$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: gpxmLNHkWlUorljx2attaSPwY1UXnqEtd2VbP0Ylee0= Subject key identifier: A3:58:FA:F3:D2:19:79:ED:EA:5F:08:2E:60:2F:B1:C5:9A:F4:0D:F4 Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 1230 Signing time: Mon 06 May 2024 19:49:26 +0000 Manifest this update: Mon 06 May 2024 19:49:26 +0000 Manifest next update: Mon 13 May 2024 19:49:26 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: SHWw2DOyuCXn1BPuroN5NoI8qhQJ4UewLbuA8nA+/Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: May 6 19:49:26 2024 GMT Not After : May 13 19:49:26 2024 GMT Subject: CN=66393446-aab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:a2:7a:1a:b8:df:02:6d:2c:59:6d:6e:e1: 61:b6:d4:d0:b4:be:5d:e5:f3:b6:54:ad:0e:f9:dc: d1:fe:70:87:56:44:0a:68:ef:32:b5:21:71:34:9c: 7e:91:3c:ed:3f:98:1b:6d:ab:5e:19:07:69:63:76: 80:51:0f:4e:1d:d3:81:f5:4b:ce:4d:91:9b:23:d9: c6:b9:c3:da:a0:e1:18:29:79:4c:1a:0d:21:d4:75: 88:c1:85:1d:cd:d7:5a:21:09:27:b1:b9:0b:fd:53: ce:04:04:9d:85:77:e5:23:44:cf:71:3c:5c:a3:7b: 95:6f:24:a2:ab:ee:56:48:d2:fd:58:ac:e8:24:26: 7d:4d:ed:2b:70:fd:fa:3f:bb:07:ee:fc:fb:05:df: a5:6e:12:2e:a3:35:fe:10:1f:69:6d:14:1b:c3:cf: 87:c8:4b:9a:1f:fb:f9:78:c0:0f:3a:2b:fd:c1:da: 6d:c7:2a:cc:02:49:e4:89:5c:11:b2:d6:ef:e2:08: 8f:d3:d9:1a:be:9b:a3:de:35:56:cd:8c:8c:c3:0e: 86:ec:fe:72:bb:de:7e:b3:79:15:c1:61:23:9e:be: 5e:7b:c6:bf:43:f9:fe:75:d2:02:73:27:44:16:2d: 50:69:3d:6f:a7:ac:b3:b7:5f:58:e1:3a:05:3e:90: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:FA:F3:D2:19:79:ED:EA:5F:08:2E:60:2F:B1:C5:9A:F4:0D:F4 X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:5c:da:5a:c6:38:a8:2d:5b:c6:39:ee:eb:3b:cb:d1:56:49: c7:9f:e5:ab:94:31:2e:97:c0:dd:36:16:af:58:7f:37:c7:fe: 2e:ee:14:70:7f:14:09:dc:2e:73:83:d5:bd:c5:df:42:b4:b9: 7d:7e:d1:37:93:4d:a6:20:9b:0b:2c:37:36:1d:70:ca:34:eb: ed:7b:7e:60:f1:07:99:f1:98:cf:8c:a8:d1:c8:53:60:32:00: f5:28:b6:f7:01:bc:55:7a:e4:f9:9d:ed:51:7f:9a:05:57:be: e3:19:de:e4:33:5e:5a:eb:3c:3f:f6:fe:b7:80:57:78:b8:12: fa:b1:c3:eb:5e:4a:b5:8a:67:ef:8b:4c:c1:0f:2c:c5:43:16: 27:f1:1e:0f:ec:73:06:39:b7:0b:01:d0:7a:ac:2e:24:33:d9: 16:dc:a4:92:62:29:7c:ff:79:20:25:b3:04:8a:54:13:ed:bf: 61:b3:fe:48:f6:6f:d0:e8:00:5c:fe:58:8e:ce:66:d2:1e:db: f1:33:34:34:a9:1b:46:bb:f3:30:22:de:69:02:c3:00:c4:8b: b1:4d:77:32:7d:79:00:4f:b8:5d:97:e7:7e:f4:49:0e:59:47: ec:7f:ab:db:c1:e6:56:bb:79:82:b1:6a:95:94:fc:93:6f:d7: 0c:a4:11:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjQwNTA2MTk0OTI2WhcNMjQwNTEzMTk0OTI2WjAYMRYwFAYD VQQDEw02NjM5MzQ0Ni1hYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtuiehq43wJtLFltbuFhttTQtL5d5fO2VK0O+dzR/nCHVkQKaO8ytSFxNJx+ kTztP5gbbateGQdpY3aAUQ9OHdOB9UvOTZGbI9nGucPaoOEYKXlMGg0h1HWIwYUd zddaIQknsbkL/VPOBASdhXflI0TPcTxco3uVbySiq+5WSNL9WKzoJCZ9Te0rcP36 P7sH7vz7Bd+lbhIuozX+EB9pbRQbw8+HyEuaH/v5eMAPOiv9wdptxyrMAknkiVwR stbv4giP09kavpuj3jVWzYyMww6G7P5yu95+s3kVwWEjnr5ee8a/Q/n+ddICcydE Fi1QaT1vp6yzt19Y4ToFPpAcnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNY+vPS GXnt6l8ILmAvscWa9A30MB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5XNpaxjioLVvGOe7rO8vRVknHn+WrlDEul8DdNhavWH83x/4u7hRw fxQJ3C5zg9W9xd9CtLl9ftE3k02mIJsLLDc2HXDKNOvte35g8QeZ8ZjPjKjRyFNg MgD1KLb3AbxVeuT5ne1Rf5oFV77jGd7kM15a6zw/9v63gFd4uBL6scPrXkq1imfv i0zBDyzFQxYn8R4P7HMGObcLAdB6rC4kM9kW3KSSYil8/3kgJbMEilQT7b9hs/5I 9m/Q6ABc/liOzmbSHtvxMzQ0qRtGu/MwIt5pAsMAxIuxTXcyfXkAT7hdl+d+9EkO WUfsf6vbweZWu3mCsWqVlPyTb9cMpBEx -----END CERTIFICATE-----Generated at Mon May 6 22:40:56 2024 by rpki-client on console-ams.rpki-client.org