$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: cmJvAeFgvHE6XI05odrq61CoeNmTPwhT2CR4zWMie20= Subject key identifier: 7B:F5:1A:59:6B:59:EE:D0:6F:61:20:79:47:CF:EE:F0:C2:D0:E8:3C Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: 15 Signing time: Fri 17 May 2024 08:56:37 +0000 Manifest this update: Fri 17 May 2024 08:56:37 +0000 Manifest next update: Fri 24 May 2024 08:56:37 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: LJYngLRU+yUE/plnFhnJfTDXfhMBO0ZZgMlC/mJgMIQ=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: VHWFb8Z2Eu6wi8MvhvaLD3Xh92wBU8OtO+jqiGApjkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: May 17 08:56:37 2024 GMT Not After : May 24 08:56:37 2024 GMT Subject: CN=66471bc5-e1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:e2:02:fb:cc:f3:43:ed:1f:32:4a:89:ba: 91:19:bb:9c:10:35:56:b3:f8:e7:c4:86:85:9f:06: 71:59:f3:dd:cf:91:3c:3e:ff:13:5b:46:3e:38:61: a9:9b:79:14:e6:d9:e8:29:d9:c0:ea:e0:c5:97:5c: 41:37:e0:bf:80:23:07:47:6c:d2:ab:fb:b6:f4:20: 4b:18:52:6d:57:e7:4e:95:e5:f2:d7:49:2d:b0:2f: 22:03:a6:2f:95:18:d3:93:ba:4f:45:48:66:73:77: e4:05:b2:d2:fe:7f:a5:d5:0f:87:9d:a0:b4:a4:89: f1:44:e4:ee:b0:ca:80:0c:78:e3:b2:36:71:0c:ac: 8d:ba:23:6c:80:09:46:d3:70:70:2f:81:18:f8:af: 4d:5f:96:e0:fb:62:60:6d:bb:b1:22:29:68:c0:6d: eb:bd:ad:61:b3:5c:33:5e:90:4b:08:b4:f6:0c:dc: 95:70:ad:ac:43:99:62:a5:84:44:92:be:d2:1e:79: 77:fb:35:21:5b:14:7b:b1:4f:b7:d9:cc:a5:23:13: 12:c3:be:4d:4f:32:39:b1:8e:d5:f0:8b:d0:6b:9f: ad:f9:f0:9a:16:3e:d5:de:19:54:f1:ae:bc:4e:17: 12:90:a0:8b:ad:8f:1d:ca:35:09:fa:13:93:9a:fa: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F5:1A:59:6B:59:EE:D0:6F:61:20:79:47:CF:EE:F0:C2:D0:E8:3C X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:29:83:8b:65:98:1d:8d:7e:f1:3a:ee:a4:34:ab:93:45:a0: ce:43:8f:89:6f:21:b8:e5:e5:73:ad:cf:9a:43:5e:77:6a:98: f0:b1:04:78:00:0a:fa:6f:a4:3b:c9:c8:db:ed:fe:48:0c:61: c2:f4:95:dd:f4:87:b5:a8:f6:91:9c:d1:62:72:b4:0e:0e:f1: 52:2b:5d:99:66:d9:65:44:d3:93:1d:3c:5e:07:9a:0d:f1:2b: c0:dc:fc:80:26:2d:da:0f:71:41:f2:f9:e0:fd:be:0c:8c:5a: 55:a1:4a:95:7f:42:a5:d1:78:34:ae:2d:29:f7:15:18:04:1e: 58:a7:cb:42:0b:35:39:b9:af:f0:51:59:52:ae:23:e5:d6:5b: 85:4e:09:41:8f:25:7d:7e:20:e9:f1:8a:24:91:e4:8b:dc:e4: 9d:9f:42:ba:74:c3:29:68:71:c3:5a:0d:6d:80:5e:a4:91:c6: 0e:b4:79:55:82:68:36:3e:df:43:fa:2f:21:74:7e:94:99:4b: 08:69:ce:14:9d:04:93:e1:ab:5c:f3:33:44:08:db:0f:6a:0c: f0:db:a8:26:c5:29:b9:03:0d:37:c0:3a:9f:c3:f7:f8:0a:f3: c5:f8:6d:47:f7:c8:b3:6d:87:ab:62:e7:3e:f7:29:83:f5:2e: 96:22:6d:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjgyRDExMC8GA1UEBRMoOTUyMjgzMzhBODVGMjQ4MjMwMzEyQ0YzOThCMjRGODEx OUQ4MjMyRjAeFw0yNDA1MTcwODU2MzdaFw0yNDA1MjQwODU2MzdaMBgxFjAUBgNV BAMTDTY2NDcxYmM1LWUxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChP+IC+8zzQ+0fMkqJupEZu5wQNVaz+OfEhoWfBnFZ893PkTw+/xNbRj44Yamb eRTm2egp2cDq4MWXXEE34L+AIwdHbNKr+7b0IEsYUm1X506V5fLXSS2wLyIDpi+V GNOTuk9FSGZzd+QFstL+f6XVD4edoLSkifFE5O6wyoAMeOOyNnEMrI26I2yACUbT cHAvgRj4r01fluD7YmBtu7EiKWjAbeu9rWGzXDNekEsItPYM3JVwraxDmWKlhESS vtIeeXf7NSFbFHuxT7fZzKUjExLDvk1PMjmxjtXwi9Brn6358JoWPtXeGVTxrrxO FxKQoIutjx3KNQn6E5Oa+rJhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe/UaWWtZ 7tBvYSB5R8/u8MLQ6DwwHwYDVR0jBBgwFoAUlSKDOKhfJIIwMSzzmLJPgRnYIy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyODJELzBBQzIyQUM0RjhB MTExRUVCMERFRkU0RkM0RjlBRTAyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFNLRE9LaGZKSUl3TVN6em1MSlBnUm5ZSXk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy ODJELzBBQzIyQUM0RjhBMTExRUVCMERFRkU0RkM0RjlBRTAyL2xTS0RPS2hmSklJ d01TenptTEpQZ1JuWUl5OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEpg4tlmB2NfvE67qQ0q5NFoM5Dj4lvIbjl5XOtz5pDXndqmPCxBHgA CvpvpDvJyNvt/kgMYcL0ld30h7Wo9pGc0WJytA4O8VIrXZlm2WVE05MdPF4Hmg3x K8Dc/IAmLdoPcUHy+eD9vgyMWlWhSpV/QqXReDSuLSn3FRgEHliny0ILNTm5r/BR WVKuI+XWW4VOCUGPJX1+IOnxiiSR5Ivc5J2fQrp0wyloccNaDW2AXqSRxg60eVWC aDY+30P6LyF0fpSZSwhpzhSdBJPhq1zzM0QI2w9qDPDbqCbFKbkDDTfAOp/D9/gK 88X4bUf3yLNth6ti5z73KYP1LpYibdo= -----END CERTIFICATE-----Generated at Fri May 17 10:59:11 2024 by rpki-client on console-ams.rpki-client.org