$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: NwWfJNfveMMNqCd7zzdkHnknzRNTSE3foq3tyNHg6Xw= Subject key identifier: B5:80:8C:4B:05:B3:AC:EB:59:33:70:51:1B:FE:A1:96:6F:65:7D:34 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 0507 Signing time: Wed 01 May 2024 01:36:57 +0000 Manifest this update: Wed 01 May 2024 01:36:57 +0000 Manifest next update: Wed 08 May 2024 01:36:57 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: ikMzgShHmewt8IRD7KEYFPL6mMizgVyKdtYmqFN7x+c=) 2: 32B24F6425FD11EDA4097785C4F9AE02.roa (hash: oCfdzQyYRsIRC12KmJ3LXf4aAzIohlkO5epU8CiYIrw=) 3: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: /lgRgsVbOk11+aR4zJT9E0tlRjbV/Z20R2zZnazcgxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: May 1 01:36:57 2024 GMT Not After : May 8 01:36:57 2024 GMT Subject: CN=66319cb9-8ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:42:8e:27:1f:9b:ae:e0:9c:12:1e:81:ff: e6:2f:7a:d0:d3:65:81:c3:68:1e:8f:60:cc:ea:9f: 0b:4f:5b:4c:fa:56:dd:37:ee:18:56:a2:b2:2e:65: 78:0a:db:62:10:97:bc:6c:75:2f:9a:fe:89:f1:49: f2:a6:71:17:1a:38:f0:7c:2e:04:35:57:6b:bb:25: 8a:7b:24:33:64:c7:22:2b:32:8f:f2:60:1e:74:69: 73:9b:29:a3:33:40:39:a3:ac:68:a5:fe:7b:68:6f: 70:61:a8:dd:44:d3:32:ca:e6:98:80:d1:5a:72:be: c1:f8:8d:0d:e7:38:57:01:89:a3:d3:03:7f:9e:51: 6f:49:ac:2e:54:01:c3:02:7b:71:36:8e:e2:f6:3c: 5e:4c:7a:d7:83:e3:39:9a:94:5b:a8:cb:38:72:d5: c3:d3:30:64:1a:af:36:3b:a1:53:ad:98:a5:d7:b5: 47:3d:9b:fd:b9:1f:6f:9f:dd:d3:ed:74:16:fd:a5: 75:a8:1f:c3:0d:a0:6b:7b:c0:34:5e:1a:da:de:1b: 0e:87:fc:04:6b:d1:c7:5f:2e:2b:43:50:bf:d6:ae: d6:ed:bf:fd:85:4a:15:2e:66:6c:9a:83:00:3a:32: be:3a:0e:24:eb:87:7f:ad:ed:f2:3a:e0:b3:ae:f9: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:80:8C:4B:05:B3:AC:EB:59:33:70:51:1B:FE:A1:96:6F:65:7D:34 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8a:9b:31:02:c9:b1:6f:45:27:d4:1c:2f:b9:c3:e7:32:28: 8e:05:57:45:28:64:e4:bf:87:a6:9d:a6:bc:56:b8:d8:65:b3: a7:d3:be:19:f6:54:05:f2:e0:38:05:fd:68:87:dc:ae:b7:df: c5:69:9c:0e:f1:06:87:28:16:ab:b2:1f:d9:35:f7:13:5a:94: ae:2d:36:f5:e4:f0:79:6f:9a:5c:36:0d:fc:b1:f5:10:6d:f6: 1a:97:f2:52:16:8d:31:43:e7:ef:60:0b:07:56:f5:2c:13:82: 87:38:30:2b:96:3d:b8:e3:ab:0f:b7:96:11:36:f2:a0:3f:cf: 9f:95:a8:f3:e0:8c:b0:96:3f:d5:05:93:7f:6e:cc:a6:0b:bb: b5:44:25:e6:04:8c:44:19:f8:f2:0a:8e:5e:ef:4e:4b:fc:b1: e0:30:a1:1b:13:cf:c5:c0:bb:ed:44:9f:5f:96:e5:cc:3d:9c: 22:58:4a:fa:60:f6:e8:11:8c:50:8f:a4:8b:5c:71:a7:37:d4: b8:b0:f7:cd:5c:02:ea:68:fd:5e:5c:7a:43:b2:8c:be:fc:28: 85:1c:e4:ad:bc:8e:71:cb:fb:a6:5d:c9:47:65:f2:2b:5e:8f: 57:44:8d:da:26:22:41:04:7e:77:92:8b:08:8d:5e:9c:e0:d4: 70:59:d8:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjQwNTAxMDEzNjU3WhcNMjQwNTA4MDEzNjU3WjAYMRYwFAYD VQQDEw02NjMxOWNiOS04ZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTlCjicfm67gnBIegf/mL3rQ02WBw2gej2DM6p8LT1tM+lbdN+4YVqKyLmV4 CttiEJe8bHUvmv6J8UnypnEXGjjwfC4ENVdruyWKeyQzZMciKzKP8mAedGlzmymj M0A5o6xopf57aG9wYajdRNMyyuaYgNFacr7B+I0N5zhXAYmj0wN/nlFvSawuVAHD AntxNo7i9jxeTHrXg+M5mpRbqMs4ctXD0zBkGq82O6FTrZil17VHPZv9uR9vn93T 7XQW/aV1qB/DDaBre8A0Xhra3hsOh/wEa9HHXy4rQ1C/1q7W7b/9hUoVLmZsmoMA OjK+Og4k64d/re3yOuCzrvmNBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWAjEsF s6zrWTNwURv+oZZvZX00MB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeipsxAsmxb0Un1BwvucPnMiiOBVdFKGTkv4emnaa8VrjYZbOn074Z 9lQF8uA4Bf1oh9yut9/FaZwO8QaHKBarsh/ZNfcTWpSuLTb15PB5b5pcNg38sfUQ bfYal/JSFo0xQ+fvYAsHVvUsE4KHODArlj2446sPt5YRNvKgP8+flajz4Iywlj/V BZN/bsymC7u1RCXmBIxEGfjyCo5e705L/LHgMKEbE8/FwLvtRJ9fluXMPZwiWEr6 YPboEYxQj6SLXHGnN9S4sPfNXALqaP1eXHpDsoy+/CiFHOStvI5xy/umXclHZfIr Xo9XRI3aJiJBBH53kosIjV6c4NRwWdiN -----END CERTIFICATE-----Generated at Wed May 1 02:46:20 2024 by rpki-client on console-ams.rpki-client.org