$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft File: LIi8YKOEeXk7VUcMN37SPqAtByI.mft (raw, json) Hash identifier: t+T1gn+63TNchP8jxx0+yhkKROXXutS5tD3GtBEIh+w= Subject key identifier: 89:31:52:23:77:D2:24:D5:B7:B8:32:24:0F:8E:5E:B4:C4:D9:F2:04 Authority key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22 Certificate issuer: /CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft Manifest number: CF Signing time: Fri 31 May 2024 06:57:45 +0000 Manifest this update: Fri 31 May 2024 06:57:44 +0000 Manifest next update: Fri 07 Jun 2024 06:57:44 +0000 Files and hashes: 1: LIi8YKOEeXk7VUcMN37SPqAtByI.crl (hash: pGmxje7Dn4GJ078lp56ekO5o2mI7xzztKaFPDbx/kpQ=) 2: 97EFA28EE5A911ED80EF757BC4F9AE02.roa (hash: FqYmcTF/6Y1nQYcY29/jdoG0ePxilWZunrJgFCUco84=) 3: ED0DECA6E5A611EDADDD1074C4F9AE02.roa (hash: WeqYps0Qtp/XizbhrFlCHWKpyxU3wF9WzGSxXPO5gDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722 Validity Not Before: May 31 06:57:44 2024 GMT Not After : Jun 7 06:57:44 2024 GMT Subject: CN=665974e8-dc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:fd:98:38:cc:11:66:ab:f1:94:7e:d5:38: a1:35:df:1b:d1:b6:d5:80:5b:b7:12:1c:09:ef:58: 92:32:59:d8:7f:13:f0:4e:1b:a4:f5:6e:3f:64:da: 0c:83:3b:0a:c0:bb:14:01:7a:70:9a:5c:36:4d:f6: 0e:10:8a:9a:9d:89:9d:1d:47:07:6b:85:0c:97:6a: 70:6b:91:28:3b:ac:9c:db:03:72:3d:a3:8a:af:71: 99:1b:35:88:bf:84:0d:f5:53:98:06:68:f8:50:79: 00:dc:8a:2e:99:10:6c:56:c5:30:d6:4a:d5:75:83: b2:fe:f7:d8:be:d6:1f:c8:e0:14:8a:17:ca:8d:83: cd:e9:a9:c2:97:9a:5f:9b:4d:02:07:76:ba:54:d2: 3a:77:12:5a:98:e9:3b:44:09:db:30:9b:80:6a:c8: 2f:7d:f9:fb:4f:58:3f:7f:cd:61:25:36:81:66:b4: 7d:12:4f:db:fd:28:e7:a6:6f:a0:4d:c1:43:91:9b: 0d:16:76:fe:b5:f1:28:10:ac:da:18:2a:02:af:c1: 04:0f:a9:33:1d:c2:6c:c7:1c:00:dd:04:55:e5:98: ee:c6:e8:3d:26:05:10:b3:b2:38:40:cc:99:5a:fe: 3c:1a:44:28:7c:06:f2:78:43:c2:b6:8a:8b:9d:24: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:31:52:23:77:D2:24:D5:B7:B8:32:24:0F:8E:5E:B4:C4:D9:F2:04 X509v3 Authority Key Identifier: keyid:2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ac:9b:79:a3:81:3e:41:b0:5b:55:29:09:1e:44:1c:77:70: 90:a7:36:34:5b:c9:88:8c:7c:06:da:96:b6:d3:eb:bc:ab:62: 2d:9b:82:f1:0b:71:9d:8a:c9:92:c3:49:53:dc:6c:b1:ff:20: f1:86:af:9e:24:9a:fb:d5:8d:6e:95:95:d2:0c:0f:55:ea:f9: 49:b2:7d:d0:f7:e3:25:ef:79:8b:fa:24:f5:5d:fa:99:d4:dd: ec:df:22:92:f8:9f:91:89:de:35:04:c6:1f:67:a3:6a:8d:1d: ba:d3:ee:a4:b0:14:f7:76:56:47:66:b0:ed:09:7b:57:77:4a: 00:58:6d:4f:16:2e:f5:58:a4:1d:08:66:13:eb:38:ba:6f:9c: c8:30:8a:8a:da:5a:44:4c:ab:7c:87:e6:5f:c3:80:ba:c5:36: 41:51:7c:dd:b4:4e:76:45:23:1c:10:a6:3f:d0:fa:d5:f4:84: 50:b6:04:1e:fe:7d:5f:47:7e:74:6e:1f:94:3f:54:a0:2a:aa: 58:36:ab:d1:b0:c6:28:d1:3f:4a:86:2a:69:1a:80:40:70:94: 2b:0e:b1:4e:b9:79:77:9b:e8:f8:f5:7e:34:c8:cf:e6:9b:10: d2:e0:3d:6b:f6:73:cd:c1:85:8c:87:d7:aa:af:64:36:ef:18: 9d:79:3a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxMTQxMTAvBgNVBAUTKDJDODhCQzYwQTM4NDc5NzkzQjU1NDcwQzM3N0VEMjNF QTAyRDA3MjIwHhcNMjQwNTMxMDY1NzQ0WhcNMjQwNjA3MDY1NzQ0WjAYMRYwFAYD VQQDEw02NjU5NzRlOC1kYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNf9mDjMEWar8ZR+1TihNd8b0bbVgFu3EhwJ71iSMlnYfxPwThuk9W4/ZNoM gzsKwLsUAXpwmlw2TfYOEIqanYmdHUcHa4UMl2pwa5EoO6yc2wNyPaOKr3GZGzWI v4QN9VOYBmj4UHkA3IoumRBsVsUw1krVdYOy/vfYvtYfyOAUihfKjYPN6anCl5pf m00CB3a6VNI6dxJamOk7RAnbMJuAasgvffn7T1g/f81hJTaBZrR9Ek/b/Sjnpm+g TcFDkZsNFnb+tfEoEKzaGCoCr8EED6kzHcJsxxwA3QRV5Zjuxug9JgUQs7I4QMyZ Wv48GkQofAbyeEPCtoqLnSSlzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkxUiN3 0iTVt7gyJA+OXrTE2fIEMB8GA1UdIwQYMBaAFCyIvGCjhHl5O1VHDDd+0j6gLQci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTExNC8zNEUxOUU4OEU1 QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtPRWVYazdWVWNNTjM3U1BxQXRC eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJaThZS09FZVhrN1ZVY01OMzdTUHFBdEJ5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTExNC8zNEUxOUU4OEU1QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtPRWVY azdWVWNNTjM3U1BxQXRCeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5rJt5o4E+QbBbVSkJHkQcd3CQpzY0W8mIjHwG2pa20+u8q2Itm4Lx C3GdismSw0lT3Gyx/yDxhq+eJJr71Y1ulZXSDA9V6vlJsn3Q9+Ml73mL+iT1XfqZ 1N3s3yKS+J+Rid41BMYfZ6NqjR260+6ksBT3dlZHZrDtCXtXd0oAWG1PFi71WKQd CGYT6zi6b5zIMIqK2lpETKt8h+Zfw4C6xTZBUXzdtE52RSMcEKY/0PrV9IRQtgQe /n1fR350bh+UP1SgKqpYNqvRsMYo0T9KhippGoBAcJQrDrFOuXl3m+j49X40yM/m mxDS4D1r9nPNwYWMh9eqr2Q27xideTrL -----END CERTIFICATE-----Generated at Fri May 31 08:39:01 2024 by rpki-client on console-fra.rpki-client.org