$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json) Hash identifier: dRRjLiSuEOvz9giaP8l2kkWwbmzbQuNRPEe/Aa3sXxY= Subject key identifier: 07:5C:DE:0D:A4:57:D8:1C:C5:D1:1D:31:0D:88:B1:A4:A7:5D:E5:F6 Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft Manifest number: 0353 Signing time: Thu 02 May 2024 08:05:00 +0000 Manifest this update: Thu 02 May 2024 08:05:00 +0000 Manifest next update: Thu 09 May 2024 08:05:00 +0000 Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: LgvCP5yhcjE9w3cho+W1fwHqHneDdXsk6ZfyUMBgCPA=) 2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: pMYN1gxNifDL2LdQmKqpC3aYx3QFKCr7008509Ozo8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 08:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Validity Not Before: May 2 08:05:00 2024 GMT Not After : May 9 08:05:00 2024 GMT Subject: CN=6633492c-16f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:7c:86:60:65:69:b4:5f:67:ae:81:6b:c5: 23:ff:d3:ca:17:3f:8c:e2:cf:06:be:33:0f:ae:90: 0a:4f:95:cd:06:99:23:58:c0:15:c1:26:b4:cd:3b: 7b:ef:3d:12:4d:75:06:60:0c:03:1f:f2:3f:eb:33: 94:f1:a0:33:1e:71:8e:ed:06:72:5c:5c:01:e2:23: f9:23:2e:c8:44:14:52:55:83:d1:e4:21:1b:3d:ba: 83:96:a1:77:83:2b:6c:70:90:9c:35:f4:8d:ec:da: f0:10:37:05:df:f4:00:e9:43:b7:4f:44:95:1f:74: a6:ff:10:cf:ae:49:8f:42:7f:e3:f9:de:36:2b:7c: f6:33:e2:14:63:7d:89:d7:08:cd:db:8d:63:2f:8c: f2:66:f4:d5:72:21:0d:11:d3:cd:16:4e:92:dc:5e: 36:d9:32:e1:1a:42:79:4e:2e:94:f4:ff:94:5d:22: 67:0f:56:2c:32:4d:ad:f1:f5:37:ed:52:6e:07:c6: 1f:f0:48:35:cc:9f:4d:c0:b1:2d:c5:ea:26:6a:8e: 82:33:00:a6:f7:0f:d4:08:e8:b7:e9:45:14:f7:b3: fb:07:2f:bb:ac:30:a8:3c:ec:21:c1:b5:a9:e4:2c: b1:88:f7:1e:aa:f7:51:13:9c:05:32:2e:74:e7:7f: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5C:DE:0D:A4:57:D8:1C:C5:D1:1D:31:0D:88:B1:A4:A7:5D:E5:F6 X509v3 Authority Key Identifier: keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2e:b8:16:01:0f:93:03:07:46:d0:1f:c9:14:74:25:71:de: bf:d5:b0:82:48:8c:91:21:05:43:db:18:39:44:a3:dd:65:3d: bc:09:f1:51:67:76:de:40:08:66:6c:80:44:db:a3:af:9a:23: 4f:1f:f1:e3:00:53:ee:56:be:95:b3:2b:32:cf:ab:49:75:79: d5:51:3a:85:47:d5:a3:19:c5:3a:51:a6:e8:93:ba:6b:e4:3e: b2:87:79:a2:04:b8:93:29:da:d7:5f:3a:f2:b1:3f:ac:19:38: c0:76:b1:e1:ab:31:25:63:f3:1f:cf:37:33:92:c1:56:79:0f: 9a:17:30:52:75:24:0f:c3:62:f7:1c:87:f4:11:7d:cf:f1:b1: 00:82:fc:3a:07:cf:71:53:5a:bd:17:f8:3d:a0:1d:6a:2b:f0: 6a:37:dd:d8:03:1d:10:43:a4:0d:e7:61:db:4e:6d:78:6c:39: 1e:9c:a2:e0:64:ac:0e:fa:35:6b:79:22:e3:64:49:51:35:40: b6:13:ea:31:7b:d5:18:2c:58:19:22:da:91:06:b3:db:51:77: ff:35:bc:58:5a:66:b7:12:c7:65:00:da:c9:41:2e:e8:86:3e: c4:f2:8d:44:cf:87:e9:1c:9e:47:47:ec:e6:4c:74:a8:cd:47: eb:c5:d9:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy QThBRjFDQjUwHhcNMjQwNTAyMDgwNTAwWhcNMjQwNTA5MDgwNTAwWjAYMRYwFAYD VQQDEw02NjMzNDkyYy0xNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rZ8hmBlabRfZ66Ba8Uj/9PKFz+M4s8GvjMPrpAKT5XNBpkjWMAVwSa0zTt7 7z0STXUGYAwDH/I/6zOU8aAzHnGO7QZyXFwB4iP5Iy7IRBRSVYPR5CEbPbqDlqF3 gytscJCcNfSN7NrwEDcF3/QA6UO3T0SVH3Sm/xDPrkmPQn/j+d42K3z2M+IUY32J 1wjN241jL4zyZvTVciENEdPNFk6S3F422TLhGkJ5Ti6U9P+UXSJnD1YsMk2t8fU3 7VJuB8Yf8Eg1zJ9NwLEtxeomao6CMwCm9w/UCOi36UUU97P7By+7rDCoPOwhwbWp 5CyxiPceqvdRE5wFMi50538v8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdc3g2k V9gcxdEdMQ2IsaSnXeX2MB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmLrgWAQ+TAwdG0B/JFHQlcd6/1bCCSIyRIQVD2xg5RKPdZT28CfFR Z3beQAhmbIBE26OvmiNPH/HjAFPuVr6Vsysyz6tJdXnVUTqFR9WjGcU6Uabok7pr 5D6yh3miBLiTKdrXXzrysT+sGTjAdrHhqzElY/MfzzczksFWeQ+aFzBSdSQPw2L3 HIf0EX3P8bEAgvw6B89xU1q9F/g9oB1qK/BqN93YAx0QQ6QN52HbTm14bDkenKLg ZKwO+jVreSLjZElRNUC2E+oxe9UYLFgZItqRBrPbUXf/NbxYWma3EsdlANrJQS7o hj7E8o1Ez4fpHJ5HR+zmTHSozUfrxdlA -----END CERTIFICATE-----Generated at Thu May 2 10:18:05 2024 by rpki-client on console-ams.rpki-client.org