$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: z9KYrPadg3hoiEkC/Fqkra0jBNeNwGnjfUDPwmkyse0= Subject key identifier: 51:CF:34:96:58:63:8A:14:9A:4C:6F:3F:66:FC:8A:9A:B9:FD:4D:54 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 04A3 Signing time: Wed 29 May 2024 02:04:35 +0000 Manifest this update: Wed 29 May 2024 02:04:35 +0000 Manifest next update: Wed 05 Jun 2024 02:04:35 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: dq3lqaLoJ+tRR3TskXjBySBzYGhELnjjXKkeMpwEtqk=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: 0n6L5DwgQwmnaLtWhoOtX9wV86ev0397x1UJ2piOano=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: May 29 02:04:35 2024 GMT Not After : Jun 5 02:04:35 2024 GMT Subject: CN=66568d33-bbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:a0:0f:ef:5d:c5:62:09:d1:52:79:e2:ee: ff:f0:0f:30:1e:14:fd:c5:5c:3c:e7:17:0a:8b:f1: 28:c3:ec:31:9c:c4:72:b8:a4:1f:b0:9b:a2:24:af: bb:64:78:c2:aa:ac:f1:13:5a:dd:69:00:03:b3:fc: a3:aa:06:a6:d0:2e:f4:ac:a4:1f:6f:7a:f4:eb:0e: dc:54:62:a0:69:48:54:59:f3:ea:02:7d:41:53:36: 55:bf:81:f3:0e:cf:41:54:34:e8:02:3b:1f:4c:2d: 97:77:99:3b:af:7e:df:dd:33:25:3b:0a:f9:ef:64: 21:c3:92:b1:5a:bb:c8:e0:ce:32:4d:81:a1:fd:39: 37:68:23:f7:dd:4c:09:45:98:d9:d0:e0:89:e5:95: 01:59:4c:e1:92:62:24:6f:d5:7b:7e:84:c8:39:f9: b9:3c:b5:f0:95:bc:c2:09:b0:e2:45:fd:cd:e2:15: 31:0f:42:87:e5:88:7f:4e:7a:c6:ad:95:e0:ed:20: 3d:c8:91:c8:dc:12:07:68:e1:59:5e:7d:fe:e6:e9: 01:bf:a4:f4:41:0e:41:b3:da:3e:48:43:6b:0a:e8: b3:05:6a:0d:9f:55:71:a3:8b:c4:99:a9:a4:5e:f2: 96:10:84:6b:ad:1c:46:29:cf:c6:6a:b6:a7:5b:71: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CF:34:96:58:63:8A:14:9A:4C:6F:3F:66:FC:8A:9A:B9:FD:4D:54 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f0:27:7a:e5:56:a8:c3:6a:53:30:98:a1:c4:a4:40:48:b3: a5:d1:8e:c7:95:0f:5e:87:da:74:7b:d8:93:c1:f2:37:74:0e: eb:02:0b:35:95:4c:da:75:f1:ea:73:3c:8d:21:cd:6f:04:59: 79:92:3e:39:ee:fe:d5:cd:d0:76:ba:7e:ea:d1:86:7d:95:13: 69:78:8a:69:cb:b0:d2:f3:49:c2:ec:7b:b4:4f:ab:cb:fa:51: b3:35:6f:96:51:34:49:33:18:d2:a9:d1:e6:4f:72:f4:e2:6a: 3f:64:61:23:44:26:d3:c5:62:c1:b7:ec:37:be:02:a8:82:e3: 1d:4d:93:1d:16:84:d4:bf:62:29:74:ea:e4:0a:96:c7:73:12: b5:c8:24:a8:88:23:ff:ca:e5:21:50:9a:40:d0:0e:f1:ab:d3: 24:6b:37:30:b7:02:44:3a:4c:e5:d2:de:cc:d9:29:96:83:3b: ec:11:4f:91:21:21:be:fa:c7:40:21:c7:6a:2a:95:7d:0c:d2: e1:04:28:72:65:cb:ed:41:96:86:67:19:34:6d:2f:ab:4d:48: 0f:04:70:c5:2c:d4:c3:3d:76:3f:66:e7:8c:1e:b5:74:e4:08: 23:bc:2e:d4:73:56:b7:7e:76:77:a6:25:28:7e:bb:34:2c:66: 34:93:40:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjQwNTI5MDIwNDM1WhcNMjQwNjA1MDIwNDM1WjAYMRYwFAYD VQQDEw02NjU2OGQzMy1iYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDegD+9dxWIJ0VJ54u7/8A8wHhT9xVw85xcKi/Eow+wxnMRyuKQfsJuiJK+7 ZHjCqqzxE1rdaQADs/yjqgam0C70rKQfb3r06w7cVGKgaUhUWfPqAn1BUzZVv4Hz Ds9BVDToAjsfTC2Xd5k7r37f3TMlOwr572Qhw5KxWrvI4M4yTYGh/Tk3aCP33UwJ RZjZ0OCJ5ZUBWUzhkmIkb9V7foTIOfm5PLXwlbzCCbDiRf3N4hUxD0KH5Yh/TnrG rZXg7SA9yJHI3BIHaOFZXn3+5ukBv6T0QQ5Bs9o+SENrCuizBWoNn1Vxo4vEmamk XvKWEIRrrRxGKc/GaranW3EKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHPNJZY Y4oUmkxvP2b8ipq5/U1UMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT8Cd65Vaow2pTMJihxKRASLOl0Y7HlQ9eh9p0e9iTwfI3dA7rAgs1 lUzadfHqczyNIc1vBFl5kj457v7VzdB2un7q0YZ9lRNpeIppy7DS80nC7Hu0T6vL +lGzNW+WUTRJMxjSqdHmT3L04mo/ZGEjRCbTxWLBt+w3vgKoguMdTZMdFoTUv2Ip dOrkCpbHcxK1yCSoiCP/yuUhUJpA0A7xq9MkazcwtwJEOkzl0t7M2SmWgzvsEU+R ISG++sdAIcdqKpV9DNLhBChyZcvtQZaGZxk0bS+rTUgPBHDFLNTDPXY/ZueMHrV0 5AgjvC7Uc1a3fnZ3piUofrs0LGY0k0BW -----END CERTIFICATE-----Generated at Wed May 29 02:50:01 2024 by rpki-client on console-fra.rpki-client.org