$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: CfLQah0SOe+z11BrGnnlaKu0Do6KOqIwUD0fGa+YJTw= Subject key identifier: 2B:2B:7A:79:84:23:EE:57:61:2F:DD:45:7C:C2:AB:F6:80:97:F9:68 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 04C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 04BA Signing time: Tue 07 May 2024 01:30:53 +0000 Manifest this update: Tue 07 May 2024 01:30:53 +0000 Manifest next update: Tue 14 May 2024 01:30:53 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: eGAarr4DtSOQWcy9y1abEPcKmYMYHFB7IKT/s4rfkzw=) 2: 9017F7B806EC11EF8B407A22C4F9AE02.roa (hash: UgVGY+YeFe0NAWcUq6eAo2DeGkLVFztnk4i2uQnCQLY=) 3: 71178E2806EC11EFA61C4222C4F9AE02.roa (hash: lDgqADuTMK2GA8veFfF2SGSbvACpwsZa/dz0WmwAzKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1223 (0x4c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: May 7 01:30:53 2024 GMT Not After : May 14 01:30:53 2024 GMT Subject: CN=6639844d-a474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:56:52:bb:62:17:9b:d7:1e:eb:fa:56:f0: be:b1:bb:41:45:bd:a6:0e:3b:6c:97:40:54:48:81: d7:65:be:63:ef:70:6d:33:6f:27:ee:b2:13:23:2c: a9:3e:86:39:1a:ac:60:78:64:bc:e3:9c:3c:e0:c7: 5e:72:7f:43:52:13:20:7d:d8:dd:8e:1a:a1:cc:9e: 1f:6d:c2:e0:85:b5:27:e7:73:36:28:a9:f3:a1:52: 18:5c:94:01:9c:4c:f3:bc:80:0d:74:97:bb:7d:eb: d6:c2:8f:3c:08:2c:21:0f:68:17:f5:85:e8:6d:bd: 87:db:06:76:43:1e:4a:03:f1:2f:0f:9e:97:f1:25: e8:b4:5c:ba:ea:4c:86:d4:ea:b2:76:59:62:b4:b0: 2f:59:75:72:83:fe:81:d3:0b:df:b5:03:70:0d:72: bf:db:51:00:7c:fb:0c:e1:1d:e8:39:a2:d3:ea:83: 74:b8:49:39:ce:3e:e2:59:38:04:19:f2:90:b8:50: 6d:ee:e0:b6:3f:dd:75:90:13:cb:03:09:08:1e:f2: 3f:34:51:7e:1b:4f:5a:a0:d9:12:25:45:58:47:43: ed:98:f3:fe:42:ee:0a:1f:f7:70:89:d2:7e:b2:23: b6:d2:08:42:14:4a:9a:ce:92:eb:68:2f:f8:af:6d: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:7A:79:84:23:EE:57:61:2F:DD:45:7C:C2:AB:F6:80:97:F9:68 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:df:5b:68:ea:01:5e:5b:1c:18:4b:a9:6b:c1:69:ba:c0:04: 0b:05:24:f4:c7:4a:bc:19:87:4c:e4:6a:3b:b8:fe:2f:0f:ae: ac:72:4e:e9:43:9a:ed:ad:f9:7e:d8:c8:3f:e6:57:3a:2d:ee: 5d:b0:0c:2c:f1:5a:89:d8:5f:d9:e6:09:8f:95:4e:f6:b5:79: ca:6f:08:22:e7:16:ee:21:f6:c9:dd:da:b7:da:54:ef:18:49: fa:46:7a:75:a0:ed:af:6f:5e:cd:0c:05:fa:bf:98:c6:d2:d8: e4:c2:bb:e6:e3:c3:f9:78:bb:0d:49:0a:32:9b:3e:f8:53:84: ec:09:5e:bd:4c:27:d4:00:66:2f:71:8e:9a:d7:c7:d5:0c:3e: fe:34:41:9c:8b:6f:72:28:78:bf:6b:7a:d2:68:5d:59:7b:ed: eb:b1:65:fb:69:a3:6d:8c:65:22:12:95:79:a8:ea:86:31:e7: f4:01:6d:74:07:63:c9:d7:af:f3:53:54:73:39:42:aa:5d:23: a7:35:42:56:8f:05:11:6d:0a:3b:83:4f:d9:b4:5e:b9:40:36: 0e:43:aa:de:c9:c4:75:8c:f8:df:bb:97:d8:d0:b7:a5:a7:5c: 64:c4:c3:18:46:f8:61:6f:c2:d3:62:49:2d:65:6e:e4:92:ad: 72:6c:81:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjQwNTA3MDEzMDUzWhcNMjQwNTE0MDEzMDUzWjAYMRYwFAYD VQQDEw02NjM5ODQ0ZC1hNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx05WUrtiF5vXHuv6VvC+sbtBRb2mDjtsl0BUSIHXZb5j73BtM28n7rITIyyp PoY5GqxgeGS845w84Mdecn9DUhMgfdjdjhqhzJ4fbcLghbUn53M2KKnzoVIYXJQB nEzzvIANdJe7fevWwo88CCwhD2gX9YXobb2H2wZ2Qx5KA/EvD56X8SXotFy66kyG 1OqydllitLAvWXVyg/6B0wvftQNwDXK/21EAfPsM4R3oOaLT6oN0uEk5zj7iWTgE GfKQuFBt7uC2P911kBPLAwkIHvI/NFF+G09aoNkSJUVYR0PtmPP+Qu4KH/dwidJ+ siO20ghCFEqazpLraC/4r21lQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsrenmE I+5XYS/dRXzCq/aAl/loMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR31to6gFeWxwYS6lrwWm6wAQLBST0x0q8GYdM5Go7uP4vD66sck7p Q5rtrfl+2Mg/5lc6Le5dsAws8VqJ2F/Z5gmPlU72tXnKbwgi5xbuIfbJ3dq32lTv GEn6Rnp1oO2vb17NDAX6v5jG0tjkwrvm48P5eLsNSQoymz74U4TsCV69TCfUAGYv cY6a18fVDD7+NEGci29yKHi/a3rSaF1Ze+3rsWX7aaNtjGUiEpV5qOqGMef0AW10 B2PJ16/zU1RzOUKqXSOnNUJWjwURbQo7g0/ZtF65QDYOQ6reycR1jPjfu5fY0Lel p1xkxMMYRvhhb8LTYkktZW7kkq1ybIFg -----END CERTIFICATE-----Generated at Tue May 7 03:12:17 2024 by rpki-client on console-fra.rpki-client.org