$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: c47PWlIIM6XOtoE+ETNdl1YZ1t6wb2Rd3L1p206kirs= Subject key identifier: 0D:05:99:33:1F:FD:E7:8B:2E:CB:B9:E1:50:49:EF:4F:5F:FE:98:F5 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 025A Signing time: Wed 29 May 2024 04:20:08 +0000 Manifest this update: Wed 29 May 2024 04:20:08 +0000 Manifest next update: Wed 05 Jun 2024 04:20:08 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: LxX4yhQbRk1KREaTBYJDSgUOPgdk84rh3iI7cEAIErA=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: H8M7DHeKtoHqgDEQjzrVYJpqHkMj4EXwpxpc1rO1Nd0=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: 61S7heZRsqu8mkCun8FK0ca769SJshI/tiEmIGXQbBg=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: 0NV2mILZ5njEWOtQc6fkT3mCAuwk33B3V5S922VQ35Y=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: Bb2xTTpIaFr8iYFQlcG6UCji83j2vCryfdgXK9RWTd4=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: UGHSRikhzP49zQi9N4IrGOVK6HkSjO8xJzRd8NXO9jk=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: wwFpumbFVPWai58pZ8h6SY92HHmqZd9R46nT1ewOyeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 04:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: May 29 04:20:08 2024 GMT Not After : Jun 5 04:20:08 2024 GMT Subject: CN=6656acf8-70c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:63:af:9f:b2:c0:06:22:a7:93:78:bb:90: 76:76:da:4d:2f:de:d9:92:60:2c:1f:45:0a:96:c3: bd:9e:d8:86:e3:91:6c:fc:38:59:0f:18:11:ba:8b: 0c:16:9b:c0:61:12:ea:27:49:da:8c:b9:be:ba:b6: 47:6e:ae:ea:87:c8:8b:55:91:14:97:02:0b:3a:89: 7b:51:49:db:a2:f4:e5:52:cc:49:09:be:f7:64:70: c3:3f:5e:0e:3a:cf:13:05:f9:b4:fb:db:19:96:28: fa:9a:4b:f8:01:22:08:23:6b:c9:5e:da:70:08:a8: 9e:2a:6a:95:3e:9b:e9:a5:f3:bc:b9:7c:cb:e0:ca: ce:0e:9c:10:1b:5f:c0:20:f0:82:24:38:04:6b:a0: 2e:34:c5:64:7a:2f:1b:de:1b:fe:cd:30:fc:77:ad: a3:97:04:3f:6a:57:03:42:6b:9b:f9:db:fb:51:51: 2c:9f:37:99:70:be:25:96:99:de:ee:33:4c:f2:08: 42:e1:04:39:14:00:a4:ef:83:f6:4e:88:7b:4d:ca: 3f:4a:9f:21:5d:9f:56:7d:33:bc:43:af:5a:a6:cc: 3a:e0:e8:9f:bf:3c:67:85:16:7d:2f:24:6c:6b:6c: cb:9f:b9:9f:bb:e4:b0:98:c6:69:80:c3:10:ac:82: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:05:99:33:1F:FD:E7:8B:2E:CB:B9:E1:50:49:EF:4F:5F:FE:98:F5 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:27:a6:06:3c:04:07:26:68:30:47:90:0e:89:9e:65:b7:60: 20:0c:89:01:a3:f1:ed:19:8f:17:2f:14:81:b7:f2:e6:44:58: 53:58:30:41:1c:a1:0b:e1:c7:04:db:e8:77:9e:89:05:3a:4b: 9b:75:f0:37:44:13:8c:2e:5e:d5:7a:e7:82:42:33:3c:19:bf: 72:68:aa:47:09:3f:ee:78:fe:f6:44:ea:71:a3:64:72:9b:ed: ec:d4:ab:7d:4e:2d:09:58:2f:97:c9:e4:1b:67:8f:c9:9a:ce: 5b:50:bf:6e:92:d6:2b:0f:5c:b0:83:6e:0a:e7:f0:c3:09:e2: 20:34:60:e8:4d:e6:11:3e:d4:5b:8b:4f:38:0e:8c:09:c2:0c: 9d:ff:a0:88:48:0b:d4:0c:1b:db:06:5a:bb:d6:d8:20:76:fb: 6c:ab:42:e3:58:2a:80:be:ad:f1:b6:b2:c2:41:ba:45:f5:e3: fd:a8:5f:48:84:f0:de:81:20:18:03:fa:b8:c9:5f:ed:c4:62: fb:6f:70:09:88:84:7d:0e:0d:85:af:ac:b1:39:bd:8e:95:8a: bf:ac:e2:b1:b2:09:4a:44:b2:59:5c:bc:28:b5:07:fb:c4:39: 1f:89:dc:02:68:63:c4:e4:64:f1:06:4e:83:24:cd:63:b6:cc: 2e:9f:e8:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjQwNTI5MDQyMDA4WhcNMjQwNjA1MDQyMDA4WjAYMRYwFAYD VQQDEw02NjU2YWNmOC03MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgRjr5+ywAYip5N4u5B2dtpNL97ZkmAsH0UKlsO9ntiG45Fs/DhZDxgRuosM FpvAYRLqJ0najLm+urZHbq7qh8iLVZEUlwILOol7UUnbovTlUsxJCb73ZHDDP14O Os8TBfm0+9sZlij6mkv4ASIII2vJXtpwCKieKmqVPpvppfO8uXzL4MrODpwQG1/A IPCCJDgEa6AuNMVkei8b3hv+zTD8d62jlwQ/alcDQmub+dv7UVEsnzeZcL4llpne 7jNM8ghC4QQ5FACk74P2Toh7Tco/Sp8hXZ9WfTO8Q69apsw64OifvzxnhRZ9LyRs a2zLn7mfu+SwmMZpgMMQrIKhfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0FmTMf /eeLLsu54VBJ709f/pj1MB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+J6YGPAQHJmgwR5AOiZ5lt2AgDIkBo/HtGY8XLxSBt/LmRFhTWDBB HKEL4ccE2+h3nokFOkubdfA3RBOMLl7VeueCQjM8Gb9yaKpHCT/ueP72ROpxo2Ry m+3s1Kt9Ti0JWC+XyeQbZ4/Jms5bUL9uktYrD1ywg24K5/DDCeIgNGDoTeYRPtRb i084DowJwgyd/6CISAvUDBvbBlq71tggdvtsq0LjWCqAvq3xtrLCQbpF9eP9qF9I hPDegSAYA/q4yV/txGL7b3AJiIR9Dg2Fr6yxOb2OlYq/rOKxsglKRLJZXLwotQf7 xDkfidwCaGPE5GTxBk6DJM1jtswun+h6 -----END CERTIFICATE-----Generated at Wed May 29 06:12:07 2024 by rpki-client on console-ams.rpki-client.org