$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: JJgJJEJHyUMKxcAVo80bPxRkQJBOCuOWP5/uRDGIf6k= Subject key identifier: 6B:DD:6E:DD:20:00:4A:35:AD:30:BD:23:98:6A:BE:A6:33:EF:58:47 Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 0530 Signing time: Sun 05 May 2024 01:07:24 +0000 Manifest this update: Sun 05 May 2024 01:07:23 +0000 Manifest next update: Sun 12 May 2024 01:07:23 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: q1w0OMvv/7M3XOLyuZ5Mrt97Lz+7yEKXAS8vyGSA6lM=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: ZFXIqV8quOOnqmOnPactpTfIBz+1pyxZQcnQvkV3xiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: May 5 01:07:23 2024 GMT Not After : May 12 01:07:23 2024 GMT Subject: CN=6636dbcb-8015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:b1:47:5e:11:17:09:23:a6:97:92:db:db: 53:3a:40:be:05:34:0e:6b:d2:23:15:00:3f:5b:4c: 28:5a:4a:6d:67:68:21:99:18:57:47:e4:74:7e:28: d7:b4:59:0f:c9:96:b0:d3:13:ac:af:ef:f9:62:50: d6:3a:6f:ae:59:54:b9:b6:db:09:e3:94:0c:37:71: da:c5:19:4e:78:44:98:c3:53:b7:4b:1f:7a:cb:bf: 9d:be:e3:c2:64:b2:eb:43:fd:4e:c0:82:97:ff:6d: 36:77:8a:a6:d1:c5:d9:85:d9:3f:1d:d3:f1:d2:87: 53:97:5d:94:e9:13:f9:d6:68:e6:f0:27:63:9e:1f: fd:fa:a3:ef:67:2c:e6:75:e5:ce:4f:e7:d4:8f:04: 26:8f:85:45:e6:7c:81:dc:f2:9a:8d:3b:cc:2d:4f: 5b:66:77:f2:4a:db:e7:24:69:49:c8:42:6f:86:f2: 4b:ae:9e:12:80:83:06:a9:66:2d:ff:e6:7e:18:72: 7c:d6:33:24:b8:49:17:63:47:6b:91:90:b1:24:d5: 7f:3e:1b:d4:01:80:8f:9b:55:fb:e0:bb:ba:67:6b: af:1f:6d:4e:1a:8f:81:4c:ae:62:68:00:ee:a8:91: 34:6b:98:50:77:09:b9:03:ef:b9:1b:e3:dc:84:41: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DD:6E:DD:20:00:4A:35:AD:30:BD:23:98:6A:BE:A6:33:EF:58:47 X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:f9:1f:e4:94:2e:a6:71:f4:00:06:c4:42:0a:c7:d5:d5: ff:e4:70:f7:cd:35:ed:ae:27:0a:33:83:55:5c:c6:f8:d4:96: 41:37:b6:aa:9e:f6:0f:cf:d1:59:93:b7:95:79:bc:48:ac:88: b4:18:f8:67:87:32:eb:eb:14:42:66:70:7a:52:57:0a:d8:21: 52:58:ed:40:bb:2a:ca:13:23:87:f9:3a:e3:db:59:b5:2d:02: 62:ca:2d:43:36:e4:92:fc:d7:f7:12:d6:97:9c:e5:28:65:b7: 54:4e:73:9f:a2:09:a9:e4:88:bb:a2:6d:ed:94:70:ee:5f:c6: db:db:d1:ba:42:be:6b:e7:3b:c6:35:90:fa:e1:b9:d3:27:38: 5b:cd:c7:22:17:26:dc:fc:ae:f6:1f:6d:71:86:38:da:c0:7e: 4c:7b:f2:49:fb:5b:65:de:e2:12:bd:7a:6d:e4:7e:f8:fd:a7: c5:94:20:00:c2:2f:f6:d0:c3:71:b4:13:99:e4:2b:d2:ab:3c: a1:3c:f4:ce:a5:ac:63:d0:6a:d2:48:01:da:75:bc:41:2b:38: 8c:17:d9:af:b1:1e:ed:c2:44:c6:78:b0:9d:9c:30:b0:11:ff: a3:b1:a4:fa:61:44:1d:56:05:9d:ce:71:37:0b:cd:0e:22:0e: 0b:08:9b:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjQwNTA1MDEwNzIzWhcNMjQwNTEyMDEwNzIzWjAYMRYwFAYD VQQDEw02NjM2ZGJjYi04MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNqxR14RFwkjppeS29tTOkC+BTQOa9IjFQA/W0woWkptZ2ghmRhXR+R0fijX tFkPyZaw0xOsr+/5YlDWOm+uWVS5ttsJ45QMN3HaxRlOeESYw1O3Sx96y7+dvuPC ZLLrQ/1OwIKX/202d4qm0cXZhdk/HdPx0odTl12U6RP51mjm8Cdjnh/9+qPvZyzm deXOT+fUjwQmj4VF5nyB3PKajTvMLU9bZnfyStvnJGlJyEJvhvJLrp4SgIMGqWYt /+Z+GHJ81jMkuEkXY0drkZCxJNV/PhvUAYCPm1X74Lu6Z2uvH21OGo+BTK5iaADu qJE0a5hQdwm5A++5G+PchEFMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvdbt0g AEo1rTC9I5hqvqYz71hHMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALdfkf5JQupnH0AAbEQgrH1dX/5HD3zTXtricKM4NVXMb41JZBN7aq nvYPz9FZk7eVebxIrIi0GPhnhzLr6xRCZnB6UlcK2CFSWO1AuyrKEyOH+Trj21m1 LQJiyi1DNuSS/Nf3EtaXnOUoZbdUTnOfogmp5Ii7om3tlHDuX8bb29G6Qr5r5zvG NZD64bnTJzhbzcciFybc/K72H21xhjjawH5Me/JJ+1tl3uISvXpt5H74/afFlCAA wi/20MNxtBOZ5CvSqzyhPPTOpaxj0GrSSAHadbxBKziMF9mvsR7twkTGeLCdnDCw Ef+jsaT6YUQdVgWdznE3C80OIg4LCJsO -----END CERTIFICATE-----Generated at Sun May 5 02:33:36 2024 by rpki-client on console-fra.rpki-client.org