$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: n/uEqkn80fjtO9ZGzqAdzYc+f7zAi7DKNe0LdvTcF4U= Subject key identifier: F9:FF:01:C5:5D:10:82:75:81:07:03:09:F2:7C:18:7C:9F:9F:D7:57 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 33CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 33CC Signing time: Sun 02 Jun 2024 15:35:50 +0000 Manifest this update: Sun 02 Jun 2024 15:35:49 +0000 Manifest next update: Sun 09 Jun 2024 15:35:49 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: Jq34fabmErT9hganEgfwHM08aNF1Icos2U05m0YDpe4=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: QaQ5tb2HeArxrs87I/5ZhVBteyAtirQGpvcsd5zF3kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 15:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13263 (0x33cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Jun 2 15:35:49 2024 GMT Not After : Jun 9 15:35:49 2024 GMT Subject: CN=665c9156-8810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:7c:e4:06:3b:5c:1c:45:a7:d5:a0:cf:92: 5b:aa:86:ca:85:39:52:eb:b0:11:5a:3a:8a:83:99: 2d:ac:b1:fe:1a:d0:8b:53:02:15:f7:bb:1a:7f:b7: 37:85:9f:cb:f4:ef:c2:22:f9:3c:2c:e3:dd:17:2e: b7:fc:5e:45:dd:ff:16:16:cc:ce:bf:c8:ad:a4:b9: f5:ab:e4:ef:48:d3:1b:f7:c9:91:9f:f5:ee:d6:13: ef:2d:03:b4:9e:cf:bf:a3:e7:47:c7:e4:9d:19:a0: 1e:2a:8e:7c:6b:99:81:ee:ca:49:85:d5:58:19:be: 07:03:75:74:29:c6:d0:ba:84:21:fe:fd:88:0e:b8: 0a:c3:77:fc:e8:d7:ef:8b:95:5d:f2:b9:1e:7f:36: f9:93:e8:af:ad:ca:2a:87:ab:83:58:dc:c7:df:ca: 72:d3:ca:d2:35:c2:79:52:2e:53:fe:1e:68:6d:39: 24:ff:dc:eb:b8:76:52:e2:42:b7:e9:bd:d0:db:bd: d3:47:60:2c:0a:19:4f:d5:94:04:44:ef:e6:53:c8: bc:69:42:95:98:a8:72:df:5b:20:66:38:70:9f:16: a9:2b:49:14:33:c9:33:ae:9d:f6:23:c9:9f:c9:24: e7:73:be:7b:67:33:8a:8c:69:54:fd:d2:9a:b9:65: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:01:C5:5D:10:82:75:81:07:03:09:F2:7C:18:7C:9F:9F:D7:57 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:39:34:32:65:ad:a5:a7:30:a9:38:f1:69:c5:7f:da:a0:d0: 63:cc:66:c6:e4:60:89:b4:6b:4f:cf:5a:c3:c8:5c:15:5f:ab: 1e:6c:3b:76:3b:63:a2:06:60:f5:cc:31:20:da:b1:e1:3f:46: 2e:f1:b2:fc:cf:a1:d3:b2:0b:dc:85:94:e5:6d:22:7d:fa:5e: d2:c3:55:a4:ef:eb:60:98:0e:8c:48:20:94:b1:04:f0:a4:f3: dc:35:2e:04:6f:67:10:6b:29:c6:4a:9b:0f:4d:5a:6b:4b:43: 54:23:72:0d:d0:87:d9:b6:61:11:1e:dd:68:db:30:8a:3b:4c: fa:a9:56:08:09:26:56:13:e4:26:bc:00:68:68:3f:5e:d9:d9: 47:b1:b4:c1:a5:e0:8d:2d:58:1c:c4:bc:be:00:92:97:41:ae: 29:4f:39:7b:ce:6c:9a:cb:c5:e6:64:f2:55:4a:52:d8:73:8e: 2d:3a:da:8e:22:6b:b1:08:7a:46:1a:e2:cb:57:e4:55:1a:2d: aa:cf:61:77:be:e4:45:c9:2e:4d:e9:b8:6d:69:25:91:72:65: b9:3c:da:3a:3e:b6:9b:9a:3d:6e:9c:48:b4:9d:8a:34:9d:8a: ef:7d:8c:5f:76:14:a6:a7:6b:02:eb:4a:b1:10:3a:61:dc:e9: 43:47:bf:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjQwNjAyMTUzNTQ5WhcNMjQwNjA5MTUzNTQ5WjAYMRYwFAYD VQQDEw02NjVjOTE1Ni04ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ht85AY7XBxFp9Wgz5JbqobKhTlS67ARWjqKg5ktrLH+GtCLUwIV97saf7c3 hZ/L9O/CIvk8LOPdFy63/F5F3f8WFszOv8itpLn1q+TvSNMb98mRn/Xu1hPvLQO0 ns+/o+dHx+SdGaAeKo58a5mB7spJhdVYGb4HA3V0KcbQuoQh/v2IDrgKw3f86Nfv i5Vd8rkefzb5k+ivrcoqh6uDWNzH38py08rSNcJ5Ui5T/h5obTkk/9zruHZS4kK3 6b3Q273TR2AsChlP1ZQERO/mU8i8aUKVmKhy31sgZjhwnxapK0kUM8kzrp32I8mf ySTnc757ZzOKjGlU/dKauWXwIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn/AcVd EIJ1gQcDCfJ8GHyfn9dXMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpOTQyZa2lpzCpOPFpxX/aoNBjzGbG5GCJtGtPz1rDyFwVX6sebDt2 O2OiBmD1zDEg2rHhP0Yu8bL8z6HTsgvchZTlbSJ9+l7Sw1Wk7+tgmA6MSCCUsQTw pPPcNS4Eb2cQaynGSpsPTVprS0NUI3IN0IfZtmERHt1o2zCKO0z6qVYICSZWE+Qm vABoaD9e2dlHsbTBpeCNLVgcxLy+AJKXQa4pTzl7zmyay8XmZPJVSlLYc44tOtqO ImuxCHpGGuLLV+RVGi2qz2F3vuRFyS5N6bhtaSWRcmW5PNo6Prabmj1unEi0nYo0 nYrvfYxfdhSmp2sC60qxEDph3OlDR7+8 -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:16 2024 by rpki-client on console-fra.rpki-client.org