs0n7JBAJcZW gWIY6WAdgMc6GYofYmtrrwkSKTxhmqGo -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org