$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: PvbR/rKPHhquGvQvRPqxP64n969stBOrUy1wFsGq9d4= Subject key identifier: 2D:20:45:10:E4:06:97:2D:03:95:6F:2D:F8:EA:AC:A9:B6:59:0E:5D Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 0164 Signing time: Fri 17 May 2024 04:56:41 +0000 Manifest this update: Fri 17 May 2024 04:56:41 +0000 Manifest next update: Fri 24 May 2024 04:56:41 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: dWu1OTSEMYG/CIlkxm97exZ6GIJ/oOJGGVJhUQN/nK8=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: q8DktJHLL6HIxH3T7EfJQLu7FIon7noJlUsqAjUVxI4=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: l0194bjdGtz77Fz9oaK/bKgSyyC0uvHnYK7BIpRjhCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: May 17 04:56:41 2024 GMT Not After : May 24 04:56:41 2024 GMT Subject: CN=6646e389-992b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:b2:16:41:0c:db:2b:bb:24:4f:b4:c5:69: ad:41:9a:65:49:ee:c9:41:2c:2f:4f:35:33:8a:5e: 33:a7:e6:42:4c:c2:3a:d5:1b:a5:1c:f6:21:1b:d7: ba:0f:89:27:5e:bf:c9:0b:5d:c7:cf:3b:2e:23:57: 9f:18:c5:7f:6d:68:57:3f:9d:28:b9:ff:1f:fc:f8: 6e:dc:cd:04:ab:30:bd:09:fc:2e:1a:9e:b9:de:eb: f0:b8:54:b4:6d:44:10:97:a2:ff:a9:cb:25:33:2b: 27:1f:31:eb:29:e7:5a:0e:09:ae:e6:27:7e:b8:34: 9c:21:31:e1:b2:be:0a:0e:06:98:d2:fa:25:52:34: d1:57:94:18:e7:1a:da:ed:e8:e4:2e:11:f4:3b:4c: cd:3d:16:93:c7:9d:07:e2:75:8b:d1:cd:b9:51:a8: 9f:05:c8:8c:77:30:4c:09:21:53:87:62:b8:b4:23: 34:47:eb:47:30:af:06:47:92:1a:ed:61:86:8c:da: 7a:9d:be:52:aa:52:9f:5e:50:4b:f6:cb:3d:af:ac: be:46:31:67:f0:b1:42:d0:d1:3f:98:47:9b:ed:63: 0e:e1:09:c2:64:37:d0:d6:5f:4d:08:d7:5c:bc:78: 06:38:15:33:56:6b:06:de:76:b2:9c:4c:d0:c2:1e: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:45:10:E4:06:97:2D:03:95:6F:2D:F8:EA:AC:A9:B6:59:0E:5D X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:dc:e5:ac:5a:59:3e:d0:46:8c:10:21:91:34:03:7c:30: 99:52:9c:ed:4b:22:51:1a:d6:bd:1b:54:f2:03:41:a7:e3:d1: 5b:5c:c7:1d:99:c0:d0:dc:a1:b5:f7:e0:3e:2d:27:70:04:00: a2:a4:fd:b5:ed:ee:84:8d:30:9e:a2:53:f6:a4:5e:0a:96:ac: 24:a4:7a:74:f3:4f:33:39:a7:55:31:b7:3a:c3:a5:5b:37:43: 54:ab:a6:2f:ec:2b:e7:11:30:62:0e:7e:9c:94:6d:41:7e:49: 67:5c:cb:a9:a8:c8:fd:f3:24:4e:62:54:46:9f:88:8f:e7:52: b1:ec:40:62:50:c6:4b:40:5c:24:02:5c:e0:68:13:1d:18:ff: d7:41:22:5d:23:7b:ad:a6:14:27:2a:3d:b3:78:9c:61:25:5a: 82:7f:b7:68:77:75:52:19:68:02:ea:3a:95:f4:83:1c:9e:c5: a8:b2:b2:98:9e:04:c5:01:16:5e:73:2b:0a:7b:77:bb:59:54: d1:ca:6a:38:d3:cf:a2:cf:10:db:26:02:2d:c2:ac:9f:c3:2a: fa:a8:65:5c:07:06:8c:26:94:2d:ee:bc:07:c9:25:5c:fb:12: 0a:11:5c:bb:ca:95:bc:a1:14:39:90:c5:8c:8f:0f:d3:17:cc: 2f:37:71:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjQwNTE3MDQ1NjQxWhcNMjQwNTI0MDQ1NjQxWjAYMRYwFAYD VQQDEw02NjQ2ZTM4OS05OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNqyFkEM2yu7JE+0xWmtQZplSe7JQSwvTzUzil4zp+ZCTMI61RulHPYhG9e6 D4knXr/JC13HzzsuI1efGMV/bWhXP50ouf8f/Phu3M0EqzC9CfwuGp653uvwuFS0 bUQQl6L/qcslMysnHzHrKedaDgmu5id+uDScITHhsr4KDgaY0volUjTRV5QY5xra 7ejkLhH0O0zNPRaTx50H4nWL0c25UaifBciMdzBMCSFTh2K4tCM0R+tHMK8GR5Ia 7WGGjNp6nb5SqlKfXlBL9ss9r6y+RjFn8LFC0NE/mEeb7WMO4QnCZDfQ1l9NCNdc vHgGOBUzVmsG3naynEzQwh4yWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0gRRDk BpctA5VvLfjqrKm2WQ5dMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBem9zlrFpZPtBGjBAhkTQDfDCZUpztSyJRGta9G1TyA0Gn49FbXMcd mcDQ3KG19+A+LSdwBACipP217e6EjTCeolP2pF4KlqwkpHp0808zOadVMbc6w6Vb N0NUq6Yv7CvnETBiDn6clG1BfklnXMupqMj98yROYlRGn4iP51Kx7EBiUMZLQFwk AlzgaBMdGP/XQSJdI3utphQnKj2zeJxhJVqCf7dod3VSGWgC6jqV9IMcnsWosrKY ngTFARZecysKe3e7WVTRymo408+izxDbJgItwqyfwyr6qGVcBwaMJpQt7rwHySVc +xIKEVy7ypW8oRQ5kMWMjw/TF8wvN3Hi -----END CERTIFICATE-----Generated at Fri May 17 06:46:31 2024 by rpki-client on console-ams.rpki-client.org