$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: KWVDqhbao57BHjmgd2WNllk2z/iaDdzQG47qXAQkxQY= Subject key identifier: 6A:3A:42:E4:53:25:04:3E:14:5A:49:D0:7F:C5:D8:F8:3E:7B:38:2C Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 76 Signing time: Fri 17 May 2024 07:27:09 +0000 Manifest this update: Fri 17 May 2024 07:27:08 +0000 Manifest next update: Fri 24 May 2024 07:27:08 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: uovRzoO9ikGEtmjkX5XDQeqKGQDphF0eQu/eDzHl6vU=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: cf7SiJ6qPo7EwtEsZkrmbFYXlJYPd1l7xqsKt5NMMZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: May 17 07:27:08 2024 GMT Not After : May 24 07:27:08 2024 GMT Subject: CN=664706cc-3dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:e6:34:91:94:5c:b9:0a:05:7a:2f:eb:b4: c1:ef:02:ab:d7:f7:3d:78:df:e2:98:f1:b5:a9:51: 4a:56:8d:52:9b:cf:07:dc:70:03:21:b8:ae:b7:71: e9:ed:c0:a1:96:79:f2:89:b5:ba:e0:21:1b:aa:cd: 22:c8:6e:e6:89:5c:bb:71:0f:f8:3b:90:e2:ee:8f: cc:5d:29:92:5d:91:70:78:0e:52:bc:69:e9:e9:02: 64:ce:df:8b:14:9c:1d:ab:e0:aa:2f:c9:e4:f9:b1: c4:7c:3d:90:f7:ea:77:71:ea:f0:3f:4b:d8:03:c1: 1e:26:50:7d:10:2c:8f:24:aa:bb:c4:59:9b:e6:8b: 2d:31:1f:8f:24:00:56:1c:4d:14:85:b6:45:26:56: 63:67:dd:fa:e9:f7:e5:5f:16:e3:d4:a8:3c:b7:80: c1:5d:bf:3b:92:47:ce:e1:96:01:13:7d:33:e8:7f: 2f:22:0d:2b:38:90:79:e8:cf:c8:02:2a:83:a7:5f: 64:e7:e6:6a:02:c1:9c:a3:e6:b1:59:30:66:21:04: 2e:1c:c6:85:e3:5b:a4:4e:3d:8a:b4:ea:3a:60:47: fb:c5:55:fd:61:68:17:97:4f:52:fe:d3:49:5f:72: bf:1f:4c:2c:9f:d5:a8:f3:b9:15:99:21:4a:db:f4: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3A:42:E4:53:25:04:3E:14:5A:49:D0:7F:C5:D8:F8:3E:7B:38:2C X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:fe:2b:1c:8d:47:78:93:19:d4:70:6f:44:30:ac:4f:7c:e9: ec:32:83:78:ab:84:d1:bc:29:29:3d:d0:27:c8:d1:b5:f2:46: 7e:90:b4:e9:e7:b0:e3:2f:d7:1b:88:9b:be:74:55:68:93:16: 6b:38:60:54:b5:05:37:f6:ec:50:4d:eb:82:28:fc:1e:e7:be: bc:4a:e1:07:35:75:31:9e:59:ec:21:db:7a:ec:36:0c:b9:36: 16:9e:e8:c8:7f:63:08:33:bc:e7:46:2e:58:ce:cd:bc:06:9f: 4c:8f:25:32:9b:12:ed:e6:f8:51:07:f9:94:a4:2c:54:1c:d2: 8e:ab:32:19:dd:33:f3:f3:9e:80:f5:12:b0:82:70:b2:1a:7f: 70:b2:05:38:01:9e:1a:57:76:0e:98:cc:f2:3d:f4:f3:f8:9b: 2f:13:33:ad:6e:bb:17:77:04:74:20:e9:1d:57:db:38:8c:d6: 82:5b:f8:5d:d9:20:67:ff:d2:14:6d:f7:bf:44:e0:dc:19:c3: 89:aa:c7:27:dc:c5:ea:4e:34:e4:74:00:1c:58:10:13:a9:78: 3e:2c:3e:bd:f7:d9:76:6a:02:2a:90:76:ac:d2:7c:aa:1c:5b: 4f:8f:6d:37:cf:d8:a7:cd:e8:b7:7f:2d:e1:07:29:69:44:08: ed:2a:e5:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mzk0QjExMC8GA1UEBRMoOTQwOEU5RDdCNkNFQjgzNENBOTA5MDFFNDU3ODYwMTBD MDY5QzMyQjAeFw0yNDA1MTcwNzI3MDhaFw0yNDA1MjQwNzI3MDhaMBgxFjAUBgNV BAMTDTY2NDcwNmNjLTNkZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI5OY0kZRcuQoFei/rtMHvAqvX9z143+KY8bWpUUpWjVKbzwfccAMhuK63cent wKGWefKJtbrgIRuqzSLIbuaJXLtxD/g7kOLuj8xdKZJdkXB4DlK8aenpAmTO34sU nB2r4KovyeT5scR8PZD36ndx6vA/S9gDwR4mUH0QLI8kqrvEWZvmiy0xH48kAFYc TRSFtkUmVmNn3frp9+VfFuPUqDy3gMFdvzuSR87hlgETfTPofy8iDSs4kHnoz8gC KoOnX2Tn5moCwZyj5rFZMGYhBC4cxoXjW6ROPYq06jpgR/vFVf1haBeXT1L+00lf cr8fTCyf1ajzuRWZIUrb9IbnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUajpC5FMl BD4UWknQf8XY+D57OCwwHwYDVR0jBBgwFoAUlAjp17bOuDTKkJAeRXhgEMBpwysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzOTRCLzEwQUNBQjBBNjFC NDExRUU4MENFMTg0NkM0RjlBRTAyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEFqcDE3Yk91RFRLa0pBZVJYaGdFTUJwd3lzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz OTRCLzEwQUNBQjBBNjFCNDExRUU4MENFMTg0NkM0RjlBRTAyL2xBanAxN2JPdURU S2tKQWVSWGhnRU1CcHd5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALX+KxyNR3iTGdRwb0QwrE986ewyg3irhNG8KSk90CfI0bXyRn6QtOnn sOMv1xuIm750VWiTFms4YFS1BTf27FBN64Io/B7nvrxK4Qc1dTGeWewh23rsNgy5 Nhae6Mh/YwgzvOdGLljOzbwGn0yPJTKbEu3m+FEH+ZSkLFQc0o6rMhndM/PznoD1 ErCCcLIaf3CyBTgBnhpXdg6YzPI99PP4my8TM61uuxd3BHQg6R1X2ziM1oJb+F3Z IGf/0hRt979E4NwZw4mqxyfcxepONOR0ABxYEBOpeD4sPr332XZqAiqQdqzSfKoc W0+PbTfP2KfN6Ld/LeEHKWlECO0q5SM= -----END CERTIFICATE-----Generated at Fri May 17 08:13:53 2024 by rpki-client on console-fra.rpki-client.org