$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: LSLBt9syLBiRkSVwKYLTlP1Mhlbq0zR6Oua4155T/ho= Subject key identifier: 2E:48:FD:D7:87:76:72:B1:CF:15:2F:69:62:E0:21:7D:42:BA:BF:73 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0B7E Signing time: Sat 18 May 2024 19:23:47 +0000 Manifest this update: Sat 18 May 2024 19:23:47 +0000 Manifest next update: Sat 25 May 2024 19:23:47 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: LYOz2iYc4DSaELj65bzeDFZFdVfLhEym9p3S3yxKUB0=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: 3AmLDN9kUO0iJK4FUY7YrIWCTP4KQL12FC5b5uIw/po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2947 (0xb83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: May 18 19:23:47 2024 GMT Not After : May 25 19:23:47 2024 GMT Subject: CN=66490043-7f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:31:80:01:7f:67:17:c7:be:ac:d8:3e:14: 30:90:93:6c:96:f3:2f:d7:15:2b:fe:b9:ca:64:09: 56:b2:07:b5:bc:e4:b5:33:b9:28:56:78:a1:d2:8a: b7:2d:15:63:28:08:db:d8:30:2a:47:d6:17:77:4e: b2:16:8f:a7:50:44:d0:06:a6:97:c8:68:15:69:fa: 24:a6:62:08:66:b3:b0:8d:55:d3:0d:aa:a0:a5:32: 01:84:f9:e4:e1:13:09:b6:fa:00:1c:c0:ce:43:71: d7:c7:6c:72:d9:ac:ac:2c:f1:c9:d2:4a:49:fa:42: c0:b6:f9:ec:4a:00:05:fa:7b:4a:cd:49:cc:8c:36: 6a:a5:9c:49:37:59:bf:cc:13:7d:28:87:22:a5:97: 52:d8:18:1c:7a:42:22:b0:22:d0:d3:63:90:9b:d3: 1d:ba:85:1f:f4:3a:78:3b:03:ad:1a:12:9d:20:99: 0f:18:15:c0:5e:dd:d5:0d:39:57:a5:de:4d:8a:14: 4a:14:b3:bc:d2:5b:7a:de:45:7e:10:dc:89:bc:a0: 56:c8:39:09:13:c9:16:fc:e7:c5:4a:1a:63:34:44: 9a:5c:43:f6:fa:38:3e:cd:e9:6c:ca:c7:79:4b:43: 5c:89:eb:73:bf:71:e0:37:4d:0f:23:0b:b9:bb:0b: 70:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:FD:D7:87:76:72:B1:CF:15:2F:69:62:E0:21:7D:42:BA:BF:73 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6b:37:7f:8c:07:29:3a:e9:78:5c:e6:59:d1:08:ca:8d:aa: 9b:58:32:61:de:ce:1a:b0:56:b1:1e:81:51:13:47:b3:25:05: f3:66:2d:a5:09:20:7d:f4:e1:84:e4:e7:31:88:68:66:2d:a0: c9:a8:e7:c0:d8:71:89:43:8d:06:37:11:ec:79:d8:d6:7e:3a: f8:a3:54:db:47:41:a7:cc:a7:80:e5:99:6c:04:b6:08:6d:26: 92:7a:c1:36:09:fe:2f:e5:3b:3c:ee:ef:18:82:6e:79:8b:93: f5:7f:8a:85:97:55:a9:e3:f4:df:ed:ec:d8:27:b3:13:3f:54: ac:c0:fd:ca:7b:fc:20:88:12:5f:a7:ef:bc:be:26:07:ed:c1: cf:21:8c:e2:82:37:45:85:79:77:58:b6:0c:29:2c:54:39:16: ed:4e:43:63:90:22:a1:50:92:6b:4f:d0:75:ad:0f:a9:b2:dd: 51:38:5b:94:7c:84:c9:03:74:5c:cf:62:db:7c:d0:84:8c:0e: fc:7b:3d:5f:ac:3c:62:41:c1:49:c4:71:64:56:66:9e:fe:11: bf:1a:46:15:3f:ae:78:2d:72:be:a9:bb:cb:89:01:5a:4a:00: f8:8a:ae:4a:f9:07:d9:85:54:cb:93:a6:d9:63:75:6b:d0:a5: 32:13:ff:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjQwNTE4MTkyMzQ3WhcNMjQwNTI1MTkyMzQ3WjAYMRYwFAYD VQQDEw02NjQ5MDA0My03ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOExgAF/ZxfHvqzYPhQwkJNslvMv1xUr/rnKZAlWsge1vOS1M7koVnih0oq3 LRVjKAjb2DAqR9YXd06yFo+nUETQBqaXyGgVafokpmIIZrOwjVXTDaqgpTIBhPnk 4RMJtvoAHMDOQ3HXx2xy2aysLPHJ0kpJ+kLAtvnsSgAF+ntKzUnMjDZqpZxJN1m/ zBN9KIcipZdS2BgcekIisCLQ02OQm9MduoUf9Dp4OwOtGhKdIJkPGBXAXt3VDTlX pd5NihRKFLO80lt63kV+ENyJvKBWyDkJE8kW/OfFShpjNESaXEP2+jg+zelsysd5 S0Ncietzv3HgN00PIwu5uwtwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5I/deH dnKxzxUvaWLgIX1Cur9zMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfazd/jAcpOul4XOZZ0QjKjaqbWDJh3s4asFaxHoFRE0ezJQXzZi2l CSB99OGE5OcxiGhmLaDJqOfA2HGJQ40GNxHsedjWfjr4o1TbR0GnzKeA5ZlsBLYI bSaSesE2Cf4v5Ts87u8Ygm55i5P1f4qFl1Wp4/Tf7ezYJ7MTP1SswP3Ke/wgiBJf p++8viYH7cHPIYzigjdFhXl3WLYMKSxUORbtTkNjkCKhUJJrT9B1rQ+pst1ROFuU fITJA3Rcz2LbfNCEjA78ez1frDxiQcFJxHFkVmae/hG/GkYVP654LXK+qbvLiQFa SgD4iq5K+QfZhVTLk6bZY3Vr0KUyE/84 -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org