$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: Xhx+2DAD/xT+eEXItM4BSM1uVrevvXyBownhq49IgeE= Subject key identifier: 1E:96:C5:E4:EF:5C:9B:62:24:28:AD:88:06:13:E1:B3:7A:42:39:23 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 1129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 110C Signing time: Sat 18 May 2024 17:51:44 +0000 Manifest this update: Sat 18 May 2024 17:51:44 +0000 Manifest next update: Sat 25 May 2024 17:51:44 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: Tzf4VkDF2utNAw6CbEnjXHjswLoWqx10Awb/PEFmUEQ=) 2: D7C35FAA55C411EE8F952D11C4F9AE02.roa (hash: tXLz8oLQZ1PQ5H+Kf3ZucgR+3fR74d0tydF/o2LTX60=) 3: F05E8084931011EDB92FFC5FC4F9AE02.roa (hash: Nw4+ql9tn6rQ3d7k5HNXS5zSWny6YmYw+cyXWfgiJZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4393 (0x1129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: May 18 17:51:44 2024 GMT Not After : May 25 17:51:44 2024 GMT Subject: CN=6648eab0-7c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:b1:08:de:2d:1b:20:0d:03:9d:a8:6e:ce: 6b:38:47:b4:35:bc:ec:3b:c9:0d:06:58:5e:d0:20: 34:4a:17:b4:55:57:d8:48:34:64:a6:6f:a4:ff:53: 31:86:b4:3d:81:00:1d:81:d3:c8:c6:71:a9:47:e5: d7:fc:16:72:4e:a9:c3:10:1d:0f:b5:69:7a:b5:1c: 1d:b2:27:c4:0e:ce:f9:22:32:09:39:48:40:f0:25: d9:91:f1:55:49:0a:33:64:9a:cb:1f:3e:16:53:8e: 07:bd:7c:87:06:4e:da:34:31:8b:ad:26:21:52:b7: 5e:22:4e:62:3e:9c:14:44:7a:eb:1b:17:c2:ff:88: a5:38:8a:b9:28:81:a1:87:ac:52:cd:f0:c3:d1:ea: 77:26:2a:da:00:85:81:83:6b:c9:09:41:32:99:5a: 33:50:2e:c8:77:50:93:76:0c:ba:6c:86:e4:aa:8c: 05:b9:95:51:12:59:f3:28:14:b8:98:7f:0d:f4:6b: fd:2b:3e:5d:f7:82:82:d5:5a:79:5f:08:26:7e:b7: 1d:ca:f5:69:09:48:7d:ed:fc:76:7e:57:f9:27:e2: fa:e5:6e:90:84:ed:e7:88:1a:68:5b:f1:aa:d1:9f: c9:3c:dd:7b:96:01:ba:f1:c1:cf:41:da:92:44:ec: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:96:C5:E4:EF:5C:9B:62:24:28:AD:88:06:13:E1:B3:7A:42:39:23 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9c:ab:16:d3:3b:05:32:fa:f2:de:63:54:8f:6f:2d:9f:dc: 54:30:bf:ce:3e:74:ca:d0:4a:db:b3:89:49:f2:09:de:db:b3: 53:be:ca:ba:e8:13:86:83:a3:e7:51:18:14:62:c4:2e:8d:cc: 80:43:32:a8:54:13:c2:b8:3b:dc:b5:f9:79:87:9c:ba:b7:ab: a3:1e:8c:ba:b0:c6:36:2c:c6:7b:34:a7:d8:c5:d3:6f:74:07: 62:52:3a:26:ed:fe:7e:7c:41:14:e6:86:4c:42:70:67:bc:b1: a3:55:5a:c6:14:d9:dd:e0:29:eb:63:de:04:4f:2f:78:91:85: 3b:3c:c3:17:cd:10:91:8d:e9:cd:43:ef:de:98:73:2f:08:5b: 25:71:ba:76:f6:aa:60:1f:75:1f:12:f4:11:a5:9a:0f:2f:7b: e3:53:1a:23:f7:ba:9e:21:d0:f7:92:ea:78:0f:e5:dd:72:db: 47:e4:8c:9e:1c:74:9e:c0:01:07:0f:00:6d:62:8b:fb:e8:63: 1e:e4:ce:a0:a5:31:cd:82:7d:19:2d:35:ff:bf:1f:a3:90:2f: a1:7e:15:8a:3e:98:7c:34:db:37:8f:c1:7e:33:9e:51:3c:b9: 2b:da:9a:b6:4b:41:19:9d:7d:f5:7a:c2:c4:6e:0a:ac:25:21: d2:69:45:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjQwNTE4MTc1MTQ0WhcNMjQwNTI1MTc1MTQ0WjAYMRYwFAYD VQQDEw02NjQ4ZWFiMC03YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAuxCN4tGyANA52obs5rOEe0NbzsO8kNBlhe0CA0She0VVfYSDRkpm+k/1Mx hrQ9gQAdgdPIxnGpR+XX/BZyTqnDEB0PtWl6tRwdsifEDs75IjIJOUhA8CXZkfFV SQozZJrLHz4WU44HvXyHBk7aNDGLrSYhUrdeIk5iPpwURHrrGxfC/4ilOIq5KIGh h6xSzfDD0ep3JiraAIWBg2vJCUEymVozUC7Id1CTdgy6bIbkqowFuZVRElnzKBS4 mH8N9Gv9Kz5d94KC1Vp5XwgmfrcdyvVpCUh97fx2flf5J+L65W6QhO3niBpoW/Gq 0Z/JPN17lgG68cHPQdqSROy5KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6WxeTv XJtiJCitiAYT4bN6QjkjMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1nKsW0zsFMvry3mNUj28tn9xUML/OPnTK0Erbs4lJ8gne27NTvsq6 6BOGg6PnURgUYsQujcyAQzKoVBPCuDvctfl5h5y6t6ujHoy6sMY2LMZ7NKfYxdNv dAdiUjom7f5+fEEU5oZMQnBnvLGjVVrGFNnd4CnrY94ETy94kYU7PMMXzRCRjenN Q+/emHMvCFslcbp29qpgH3UfEvQRpZoPL3vjUxoj97qeIdD3kup4D+XdcttH5Iye HHSewAEHDwBtYov76GMe5M6gpTHNgn0ZLTX/vx+jkC+hfhWKPph8NNs3j8F+M55R PLkr2pq2S0EZnX31esLEbgqsJSHSaUV6 -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org