$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: RkwXNasal8NIuaArtiMaSGd4ICp0Dy+3l/CWaJKkx5M= Subject key identifier: F3:1D:54:06:38:36:C8:57:84:83:0E:9C:ED:5F:C1:CF:6B:8F:2E:49 Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: 61 Signing time: Wed 15 May 2024 07:48:50 +0000 Manifest this update: Wed 15 May 2024 07:48:49 +0000 Manifest next update: Wed 22 May 2024 07:48:49 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: wkl3cGoWTETUPQ42D9EwENFnGCSeCahsgX97O8T+UMc=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: i6YPlaMnGASCs0Ij1ZA+/Al9vtaAI62dbzUJZsHZ5+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: May 15 07:48:49 2024 GMT Not After : May 22 07:48:49 2024 GMT Subject: CN=664468e2-ee92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:f7:7f:00:b6:32:87:6a:d1:a7:e5:20:1d: 5a:a6:9c:17:4a:d3:bf:91:a2:ca:9a:7f:a3:d9:20: 88:9c:d2:af:87:df:31:ec:59:ce:f7:59:e9:cd:56: 59:e3:81:a1:da:21:bf:a0:15:f4:cf:a2:bb:a5:2a: 85:47:aa:0c:7c:41:f0:b3:f6:a4:b9:7e:86:3e:53: 4a:0a:8d:93:f1:05:b8:5a:2d:20:05:ec:75:35:e2: e1:fe:6b:ac:42:da:23:01:dc:35:38:fe:98:d5:0d: 56:bf:17:1e:97:3b:f1:a8:27:33:22:5b:51:43:f9: 48:1e:c3:2c:0c:82:c1:89:1d:f6:36:4c:3f:8a:5e: a4:48:c6:5d:40:96:31:dc:7a:2b:60:d3:46:f0:0b: d4:a2:68:55:d7:e8:b8:0c:cd:8c:99:93:bc:d3:ff: 0f:bf:97:dd:dd:cb:da:c5:f0:80:99:2e:c0:d2:c9: 93:dd:f3:83:41:47:3e:da:a3:2b:2c:93:e0:fc:e0: d6:cb:9a:d2:ef:84:59:ae:5e:62:71:6f:ec:81:44: b0:94:a5:0b:13:1a:03:d6:1e:70:16:c8:e8:42:ce: ba:d7:00:5c:b3:d2:2a:ef:3f:29:30:a0:4a:08:d0: 52:4e:95:72:e7:d0:28:aa:80:b1:6b:a0:75:47:ee: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1D:54:06:38:36:C8:57:84:83:0E:9C:ED:5F:C1:CF:6B:8F:2E:49 X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:67:bd:85:0d:c6:c1:60:ba:9c:c7:46:8e:40:13:6a:2f:4a: aa:6e:26:cd:85:76:9a:eb:73:a6:ee:7c:f1:a0:b8:5f:39:1e: e3:25:d5:63:91:25:f2:d1:77:4d:e9:82:1d:7c:a8:06:ba:08: ed:1a:8a:bb:df:0b:b7:4b:98:c7:6a:90:69:2a:6c:c7:e8:ba: bf:94:66:62:ed:e6:53:65:42:45:15:df:19:30:86:83:65:8d: 91:21:2f:9d:a2:90:a5:91:bc:ad:bc:54:a3:90:05:f8:28:4e: 85:ae:81:c9:17:68:f8:f9:3b:a9:59:cc:a4:4a:1f:f9:80:60: 67:8f:35:a7:99:b6:37:7a:a9:41:b6:28:c5:f0:b7:c7:aa:4f: cf:e7:f1:39:93:ae:51:52:e3:a0:c4:20:38:a8:fd:a3:ca:e6: 67:f2:03:b8:0c:97:8f:71:6a:fb:d8:bb:79:9b:c1:7b:00:24: 53:dd:1c:6f:03:ae:a4:10:b1:95:07:c7:d2:17:fb:26:52:e4: a6:80:0c:b2:8d:be:a9:bc:26:ff:b6:f2:10:5f:32:14:ca:ce: be:22:65:81:f0:ff:c7:85:5d:33:13:fa:2a:c9:bd:ec:d9:1a: 56:8f:48:14:bb:3a:06:61:13:81:01:38:c9:19:78:c5:af:74: c8:e6:5f:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUQ4NDExMC8GA1UEBRMoOTQ5QjY0N0E1RjhDNzlGNkRBNEFFMzZEOUUwMEM0NEUw MkE5QTdBNDAeFw0yNDA1MTUwNzQ4NDlaFw0yNDA1MjIwNzQ4NDlaMBgxFjAUBgNV BAMTDTY2NDQ2OGUyLWVlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPkfd/ALYyh2rRp+UgHVqmnBdK07+Rosqaf6PZIIic0q+H3zHsWc73WenNVlnj gaHaIb+gFfTPorulKoVHqgx8QfCz9qS5foY+U0oKjZPxBbhaLSAF7HU14uH+a6xC 2iMB3DU4/pjVDVa/Fx6XO/GoJzMiW1FD+UgewywMgsGJHfY2TD+KXqRIxl1AljHc eitg00bwC9SiaFXX6LgMzYyZk7zT/w+/l93dy9rF8ICZLsDSyZPd84NBRz7aoyss k+D84NbLmtLvhFmuXmJxb+yBRLCUpQsTGgPWHnAWyOhCzrrXAFyz0irvPykwoEoI 0FJOlXLn0CiqgLFroHVH7qbPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8x1UBjg2 yFeEgw6c7V/Bz2uPLkkwHwYDVR0jBBgwFoAUlJtkel+MefbaSuNtngDETgKpp6Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RDg0L0Y4MDY5NDNDODZD ODExRUVBQUQzNDQxNEM0RjlBRTAyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEp0a2VsLU1lZmJhU3VOdG5nREVUZ0twcDZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RDg0L0Y4MDY5NDNDODZDODExRUVBQUQzNDQxNEM0RjlBRTAyL2xKdGtlbC1NZWZi YVN1TnRuZ0RFVGdLcHA2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALBnvYUNxsFgupzHRo5AE2ovSqpuJs2Fdprrc6bufPGguF85HuMl1WOR JfLRd03pgh18qAa6CO0airvfC7dLmMdqkGkqbMfour+UZmLt5lNlQkUV3xkwhoNl jZEhL52ikKWRvK28VKOQBfgoToWugckXaPj5O6lZzKRKH/mAYGePNaeZtjd6qUG2 KMXwt8eqT8/n8TmTrlFS46DEIDio/aPK5mfyA7gMl49xavvYu3mbwXsAJFPdHG8D rqQQsZUHx9IX+yZS5KaADLKNvqm8Jv+28hBfMhTKzr4iZYHw/8eFXTMT+irJvezZ GlaPSBS7OgZhE4EBOMkZeMWvdMjmX+Y= -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org