$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: rRWlc2xFj7EYi8FkFxmIN8rkC2lm7BqiafaHZgTXCdc= Subject key identifier: 0A:60:C2:5D:8F:5B:B8:82:7B:E0:1F:84:5C:3C:C5:AF:67:F0:DA:A5 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: BB Signing time: Thu 23 May 2024 06:23:34 +0000 Manifest this update: Thu 23 May 2024 06:23:33 +0000 Manifest next update: Thu 30 May 2024 06:23:33 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: MFCLGCXkbZW/I/s5GjDxd175NKJ+M5R8D52h8d/BF6A=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: nhI0nB5/daiDMaNYbS7O1C+KsItEjwRF+IwhwvPQPLo=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: 7GZREky1ayhly5hfTHnfURxdwW5Q45YQnIXUKESy260=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 06:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: May 23 06:23:33 2024 GMT Not After : May 30 06:23:33 2024 GMT Subject: CN=664ee0e6-baf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:67:1f:30:f1:4a:c4:c2:3e:c5:af:e9:46: d4:18:26:2e:42:70:17:c5:47:31:80:d1:76:0b:d6: 4d:77:b1:12:79:c7:1d:74:fd:2a:41:7a:55:61:c1: 42:84:2f:74:af:2e:98:81:c2:85:c5:93:c6:70:67: 86:0d:f8:72:3c:24:33:0b:07:a1:70:81:f9:70:10: c3:ae:8a:22:70:92:4e:da:66:7a:87:14:a5:8a:27: 2a:1e:39:6e:eb:76:77:c3:ea:f5:65:4c:90:d0:79: 6d:5c:74:0b:23:b3:35:52:b9:b3:19:3c:cd:f7:f5: c9:bc:95:93:8b:cc:e6:9b:bd:53:b0:ce:85:92:3a: 83:4e:04:54:60:8d:b5:c4:4a:19:44:2a:d6:a5:61: 3a:3c:6e:b3:cf:3c:e8:dc:76:d6:14:ad:d1:3d:d8: a7:0b:0e:5b:12:99:8a:67:13:f8:70:c2:21:2e:f7: e7:9c:41:64:31:65:0f:6e:ab:b3:95:63:6c:33:48: 47:60:6b:4b:0b:ca:28:75:c6:68:bf:38:6d:36:9a: df:2b:95:7a:da:a4:e3:35:14:04:db:e1:5c:af:93: 27:dd:7f:29:b7:ee:9a:9c:f4:54:15:5c:69:42:2f: 04:d0:79:fa:7b:a8:13:4b:70:9d:0e:b7:fc:83:cd: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:60:C2:5D:8F:5B:B8:82:7B:E0:1F:84:5C:3C:C5:AF:67:F0:DA:A5 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:83:65:ce:3e:35:40:d9:4e:1e:b7:56:5d:c0:0e:98:27:4f: 0b:a4:73:c6:7d:55:33:ce:6b:63:0d:95:0d:2f:52:87:6c:71: 11:e9:7f:60:99:33:be:05:8d:e6:af:b3:53:58:fc:14:ac:e7: 6d:a8:06:9b:07:0b:79:e0:2f:e3:6f:48:3a:4e:2e:f4:fd:fa: 48:e5:95:bf:af:69:63:98:23:3f:2b:35:15:de:3e:52:08:bc: 27:72:4a:fe:6a:bf:fe:07:b8:af:5a:7d:d2:fe:d1:f3:6c:b8: 7b:ab:58:b2:88:e4:85:db:58:09:45:9c:49:c9:97:78:12:93: fe:65:ab:25:a5:be:5b:98:f0:f2:cf:f8:24:bd:28:dc:a2:2b: 65:4c:3e:0b:cb:e0:c1:21:0c:19:71:7c:a5:55:96:3d:7f:9e: 89:5c:70:e9:89:63:8a:d9:8a:a5:0a:00:fc:48:0a:93:37:57: 43:22:24:21:18:dc:fe:d4:1a:ed:f9:bc:84:9d:71:53:00:0a: 4c:ee:32:b4:dc:fc:dd:5b:d1:39:8d:15:08:96:15:78:ac:16: 04:8c:5b:0d:80:f4:ff:8a:66:5e:07:bb:94:e2:71:12:da:93: 50:a0:c3:47:98:3c:25:18:5f:54:6c:f3:7c:ac:50:3c:ec:b0: 82:17:09:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjQwNTIzMDYyMzMzWhcNMjQwNTMwMDYyMzMzWjAYMRYwFAYD VQQDEw02NjRlZTBlNi1iYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFtnHzDxSsTCPsWv6UbUGCYuQnAXxUcxgNF2C9ZNd7ESeccddP0qQXpVYcFC hC90ry6YgcKFxZPGcGeGDfhyPCQzCwehcIH5cBDDrooicJJO2mZ6hxSliicqHjlu 63Z3w+r1ZUyQ0HltXHQLI7M1UrmzGTzN9/XJvJWTi8zmm71TsM6FkjqDTgRUYI21 xEoZRCrWpWE6PG6zzzzo3HbWFK3RPdinCw5bEpmKZxP4cMIhLvfnnEFkMWUPbquz lWNsM0hHYGtLC8oodcZovzhtNprfK5V62qTjNRQE2+Fcr5Mn3X8pt+6anPRUFVxp Qi8E0Hn6e6gTS3CdDrf8g80DnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApgwl2P W7iCe+AfhFw8xa9n8NqlMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXg2XOPjVA2U4et1ZdwA6YJ08LpHPGfVUzzmtjDZUNL1KHbHER6X9g mTO+BY3mr7NTWPwUrOdtqAabBwt54C/jb0g6Ti70/fpI5ZW/r2ljmCM/KzUV3j5S CLwnckr+ar/+B7ivWn3S/tHzbLh7q1iyiOSF21gJRZxJyZd4EpP+Zaslpb5bmPDy z/gkvSjcoitlTD4Ly+DBIQwZcXylVZY9f56JXHDpiWOK2YqlCgD8SAqTN1dDIiQh GNz+1Brt+byEnXFTAApM7jK03PzdW9E5jRUIlhV4rBYEjFsNgPT/imZeB7uU4nES 2pNQoMNHmDwlGF9UbPN8rFA87LCCFwlS -----END CERTIFICATE-----Generated at Thu May 23 07:24:57 2024 by rpki-client on console-ams.rpki-client.org