$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: 4caQKJypx3tkeQcagXQm2sRD+7vwD7C+DJUIXqzhP8A= Subject key identifier: C3:B5:C4:12:00:E6:F1:3F:6B:4E:D9:CD:77:9B:F7:F2:3B:A8:BA:1A Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0A70 Signing time: Thu 30 May 2024 20:44:29 +0000 Manifest this update: Thu 30 May 2024 20:44:28 +0000 Manifest next update: Thu 06 Jun 2024 20:44:28 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: 15KM0rFE/7zweMzaXjCdV0ZMfoWPVn2bIQMOwp9oYhE=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: UA1wBoOmRxSSdDixQCbUxrZkxYKV1r6qcfxGovfLAxs=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 8PwBQiPMjwBwm2C6NRT5Vk8KuFu9hRXjCMRCPWAI/SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: May 30 20:44:28 2024 GMT Not After : Jun 6 20:44:28 2024 GMT Subject: CN=6658e52d-301d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:63:43:e6:e8:3a:b8:13:a2:93:cc:6c:88: 29:25:95:98:7f:4e:1f:9d:96:99:91:ac:6b:cc:58: 61:1a:0d:35:a9:12:7b:e4:91:87:b2:40:ce:f5:bb: 5f:13:3b:a0:76:83:d2:c9:f9:fb:ab:41:99:db:54: 80:53:1f:40:43:bd:d6:de:d1:1d:6c:e8:d2:73:cc: a3:ea:43:8d:f2:a6:90:36:88:b7:17:97:69:f6:34: fd:7b:38:57:5c:1c:10:60:a2:95:e4:45:38:22:32: 36:90:bb:05:b0:c9:cd:67:3d:cd:9f:49:0d:18:75: c8:d0:65:12:d9:02:d9:57:b9:cd:18:4c:3e:01:16: 13:f6:72:b3:23:47:dc:b4:68:22:03:11:d6:d9:ab: e4:90:44:06:c8:af:c9:da:22:11:ff:2f:aa:2b:0b: 03:40:26:d6:e7:9c:40:e1:f5:d0:3d:b3:59:19:41: 87:21:7d:78:7b:8e:5f:bb:39:4d:0c:34:c6:c3:e3: 58:ba:0d:81:7b:6b:22:ef:c3:d3:b4:19:3d:9f:fd: b8:e3:01:52:17:09:53:25:fe:c1:2a:fa:6e:ae:bb: a5:68:cc:3c:95:cd:29:30:43:72:6c:9b:a0:66:d1: f0:4f:85:51:9d:b8:6f:c1:b0:81:82:e3:a0:6d:ed: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B5:C4:12:00:E6:F1:3F:6B:4E:D9:CD:77:9B:F7:F2:3B:A8:BA:1A X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:be:fe:bc:e9:8f:0d:56:44:db:d2:19:c6:d5:2d:58:52:c6: 96:99:32:9b:2b:59:0c:94:91:4c:3a:62:30:79:7c:1e:92:50: 53:64:71:dd:74:13:cb:ea:19:48:d9:3e:b5:25:a4:c8:37:63: 02:ed:f1:bb:1c:02:4c:19:13:33:4e:1b:b0:54:13:e9:62:e6: 27:73:36:f6:a7:98:03:3e:a2:53:3f:3d:b1:86:a0:a1:bd:b4: ac:78:04:21:2e:a4:ea:49:cc:6a:db:06:28:ea:4f:38:9a:d6: 8c:a8:90:e0:b2:25:3e:bf:dc:87:9c:16:1e:ba:80:a2:be:26: 75:0f:77:fc:22:a7:21:cf:13:84:f8:4e:ab:6e:01:5d:40:7e: ab:68:76:dd:06:38:69:7d:0e:88:d3:48:3c:3d:46:1d:59:7e: e9:a3:37:36:55:9b:c0:3a:9f:5c:a4:09:52:3f:4a:39:01:8c: a8:c2:bb:f1:e1:0a:08:f2:38:61:2e:13:43:d7:bb:48:fb:e3: 70:a4:97:82:29:14:0d:f7:3d:85:73:10:f0:ae:41:02:06:30: 1c:e2:88:44:9a:e0:79:b8:6f:d6:63:b0:9d:cc:31:25:d3:5a: b9:2d:fe:8d:88:dd:de:ac:bf:6b:cd:a4:09:5c:33:c7:e9:2f: 39:1d:75:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjQwNTMwMjA0NDI4WhcNMjQwNjA2MjA0NDI4WjAYMRYwFAYD VQQDEw02NjU4ZTUyZC0zMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHpjQ+boOrgTopPMbIgpJZWYf04fnZaZkaxrzFhhGg01qRJ75JGHskDO9btf EzugdoPSyfn7q0GZ21SAUx9AQ73W3tEdbOjSc8yj6kON8qaQNoi3F5dp9jT9ezhX XBwQYKKV5EU4IjI2kLsFsMnNZz3Nn0kNGHXI0GUS2QLZV7nNGEw+ARYT9nKzI0fc tGgiAxHW2avkkEQGyK/J2iIR/y+qKwsDQCbW55xA4fXQPbNZGUGHIX14e45fuzlN DDTGw+NYug2Be2si78PTtBk9n/244wFSFwlTJf7BKvpurrulaMw8lc0pMENybJug ZtHwT4VRnbhvwbCBguOgbe2ZwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO1xBIA 5vE/a07ZzXeb9/I7qLoaMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5vv686Y8NVkTb0hnG1S1YUsaWmTKbK1kMlJFMOmIweXweklBTZHHd dBPL6hlI2T61JaTIN2MC7fG7HAJMGRMzThuwVBPpYuYnczb2p5gDPqJTPz2xhqCh vbSseAQhLqTqScxq2wYo6k84mtaMqJDgsiU+v9yHnBYeuoCiviZ1D3f8IqchzxOE +E6rbgFdQH6raHbdBjhpfQ6I00g8PUYdWX7pozc2VZvAOp9cpAlSP0o5AYyowrvx 4QoI8jhhLhND17tI++NwpJeCKRQN9z2FcxDwrkECBjAc4ohEmuB5uG/WY7CdzDEl 01q5Lf6NiN3erL9rzaQJXDPH6S85HXUf -----END CERTIFICATE-----Generated at Thu May 30 21:49:45 2024 by rpki-client on console-ams.rpki-client.org