$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: 8u0FlPMqIT5dpEMANGnq3/9blZW/8xNbv3/h1RdZSiA= Subject key identifier: D2:9E:27:98:E3:BC:73:7F:58:D5:AE:B7:16:11:4C:E8:FE:93:0A:5E Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0B63 Signing time: Sat 18 May 2024 19:35:15 +0000 Manifest this update: Sat 18 May 2024 19:35:14 +0000 Manifest next update: Sat 25 May 2024 19:35:14 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: Skex097Pt8WUzgGHW59kcarcpqTv/x1n1jGln0H/htI=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: xVTFBNmOi1HL5rDX7+M+vUXncg1h8s61EzgOhvnvgE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: May 18 19:35:14 2024 GMT Not After : May 25 19:35:14 2024 GMT Subject: CN=664902f3-66e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:0d:25:59:b7:fe:7c:40:0e:f9:28:c0:fa: 6d:0a:8f:68:87:86:e7:0e:a7:6c:a1:9b:14:31:cf: 13:4c:fe:30:fd:71:ab:eb:54:1b:21:00:c5:b5:b6: bf:9a:58:ef:1e:be:e7:76:e8:68:b5:a7:ad:23:37: e0:ef:ce:56:ef:8b:db:88:a8:7d:f9:d6:93:1a:33: b1:42:d4:88:d1:07:27:a9:c8:8c:0f:e4:38:51:c0: a2:b2:a6:b1:ce:82:54:e9:70:f0:7a:9e:48:b2:06: 25:eb:ed:d8:32:cf:07:af:6e:c0:50:18:27:b9:17: 3f:a9:36:0a:0d:07:a9:98:bf:c1:bb:be:c3:de:b9: f1:05:b8:63:1f:b6:b8:08:cb:aa:e7:d5:5e:ca:3c: b4:18:9b:15:19:65:6f:be:da:0b:24:24:fa:72:3f: 01:6c:d3:00:78:74:6f:4b:d9:f1:d0:1b:a6:3b:e9: 31:3f:4a:17:68:45:e0:3b:fc:a7:79:ff:61:9a:84: ac:08:ab:c8:25:1b:5a:da:df:e7:25:ba:87:11:9a: f3:de:34:6e:61:ba:09:55:ea:af:4d:50:bc:36:6a: 7f:76:bc:cd:03:3f:d2:de:3a:37:3e:27:6a:64:84: b2:fb:af:df:a8:0f:7f:94:d7:35:ef:8a:9e:41:0d: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9E:27:98:E3:BC:73:7F:58:D5:AE:B7:16:11:4C:E8:FE:93:0A:5E X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:32:8c:33:43:fc:0f:b8:21:75:9d:7b:22:47:e1:2e:d0:79: 93:47:77:f4:2d:3a:40:c3:86:4c:fd:84:da:71:dc:3e:fa:36: 7e:2f:28:cd:0a:2c:cf:4b:ab:a9:2a:60:35:67:92:64:5c:b7: 6b:e7:0d:da:b6:08:88:3d:03:df:d6:45:ff:d5:cc:3f:aa:9f: 07:ae:9b:68:91:5d:7e:07:b7:13:9a:1f:8c:19:d2:8a:00:4f: 46:19:17:88:c2:70:22:78:ee:4c:ae:8a:1d:42:c7:c6:99:96: fa:87:44:ad:05:47:bd:f6:d8:19:de:6d:5e:36:56:34:5c:cd: 97:6d:5a:77:23:b6:f7:37:1b:9b:1a:5c:aa:f2:b7:41:10:33: c0:0f:c8:54:bc:61:c8:72:79:d3:de:c3:69:15:4e:96:81:15: 23:9e:90:1a:79:bc:e2:3f:0d:04:a9:c0:f1:df:d0:10:23:ad: cd:d1:e4:2f:15:11:58:44:39:87:06:8e:cf:63:a1:6f:c0:7c: 90:8c:a3:24:19:8d:c5:dc:db:05:37:b5:89:3d:a3:05:38:38: 56:45:72:55:3d:57:92:78:47:7d:fd:3d:23:7a:bf:e5:2c:9e: 9c:6d:3b:ad:3c:bc:9b:3e:d3:42:89:54:0b:a8:97:aa:68:74: ff:5e:cb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjQwNTE4MTkzNTE0WhcNMjQwNTI1MTkzNTE0WjAYMRYwFAYD VQQDEw02NjQ5MDJmMy02NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqcNJVm3/nxADvkowPptCo9oh4bnDqdsoZsUMc8TTP4w/XGr61QbIQDFtba/ mljvHr7nduhotaetIzfg785W74vbiKh9+daTGjOxQtSI0QcnqciMD+Q4UcCisqax zoJU6XDwep5IsgYl6+3YMs8Hr27AUBgnuRc/qTYKDQepmL/Bu77D3rnxBbhjH7a4 CMuq59Veyjy0GJsVGWVvvtoLJCT6cj8BbNMAeHRvS9nx0BumO+kxP0oXaEXgO/yn ef9hmoSsCKvIJRta2t/nJbqHEZrz3jRuYboJVeqvTVC8Nmp/drzNAz/S3jo3Pidq ZISy+6/fqA9/lNc174qeQQ29NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKeJ5jj vHN/WNWutxYRTOj+kwpeMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBMowzQ/wPuCF1nXsiR+Eu0HmTR3f0LTpAw4ZM/YTacdw++jZ+LyjN CizPS6upKmA1Z5JkXLdr5w3atgiIPQPf1kX/1cw/qp8HrptokV1+B7cTmh+MGdKK AE9GGReIwnAieO5MroodQsfGmZb6h0StBUe99tgZ3m1eNlY0XM2XbVp3I7b3Nxub Glyq8rdBEDPAD8hUvGHIcnnT3sNpFU6WgRUjnpAaebziPw0EqcDx39AQI63N0eQv FRFYRDmHBo7PY6FvwHyQjKMkGY3F3NsFN7WJPaMFODhWRXJVPVeSeEd9/T0jer/l LJ6cbTutPLybPtNCiVQLqJeqaHT/XstH -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org