$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: qJf7YAA2RHKFua1f72oRf3J6C5vfMSafwcCcfFQ8Tj0= Subject key identifier: DA:CD:C4:0B:CF:11:D9:79:B0:4C:E4:4E:FB:1F:B4:14:4E:08:64:11 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 067B Signing time: Sat 18 May 2024 23:25:46 +0000 Manifest this update: Sat 18 May 2024 23:25:45 +0000 Manifest next update: Sat 25 May 2024 23:25:45 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: m5jnrSRU8E2H+OsBXcquZYk9N/nQR13QajDHWJi+ZQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: May 18 23:25:45 2024 GMT Not After : May 25 23:25:45 2024 GMT Subject: CN=664938f9-e91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:69:57:46:2a:ac:28:9c:bd:3c:26:e1:8c: 5a:ab:69:33:6e:70:74:8e:48:51:cc:ec:c4:ff:38: 5b:99:cd:81:76:e2:12:93:f5:25:48:96:c4:5c:bd: 0f:c1:35:a9:7d:a6:ac:71:a4:02:b0:d2:06:7f:27: 16:64:65:39:90:b0:0d:b2:54:8d:41:31:e0:13:74: df:ba:82:9e:ea:57:be:1d:70:90:b4:f5:37:be:64: 7e:9f:1c:e4:04:4d:15:35:53:42:d7:24:e1:2b:5d: b5:5d:7f:8e:87:a9:49:41:b1:3f:ed:3e:29:63:10: 3b:9e:01:22:54:33:1a:51:48:98:3f:71:cc:0e:ef: 9e:46:9a:97:e6:cd:c1:5b:ae:cc:ba:48:b4:0a:33: 63:5e:dc:70:d2:d9:e6:85:b3:0d:d1:8a:4a:f9:d9: 96:b0:c2:c7:05:ab:dd:7d:85:93:8d:18:34:09:19: ed:75:e5:98:c2:e7:28:aa:45:c4:e5:51:87:bd:e2: 02:e9:bf:65:1d:22:57:84:bf:8a:6b:46:03:e7:86: 84:da:76:49:04:da:c2:4a:94:9c:a1:eb:e7:4c:53: 83:8d:6b:d1:e7:15:3a:80:bd:5a:64:c1:db:97:7d: 6e:bc:dc:66:b4:cb:da:a3:9c:2b:0a:eb:6c:2f:ed: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:C4:0B:CF:11:D9:79:B0:4C:E4:4E:FB:1F:B4:14:4E:08:64:11 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:38:04:24:4f:70:a5:49:09:46:3d:49:39:6f:86:f5:15: 6c:21:18:09:4d:21:83:0e:8c:7d:d5:8a:c7:69:5b:27:68:a3: c3:77:a6:88:8a:c0:42:3f:7a:18:4c:8e:44:2b:a0:46:8d:79: 95:12:70:02:6c:4a:ff:d1:b6:15:f6:77:41:22:df:1d:ea:f7: 33:4f:de:29:4c:0c:04:59:04:8a:56:a5:ad:cb:29:43:95:df: 2e:0f:05:44:f7:40:a5:24:94:29:af:6c:34:dd:a1:4c:a2:3d: 21:54:6a:3f:49:24:ca:5a:72:10:3e:e7:56:9f:d1:ea:a8:cb: bb:89:84:28:65:ab:41:b0:69:59:0e:89:6a:f0:b1:9a:37:1f: 0b:65:4b:64:f5:31:a8:ce:5e:f6:82:93:8d:68:ae:e7:9f:f9: 65:90:28:c7:e4:65:05:7b:0b:37:f0:ab:f3:03:37:54:7b:12: b2:c2:5a:d7:4f:07:71:f4:43:95:8c:56:b7:de:d8:1c:7b:64: ec:59:fb:ab:4e:bd:c1:b5:81:35:da:4e:7b:16:5d:05:a3:75: 28:b5:3d:35:de:fd:c2:cb:7f:60:3e:9d:05:38:64:7a:9b:d4: e3:b3:df:da:54:60:72:2a:0e:d6:2c:6a:ac:b1:b3:dc:57:2a: 65:e6:54:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjQwNTE4MjMyNTQ1WhcNMjQwNTI1MjMyNTQ1WjAYMRYwFAYD VQQDEw02NjQ5MzhmOS1lOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SZpV0YqrCicvTwm4Yxaq2kzbnB0jkhRzOzE/zhbmc2BduISk/UlSJbEXL0P wTWpfaascaQCsNIGfycWZGU5kLANslSNQTHgE3TfuoKe6le+HXCQtPU3vmR+nxzk BE0VNVNC1yThK121XX+Oh6lJQbE/7T4pYxA7ngEiVDMaUUiYP3HMDu+eRpqX5s3B W67Muki0CjNjXtxw0tnmhbMN0YpK+dmWsMLHBavdfYWTjRg0CRntdeWYwucoqkXE 5VGHveIC6b9lHSJXhL+Ka0YD54aE2nZJBNrCSpScoevnTFODjWvR5xU6gL1aZMHb l31uvNxmtMvao5wrCutsL+3fdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrNxAvP Edl5sEzkTvsftBROCGQRMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzOTgEJE9wpUkJRj1JOW+G9RVsIRgJTSGDDox91YrHaVsnaKPDd6aI isBCP3oYTI5EK6BGjXmVEnACbEr/0bYV9ndBIt8d6vczT94pTAwEWQSKVqWtyylD ld8uDwVE90ClJJQpr2w03aFMoj0hVGo/SSTKWnIQPudWn9HqqMu7iYQoZatBsGlZ Dolq8LGaNx8LZUtk9TGozl72gpONaK7nn/llkCjH5GUFews38KvzAzdUexKywlrX Twdx9EOVjFa33tgce2TsWfurTr3BtYE12k57Fl0Fo3UotT013v3Cy39gPp0FOGR6 m9Tjs9/aVGByKg7WLGqssbPcVypl5lT7 -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org