$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: 3HgxHQqEhiIFp1kVE9i7MQDaUMaZK2S2KdP2h3NU+iA= Subject key identifier: 34:11:77:0E:26:A5:7B:27:4A:93:6B:2D:FD:58:A4:C8:DC:A0:BD:41 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0347 Signing time: Sun 19 May 2024 02:57:06 +0000 Manifest this update: Sun 19 May 2024 02:57:05 +0000 Manifest next update: Sun 26 May 2024 02:57:05 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: VFEbxGwgrR4sqJ5Jw2dUg9wO8jc5dJivjkG3PJg4qzw=) 2: 0252B276D10711EE80DDFA5FC4F9AE02.roa (hash: ljpVfhGkQcqyCyy6QYs7XJYkpqPOcl6hX7xoxsXnqVs=) 3: A8827568116911EEBB241C32C4F9AE02.roa (hash: Qc67Zl9xH5UQVVuJaiSmRCShgX4fnvxw7leOq59EYpg=) 4: 8BA87150D10711EE8A757976C4F9AE02.roa (hash: HQ8PoKA7J1OoTe2Ioi360r/95b+SHPxrvwIHfzaOrgo=) 5: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: qtIjXGWFBwLcXf/7DCnDMfdtxosWwEooU8YqRW4JUKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: May 19 02:57:05 2024 GMT Not After : May 26 02:57:05 2024 GMT Subject: CN=66496a82-f326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:6f:cf:bf:99:16:b4:30:75:fe:9f:86:db: 67:a0:0e:ce:64:8f:f5:ad:bf:de:8b:93:de:3d:af: 34:d9:25:92:d1:2c:21:5b:4e:95:cb:3b:e8:b5:65: 06:46:f2:53:4d:a1:67:81:8f:1f:29:23:36:66:70: 63:f5:ce:7d:f4:6b:d0:d7:6f:21:a8:68:ea:f4:ce: 43:34:4e:c0:1a:02:16:a4:fa:2a:8f:44:0b:60:49: 60:5e:58:45:b6:bb:97:2e:d3:8e:af:be:be:33:67: 23:1c:db:e0:68:85:9f:73:89:15:e7:02:dd:ad:54: ec:e9:d0:7a:4d:7c:f5:de:a3:d6:11:c0:c5:de:f4: 24:26:19:21:86:45:28:23:e0:80:11:2c:dc:3f:de: d3:6c:c8:eb:b7:b2:fe:9c:68:61:13:3b:90:74:f1: 94:39:c3:96:b4:4d:23:c6:11:37:1a:14:f4:aa:b9: 70:ba:8b:6d:c8:73:5d:05:73:3a:38:3e:30:0d:32: fc:cc:b4:a3:6b:8a:45:b9:1b:b9:a6:aa:74:70:8c: b7:c2:2f:11:c7:64:d6:5e:d6:2a:d8:c0:ba:cf:56: f8:49:84:7f:d2:16:be:c1:10:19:4c:15:d9:35:b6: cc:34:1f:8f:bb:15:ee:d6:60:54:67:7d:47:fb:5e: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:11:77:0E:26:A5:7B:27:4A:93:6B:2D:FD:58:A4:C8:DC:A0:BD:41 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:67:c6:35:ab:35:9b:30:fc:5f:f5:d3:bf:a9:a6:2e:be:c0: ff:0f:4c:5d:20:ab:12:98:1e:c2:8d:30:00:17:70:28:88:04: 92:a3:b1:3c:50:b7:5a:89:26:c7:7a:9a:e7:f7:33:cd:3c:aa: f9:c0:6d:c9:0c:e5:f2:93:9f:24:6e:ad:46:2c:4e:fd:b1:85: d8:d0:76:ba:f6:7d:fd:3f:fc:83:fb:24:a5:43:5c:db:ea:dc: 67:bf:2c:42:0b:6e:76:4f:cc:96:b9:16:05:65:1d:3c:b5:20: 7e:bb:4c:d2:61:ca:c6:58:af:dc:3d:97:15:0e:3f:54:c8:36: 86:a2:f7:82:94:d6:b5:8a:bd:c6:39:37:57:6a:72:cc:1e:e6: 4f:34:fe:4b:19:8f:0a:6f:10:f0:dd:33:2c:8c:ee:59:ce:7a: 5c:b8:43:1d:e9:78:41:59:24:da:3b:6a:0e:30:fd:ca:1b:34: 61:bd:72:5f:2b:c8:f5:16:3e:68:49:f9:66:65:c9:71:a9:d6: bf:71:0f:01:ce:eb:ac:21:fd:ee:19:88:25:50:1c:d0:b1:89: 91:19:41:58:3d:0c:e5:2c:cf:64:36:10:73:9f:66:bf:f7:fe: ac:32:6c:20:d0:91:68:ee:42:2c:76:65:04:e9:5d:fc:dc:f5: 75:25:0c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjQwNTE5MDI1NzA1WhcNMjQwNTI2MDI1NzA1WjAYMRYwFAYD VQQDEw02NjQ5NmE4Mi1mMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Otvz7+ZFrQwdf6fhttnoA7OZI/1rb/ei5PePa802SWS0SwhW06VyzvotWUG RvJTTaFngY8fKSM2ZnBj9c599GvQ128hqGjq9M5DNE7AGgIWpPoqj0QLYElgXlhF truXLtOOr76+M2cjHNvgaIWfc4kV5wLdrVTs6dB6TXz13qPWEcDF3vQkJhkhhkUo I+CAESzcP97TbMjrt7L+nGhhEzuQdPGUOcOWtE0jxhE3GhT0qrlwuottyHNdBXM6 OD4wDTL8zLSja4pFuRu5pqp0cIy3wi8Rx2TWXtYq2MC6z1b4SYR/0ha+wRAZTBXZ NbbMNB+PuxXu1mBUZ31H+16RNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQRdw4m pXsnSpNrLf1YpMjcoL1BMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVZ8Y1qzWbMPxf9dO/qaYuvsD/D0xdIKsSmB7CjTAAF3AoiASSo7E8 ULdaiSbHeprn9zPNPKr5wG3JDOXyk58kbq1GLE79sYXY0Ha69n39P/yD+ySlQ1zb 6txnvyxCC252T8yWuRYFZR08tSB+u0zSYcrGWK/cPZcVDj9UyDaGoveClNa1ir3G OTdXanLMHuZPNP5LGY8KbxDw3TMsjO5ZznpcuEMd6XhBWSTaO2oOMP3KGzRhvXJf K8j1Fj5oSflmZclxqda/cQ8BzuusIf3uGYglUBzQsYmRGUFYPQzlLM9kNhBzn2a/ 9/6sMmwg0JFo7kIsdmUE6V383PV1JQwK -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org