$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: BycnJFdqgd3xz8D+EidjV0Y5LOEg3+cp1WyFTp+HJFM= Subject key identifier: 0B:84:51:65:FA:3A:23:12:0F:2C:58:E4:82:DB:B8:BE:B0:7B:A6:84 Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 08D5 Signing time: Sat 18 May 2024 21:24:42 +0000 Manifest this update: Sat 18 May 2024 21:24:41 +0000 Manifest next update: Sat 25 May 2024 21:24:41 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: LNaVwIVwX6U3Gh6l30bX9msN9TkxBOYuiGvuFDab9kY=) 2: 6C3807ACED3A11ECABFC542BC4F9AE02.roa (hash: BfYBsfYcVi5bfchEKl8di+/Q19eLkXQVEQQrecpfABY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: May 18 21:24:41 2024 GMT Not After : May 25 21:24:41 2024 GMT Subject: CN=66491c99-0a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:98:76:02:0a:63:93:a0:5c:97:6e:3d:7a: ff:51:42:76:b9:1a:79:ce:f2:76:07:57:be:26:61: a9:2a:80:4d:d3:fc:47:c7:f4:87:56:30:63:df:aa: 39:35:99:e5:b6:80:ec:21:e0:a0:a8:4e:ea:db:5f: f8:fc:f8:ab:e8:ba:fd:d0:44:f6:ad:7c:52:b6:46: 99:94:03:85:b9:fd:5f:25:c4:ab:a4:17:21:53:8a: 1c:d4:5d:3a:cb:4e:df:18:58:53:43:95:07:b3:83: e1:01:43:94:98:c4:8a:7b:dd:ea:9e:32:7c:58:65: 4f:d8:bb:2e:15:5e:15:b9:9f:c1:d9:5e:3b:eb:6a: 2b:2e:b0:41:7c:a6:67:9e:ba:98:0f:b6:e4:a9:1a: 24:1b:ce:91:4e:56:0a:92:c5:a6:b8:d4:bc:db:c3: ee:3d:a8:cb:15:9f:52:43:33:9a:6b:2c:83:05:31: 2e:77:4e:5f:66:dc:e6:cb:85:97:75:e3:85:d7:26: 64:eb:6c:e9:7a:cf:16:56:7b:9f:bc:33:80:a6:b8: 4b:3b:b6:b6:0e:30:8d:e5:b7:9e:ca:f4:84:82:e8: 92:81:f9:f4:d4:be:3b:c3:12:80:41:40:27:e1:f7: 26:78:5b:78:53:4c:e4:f4:eb:46:58:7d:47:63:33: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:51:65:FA:3A:23:12:0F:2C:58:E4:82:DB:B8:BE:B0:7B:A6:84 X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:2d:0e:84:d3:03:a4:e6:ff:1e:e8:01:26:a0:76:60:ca: 6b:33:45:49:90:bb:27:11:7c:7f:16:56:e2:ce:c6:cd:c1:4d: 9c:cc:27:25:00:38:97:fe:f2:74:1f:ef:3d:74:71:fe:dd:46: b4:dc:a0:1c:be:6a:9e:3d:9f:e6:c5:72:a3:32:ed:dc:4a:de: 75:14:af:81:10:f7:e0:44:ec:24:e0:2e:ad:94:30:7d:2d:c4: e6:98:d1:cf:c3:63:82:db:7c:70:3a:28:ce:8a:83:72:b4:15: ee:1c:50:e6:d0:24:b6:f8:a0:ad:30:e8:6e:be:bb:b5:df:87: e4:4d:b7:f7:d2:9b:f0:81:49:b5:f8:d0:1e:24:d9:cf:ab:89: 47:40:1b:2a:e2:98:94:63:91:c8:18:dc:a8:9f:17:84:8b:2f: 0c:ed:fa:1e:04:4c:f1:16:41:73:3c:9d:1c:31:a9:86:24:a1: cc:93:d4:fd:ec:08:2e:d8:0d:85:96:ef:e6:11:e8:21:f3:cc: 38:bd:31:e7:e4:d7:e6:06:30:8d:52:fe:69:64:b7:b5:b5:c6: 98:22:08:9a:d9:00:e8:48:42:fd:d5:ee:cc:d7:cf:8f:9e:17: 06:94:82:2a:ef:9d:d0:6a:a9:58:40:01:c2:37:52:21:5b:08: 09:61:a3:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjQwNTE4MjEyNDQxWhcNMjQwNTI1MjEyNDQxWjAYMRYwFAYD VQQDEw02NjQ5MWM5OS0wYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubeYdgIKY5OgXJduPXr/UUJ2uRp5zvJ2B1e+JmGpKoBN0/xHx/SHVjBj36o5 NZnltoDsIeCgqE7q21/4/Pir6Lr90ET2rXxStkaZlAOFuf1fJcSrpBchU4oc1F06 y07fGFhTQ5UHs4PhAUOUmMSKe93qnjJ8WGVP2LsuFV4VuZ/B2V4762orLrBBfKZn nrqYD7bkqRokG86RTlYKksWmuNS828PuPajLFZ9SQzOaayyDBTEud05fZtzmy4WX deOF1yZk62zpes8WVnufvDOAprhLO7a2DjCN5beeyvSEguiSgfn01L47wxKAQUAn 4fcmeFt4U0zk9OtGWH1HYzOTBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuEUWX6 OiMSDyxY5ILbuL6we6aEMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPJS0OhNMDpOb/HugBJqB2YMprM0VJkLsnEXx/FlbizsbNwU2czCcl ADiX/vJ0H+89dHH+3Ua03KAcvmqePZ/mxXKjMu3cSt51FK+BEPfgROwk4C6tlDB9 LcTmmNHPw2OC23xwOijOioNytBXuHFDm0CS2+KCtMOhuvru134fkTbf30pvwgUm1 +NAeJNnPq4lHQBsq4piUY5HIGNyonxeEiy8M7foeBEzxFkFzPJ0cMamGJKHMk9T9 7Agu2A2Flu/mEegh88w4vTHn5NfmBjCNUv5pZLe1tcaYIgia2QDoSEL91e7M18+P nhcGlIIq753QaqlYQAHCN1IhWwgJYaMN -----END CERTIFICATE-----Generated at Sat May 18 22:14:05 2024 by rpki-client on console-fra.rpki-client.org