$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: HqLmIDi6kxMGTuj76p/52INRYDvF9Q7yChsab6+f2Ek= Subject key identifier: DD:BF:AA:56:CA:5A:C8:73:77:83:85:D5:55:67:6F:62:8A:8C:33:F6 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 87 Signing time: Fri 17 May 2024 07:11:41 +0000 Manifest this update: Fri 17 May 2024 07:11:40 +0000 Manifest next update: Fri 24 May 2024 07:11:40 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: qKZUeP6xD+0IZ56HA9Zew8U+FQ0wJko5VHl4/eHw33c=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: TXMIcjXfw89pBV7O6xn2ijXwqndTJdGmo4dL+p+wL7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: May 17 07:11:40 2024 GMT Not After : May 24 07:11:40 2024 GMT Subject: CN=6647032d-5b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:ab:55:f1:3a:cb:89:82:5c:2f:9a:f4:d5: 81:a6:52:66:d7:22:ca:4c:c4:d2:22:5a:e7:8a:ff: ed:cf:a5:18:c5:f1:83:98:b5:e1:f4:f7:cd:1e:27: bb:d0:09:a8:73:e9:f5:b0:b8:17:98:4f:3e:94:17: 34:35:d1:3e:1b:21:7a:da:e0:7b:36:04:15:d4:d4: e9:6d:60:25:02:ef:b9:76:23:bf:ea:79:9f:1a:d0: 12:31:1d:d2:2f:23:60:52:bc:42:37:68:f7:40:36: 1e:3d:33:6f:ea:79:f2:45:4e:69:5e:6f:28:82:c4: 63:c2:3a:11:7d:41:e6:0a:e9:63:1c:74:79:2e:ba: 98:1c:c6:19:76:c1:f5:b9:90:f7:ae:fb:f9:be:b0: 92:de:75:85:17:57:53:87:8e:71:ed:02:64:f1:98: 1e:13:2e:34:ce:be:58:e5:3e:15:78:2b:3c:d9:65: 3a:cb:eb:76:b6:e8:e8:b7:d7:06:0a:ad:ab:88:c3: 56:eb:d2:ef:22:18:fe:4b:3b:79:7b:06:bb:75:c6: bd:27:d9:47:b0:76:6c:cb:a3:e2:5f:99:6f:45:ec: a9:5f:c5:8d:71:4a:f8:e0:14:4b:32:9c:e4:9b:af: be:7b:d7:ce:6d:38:2a:03:e7:0a:6e:b1:d8:89:b1: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:AA:56:CA:5A:C8:73:77:83:85:D5:55:67:6F:62:8A:8C:33:F6 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:80:1c:08:48:d4:e5:97:05:dc:d4:f8:8c:4e:54:fc:d8:f5: 93:cd:62:f7:ec:9f:df:0c:92:8d:ec:66:67:0d:68:b8:5e:9a: c4:df:82:be:e1:2d:27:64:7a:01:f4:55:2e:10:6a:64:d1:3f: e0:d6:dd:77:74:15:a8:10:e5:17:be:7a:2e:8e:71:94:f1:45: 67:46:cf:8c:a2:5e:08:ac:e9:ac:d3:1a:8f:16:b4:11:1b:8e: 93:8f:43:2b:cf:55:ca:2b:fb:ab:8e:1f:c0:28:b1:f2:d4:1f: 00:98:53:5e:2c:6d:4d:cb:63:a5:36:a2:09:0c:a9:25:99:5e: b0:1b:3f:34:4f:50:93:b1:24:f9:3c:34:10:d6:de:5d:7b:70: 15:cc:fe:29:e5:ad:99:4a:08:cd:7b:9f:2c:b4:93:75:47:d2: 2d:73:92:88:cd:d3:7c:ed:36:86:83:d9:45:d2:ec:7d:00:73: 16:84:e5:d9:3f:92:cd:fc:cb:e4:d7:fd:a0:e8:ac:d0:92:87: af:26:ce:2c:30:2d:bd:f7:71:9e:ac:88:41:68:4e:a7:77:2f: 98:48:b5:55:23:e4:1b:5e:a1:15:37:b1:b2:65:29:56:da:c9: c1:69:78:7c:68:c2:3d:d6:9f:6a:dc:d5:64:cd:32:81:aa:f8: b8:b9:ad:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjQwNTE3MDcxMTQwWhcNMjQwNTI0MDcxMTQwWjAYMRYwFAYD VQQDEw02NjQ3MDMyZC01YjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkOrVfE6y4mCXC+a9NWBplJm1yLKTMTSIlrniv/tz6UYxfGDmLXh9PfNHie7 0Amoc+n1sLgXmE8+lBc0NdE+GyF62uB7NgQV1NTpbWAlAu+5diO/6nmfGtASMR3S LyNgUrxCN2j3QDYePTNv6nnyRU5pXm8ogsRjwjoRfUHmCuljHHR5LrqYHMYZdsH1 uZD3rvv5vrCS3nWFF1dTh45x7QJk8ZgeEy40zr5Y5T4VeCs82WU6y+t2tujot9cG Cq2riMNW69LvIhj+Szt5ewa7dca9J9lHsHZsy6PiX5lvReypX8WNcUr44BRLMpzk m6++e9fObTgqA+cKbrHYibG09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2/qlbK Wshzd4OF1VVnb2KKjDP2MB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwgBwISNTllwXc1PiMTlT82PWTzWL37J/fDJKN7GZnDWi4XprE34K+ 4S0nZHoB9FUuEGpk0T/g1t13dBWoEOUXvnoujnGU8UVnRs+Mol4IrOms0xqPFrQR G46Tj0Mrz1XKK/urjh/AKLHy1B8AmFNeLG1Ny2OlNqIJDKklmV6wGz80T1CTsST5 PDQQ1t5de3AVzP4p5a2ZSgjNe58stJN1R9Itc5KIzdN87TaGg9lF0ux9AHMWhOXZ P5LN/Mvk1/2g6KzQkoevJs4sMC2993GerIhBaE6ndy+YSLVVI+QbXqEVN7GyZSlW 2snBaXh8aMI91p9q3NVkzTKBqvi4ua3g -----END CERTIFICATE-----Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org