$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: pvQgXbsDeHN5KnnFtVwjSr7otGgvVcRhr7QRxw/lavU= Subject key identifier: 32:5B:84:FB:50:D5:97:56:CC:28:7D:81:C5:91:BC:13:E3:F2:E5:D1 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 080C Signing time: Mon 06 May 2024 21:57:37 +0000 Manifest this update: Mon 06 May 2024 21:57:36 +0000 Manifest next update: Mon 13 May 2024 21:57:36 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: Vjw324p3XnspFdkjW7SeebI8UNmaPHqofZawBI84ejo=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: Q4pLtfURGynOSNQ90XJYRWxhaby7Q7g0CFRA4swtSSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: May 6 21:57:36 2024 GMT Not After : May 13 21:57:36 2024 GMT Subject: CN=66395250-03b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:6d:6d:b8:45:44:a9:4f:3b:46:19:e8:78: da:ef:de:79:8f:a2:3a:da:d7:20:fd:48:0b:ca:45: 5e:c3:43:25:10:58:ea:16:62:a7:a0:4b:95:c8:95: 0d:af:32:35:13:4d:4e:2b:0c:96:dc:f2:70:d2:58: f2:4d:7a:04:ca:14:8e:06:ba:51:43:26:df:43:28: 38:40:c2:63:1c:1b:38:f4:ac:37:66:f3:df:bf:0f: d7:cc:f7:97:5c:d6:4e:13:7d:48:04:12:5f:7b:be: 46:4d:39:d9:9a:8d:c9:95:26:e8:59:f1:2a:4b:13: a1:e0:7e:39:3d:ec:86:97:5b:88:b6:f5:1b:69:4f: 23:f5:d2:ed:3d:12:8b:d5:53:78:0f:ba:a6:5b:de: 26:1a:ec:71:88:75:4d:a4:e4:0b:24:7c:7f:a7:e5: f6:7c:04:75:c9:4a:4b:29:5c:3d:65:e0:fe:cd:3d: 7a:79:c0:9c:88:11:1f:a2:f3:c4:87:2b:fe:e2:29: 4d:c2:29:74:07:a1:8c:89:94:99:c4:01:10:2d:30: 03:53:99:01:ab:35:b6:0a:2f:d1:86:17:81:d6:ad: 45:3a:59:27:b9:14:08:33:43:8c:cb:e9:30:5b:d9: 78:ab:ab:d0:09:c8:9a:b8:4e:a4:01:c9:17:75:dc: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:84:FB:50:D5:97:56:CC:28:7D:81:C5:91:BC:13:E3:F2:E5:D1 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6a:97:62:bb:cb:7f:7a:45:af:24:7d:d5:f9:56:3f:58:22: ec:b2:aa:63:5e:aa:88:67:ca:9a:26:58:4e:db:ff:40:ae:3d: 9f:45:49:1b:c0:cd:4f:c3:5a:93:86:a8:7a:43:7e:ac:a7:49: 8c:01:e5:0c:29:b5:09:19:7c:0d:80:5b:8b:2e:fd:53:2b:8e: 11:70:b7:e6:09:a2:30:05:f5:3d:00:4d:0a:9a:56:b4:6d:32: 13:ff:5f:d5:28:d6:62:0e:f4:26:2d:88:38:49:84:0f:15:5b: 79:c6:c5:c2:03:93:26:e1:c0:70:e5:d0:ae:12:63:fc:5a:53: 7b:f6:24:79:12:c2:9c:fd:4a:6c:85:24:97:73:66:90:16:ad: 2d:90:ea:ee:dd:c4:e2:0a:cc:45:28:34:6a:42:2e:2a:57:21: e1:8a:e8:1d:5b:66:24:a7:2c:03:e4:cc:5a:de:db:36:fa:00: 8c:a3:2c:cf:d3:37:58:9f:cf:bb:77:84:3d:b6:d1:23:24:4a: 1b:4f:d2:b3:03:e8:35:09:d8:c7:a8:0a:99:5d:e7:42:7b:d1: a3:c8:d4:01:a2:a7:b8:90:8a:d6:43:1d:da:23:a2:a3:83:ac: 7b:f7:c6:51:f1:ff:52:ee:eb:ef:cb:ed:3c:cb:58:f4:74:57: cd:ae:35:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjQwNTA2MjE1NzM2WhcNMjQwNTEzMjE1NzM2WjAYMRYwFAYD VQQDEw02NjM5NTI1MC0wM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5whtbbhFRKlPO0YZ6Hja7955j6I62tcg/UgLykVew0MlEFjqFmKnoEuVyJUN rzI1E01OKwyW3PJw0ljyTXoEyhSOBrpRQybfQyg4QMJjHBs49Kw3ZvPfvw/XzPeX XNZOE31IBBJfe75GTTnZmo3JlSboWfEqSxOh4H45PeyGl1uItvUbaU8j9dLtPRKL 1VN4D7qmW94mGuxxiHVNpOQLJHx/p+X2fAR1yUpLKVw9ZeD+zT16ecCciBEfovPE hyv+4ilNwil0B6GMiZSZxAEQLTADU5kBqzW2Ci/RhheB1q1FOlknuRQIM0OMy+kw W9l4q6vQCciauE6kAckXddzmKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJbhPtQ 1ZdWzCh9gcWRvBPj8uXRMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCapdiu8t/ekWvJH3V+VY/WCLssqpjXqqIZ8qaJlhO2/9Arj2fRUkb wM1Pw1qThqh6Q36sp0mMAeUMKbUJGXwNgFuLLv1TK44RcLfmCaIwBfU9AE0Kmla0 bTIT/1/VKNZiDvQmLYg4SYQPFVt5xsXCA5Mm4cBw5dCuEmP8WlN79iR5EsKc/Ups hSSXc2aQFq0tkOru3cTiCsxFKDRqQi4qVyHhiugdW2YkpywD5Mxa3ts2+gCMoyzP 0zdYn8+7d4Q9ttEjJEobT9KzA+g1CdjHqAqZXedCe9GjyNQBoqe4kIrWQx3aI6Kj g6x798ZR8f9S7uvvy+08y1j0dFfNrjWN -----END CERTIFICATE-----Generated at Mon May 6 22:40:53 2024 by rpki-client on console-ams.rpki-client.org