$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: xCpNYhUl90s+QPVCRPTDXZHRylXOkkB+k058W7Rsv00= Subject key identifier: B5:E4:D0:51:6F:4C:DF:62:1C:A7:42:C7:71:9D:EA:BF:0B:7A:20:73 Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 94 Signing time: Thu 16 May 2024 23:53:33 +0000 Manifest this update: Thu 16 May 2024 23:53:33 +0000 Manifest next update: Thu 23 May 2024 23:53:33 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: gGs3iGauDilDLk71noeCGHohAw9EjwqH8eQSUae97iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: May 16 23:53:33 2024 GMT Not After : May 23 23:53:33 2024 GMT Subject: CN=66469c7d-1b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:1d:c9:55:66:82:fb:b8:86:2d:68:f1:0e: c6:69:9e:ce:ec:b1:8e:30:54:66:d6:f9:16:30:d1: 1b:76:f1:94:71:3b:16:1a:d3:69:22:20:07:2f:f7: 07:8b:e5:40:89:34:83:16:b8:3a:67:bd:e9:48:e0: 9d:cf:9b:84:1b:fc:c9:3e:38:1b:af:fe:e5:6b:fc: 48:41:98:74:74:25:61:b3:bb:f4:dc:5b:ec:c2:1b: 73:e5:4b:7e:cd:be:a2:79:7b:a3:2e:d6:5b:9d:c0: 21:06:c0:f8:88:82:ae:63:17:ab:22:c6:e4:41:ba: bb:36:79:0d:d8:ef:b1:e8:90:1d:4d:10:ee:44:68: e4:ea:4d:c1:12:35:07:ac:6c:60:ec:15:af:4b:11: 82:3f:67:63:57:de:d8:9f:37:80:43:f8:0a:d6:91: 29:b0:8b:3a:8c:38:74:28:ca:72:08:0f:9c:3b:32: 55:be:07:2a:90:b5:36:18:bf:ff:d1:1a:f6:92:ca: 59:ff:ae:26:eb:24:5a:01:a6:d0:a8:e6:f1:d3:7c: f4:3e:89:e3:c8:b3:96:c8:9c:fd:aa:77:ba:39:68: c9:61:fc:95:ea:35:52:c3:d4:f0:06:6d:4f:ee:04: 7c:dc:1d:fe:85:16:23:b2:b6:29:54:47:2f:10:14: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E4:D0:51:6F:4C:DF:62:1C:A7:42:C7:71:9D:EA:BF:0B:7A:20:73 X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3b:99:b1:6d:ce:80:b0:65:f3:9b:7e:d2:df:bd:2c:73:f7: 19:50:97:a7:12:21:4d:5b:e6:c3:f9:68:f0:a4:48:04:ab:5d: df:ae:9d:cd:54:f5:50:3f:9a:a5:c2:88:04:48:6a:e6:69:ba: b2:96:a4:9d:03:05:f9:0e:e9:1f:87:f8:ab:ed:f6:df:73:70: 55:9f:59:69:bf:af:92:72:d5:bc:96:f6:9a:a7:95:ad:c7:7f: 11:c8:78:a9:9c:96:6a:45:97:55:02:8f:32:7a:2f:54:f1:46: 57:55:a8:c7:04:41:58:55:f6:ce:81:91:12:9c:09:13:95:b8: 18:33:fa:e0:77:52:cd:db:d1:2b:79:37:55:67:4f:04:e6:51: cf:be:af:92:b3:d9:4c:e2:b0:fe:b0:6f:cc:73:c1:8c:eb:ba: 81:f5:37:15:c9:5e:21:3c:65:b5:9b:93:1c:8b:8b:7b:7a:9f: 72:29:4e:58:9d:6e:24:9e:8d:02:06:f1:a8:d6:77:17:78:2b: 5b:3d:d3:d4:56:7d:9c:e1:53:36:16:b7:33:bc:be:ce:b0:e0: 7e:be:66:ff:07:4e:38:cd:a9:a4:6b:35:28:19:69:d1:a2:cf: 1c:10:65:75:f6:7a:82:16:95:88:39:9b:f3:84:07:48:74:18: 27:f8:17:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjQwNTE2MjM1MzMzWhcNMjQwNTIzMjM1MzMzWjAYMRYwFAYD VQQDEw02NjQ2OWM3ZC0xYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnMdyVVmgvu4hi1o8Q7GaZ7O7LGOMFRm1vkWMNEbdvGUcTsWGtNpIiAHL/cH i+VAiTSDFrg6Z73pSOCdz5uEG/zJPjgbr/7la/xIQZh0dCVhs7v03Fvswhtz5Ut+ zb6ieXujLtZbncAhBsD4iIKuYxerIsbkQbq7NnkN2O+x6JAdTRDuRGjk6k3BEjUH rGxg7BWvSxGCP2djV97YnzeAQ/gK1pEpsIs6jDh0KMpyCA+cOzJVvgcqkLU2GL// 0Rr2kspZ/64m6yRaAabQqObx03z0PonjyLOWyJz9qne6OWjJYfyV6jVSw9TwBm1P 7gR83B3+hRYjsrYpVEcvEBSKXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXk0FFv TN9iHKdCx3Gd6r8LeiBzMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjO5mxbc6AsGXzm37S370sc/cZUJenEiFNW+bD+WjwpEgEq13frp3N VPVQP5qlwogESGrmabqylqSdAwX5Dukfh/ir7fbfc3BVn1lpv6+SctW8lvaap5Wt x38RyHipnJZqRZdVAo8yei9U8UZXVajHBEFYVfbOgZESnAkTlbgYM/rgd1LN29Er eTdVZ08E5lHPvq+Ss9lM4rD+sG/Mc8GM67qB9TcVyV4hPGW1m5Mci4t7ep9yKU5Y nW4kno0CBvGo1ncXeCtbPdPUVn2c4VM2FrczvL7OsOB+vmb/B044zamkazUoGWnR os8cEGV19nqCFpWIOZvzhAdIdBgn+Bdd -----END CERTIFICATE-----Generated at Fri May 17 00:19:43 2024 by rpki-client on console-ams.rpki-client.org