$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: jzH3AVWAOdnkFg2M29z/FodVsv8dUVxzHaUF3ptDytI= Subject key identifier: EC:25:D9:62:24:0A:D3:1E:5C:52:02:E9:E8:9F:02:C6:BD:D6:30:57 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 032B Signing time: Sun 19 May 2024 03:01:03 +0000 Manifest this update: Sun 19 May 2024 03:01:02 +0000 Manifest next update: Sun 26 May 2024 03:01:02 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: 2IdsDvsJlGVnN47Cg5BB8IEYRd6rLYbkEXSW2PoSPts=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 6xprviQ5lZ30ync43cM7NG0EsLbka8U2e313DgawSyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: May 19 03:01:02 2024 GMT Not After : May 26 03:01:02 2024 GMT Subject: CN=66496b6f-d9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:9f:bf:ae:93:56:49:61:df:66:a7:b4:c0: b0:5b:0a:1b:1b:66:d8:8d:55:6d:c9:de:1d:33:3d: 59:81:4e:82:fa:0f:ca:92:28:72:62:e3:ca:f6:9e: 10:74:78:03:d0:8d:0c:06:69:cd:92:a3:b6:cf:01: 87:1e:16:96:2e:72:69:98:05:2a:44:52:d7:2b:21: fb:df:57:2a:06:f4:16:2d:35:72:88:6c:21:b6:a3: 5f:af:e6:53:f5:1e:e8:a3:6d:a2:db:4a:9e:f3:6c: 03:16:79:5f:82:c8:df:46:05:40:f5:0c:ed:1d:05: af:58:fc:50:b6:23:ac:92:93:c2:10:86:82:32:0d: 33:c4:99:62:56:64:dc:b4:c9:72:72:6c:db:3f:19: 03:21:d0:30:ed:41:ed:aa:a5:09:d2:83:c9:d5:04: 75:71:7b:57:9e:c3:1c:6f:ca:16:83:7c:70:81:0c: e1:a3:d5:26:7e:2d:b9:e6:e9:6f:c6:3e:e7:38:21: ae:ea:37:7f:dc:ae:e4:84:bb:64:1e:0c:91:39:d1: bd:14:6b:e9:52:86:c2:05:2d:30:c8:23:cb:54:9f: ce:95:47:95:64:4b:6c:f0:20:ce:11:43:ce:50:17: f6:9b:5f:bf:31:3e:5a:07:c7:a2:63:37:ce:96:66: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:25:D9:62:24:0A:D3:1E:5C:52:02:E9:E8:9F:02:C6:BD:D6:30:57 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:7b:ea:a8:a7:54:c5:d6:64:d5:66:0a:78:73:ee:52:dc:48: e7:23:0f:d9:2b:84:25:12:f2:04:b0:1f:80:f4:1e:19:98:a7: 34:ed:ae:a4:8d:3d:ae:23:62:2e:ed:61:a7:22:24:78:db:64: d6:90:3d:85:4a:ca:c7:b3:00:20:b6:0a:41:8d:3e:e0:05:3a: 32:d9:5c:b9:aa:15:3a:95:4e:dd:e4:05:46:b7:4d:a1:85:5b: fe:6a:13:a8:2e:1f:ee:df:08:5e:3e:9e:96:b8:4d:78:91:2b: 18:86:4a:91:82:0d:8b:0c:ec:0d:a5:a3:24:3d:2b:c9:56:44: cb:c4:8f:cf:6b:77:07:7a:53:da:31:26:19:8f:83:4b:a6:42: 02:bc:f9:e2:77:ac:e3:12:59:0a:45:36:ce:0c:94:27:96:d8: 80:a2:e8:bf:1e:15:13:eb:f7:ca:12:a8:9a:07:1a:b7:06:df: e2:88:26:55:11:2e:27:6f:c2:c5:f8:32:22:c4:65:49:28:7b: 4f:0d:8a:18:e7:21:10:b9:a4:36:25:1c:a9:52:64:4d:26:53: de:93:85:46:29:60:8e:11:c7:a0:d2:c9:3d:61:07:3d:10:b0: e1:3d:b9:8e:43:78:4b:4e:dd:04:6d:ea:59:cd:86:6f:97:4d: e3:13:d4:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjQwNTE5MDMwMTAyWhcNMjQwNTI2MDMwMTAyWjAYMRYwFAYD VQQDEw02NjQ5NmI2Zi1kOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV6fv66TVklh32antMCwWwobG2bYjVVtyd4dMz1ZgU6C+g/KkihyYuPK9p4Q dHgD0I0MBmnNkqO2zwGHHhaWLnJpmAUqRFLXKyH731cqBvQWLTVyiGwhtqNfr+ZT 9R7oo22i20qe82wDFnlfgsjfRgVA9QztHQWvWPxQtiOskpPCEIaCMg0zxJliVmTc tMlycmzbPxkDIdAw7UHtqqUJ0oPJ1QR1cXtXnsMcb8oWg3xwgQzho9Umfi255ulv xj7nOCGu6jd/3K7khLtkHgyROdG9FGvpUobCBS0wyCPLVJ/OlUeVZEts8CDOEUPO UBf2m1+/MT5aB8eiYzfOlmbx9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwl2WIk CtMeXFIC6eifAsa91jBXMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYe+qop1TF1mTVZgp4c+5S3EjnIw/ZK4QlEvIEsB+A9B4ZmKc07a6k jT2uI2Iu7WGnIiR422TWkD2FSsrHswAgtgpBjT7gBToy2Vy5qhU6lU7d5AVGt02h hVv+ahOoLh/u3whePp6WuE14kSsYhkqRgg2LDOwNpaMkPSvJVkTLxI/Pa3cHelPa MSYZj4NLpkICvPnid6zjElkKRTbODJQnltiAoui/HhUT6/fKEqiaBxq3Bt/iiCZV ES4nb8LF+DIixGVJKHtPDYoY5yEQuaQ2JRypUmRNJlPek4VGKWCOEceg0sk9YQc9 ELDhPbmOQ3hLTt0EbepZzYZvl03jE9Ty -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org