$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft File: lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft (raw, json) Hash identifier: KKICkQRr4m3NY+MK7XkfJBDpqQQnO4fa3G8pQzlQxy0= Subject key identifier: C3:14:D4:58:58:B1:38:B2:FE:E9:0F:30:0B:14:4E:ED:94:B3:5E:05 Authority key identifier: 94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D Certificate issuer: /CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft Manifest number: 07BD Signing time: Sat 18 May 2024 22:04:18 +0000 Manifest this update: Sat 18 May 2024 22:04:18 +0000 Manifest next update: Sat 25 May 2024 22:04:18 +0000 Files and hashes: 1: lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl (hash: LIc9HkkLR4Jm1EmQZ6OK4XZzCpItAbE5JsUpaA7cnAQ=) 2: 2C74B00CF70011EA8EFF4C67C4F9AE02.roa (hash: OfR146pBfvNdwkmbFc5ToWQ2OMEy3nfWQWtHKGhPQFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Validity Not Before: May 18 22:04:18 2024 GMT Not After : May 25 22:04:18 2024 GMT Subject: CN=664925e2-45d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:5f:43:26:4a:ce:9a:3b:82:bb:67:d7:90: d7:99:6d:63:7d:34:08:47:f3:f3:9c:ab:af:c9:ff: 88:31:04:6f:2f:1d:a4:29:8e:21:1e:72:2b:10:a1: 0a:19:f4:00:96:28:f1:37:66:db:8c:b6:02:bf:71: 68:f5:30:d5:e3:c8:95:96:5f:f3:c8:4a:b5:be:f1: c9:fd:05:2e:87:6d:1a:2a:a1:a9:b3:8c:da:bb:0c: 61:91:2b:e6:d2:65:5e:2c:69:d9:52:92:5c:52:5c: 0b:0c:81:11:25:33:ec:4d:03:f4:86:f8:a3:64:0a: 70:51:05:00:35:90:27:bf:18:09:4b:04:b7:79:1a: 9a:f3:6b:d9:55:a9:10:25:ba:40:26:f3:1c:56:66: 97:60:e2:5c:11:98:5e:1a:fa:0a:a5:63:18:66:93: 33:4b:a8:1c:b9:6d:f6:bb:01:34:05:8a:a2:bf:76: bc:2d:f9:11:f3:e6:e6:76:a8:02:65:fd:22:8b:ce: e3:2b:f0:97:8d:00:92:18:06:4c:60:f5:86:32:c6: 32:61:38:3b:b3:8d:ca:bc:8e:84:0a:e3:a4:5a:a6: d1:d1:0e:de:fb:79:b2:5f:fb:fc:e8:b0:04:87:1e: 4d:47:78:f4:67:e6:6b:5a:0c:7c:38:11:ac:d3:31: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:14:D4:58:58:B1:38:B2:FE:E9:0F:30:0B:14:4E:ED:94:B3:5E:05 X509v3 Authority Key Identifier: keyid:94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:16:22:31:f2:ea:39:3d:98:97:43:21:6d:7c:79:cf:c9:8f: b5:05:d6:52:dd:f1:76:56:f1:d5:a3:cd:d2:3f:19:ad:ca:cb: 24:34:e8:fb:66:22:85:94:eb:cf:c3:0d:a6:fc:9c:c9:5b:b7: 0c:4e:a0:12:1f:a8:cf:8e:1e:0e:f2:90:1c:13:72:41:8f:b3: ec:b7:eb:4a:e3:3e:40:e4:1c:2c:a4:e3:ff:1e:64:19:84:45: 3a:78:8a:6b:18:85:57:90:6e:ca:c4:d2:40:c1:c5:43:8b:df: 35:e5:14:39:bd:b7:e7:01:a7:ba:e8:2f:2a:88:1b:6b:56:80: 9d:cf:b9:ea:5c:99:5c:83:3e:89:a6:cf:f2:64:de:9c:28:3a: a6:31:7d:46:24:36:72:a4:86:49:e7:de:43:52:e8:fd:3d:e3: cf:3b:2a:7c:13:e8:fd:73:7d:57:3f:99:0a:20:66:e1:b4:91: ae:e5:2e:fc:0c:d9:1f:60:d0:4d:ca:03:6c:33:6e:bb:e1:d8: 58:8d:49:6e:b6:06:ed:f3:be:28:f0:4a:8a:4c:79:01:cc:bb: b4:82:54:99:39:92:63:aa:e1:4e:10:2e:8e:80:7c:e2:7e:0f: 4f:e7:c1:62:c2:bb:5a:4f:d2:ad:86:aa:4b:7b:26:a7:68:1b: 75:c7:b3:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQxQzkxMTAvBgNVBAUTKDk0NzBFNzYxMDgwNjNFNEY3QzY0QUQ0M0QwNzZCQzEx QUUxRkRCNUQwHhcNMjQwNTE4MjIwNDE4WhcNMjQwNTI1MjIwNDE4WjAYMRYwFAYD VQQDEw02NjQ5MjVlMi00NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugtfQyZKzpo7grtn15DXmW1jfTQIR/PznKuvyf+IMQRvLx2kKY4hHnIrEKEK GfQAlijxN2bbjLYCv3Fo9TDV48iVll/zyEq1vvHJ/QUuh20aKqGps4zauwxhkSvm 0mVeLGnZUpJcUlwLDIERJTPsTQP0hvijZApwUQUANZAnvxgJSwS3eRqa82vZVakQ JbpAJvMcVmaXYOJcEZheGvoKpWMYZpMzS6gcuW32uwE0BYqiv3a8LfkR8+bmdqgC Zf0ii87jK/CXjQCSGAZMYPWGMsYyYTg7s43KvI6ECuOkWqbR0Q7e+3myX/v86LAE hx5NR3j0Z+ZrWgx8OBGs0zEmXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMU1FhY sTiy/ukPMAsUTu2Us14FMB8GA1UdIwQYMBaAFJRw52EIBj5PfGStQ9B2vBGuH9td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1BrOThaSzFEMEhhOEVhNGYy MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIRG5ZUWdHUGs5OFpLMUQwSGE4RWE0ZjIxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1Br OThaSzFEMEhhOEVhNGYyMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbFiIx8uo5PZiXQyFtfHnPyY+1BdZS3fF2VvHVo83SPxmtysskNOj7 ZiKFlOvPww2m/JzJW7cMTqASH6jPjh4O8pAcE3JBj7Pst+tK4z5A5BwspOP/HmQZ hEU6eIprGIVXkG7KxNJAwcVDi9815RQ5vbfnAae66C8qiBtrVoCdz7nqXJlcgz6J ps/yZN6cKDqmMX1GJDZypIZJ595DUuj9PePPOyp8E+j9c31XP5kKIGbhtJGu5S78 DNkfYNBNygNsM2674dhYjUlutgbt874o8EqKTHkBzLu0glSZOZJjquFOEC6OgHzi fg9P58FiwrtaT9KthqpLeyanaBt1x7PK -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org