$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: Wzv4irj50cCe2kOfvP8/+1ggvg1/PgHOn1CBklUwAqM= Subject key identifier: BA:B5:A2:E4:03:4C:E9:50:B9:BD:79:5B:5C:CC:30:1C:38:11:A2:BF Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 33EB Signing time: Sat 04 May 2024 14:26:24 +0000 Manifest this update: Sat 04 May 2024 14:26:24 +0000 Manifest next update: Sat 11 May 2024 14:26:24 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: 2yu9WkPvO3MYRU+Q6e/94WWGOj3nvczoyv9EaPrHgk8=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: A/LkVdVh/veEJzFTXT8KazQTYKHfbJbE274xbg3PKqI=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: 1fBWeYLG2pi7AypRGjpLaX9NtiSyHOW5P0pUjKJwK6E=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: 4ZoxknvBZ7HwSXrqH9SF2hziVvW41P06vSusRZcmVjs=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MrXAmnGMswO2bHrZlMFFt542A/DbAOo1bWS6AtgSvng=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: K7JApbq9zwKTpcFwmr6e5jJ6jGolL8ttohijFBKpay4=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: 8FohK/zegKwO9kEnPSVAChVsdZMDlGzmpA55SZVmIQ0=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: Xs6V5lF7PVKLSV0+ngYKywjkaYd1tF47ibwWBJwFrtk=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: uGPnNR4FjQG1Et1kLY2iU4Oz9dYJGeYqTRCnJn4hpbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13378 (0x3442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: May 4 14:26:24 2024 GMT Not After : May 11 14:26:24 2024 GMT Subject: CN=66364590-4d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3d:ab:0b:24:05:90:c3:97:4f:97:b3:67:6b: 49:1f:81:50:e6:e5:68:3c:bd:6a:64:98:9b:2a:8c: ed:db:8c:cf:22:6e:12:51:d6:6d:1f:57:25:4b:dd: db:01:37:91:e2:16:94:f3:af:7f:35:de:6d:80:70: a7:71:b4:17:05:b5:1a:d5:6e:fe:4b:3b:9f:d0:e0: 59:8b:2b:2e:14:d8:74:25:3a:95:19:f0:2a:cb:17: 0c:bb:c8:f3:2d:27:a5:92:34:60:8e:04:da:5f:73: 65:65:a0:d1:e9:56:8f:79:1b:60:65:59:4c:1f:37: 3d:17:4e:02:18:b2:bd:82:de:be:38:34:b2:d4:49: ec:a1:bd:4f:a6:ec:c0:e3:36:7e:a5:d5:44:e4:c5: 23:a8:86:f4:4b:4e:a3:11:52:5e:76:53:f7:40:c2: f9:94:89:2d:3c:da:a9:40:52:8a:de:b9:f0:d8:df: e4:72:88:8e:28:0b:50:ac:99:7c:00:35:9a:6c:f9: 75:a3:43:64:79:88:b9:01:12:0b:50:e9:a1:9b:70: a7:c6:1a:3b:c0:4f:1f:14:61:8b:0f:8c:09:1e:7c: 84:f3:6e:df:10:32:75:17:c8:b1:c0:e7:2f:8b:f3: e6:c1:80:c7:e4:cd:58:00:f5:39:dd:11:cd:3d:96: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B5:A2:E4:03:4C:E9:50:B9:BD:79:5B:5C:CC:30:1C:38:11:A2:BF X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ea:b4:6e:0a:86:3a:8b:a4:0d:f7:4b:34:8c:4e:f4:c3:19: 3c:1b:e4:32:06:18:30:0c:de:73:0a:8f:58:fe:bb:c8:c8:21: 43:b1:d4:30:a7:cc:6f:1d:a9:39:f1:9e:44:c2:5a:d7:93:f1: 59:c4:95:90:86:ef:3f:0b:05:b1:da:8e:b1:ba:82:af:27:4c: 0e:15:73:8c:34:3e:a0:09:c1:75:82:21:77:17:b3:bb:93:01: eb:78:3a:2f:4f:b1:2a:6a:a5:89:ae:21:bc:91:c9:b8:8d:0e: 0b:53:49:70:de:94:22:50:cb:8b:6f:2f:70:c4:ed:29:53:48: 1b:37:ff:fe:a8:15:25:b0:c0:8e:99:6f:69:a5:49:0c:3d:f2: d0:33:4f:13:47:36:31:ce:01:83:30:77:3b:e1:8a:fe:1c:36: 88:21:1e:64:ae:c8:1b:d8:e4:02:1f:db:e3:c3:ee:40:e7:b1: 18:b0:d2:9b:19:ad:88:1e:a1:bd:0e:4d:ee:84:0c:78:8d:05: c7:9c:a1:05:08:10:3e:03:02:69:9b:f7:68:e8:09:d4:a1:74: f9:09:36:40:f4:45:35:d5:54:ba:ee:0b:7e:2a:4f:8a:f6:5d: a3:1f:41:1b:f9:bf:b4:b7:f1:b0:dd:30:97:a6:bd:c3:54:7c: 92:d5:19:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjQwNTA0MTQyNjI0WhcNMjQwNTExMTQyNjI0WjAYMRYwFAYD VQQDEw02NjM2NDU5MC00ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6z2rCyQFkMOXT5ezZ2tJH4FQ5uVoPL1qZJibKozt24zPIm4SUdZtH1clS93b ATeR4haU869/Nd5tgHCncbQXBbUa1W7+Szuf0OBZiysuFNh0JTqVGfAqyxcMu8jz LSelkjRgjgTaX3NlZaDR6VaPeRtgZVlMHzc9F04CGLK9gt6+ODSy1Ensob1PpuzA 4zZ+pdVE5MUjqIb0S06jEVJedlP3QML5lIktPNqpQFKK3rnw2N/kcoiOKAtQrJl8 ADWabPl1o0NkeYi5ARILUOmhm3Cnxho7wE8fFGGLD4wJHnyE827fEDJ1F8ixwOcv i/PmwYDH5M1YAPU53RHNPZZXRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLq1ouQD TOlQub15W1zMMBw4EaK/MB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT6rRuCoY6i6QN90s0jE70wxk8G+QyBhgwDN5zCo9Y/rvIyCFDsdQw p8xvHak58Z5EwlrXk/FZxJWQhu8/CwWx2o6xuoKvJ0wOFXOMND6gCcF1giF3F7O7 kwHreDovT7EqaqWJriG8kcm4jQ4LU0lw3pQiUMuLby9wxO0pU0gbN//+qBUlsMCO mW9ppUkMPfLQM08TRzYxzgGDMHc74Yr+HDaIIR5krsgb2OQCH9vjw+5A57EYsNKb Ga2IHqG9Dk3uhAx4jQXHnKEFCBA+AwJpm/do6AnUoXT5CTZA9EU11VS67gt+Kk+K 9l2jH0Eb+b+0t/Gw3TCXpr3DVHyS1Rld -----END CERTIFICATE-----Generated at Sat May 4 15:55:02 2024 by rpki-client on console-ams.rpki-client.org