$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft File: ltGlmUmhu3ombXKg8S_81fUFnxc.mft (raw, json) Hash identifier: ID12ySZjs97sONYcCDUiVj80csfs89QjLi+PcVCMbLg= Subject key identifier: FF:1D:5E:A7:7E:33:00:8A:18:17:92:5E:96:E3:8D:27:02:93:EC:F7 Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 Certificate issuer: /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft Manifest number: 0380 Signing time: Mon 29 Apr 2024 02:39:19 +0000 Manifest this update: Mon 29 Apr 2024 02:39:18 +0000 Manifest next update: Mon 06 May 2024 02:39:18 +0000 Files and hashes: 1: ltGlmUmhu3ombXKg8S_81fUFnxc.crl (hash: ltNSKaNyiXML2UlceDAuipDU7ERUQFsXKxECLFP8/A8=) 2: 5BD4372457DE11EC88BC6713C4F9AE02.roa (hash: FiCTOia3dtnewSfPwDMA18gyV4CZ/I7iQt5+bH2v0P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17 Validity Not Before: Apr 29 02:39:18 2024 GMT Not After : May 6 02:39:18 2024 GMT Subject: CN=662f0857-6c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:b3:9e:09:fa:e8:b1:df:1e:99:9c:e0:59: e2:0f:50:98:91:59:1a:d3:b1:b7:46:0a:4b:e3:d6: 29:0f:fc:c1:f0:86:a4:72:b2:d7:9e:ec:ea:b7:21: 7c:49:2a:b8:9b:6e:8a:09:e0:69:51:31:ec:ac:fa: 38:00:b4:3e:83:ea:49:fc:6c:02:16:6c:23:c3:b4: ce:80:87:17:80:73:48:43:5b:7e:b7:63:ca:bb:4a: 70:c2:81:5d:c5:12:b0:92:fb:ee:5a:8a:6d:62:96: 42:79:be:f5:37:27:a0:00:f4:7a:84:48:99:4a:4c: 51:4f:bd:58:44:c1:7e:e1:5d:e1:b2:99:55:c4:b8: 3f:6a:2d:ac:d9:d4:68:44:0d:2d:f3:4c:b6:51:a1: ea:3a:5f:02:a5:5e:74:4f:46:6a:53:15:2c:ba:82: 87:76:bc:30:c4:1a:51:77:11:a1:04:15:63:02:01: 31:16:f6:e5:5e:aa:b2:65:46:71:af:5f:ec:33:16: 3a:ac:4f:24:8d:6e:41:12:66:8a:50:f9:d8:4d:4c: a9:ea:b3:0f:47:ee:3c:25:04:54:a8:76:da:38:98: 95:07:d2:4a:8c:02:ec:28:65:4f:77:72:0f:14:13: f2:d3:6f:6d:af:a4:3b:b5:53:6f:8d:4e:00:d1:29: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1D:5E:A7:7E:33:00:8A:18:17:92:5E:96:E3:8D:27:02:93:EC:F7 X509v3 Authority Key Identifier: keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e9:f4:e6:a4:9a:68:72:84:de:46:b1:d6:43:31:80:b7:a0: 82:f8:58:88:f3:f9:cb:40:11:a7:7a:f3:25:f7:6c:38:e1:86: 51:64:12:1c:fd:3f:65:8b:35:ad:79:57:49:f1:63:8d:ee:7d: 8b:2d:eb:5a:58:61:52:5f:bc:a7:0d:25:ce:87:bb:76:be:da: ca:72:55:14:dc:0a:00:69:a4:4c:ae:01:8f:c7:00:03:ad:b9: b7:37:ab:18:90:0f:80:de:70:97:cd:58:63:5d:34:4f:11:5c: 2b:bf:77:4e:7c:cf:ac:3f:78:52:30:d7:66:01:ed:d9:cf:86: 36:d4:15:fd:31:22:22:df:79:2b:a6:06:2c:11:ef:c8:ad:73: d3:97:b4:d3:c4:a4:b0:eb:c7:d0:dd:98:49:b2:20:74:7f:82: d6:83:47:83:b5:9b:9d:99:eb:09:06:65:cf:12:2c:36:ee:00: eb:8e:b8:1d:c6:de:92:58:ce:03:7c:ca:66:55:2b:8c:3b:ad: 53:fc:06:08:12:5a:d9:2a:32:23:6c:be:27:1e:fd:57:b0:97: 72:99:77:10:dd:72:1a:78:f0:fa:90:28:83:43:01:99:5e:c5: 06:ad:6e:3f:8a:3f:db:37:fd:c0:ea:cf:27:67:d5:0f:10:66: 3f:e2:02:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwMDExMTAvBgNVBAUTKDk2RDFBNTk5NDlBMUJCN0EyNjZENzJBMEYxMkZGQ0Q1 RjUwNTlGMTcwHhcNMjQwNDI5MDIzOTE4WhcNMjQwNTA2MDIzOTE4WjAYMRYwFAYD VQQDEw02NjJmMDg1Ny02YzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV6zngn66LHfHpmc4FniD1CYkVka07G3RgpL49YpD/zB8IakcrLXnuzqtyF8 SSq4m26KCeBpUTHsrPo4ALQ+g+pJ/GwCFmwjw7TOgIcXgHNIQ1t+t2PKu0pwwoFd xRKwkvvuWoptYpZCeb71NyegAPR6hEiZSkxRT71YRMF+4V3hsplVxLg/ai2s2dRo RA0t80y2UaHqOl8CpV50T0ZqUxUsuoKHdrwwxBpRdxGhBBVjAgExFvblXqqyZUZx r1/sMxY6rE8kjW5BEmaKUPnYTUyp6rMPR+48JQRUqHbaOJiVB9JKjALsKGVPd3IP FBPy029tr6Q7tVNvjU4A0Sk8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8dXqd+ MwCKGBeSXpbjjScCk+z3MB8GA1UdIwQYMBaAFJbRpZlJobt6Jm1yoPEv/NX1BZ8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjAwMS84M0Q1NEU1MjU3 NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUzb21iWEtnOFNfODFmVUZu eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0R2xtVW1odTNvbWJYS2c4U184MWZVRm54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjAwMS84M0Q1NEU1MjU3NDgxMUVDQTc3RTVEODZDNEY5QUUwMi9sdEdsbVVtaHUz b21iWEtnOFNfODFmVUZueGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB36fTmpJpocoTeRrHWQzGAt6CC+FiI8/nLQBGnevMl92w44YZRZBIc /T9lizWteVdJ8WON7n2LLetaWGFSX7ynDSXOh7t2vtrKclUU3AoAaaRMrgGPxwAD rbm3N6sYkA+A3nCXzVhjXTRPEVwrv3dOfM+sP3hSMNdmAe3Zz4Y21BX9MSIi33kr pgYsEe/IrXPTl7TTxKSw68fQ3ZhJsiB0f4LWg0eDtZudmesJBmXPEiw27gDrjrgd xt6SWM4DfMpmVSuMO61T/AYIElrZKjIjbL4nHv1XsJdymXcQ3XIaePD6kCiDQwGZ XsUGrW4/ij/bN/3A6s8nZ9UPEGY/4gIq -----END CERTIFICATE-----Generated at Mon Apr 29 03:35:03 2024 by rpki-client on console-fra.rpki-client.org