$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json) Hash identifier: 9vIiTtri1rGSwNcFw7FdN/psWvf0OLlaFdY1+J5QzDk= Subject key identifier: EE:12:A8:0D:7E:AF:98:C8:87:67:B0:44:0B:49:2B:96:C6:D8:70:51 Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft Manifest number: 56 Signing time: Wed 15 May 2024 07:56:39 +0000 Manifest this update: Wed 15 May 2024 07:56:38 +0000 Manifest next update: Wed 22 May 2024 07:56:38 +0000 Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: hr9iFyWtGDFL5Ls0MpQ5aGOE+4IX9DpJLfMTRazhjSI=) 2: 3425A8A695C211EEBA1ABE46C4F9AE02.roa (hash: UqjYJ5RSufOCb7UTGicYFIf84Nm162ZbjYkdoMwRQiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: May 15 07:56:38 2024 GMT Not After : May 22 07:56:38 2024 GMT Subject: CN=66446ab7-fb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d8:e8:e4:78:66:c0:ea:f8:1f:07:49:a6:14: f2:cf:96:5d:64:35:7f:de:bb:38:c9:72:92:5a:b7: 43:db:bb:e6:a7:3d:2b:f5:e8:7c:88:03:6f:ca:4e: 09:6a:ef:84:f3:fc:00:f1:56:8c:df:6e:95:5b:d3: 32:51:6d:83:e5:a4:44:c2:c0:d1:9e:4e:6d:8b:35: 51:ee:61:9f:67:b5:d7:61:3c:11:95:27:dc:2b:55: 7e:69:9f:24:51:2f:90:9c:b1:89:ad:d9:b7:eb:38: 89:fc:a4:4c:77:d8:c4:01:b2:b1:07:ba:9d:0a:b5: 42:a9:9b:11:d2:a9:c4:3c:c7:ef:e2:b6:7a:4a:aa: 14:30:df:a4:6c:9f:e1:81:ce:af:7f:48:14:62:eb: 95:f7:65:bf:89:1a:a3:55:b9:8c:2f:fc:cd:34:69: d8:c3:33:2f:4a:78:4e:22:a3:00:19:bd:99:52:da: 8a:08:ae:ee:c2:1d:0b:c2:89:51:1b:05:60:54:5e: f0:01:c0:d1:01:0e:d3:9d:e1:bb:c9:6a:8e:77:c8: a6:a5:55:28:4f:8a:5f:36:10:9e:61:fa:a9:8c:95: e0:14:34:b4:85:4f:66:13:4c:f6:06:ac:47:59:49: a3:75:10:5f:c4:15:cd:d2:f0:24:ee:77:1d:f3:59: 44:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:A8:0D:7E:AF:98:C8:87:67:B0:44:0B:49:2B:96:C6:D8:70:51 X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7b:13:bd:9d:e6:c6:5f:7d:f0:c0:73:aa:1e:b6:8f:9f:db: d7:00:df:e9:df:b0:c1:a3:37:0d:7f:0c:fd:21:ce:4e:0b:7e: b0:ca:8f:32:6a:92:15:f6:64:c9:09:fc:71:1c:9a:99:ff:18: 77:10:73:76:f2:54:1d:1c:45:be:33:3a:e5:cb:42:d3:c4:f2: 5e:41:62:bf:98:9a:5d:50:c0:7d:b8:40:d5:57:40:33:83:0f: 31:65:57:96:57:29:a6:80:12:5d:89:78:b0:6b:66:74:89:0f: ed:a4:6c:24:98:2e:89:6d:ab:ba:d1:1d:ca:e2:3f:67:1e:04: 8e:1c:43:d8:fd:7a:e2:60:2e:9c:23:0f:38:f7:b5:66:be:a2: a4:7e:69:72:3a:a2:4a:f1:41:25:df:72:93:c4:be:ce:cf:e9: bc:2c:3a:69:27:52:e0:14:a0:a9:a2:57:df:14:2e:fd:3c:dd: a3:d1:49:9a:1d:f3:90:58:d0:a7:c8:fe:8b:bb:71:53:b8:76: 09:6b:7e:5b:a9:b3:2f:de:a1:14:51:9e:d8:21:1e:c4:65:e6: 5a:a1:3a:a2:9c:3f:ac:a3:2f:d0:22:c3:cc:16:99:5b:fb:fd: 14:56:5f:84:51:8e:19:08:d6:d0:37:e8:f0:96:44:ee:24:65: 73:93:0a:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkM1RDExMC8GA1UEBRMoNjhCM0ZGMTY2NTg5Qzg0NDFBNDRGRENBNjFGNDJCM0E2 M0FFMTEyOTAeFw0yNDA1MTUwNzU2MzhaFw0yNDA1MjIwNzU2MzhaMBgxFjAUBgNV BAMTDTY2NDQ2YWI3LWZiMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz2OjkeGbA6vgfB0mmFPLPll1kNX/euzjJcpJat0Pbu+anPSv16HyIA2/KTglq 74Tz/ADxVozfbpVb0zJRbYPlpETCwNGeTm2LNVHuYZ9ntddhPBGVJ9wrVX5pnyRR L5CcsYmt2bfrOIn8pEx32MQBsrEHup0KtUKpmxHSqcQ8x+/itnpKqhQw36Rsn+GB zq9/SBRi65X3Zb+JGqNVuYwv/M00adjDMy9KeE4iowAZvZlS2ooIru7CHQvCiVEb BWBUXvABwNEBDtOd4bvJao53yKalVShPil82EJ5h+qmMleAUNLSFT2YTTPYGrEdZ SaN1EF/EFc3S8CTudx3zWUT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7hKoDX6v mMiHZ7BEC0krlsbYcFEwHwYDVR0jBBgwFoAUaLP/FmWJyEQaRP3KYfQrOmOuESkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyQzVELzNCOURENDEwOTJD NDExRUVCNTIxQkI0OUM0RjlBRTAyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUxQX0ZtV0p5RVFhUlAzS1lmUXJPbU91RVNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy QzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyL2FMUF9GbVdKeUVR YVJQM0tZZlFyT21PdUVTay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHF7E72d5sZfffDAc6oeto+f29cA3+nfsMGjNw1/DP0hzk4LfrDKjzJq khX2ZMkJ/HEcmpn/GHcQc3byVB0cRb4zOuXLQtPE8l5BYr+Yml1QwH24QNVXQDOD DzFlV5ZXKaaAEl2JeLBrZnSJD+2kbCSYLoltq7rRHcriP2ceBI4cQ9j9euJgLpwj Dzj3tWa+oqR+aXI6okrxQSXfcpPEvs7P6bwsOmknUuAUoKmiV98ULv083aPRSZod 85BY0KfI/ou7cVO4dglrflupsy/eoRRRntghHsRl5lqhOqKcP6yjL9Aiw8wWmVv7 /RRWX4RRjhkI1tA36PCWRO4kZXOTCno= -----END CERTIFICATE-----Generated at Wed May 15 09:28:12 2024 by rpki-client on console-fra.rpki-client.org