$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: 3JRnWThFw7afvA9sH9/0owB0DvZERpHf9+6qDKOCg/U= Subject key identifier: 42:E7:F3:53:78:DF:FF:16:4A:D8:24:4B:54:83:B3:84:98:64:A2:16 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 124A Signing time: Fri 31 May 2024 20:36:29 +0000 Manifest this update: Fri 31 May 2024 20:36:29 +0000 Manifest next update: Fri 07 Jun 2024 20:36:29 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: K5KDe6e4T5y7hWxLk/36dGgMbJdXQvGga45EyMokhqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: May 31 20:36:29 2024 GMT Not After : Jun 7 20:36:29 2024 GMT Subject: CN=665a34cd-1d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:2d:6a:e7:6e:cb:c9:2a:7c:14:e6:3a:96: d4:54:f3:0c:57:2c:f2:63:e2:5e:fa:d6:7c:24:d0: 74:64:9b:f3:ef:98:a1:4b:bf:35:17:54:19:c4:db: 48:1b:35:ed:73:21:59:4b:ac:ae:7d:eb:fe:38:ef: 7e:5d:52:9a:86:10:1d:e0:9f:e3:59:0b:76:ba:e5: 77:2e:3a:e5:0c:37:04:c8:9e:0b:35:07:13:04:47: ae:58:fe:2a:9d:c3:46:5d:60:3c:5a:e1:93:5b:37: 06:d2:f3:96:ec:fe:93:5e:43:a9:9d:c0:43:c7:53: 21:cc:e1:40:d9:f5:e9:7c:da:a8:25:ed:c0:4f:88: a4:53:bb:ff:09:fe:a1:c2:4e:00:91:02:a8:40:f1: 6e:68:f2:77:8b:9b:84:91:29:11:8e:ce:f6:e4:8a: 63:cb:bd:88:f2:a2:08:d2:05:cd:23:ff:49:4e:1b: a2:65:fe:82:74:73:26:9c:12:27:bf:f2:f3:a8:0f: 94:9f:16:06:87:51:c1:a1:8b:bb:da:e1:ad:38:fe: 0f:10:87:29:5a:4b:17:f6:02:c5:ba:ca:b7:f7:fa: 7e:33:cb:07:3b:36:cb:ef:ae:40:fd:d6:ef:ae:d9: df:38:fd:e6:6d:0e:73:d9:36:60:f1:92:86:65:ba: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:F3:53:78:DF:FF:16:4A:D8:24:4B:54:83:B3:84:98:64:A2:16 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:44:c8:42:ad:ae:43:e8:ed:d7:61:76:5b:ec:cd:d9:b1:7f: d0:c9:b1:77:67:80:59:fd:81:1f:e2:d6:85:51:22:00:ce:37: e0:cb:f4:c8:f2:62:ee:3f:4b:e9:29:e0:ca:06:ba:9a:b0:46: 1f:08:b0:91:65:d7:8f:b5:29:9e:a6:1c:4c:f9:c3:d2:37:a2: 2b:05:b8:51:f2:56:bd:15:fc:ed:fc:70:87:62:06:dd:34:83: 29:9b:21:5a:70:ef:2c:74:ae:85:0d:99:63:da:82:e3:b8:ad: b3:80:3d:9f:6f:6c:24:bd:ca:a0:5d:32:af:dc:02:ab:c1:c8: 2b:87:88:10:cb:8d:14:da:0a:19:a0:34:19:0e:4c:0b:be:50: a3:07:7c:83:f5:e1:3f:ec:d9:e0:04:09:fd:75:95:4b:e1:de: b0:d7:b8:cc:de:e1:21:58:67:12:8c:35:77:9e:c5:1f:a7:51: 0a:c1:09:10:8c:8e:7e:33:c0:1c:bb:c3:89:56:99:d4:80:7d: a0:83:da:75:11:5e:fd:9e:10:84:6a:8a:15:f4:8f:16:88:a8: ef:cb:b4:94:07:94:f2:86:b5:0f:69:e7:6b:fa:13:a4:69:14: e6:b2:b0:d8:32:a0:d0:4f:d8:22:9a:bc:dc:fb:db:99:38:72: bc:d6:00:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjQwNTMxMjAzNjI5WhcNMjQwNjA3MjAzNjI5WjAYMRYwFAYD VQQDEw02NjVhMzRjZC0xZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfYtauduy8kqfBTmOpbUVPMMVyzyY+Je+tZ8JNB0ZJvz75ihS781F1QZxNtI GzXtcyFZS6yufev+OO9+XVKahhAd4J/jWQt2uuV3LjrlDDcEyJ4LNQcTBEeuWP4q ncNGXWA8WuGTWzcG0vOW7P6TXkOpncBDx1MhzOFA2fXpfNqoJe3AT4ikU7v/Cf6h wk4AkQKoQPFuaPJ3i5uEkSkRjs725Ipjy72I8qII0gXNI/9JThuiZf6CdHMmnBIn v/LzqA+UnxYGh1HBoYu72uGtOP4PEIcpWksX9gLFusq39/p+M8sHOzbL765A/dbv rtnfOP3mbQ5z2TZg8ZKGZbpFuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELn81N4 3/8WStgkS1SDs4SYZKIWMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTRMhCra5D6O3XYXZb7M3ZsX/QybF3Z4BZ/YEf4taFUSIAzjfgy/TI 8mLuP0vpKeDKBrqasEYfCLCRZdePtSmephxM+cPSN6IrBbhR8la9Ffzt/HCHYgbd NIMpmyFacO8sdK6FDZlj2oLjuK2zgD2fb2wkvcqgXTKv3AKrwcgrh4gQy40U2goZ oDQZDkwLvlCjB3yD9eE/7NngBAn9dZVL4d6w17jM3uEhWGcSjDV3nsUfp1EKwQkQ jI5+M8Acu8OJVpnUgH2gg9p1EV79nhCEaooV9I8WiKjvy7SUB5TyhrUPaedr+hOk aRTmsrDYMqDQT9gimrzc+9uZOHK81gCz -----END CERTIFICATE-----Generated at Fri May 31 22:13:12 2024 by rpki-client on console-fra.rpki-client.org