$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: ixcms1LgmeEK35YxvpnOd+8WEZyT9SveicMWq1cnovw= Subject key identifier: 78:DD:A3:58:69:00:C5:9B:BD:F2:A8:0A:65:B8:FF:04:2D:D1:76:82 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 10CA Signing time: Thu 02 May 2024 21:32:11 +0000 Manifest this update: Thu 02 May 2024 21:32:10 +0000 Manifest next update: Thu 09 May 2024 21:32:10 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: mvSFP3MqdPZBRRnEN/Z/Nmd987Knm2vAD9/HjvnZssY=) 2: 4FD095F0045611EEAABA8378C4F9AE02.roa (hash: /wsmnHSvdhR0eXj2ZYFfaPcqvnJyIV8OMXrW2ADzPig=) 3: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yc/5nfOTItcG0NV1AdeMQ8Pj65RtxD47YTJrDDnkdqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: May 2 21:32:10 2024 GMT Not After : May 9 21:32:10 2024 GMT Subject: CN=6634065b-5b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:49:a3:3e:39:32:e2:f4:bc:2c:8b:28:fb: f9:30:85:c8:43:67:53:92:84:7c:15:96:03:d0:5e: 9a:e9:08:21:8f:96:39:91:d9:63:90:3f:e3:1d:be: bc:9b:69:16:43:ec:95:54:8e:c4:e2:0b:26:94:13: 8d:51:b5:38:ae:9a:58:6f:19:53:80:eb:06:01:66: 1b:ff:4b:ae:30:d4:b6:fd:fa:3d:d9:95:4e:6f:cf: c0:3d:d0:bc:cf:1a:cb:e4:6c:49:39:cc:2e:55:cf: af:65:57:c7:31:05:10:38:09:f3:e2:5e:ea:51:b5: 05:aa:ab:1b:b0:d1:cb:b3:a3:57:53:13:c4:25:7d: 5e:6f:ce:d3:21:96:eb:a9:f6:ba:db:1e:98:80:c1: 40:8a:6f:92:84:15:4d:f6:b3:cc:bd:57:48:c3:f5: 06:15:76:fd:00:bb:13:a5:d8:39:de:b1:c2:ca:48: 6d:d6:c6:5f:59:6d:2f:59:86:c9:d8:3b:57:7a:2e: 93:a9:c6:7a:d4:d4:91:8e:ea:dc:b8:3c:0b:bb:f0: 47:7a:82:24:0e:89:6a:ab:17:2a:74:3e:c8:d7:0c: 82:cf:8d:fd:c7:a7:e6:1d:97:b7:68:5c:fd:31:24: f0:3b:bc:55:b1:b1:74:74:82:54:25:ac:ee:ab:c6: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DD:A3:58:69:00:C5:9B:BD:F2:A8:0A:65:B8:FF:04:2D:D1:76:82 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:22:ea:18:46:61:4b:fd:e8:af:f6:2f:f7:1f:5b:1a:d6:e4: 28:66:98:c9:70:03:d3:cd:cc:25:2d:76:72:9f:ee:d9:5a:45: 89:11:0c:66:da:3b:0e:55:09:2b:9f:7e:f1:88:9c:c9:fc:16: 43:ac:2f:cb:39:be:f1:7e:49:92:a2:ec:31:fe:20:b6:10:51: a5:3a:41:64:7b:25:90:e8:69:35:a9:f8:b2:9c:a9:96:05:03: c8:09:6e:3e:7e:d2:a0:de:4c:15:8e:dd:ed:d5:f6:bf:46:6b: d4:f6:52:90:4c:2b:07:ed:fa:a0:98:e9:e3:f3:71:b9:64:c8: e8:57:c8:32:c7:38:cb:3f:9f:c2:a4:94:16:49:91:72:59:0c: 89:e2:4b:52:25:7c:c1:ed:f2:27:ac:39:18:e4:af:fc:07:14: 4f:84:ed:2b:89:da:44:4f:25:09:cb:f3:9b:b3:ed:1e:82:40: 67:72:25:f7:ba:43:79:63:f2:ca:90:ec:99:05:98:f8:f2:f5: 70:4a:d6:b5:d0:a5:01:06:3c:e2:fd:2a:ce:7a:66:f4:93:5c: 79:79:d4:c9:5e:48:47:56:58:a1:09:80:9e:bd:f2:9d:c5:a0: f9:b5:73:65:51:6e:10:64:c4:bf:a6:0f:92:51:71:71:58:d3: 35:45:46:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjQwNTAyMjEzMjEwWhcNMjQwNTA5MjEzMjEwWjAYMRYwFAYD VQQDEw02NjM0MDY1Yi01YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jlJoz45MuL0vCyLKPv5MIXIQ2dTkoR8FZYD0F6a6Qghj5Y5kdljkD/jHb68 m2kWQ+yVVI7E4gsmlBONUbU4rppYbxlTgOsGAWYb/0uuMNS2/fo92ZVOb8/APdC8 zxrL5GxJOcwuVc+vZVfHMQUQOAnz4l7qUbUFqqsbsNHLs6NXUxPEJX1eb87TIZbr qfa62x6YgMFAim+ShBVN9rPMvVdIw/UGFXb9ALsTpdg53rHCykht1sZfWW0vWYbJ 2DtXei6TqcZ61NSRjurcuDwLu/BHeoIkDolqqxcqdD7I1wyCz439x6fmHZe3aFz9 MSTwO7xVsbF0dIJUJazuq8avOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjdo1hp AMWbvfKoCmW4/wQt0XaCMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRIuoYRmFL/eiv9i/3H1sa1uQoZpjJcAPTzcwlLXZyn+7ZWkWJEQxm 2jsOVQkrn37xiJzJ/BZDrC/LOb7xfkmSouwx/iC2EFGlOkFkeyWQ6Gk1qfiynKmW BQPICW4+ftKg3kwVjt3t1fa/RmvU9lKQTCsH7fqgmOnj83G5ZMjoV8gyxzjLP5/C pJQWSZFyWQyJ4ktSJXzB7fInrDkY5K/8BxRPhO0ridpETyUJy/Obs+0egkBnciX3 ukN5Y/LKkOyZBZj48vVwSta10KUBBjzi/SrOemb0k1x5edTJXkhHVlihCYCevfKd xaD5tXNlUW4QZMS/pg+SUXFxWNM1RUZI -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org