$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: T5I5Dl8fmyskv2seubUXApMPbWxit4bUiJfLJtS5oQo= Subject key identifier: F1:54:EB:2E:21:36:DD:59:DF:2D:A0:54:CF:67:91:0A:E0:39:5D:D2 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 9B Signing time: Sun 19 May 2024 06:50:34 +0000 Manifest this update: Sun 19 May 2024 06:50:33 +0000 Manifest next update: Sun 26 May 2024 06:50:33 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: m5npUf3CYBTgaALhCy9jtXDM1nWlbK+HOpmj7fB2oyE=) 2: 6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa (hash: K1RWcCLEGDrDNc6x1Bn06vdSsg9FOSkJcIRgTGwUnlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: May 19 06:50:33 2024 GMT Not After : May 26 06:50:33 2024 GMT Subject: CN=6649a13a-1717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:5a:4f:9c:e3:d2:71:33:b3:17:77:43:94: e1:2c:88:60:d8:1d:ea:1b:e0:95:81:ec:5c:07:00: cf:8d:dc:2e:9f:ce:2a:f4:35:18:5b:6f:d6:78:9a: 53:7f:e3:29:db:e2:89:2c:b4:12:17:3b:f0:a8:09: e0:4f:9d:8f:67:6d:ce:5f:7f:00:2f:f9:33:0b:33: b0:24:5c:d2:c0:2b:26:7c:6a:f2:78:b8:41:46:eb: b5:22:82:ba:97:dc:08:85:95:80:8d:53:e7:ca:48: 5a:cd:9e:c0:39:74:8c:d5:f3:1c:11:a4:f1:bd:d9: 99:06:9e:00:3d:c1:e7:cd:3a:09:ef:09:79:26:6d: fd:43:6e:92:29:ee:4e:9c:be:93:d3:58:47:51:02: ea:6f:8d:92:97:f7:fe:97:5d:42:88:98:af:98:30: a4:25:2a:ef:00:64:03:60:cf:f1:46:90:ac:5d:f0: 7e:f5:10:2d:ff:3b:ac:bc:26:c2:ec:68:f0:53:f7: 68:e2:d2:d4:c0:ce:02:ed:4d:4b:74:23:de:9b:ba: 93:87:0f:95:52:9f:69:e3:13:2a:0c:57:9b:6d:d1: 81:2a:62:5a:de:89:e1:40:3d:85:c4:53:39:f1:72: 3e:c6:18:be:92:0e:e1:82:ab:fd:0f:59:62:e1:6c: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:EB:2E:21:36:DD:59:DF:2D:A0:54:CF:67:91:0A:E0:39:5D:D2 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0f:87:db:68:be:d4:5e:92:7a:08:78:fb:1e:24:5e:8b:b0: a0:c2:47:59:dd:9e:9c:5a:55:94:70:77:a8:70:df:c3:01:49: 7c:cc:b7:41:46:55:da:07:87:8d:db:71:f5:e4:6e:24:8f:41: 78:cf:0e:c0:ef:69:92:90:49:af:e6:98:99:88:f1:bc:34:cf: 5c:6b:89:4e:bb:6f:64:b7:58:44:3f:1f:57:27:7f:e9:b8:4b: ab:07:9f:08:61:a4:ad:bf:e3:67:17:71:b7:02:58:b1:fb:86: 35:19:55:10:a0:85:8b:c2:5c:86:2d:de:da:6f:56:b7:c4:05: c9:83:1a:3a:0a:ef:94:6e:2e:65:32:09:0e:dc:bc:b6:15:33: 25:f1:78:39:f2:25:43:37:64:5d:2a:21:6a:40:09:4e:c9:0d: a9:a8:61:6f:bc:7e:e9:20:9b:78:f6:c1:75:48:cb:54:07:08: d9:7d:cc:4e:22:7c:8f:d3:de:9f:4b:4c:80:1d:29:b3:fa:9d: 1f:17:67:d3:f8:df:d3:f1:b4:ce:48:59:10:c0:0a:28:a7:d6: ec:fe:05:8f:79:30:69:78:39:4e:d6:64:3f:c9:1e:46:b8:0b: 99:e7:8e:f6:39:fa:3f:8b:59:01:99:e0:20:d0:81:0f:ec:d9: 19:48:2a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjQwNTE5MDY1MDMzWhcNMjQwNTI2MDY1MDMzWjAYMRYwFAYD VQQDEw02NjQ5YTEzYS0xNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFtaT5zj0nEzsxd3Q5ThLIhg2B3qG+CVgexcBwDPjdwun84q9DUYW2/WeJpT f+Mp2+KJLLQSFzvwqAngT52PZ23OX38AL/kzCzOwJFzSwCsmfGryeLhBRuu1IoK6 l9wIhZWAjVPnykhazZ7AOXSM1fMcEaTxvdmZBp4APcHnzToJ7wl5Jm39Q26SKe5O nL6T01hHUQLqb42Sl/f+l11CiJivmDCkJSrvAGQDYM/xRpCsXfB+9RAt/zusvCbC 7GjwU/do4tLUwM4C7U1LdCPem7qThw+VUp9p4xMqDFebbdGBKmJa3onhQD2FxFM5 8XI+xhi+kg7hgqv9D1li4Ww29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFU6y4h Nt1Z3y2gVM9nkQrgOV3SMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYD4fbaL7UXpJ6CHj7HiRei7CgwkdZ3Z6cWlWUcHeocN/DAUl8zLdB RlXaB4eN23H15G4kj0F4zw7A72mSkEmv5piZiPG8NM9ca4lOu29kt1hEPx9XJ3/p uEurB58IYaStv+NnF3G3Alix+4Y1GVUQoIWLwlyGLd7ab1a3xAXJgxo6Cu+Ubi5l MgkO3Ly2FTMl8Xg58iVDN2RdKiFqQAlOyQ2pqGFvvH7pIJt49sF1SMtUBwjZfcxO InyP096fS0yAHSmz+p0fF2fT+N/T8bTOSFkQwAoop9bs/gWPeTBpeDlO1mQ/yR5G uAuZ5472Ofo/i1kBmeAg0IEP7NkZSCoj -----END CERTIFICATE-----Generated at Sun May 19 08:25:12 2024 by rpki-client on console-ams.rpki-client.org